kerberos and time zone

[Xu, Qiang (FXSGSC)]

Why not let your server sync with American NTP server? 

> -----Original Message-----
> From: kerberos-bounces at mit.edu 
> [mailto:kerberos-bounces at mit.edu] On Behalf Of Andrea Cirulli
> Sent: Friday, April 17, 2009 4:37 PM
> To: kerberos at mit.edu
> Subject: kerberos and time zone
> 
> Hi all,
> 
> I have the following problem:
> 
> We are managing the authentication of several servers with 
> Kerberos. The issue lies in the fact that the servers are in 
> different time-zone, so we have problem with clock skew 
> errors. Are there any solution or workaround that accomplish 
> this requirement using different ntp in different time zone 
> in a way that the KDC server knows which is the real clock 
> skew between two different time zone?
> 
> Let's say i have a server located in Rome and its time is 
> synch with an italian ntp and we have a server located in New 
> York with time synch with an American NTP. Considering the 
> time zone the two times are synch, however for kerberos are desynch.
> 
> Is there any workaround or solution to this issue?
> 
> We are planning to use a bigger clock skew which will cover 
> the difference between the two time zones ( this is the worst 
> solution).
> 
> Any hint would be helpful.
> 
> Thanks in advance.
> 
> --
> Andrea Cirulli
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>