由于Kerberos协议要求每个用户都具有与认证服务器同步的时钟,这在某些环境下很难实现,该文对Kerberos协议作出某些改进,在不降低认证安全性的前提下,降低了对系统时钟同步的要求。 Because Kerberos protocol requires each user to have a clock synchronized with the authentication server, which is difficult to implement in some environments. This article makes some improvements to the Kerberos protocol, and reduces the need for authentication on the system Clock synchronization requirements.