clock skew and preauth

Nico Williams nico at cryptonector.com
Wed Mar 21 00:56:10 EDT 2012


On Tue, Mar 20, 2012 at 11:29 PM, Greg Hudson <ghudson at mit.edu> wrote:
> Well, before we go creating an option which is very difficult to
> describe to non-experts, it's worth considering whether it can just be
> folded into kdc_timesync (which defaults to true).

What I meant is that the code should just work.  If an existing option
can cover this (I think it can) I'm more than happy with that.


More information about the Kerberos mailing list