timekeeping in a domU

Hi,

I usually use my KDC to validate my password or forwarded
ticket on my domU, I don't control this dom0. Occasionally
this doesn't work.  And after I get with a SSH key,
I get a error from kinit:

kinit: krb5_get_init_creds: time skew (541) larger than max
(300)

Is it the dom0's responsibility to provide the domUs
with an accurate clock?
And, can I run a ntpd in the domU to keep it in sync?

	Jonathan Kollasch