Active Directory and Kerberos authentication - Help?! (fwd)

Craig White craigwhite at azapple.com
Wed Feb 15 17:58:13 MST 2006


On Wed, 2006-02-15 at 17:41 -0700, Craig White wrote:
> I had to be dns that was your issue. That or clocks...kerberos is very
> time sensitive and if the clocks are too far out of sync...it will never
> work.
> 
> I would check the authentication logs on the Windows server as that
> might give clues to the problems - I don't have much experience with AD
> driven domains.
> 
----
replying to myself - bad form

replying to myself to take a whack at Windows - very bad form

;-)

I've seen Windows completely ignore wide time variations when
authenticating but Linux/UNIX implementations tend to be very sensitive
to significant time differences between client and server.

Craig



More information about the PLUG-discuss mailing list