Bug 434 - Clock skew too great
Clock skew too great
Product: Samba 3.0
Classification: Unclassified
Component: File Services
All Linux
: P3 normal
: none
Assigned To: Tim Potter
Depends on:
  Show dependency treegraph
Reported: 2003-09-10 10:49 UTC by Tony Manuge
Modified: 2005-11-14 09:24 UTC (History)
0 users

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Tony Manuge 2003-09-10 10:49:04 UTC
If I issue command "[root@redrumlx2 root]# kinit TMANUGE@PRINCE-GEORGE.TZO.COM
[root@redrumlx2 root]#"  This completes successful 

If I use "[root@redrumlx2 root]# net ads join \Computers /prince-george -U tmanuge
[2003/09/10 10:15:51, 0] param/loadparm.c:map_parameter(2419)
  Unknown parameter encountered: "ads server"
[2003/09/10 10:15:51, 0] param/loadparm.c:lp_do_parameter(3147)
  Ignoring unknown parameter "ads server"
tmanuge password:
[2003/09/10 10:16:04, 0] libads/kerberos.c:ads_kinit_password(133)
  kerberos_kinit_password tmanuge@PRINCE-GEORGE.TZO.COM failed: Clock skew too
great" This fails with the above error. 

It was working until RC3, On Redhat 9 upgraded with rpm -U

Even if I have kerbreros ticket I cannot join the domain.

Clocks are with in one minute of each other, I changed the user password which
resolved this issue in earlier release.
Comment 1 Tim Potter 2003-09-10 19:05:40 UTC
The ads_kinit_password() routine passes in a time offset which it receives from
the domain controller.  Are both machines in the same time zone?  Can you post
the output of 'net ads info'?


Comment 2 Tim Potter 2003-09-15 20:59:55 UTC
cc me
Comment 3 Gerald (Jerry) Carter 2003-11-04 20:48:28 UTC
no feedback in a month.  closing it.  Assuming it 
was a configuration error.
Comment 4 Gerald (Jerry) Carter 2005-02-07 09:05:15 UTC
originally reported against one of the 3.0.0rc[1-4] releases.
Cleaning up non-production versions.
Comment 5 Gerald (Jerry) Carter 2005-11-14 09:24:18 UTC
database cleanup