non-KDC replay cache problems?

[Jeffrey Altman]

Ken Raeburn wrote:
> On Dec 23, 2008, at 03:42, Jeffrey Altman wrote:
>> Tom Yu wrote:
>>> Has anyone experienced problems due to false positive conditions on an
>>> application replay cache?
>> The motivation that Roland and I have for re-working the replay cache
>> are primarily driven by application replay cache false positives.
>
> How much do these problems still occur with the Windows time-offset
> code fixed?
>
> Ken
The problem needs to be fixed at the service end.  There are many
clients not all of whom are MIT code base and even those that are, its
not possible to force upgrades to new code. 




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3355 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20081223/123dc67b/attachment.bin