[33564] in Kerberos
Re: Slightly confused by user-to-user authentication...
daemon@ATHENA.MIT.EDU (Ken Hornstein)
Thu Jul 7 20:52:47 2011
Message-Id: <201107080052.p680qbAl029302@hedwig.cmf.nrl.navy.mil>
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
To: <kerberos@mit.edu>
In-Reply-To: <1310085541.2694.79.camel@t410>
Date: Thu, 07 Jul 2011 20:52:37 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
>> Do you know if the memory cc will do the right thing with clock skew
>> during the duration of the program? I'm still trying to decide what
>> kind of cc to use.
>
>The answer is complicated.
It occurs to me that the current clock skew correction code (when
things are set up so it works) only works on the client side; your
application server still needs to have a correct clock. So that would
probably mean the "server" in U2U would need to have a correct clock
(the "server" in this case is the guy who does NOT talk to the KDC).
--Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
