Why use krb5_set_real_time() instead of NTP ?

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Luke Howard wrote:

> Well, you don't have to change the system time (of course whether
> you securely know what the KDC time is is another matter).
> 
>>From the Heimdal code:
> 
> /*
>  * Set the absolute time that the caller knows the kdc has so the
>  * kerberos library can calculate the relative diffrence beteen the
>  * KDC time and local system time.
>  */
> 

Luke,

Maybe I'm being dense here, but is this really the case of
a user space application working around trying to work around
an unsynchronized system clock on the client ?




jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEYXOUIR7qMdg1EfYRAs89AJ90huZ52f5Tk8704JmbiTbgRskFsQCfTN3T
3NqPHDRtUNa4SkZoyqYIxUE=
=5gU2
-----END PGP SIGNATURE-----