Kerberos Time Skew – my eyes aren’t deceiving me
A couple of times while troubleshooting something else I have noticed that Kerberos still works even if the time skew is greater than 300 sec. On other occasions I have definitely seen it fail. As far as I knew this wasn’t supposed to happen, but I never got round to following it up as I was too busy with the original issue (and besides, it’s easy to fix; just set the time service to work properly!). Now finally here is an explanation from the AskDS guys as to why this is:
The semi-myth of Kerberos time skew
And the Technet article that I could never find but assumed must exist:
Kerberos tickets are issued even though etc
Advertisements
Everything is very open with a very clear explanation of the
challenges. It was really informative. Your site is very useful.
Many thanks for sharing!