Active Directory and Kerberos authentication - Help?! (fwd)

[Bryan.ONeal at asu.edu]

The times on them are less then one second apart.  Since they are on a KVM it
is dificult to estimate how close but I would say about .3 seconds differnce
or less.



On Wed, 15 Feb 2006, Craig White wrote:

> On Wed, 2006-02-15 at 17:41 -0700, Craig White wrote:
> > I had to be dns that was your issue. That or clocks...kerberos is very
> > time sensitive and if the clocks are too far out of sync...it will never
> > work.
> > 
> > I would check the authentication logs on the Windows server as that
> > might give clues to the problems - I don't have much experience with AD
> > driven domains.
> > 
> ----
> replying to myself - bad form
> 
> replying to myself to take a whack at Windows - very bad form
> 
> ;-)
> 
> I've seen Windows completely ignore wide time variations when
> authenticating but Linux/UNIX implementations tend to be very sensitive
> to significant time differences between client and server.
> 
> Craig
> 
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>