we have 2 sles10.3 oes2sp3 DSFW server.

2 Windows 2008 R2 (Terminal-) Server use these servers for auth. of users.

I know that time sync is important for Kerberos to function but I haven't yet understood how it should be configured correctly.

The 2 dsfw server are configured to sync their time against our 2 time servers in our intranet (this is configured over yast).

a) Should the 2 Terminal-Server now also sync against these 2 time servers? or
b) Should they sync their time against (one of the / both) dsfw servers?
-- If yes how is this configured in the Win2K8 machines?

c) How can we check that everything is working fine with respect to time sync?

Thx in advance,