[28072] in Kerberos
Re: Linux To ADS: correct time, but "Clock skew too great .."
daemon@ATHENA.MIT.EDU (Enrico M. V. Fasanelli)
Fri Jul 20 02:56:19 2007
Message-ID: <46A05C4B.8090004@le.infn.it>
Date: Fri, 20 Jul 2007 08:55:07 +0200
From: "Enrico M. V. Fasanelli" <Enrico.M.V.Fasanelli@le.infn.it>
MIME-Version: 1.0
To: Sonja Benz <sonja.benz@de.ibm.com>
In-Reply-To: <OFFAAA9CD3.6A12A20C-ONC125731E.00221543-C125731E.0022F031@de.ibm.com>
Cc: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============1352332132=="
Errors-To: kerberos-bounces@mit.edu
This is a cryptographically signed message in MIME format.
--===============1352332132==
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature";
micalg=sha1; boundary="------------ms050206060700030301000104"
This is a cryptographically signed message in MIME format.
--------------ms050206060700030301000104
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Hi,
Did you check also the timezone?
Ciao,
Enrico
---
Promise me no promises,
So I will not promise you ...
(Christina Rossetti)
Sonja Benz wrote:
> Hello,
>
> I try to set ab Kerberos authentication for a Linux client to ADS. The
> behavior is strange: Obviously the client communicates with the ADS
> server, e.g. I get an "Preauthentication failed while getting initial
> credentials" if entering a wrong password and the password is locked after
> entering repeatedly a wrong password. However, "kinit" never successes,
> but when entering the correct password says "Clock skew too great while
> getting initial credentials". Surely we did check the time at client and
> server. It is correct!
>
> Any ideas, what else could be wrong and give this error message?
>
> Sonja
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
--------------ms050206060700030301000104
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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--------------ms050206060700030301000104--
--===============1352332132==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============1352332132==--
