Kerberos Clock Skew Manipulation

Compare the client clock with the KDC or service participating in a Kerberos exchange, then adjust the client's system clock or a supported process clock so time-dependent Kerberos checks fall within the configured skew window (five minutes by default in Windows domain policy). This addresses clock skew; it does not extend ticket lifetimes or make a ticket valid beyond the server's validity checks.