2007-04-26 16:56 AEST by Arthur Barrett - SSPI needs a "check" function to ensure that auth is quick enough.
If the client GMT and the server GMT is out by a couple of seconds the
authentication slows to a crawl. A simple send of the client GMT to the server
should allow the server to perform the auth - and if successful check that the
time is in sync.
So server needs to record its starting GMT (before the auth routines are
called).
Server and client both need to support a new verb? |