Skip to Content.
Sympa Menu

mace-opensaml-users - Re: [OpenSAML] Difference NotOnOrAfter in <SubjectConfirmationData> and <Conditions>

Subject: OpenSAML user discussion

List archive

Re: [OpenSAML] Difference NotOnOrAfter in <SubjectConfirmationData> and <Conditions>


Chronological Thread 
  • From: "Cantor, Scott E." <>
  • To: "" <>
  • Subject: Re: [OpenSAML] Difference NotOnOrAfter in <SubjectConfirmationData> and <Conditions>
  • Date: Mon, 2 May 2011 17:50:13 +0000
  • Accept-language: en-US
On 5/2/11 1:44 PM, "Gina Choi"
<>
wrote:

>1. How do I force clock synchronizations between two servers?

By configuring all servers with a good time source. This is basic server
admin 101.

>2. Could you recommend correct way of verifying NotOnOrAftr timestamp?

Allow a configurable amount of clock skew of 3-5 minutes or so and then
apply that to the value you're comparing to in the conservative direction.

-- Scott


Archive powered by MHonArc 2.6.16.

Top of Page