Skip to content

Kerberos Time Skew – my eyes aren’t deceiving me


A couple of times while troubleshooting something else I have noticed that Kerberos still works even if the time skew is greater than 300 sec. On other occasions I have definitely seen it fail. As far as I knew this wasn’t supposed to happen, but I never got round to following it up as I was too busy with the original issue (and besides, it’s easy to fix; just set the time service to work properly!). Now finally here is an explanation from the AskDS guys as to why this is:

The semi-myth of Kerberos time skew

And the Technet article that I could never find but assumed must exist:

Kerberos tickets are issued even though etc

One Comment
  1. Everything is very open with a very clear explanation of the
    challenges. It was really informative. Your site is very useful.

    Many thanks for sharing!

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: