DTS Configuration Overview

Resolving The Problem

DTS is the DCE Distributed Time Service. It exists to help synchronize machine clocks amongst all the systems in a DCE cell. This is necessary because Kerberos can't be used to establish security between two machines if the time skew between the two machines is more than 5 minutes, or if the time skew between either machine and the security server is more than 5 minutes. (DFS imposes stricter time-synchronization constraints than Kerberos, so time synchronization is even more important if you use DFS).

Alternatives to DTS include NTP (the Internet-standard Network Time Protocol, freely available via anonymous ftp from a number of sites), and simple manual techniques like Solaris rdate or AIX setclock (commands that set the time on one machine to match that on another machine). From a DCE perspective, it doesn't matter one bit how you synchronize the clocks in your cell, it just matters that you do it. DTS is an optional component of DCE -- you can choose to synchronize your clocks using DTS or alternatively you can pick any other technique you want.

The attached file contains an overview of DTS, including discussions on DTS configuration, DTS machine roles, time synchronization, and time providers.