[23065] in Kerberos
Re: Problem with Maximum Tolerance
daemon@ATHENA.MIT.EDU (Roland C. Dowdeswell)
Tue Dec 14 16:33:41 2004
To: "minipower" <minipower@ra.nrl.navy.mil>
In-reply-to: Your message of "Sat, 11 Dec 2004 15:46:58 +0200."
<41bafa07$0$3109$bb624dac@diablo.uninet.ee>
Date: Mon, 13 Dec 2004 22:03:35 -0500
From: "Roland C. Dowdeswell" <elric@imrryr.org>
Message-Id: <20041214030335.6AFFD174EB@arioch.imrryr.org>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
On 1102772818 seconds since the Beginning of the UNIX epoch
"minipower" wrote:
>
>Hello!
>
>I have big problem wiht Kerberos V5 feature called "Maximum tolerance for
>computer clock
>synchronization". I have win2003 domain. I already tryed changing local
>group policy and
>domain policy (Kerberos Policy). Also I tryed registry key -
>HKLM\System\CCS\Control\Lsa\Kerberos\Parameters (dword "SkewTime"),
>but nothing help. I simple dont need this time-difference checking, I need
>machines to be different times. How I can disable this Kerberos feature in
>Win2003?
I'm not sure if you can disable clock skew detection in Win2003,
but I would assume that it is not possible because it would have
rather adverse security consequences. Perhaps it would be more
beneficial to question why you need to have your computers set to
different times and change that instead?
--
Roland Dowdeswell http://www.Imrryr.ORG/~elric/
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
