[28071] in Kerberos

home help back first fref pref prev next nref lref last post

Linux To ADS: correct time, but "Clock skew too great .."

daemon@ATHENA.MIT.EDU (Sonja Benz)
Fri Jul 20 02:24:26 2007

To: kerberos@mit.edu
MIME-Version: 1.0
From: Sonja Benz <sonja.benz@de.ibm.com>
Message-ID: <OFFAAA9CD3.6A12A20C-ONC125731E.00221543-C125731E.0022F031@de.ibm.com>
Date: Fri, 20 Jul 2007 08:23:41 +0200
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Hello,

I try to set ab Kerberos authentication for a Linux client to ADS. The 
behavior is strange: Obviously the client communicates with the ADS 
server, e.g. I get an "Preauthentication failed while getting initial 
credentials" if entering a wrong password and the password is locked after 
entering repeatedly a wrong password. However, "kinit" never successes, 
but when entering the correct password says "Clock skew too great while 
getting initial credentials". Surely we did check the time at client and 
server. It is correct! 

Any ideas, what else could be wrong and give this error message?

Sonja
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post