...
On current implementations derived from the MIT or Heimdal implementations the krb5.conf file can be used to control the behavior. This is described in the Kerberos FAQ at http://www.faqs.org/faqs/kerberos-faq/general/section-38.html :. However, please note that the kdc_timesync option will not affect the current shipping versions of Kerberos for Macintosh (KFM) nor Kerberos for Windows (KFW) when using the CCAPI caches. Nor is it support on KFW when using the MSLSA cache type.
| No Format |
|---|
[libdefaults]
kdc_timesync
Setting this variable to 1 enables Kerberos clients to automatically correct for a difference between the local clock and the clock used by the KDC. Note that you will need to set ccache_type to a value of 4 to use this feature.
|
An Explanation of how the Kerberos time stamps are generated when the clocks of the client computers are not well synchronized with that of the KDC:
...