Why use krb5_set_real_time() instead of NTP ?

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Luke Howard wrote:

> But in neither case is the timestamp protected, right? So
> you don't really (securely) know what the KDC time is.

Correct.  But of course everyone is friends on a Windows
network so no one would ever spoof this. :-)

Thanks for all the info.





cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEYXt0IR7qMdg1EfYRAu51AKC7FtcAO/eXW3lnHMJwGgBCxw+6IQCfUi6g
luEEJ7SIr6krtiCSZb+bSoA=
=eu8J
-----END PGP SIGNATURE-----