If I issue command "[root@redrumlx2 root]# kinit TMANUGE@PRINCE-GEORGE.TZO.COM Password for TMANUGE@PRINCE-GEORGE.TZO.COM: [root@redrumlx2 root]#" This completes successful If I use "[root@redrumlx2 root]# net ads join \Computers /prince-george -U tmanuge [2003/09/10 10:15:51, 0] param/loadparm.c:map_parameter(2419) Unknown parameter encountered: "ads server" [2003/09/10 10:15:51, 0] param/loadparm.c:lp_do_parameter(3147) Ignoring unknown parameter "ads server" tmanuge password: [2003/09/10 10:16:04, 0] libads/kerberos.c:ads_kinit_password(133) kerberos_kinit_password tmanuge@PRINCE-GEORGE.TZO.COM failed: Clock skew too great" This fails with the above error. It was working until RC3, On Redhat 9 upgraded with rpm -U samba-3.0.0rc3-1_rh9.i386.rpm Even if I have kerbreros ticket I cannot join the domain. Clocks are with in one minute of each other, I changed the user password which resolved this issue in earlier release.
The ads_kinit_password() routine passes in a time offset which it receives from the domain controller. Are both machines in the same time zone? Can you post the output of 'net ads info'? Thanks, Tim.
cc me
no feedback in a month. closing it. Assuming it was a configuration error.
originally reported against one of the 3.0.0rc[1-4] releases. Cleaning up non-production versions.
database cleanup