Kerberos authentication and Time Skew: does not always work
Jeffrey Altman
jaltman at secure-endpoints.com
Tue Sep 4 09:41:51 EDT 2007
JC Ferguson wrote:
> Ok - but why does a clock skewed client work fine when the service host is windows? Also, i have noticed a similar, succcessful behavior for Netapp NAS devices.
>
> Thank you,
> /jc
It shouldn't matter what the service host is as long as the service
host clock is synchronized with the KDC. If the service host clock
is not synchronized with the KDC, Kerberos will not work.
Jeffrey Altman
Secure Endpoints Inc.
More information about the krbdev
mailing list