clock skew and preauth

[Chris Hecker]

Hmm, it looks like there's a timestamp and a challenge preauth type, but
I'm having trouble figuring out how to get it used...

Chris

On 2012/03/20 13:46, Chris Hecker wrote:
> 
> For my video game that uses kerberos, I don't want to worry about clock
> skew or requiring users to have synced clocks because that's a support
> nightmare, but I also want to require preauth.  I just ran into a
> problem where it appears preauth (at least the kind I'm using) requires
> synced clocks?  Logins from a machine with the wrong time work if
> -requires_preauth but I get this if +requires_preauth:
> 
> krb5kdc[2467](info): preauth (timestamp) verify failure: Clock skew too
> great
> 
> Is there anything I can do about this?
> 
> Thanks,
> Chris
>