Why use krb5_set_real_time() instead of NTP ?

Luke Howard lukeh at padl.com
Wed May 10 04:54:51 GMT 2006

Hi Jerry,

>Does anyone remember why we use krb5_set_real_time()?
>It appears this code was added to heimdal and MIT krb5
>specifically for Samba.  And it doesn't appear to be
>dealing with time zone offsets.

Well, you don't have to change the system time (of course whether
you securely know what the KDC time is is another matter).

>From the Heimdal code:

 * Set the absolute time that the caller knows the kdc has so the
 * kerberos library can calculate the relative diffrence beteen the
 * KDC time and local system time.

-- Luke


More information about the samba-technical mailing list