Why use krb5_set_real_time() instead of NTP ?

[Luke Howard]

Hi Jerry,

>Does anyone remember why we use krb5_set_real_time()?
>It appears this code was added to heimdal and MIT krb5
>specifically for Samba.  And it doesn't appear to be
>dealing with time zone offsets.

Well, you don't have to change the system time (of course whether
you securely know what the KDC time is is another matter).

>From the Heimdal code:

/*
 * Set the absolute time that the caller knows the kdc has so the
 * kerberos library can calculate the relative diffrence beteen the
 * KDC time and local system time.
 */


-- Luke

--