The Kerberos protocol uses GMT, so as long as your timezones are correct (including daylight savings) within the 5-minute defaults, clock skew should have no impact on preauthentication.
----- This message is provided "AS IS" with no warranties, and confers no rights. Message may originate from an unmonitored alias ("davespam"). If so, use "davidchr" if a direct reply is required. Any opinions or policies stated within are my own and do not necessarily constitute those of my employer. I reside in Washington, USA, where Title 19 declares that sending me Unsolicited Commercial Email can result in a $500 fine. Harvesting of this address for purposes of bulk email (spam and UCE) is expressly prohibited unless by my explicit prior request. I retaliate viciously against spammers and spam sites. > -----Original Message----- > From: Andreas Hasenack [mailto:[EMAIL PROTECTED]] > Sent: Monday, September 30, 2002 3:27 PM > To: Tony Hoyle > Cc: [EMAIL PROTECTED] > Subject: Re: Win logon to a MIT Kerberos V KDC? > > > Em Mon, Sep 30, 2002 at 10:26:17PM +0100, Tony Hoyle escreveu: > > With no preauthentication login succeeds. > > It could have nothing to do with it, but at one time I had > such a problem with krb5 on linux and win2k as a kdc, and it > turned out to be a time offset problem (since preauth is > basically timestamp). But not a "regular" offset problem, > time was synced within 10s tops. Know what it was? Daylight > saving :) Somehow the two machines (kdc and client) didn't > agree about the timezone even though the "date/time" commands > showed no difference. > > ________________________________________________ > Kerberos mailing list [EMAIL PROTECTED] > http://mailman.mit.edu/mailman/listinfo/kerberos > ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos