Why use krb5_set_real_time() instead of NTP ?

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andrew Bartlett wrote:

> Windows AD networks run something almost but not 
> entirely like NTP automatically to avoid this problem.

Technically the w32time.exe service is an SNTPv4 compatible
service.

I think though that an XP box joining an AD domain performs
a negprot request to get the current time before issuing
the AS_REQ to be able to compensate for clock skew.
I'll admit that's clever.  That might be a little hard
to hook into our client code right now though.  I can
live with the the currentTime attribute from the rootDSE
for the moment.




cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEYXbWIR7qMdg1EfYRAoqrAJ47z6kgs3OMA0NO37XA/kltuOPt2wCglZt9
IpnOGZ9BtzLRgwfsEtac27w=
=xYP2
-----END PGP SIGNATURE-----