Time services are the mechanism for machines to automatically maintain synchronized system times. DCE uses time services software to synchronize and manage time providers and time servers.
System time can be used:
· For time-stamping files
· As part of an authorization process
· In-transaction processing
Inconsistencies between machines can cause:
· Authorization to be denied if clocks differ by more than 5 minutes
· Relative file/data times to be inconsistent with the actual sequence of events
Time providers are machines which determine time based on an internationally recognized standard. They access a time source and correct for transmission delays. They can be connected to a computer to synchronize the computer's clock to the standard time.
DCE DTS is a time utility supplied as one of the DCE Core Services. DCE DTS:
· Provides Kerberos authenticated time service
· Primarily uses DCE RPC for communication
· Uses DCE CDS for clients to find servers
· Provides PC availability
A machine should use only one mechanism for determining time. Only DCE DTS currently provides authenticated time services. Using other services increases the risk of a breach of security. Each time service software uses a different namespace mechanism and thus complicates management drastically.