jph_psla

Domain Authentication and System Clocks in FM16

Discussion created by jph_psla on Dec 19, 2017
Latest reply on Jan 19, 2018 by TSGal

It appears that the performance enhancements in FM16 (loading of partial sets of records, etc) have exacerbated an existing time-based sensitivity in Windows' Kerberos domain authentication mechanism. If the time between the domain controller and client PC falls more than a second or two out of sync, Filemaker will start prompting for a login even after a solution is already opened, for example when switching TOs or attempting to load additional records.

 

The workaround for Windows PCs seems to be installing the open source NetTime client from www.timesynctool.com, since the built-in Windows Time client does not seem to be able to keep the clocks very well synchronized.

Outcomes