Questions on openldap and kerberos....

Russ Allbery rra at stanford.edu
Mon Jan 7 13:07:15 EST 2013


John Tobin <jtobin at po-box.esu.edu> writes:

> The kdc, and this client [the ldapsearch] are both on the same machine.
> I assume both of these processes get their clock reading from a 'date'
> type function off of the [same] machine... How can one skew from the
> other? It's the same clock....

Hm.  Is the LDAP server also the same machine?  If so, yes, I find that
confusing too.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>


More information about the Kerberos mailing list