[28314] in Kerberos
Re: clock skew
daemon@ATHENA.MIT.EDU (Volkmar Glauche)
Fri Aug 31 04:36:43 2007
Date: Fri, 31 Aug 2007 10:36:32 +0200 (CEST)
From: Volkmar Glauche <volkmar.glauche@uniklinik-freiburg.de>
To: kerberos@mit.edu
In-Reply-To: <406517.34929.qm@web26611.mail.ukl.yahoo.com>
Message-ID: <Pine.LNX.4.64.0708311034050.4946@nz23161.ukl.uni-freiburg.de>
MIME-Version: 1.0
Reply-To: Volkmar Glauche <volkmar.glauche@uniklinik-freiburg.de>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Instead of allowing a clock skew, you should better think about how you
can synchronise client and server clocks to a common clock source (i.e.
via NTP).
Volkmar
On Fri, 31 Aug 2007, a a wrote:
> Hi,
> I'd like to authenticate a client with the krb server with a time diffference > 5 min.
> In native, I have the message : "clockskew too great....."
> With the clocskew propertie in /etc/krb5.conf (of both machines), logs messages are OK on the server but the authentication doesn't work either...
> Can yu tell me how to use clockskew ?
>
> configuration : RHEL 4 - MIT Kerberos 1.3.4.17
>
> Thanks.
>
>
> ---------------------------------
> Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
--
Volkmar Glauche
-
Department of Neurology volkmar.glauche@uniklinik-freiburg.de
Universitaetsklinikum Freiburg Phone 49(0)761-270-5331
Breisacher Str. 64 Fax 49(0)761-270-5416
79106 Freiburg http://fbi.uniklinik-freiburg.de/
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
