[27115] in Kerberos
Re: Using kerberos ticket on web browsers
daemon@ATHENA.MIT.EDU (Danny Mayer)
Sat Dec 9 23:56:22 2006
Message-ID: <457B9334.8080002@ntp.isc.org>
Date: Sat, 09 Dec 2006 23:55:16 -0500
From: Danny Mayer <mayer@ntp.isc.org>
MIME-Version: 1.0
To: Diego Lima <diego-lima@prodesan.com.br>
In-Reply-To: <20061208130043.M64001@prodesan.com.br>
X-kostecke.net-MailScanner-From: mayer@ntp.isc.org
Cc: Kerberos Mail List <kerberos@mit.edu>
Reply-To: mayer@ntp.isc.org
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Diego Lima wrote:
> First of all, I'd like to thank you all for helping me out. I finally found
> what was causing the problems. I took a look at krb5kdc.log and I found this:
>
> Dec 07 15:57:00 estagiario6 krb5kdc[22882](info): TGS_REQ (1 etypes {1})
> 192.168.130.223: PROCESS_TGS: authtime 0, <unknown client> for
> HTTP/estagiario6.sso.com.br@SSO.COM.BR, Clock skew too great
>
> I know it sounds stupid, but it never ocurred to me to check krb5kdc log
> before, since I was able to get tickets using kinit both from windows and
> linux. Indeed we had done a bit of "hacking" around our linux time in order to
> be able to properly sync windows stations using net time.
>
> The moment I got a NTP server on the network and set the clocks right it began
> working (following Grolms's site recommendtions).
>
We're glad we could help! :)
Danny
NTP Development
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
