Kerberos authentication and Time Skew: does not always work

Jeffrey Altman jaltman at secure-endpoints.com
Tue Sep 4 09:41:51 EDT 2007


JC Ferguson wrote:
> Ok - but why does a clock skewed client work fine when the service host is windows?  Also, i have noticed a similar, succcessful  behavior for Netapp NAS devices.
> 
> Thank you,
> /jc

It shouldn't matter what the service host is as long as the service
host clock is synchronized with the KDC.  If the service host clock
is not synchronized with the KDC, Kerberos will not work.

Jeffrey Altman
Secure Endpoints Inc.




More information about the krbdev mailing list