kerberos and clock skew

[Luke Howard]

One thing to be careful of when compesating for clock skew is that you
can trust (or at least control the degree to which you trust) the source
of the compensation information.

-- Luke

>From: Guenther Deschner <gd at samba.org>
>Subject: Re: kerberos and clock skew
>To: Qiao Yang <qyang at stbernard.com>
>Cc: samba-technical at samba.org
>Date: Wed, 30 Mar 2005 09:59:50 +0200
>Organization: Service Network GmbH, Goettingen, Germany
>
>On Tue, Mar 29, 2005 at 05:03:47PM -0800, Qiao Yang wrote:
>> Hi,
>> 
>> I found a problem with the code which handles the clock skew with the domain
>> controller. The net command and winbindd go into a forever-loop and
>> eventually dump core if the clock of the workstation is set to be in the
>> future. Attached is the debug output.
>
>Good catch. It's a known issue. See
>https://bugzilla.samba.org/show_bug.cgi?id=1208#c27. I will look into it
>later today.
>
>Thanks.
>
>Guenther
>-- 
>Guenther Deschner                                               Samba Team
>SerNet GmbH - Goettingen                                      gd at samba,org
>gd at sernet.de
>
>[Attachment: a2, application/pgp-signature]

--