[Triumf-linux-users] [Triumf-linux-managers] Question about time synchronization

[Isabel Trigger]

For the record, this appears to be solved. As soon as somebody else tried to authenticate on the machine in question, and had no such error, it became apparent that the problem was unique to me, and there was in fact no clock skew between the kerberos server and this client. Deleting the cache file /tmp/krb5cc_3454 on the affected node was sufficient to eliminate the error message.  

Isabel


On Oct 4, 2014, at 7:43 AM, Isabel Trigger <itrigger at triumf.ca> wrote:

> Hello,
> 
> Since we have this list, maybe it’s an appropriate forum to ask if anyone else has seen this problem, which has started occurring on one (and only one) of our group’s servers in the last few days. We get the following error message:
> 
> > kinit
> Password for itrigger at CERN.CH: 
> kinit: Clock skew too great while getting initial credentials
> 
> A Google search suggests this should only occur if our time is out by more than 5 minutes from the time on the Kerberos server. Which doesn’t seem possible, since we have the same time on all our clients within at most a fraction of a second (all use ntpd and sync to the usual TRIUMF time servers), and the others have no problem getting credentials. Increasing the verbosity of kinit did not tell me anything useful.
> 
> > kinit -V
> Using default cache: /tmp/krb5cc_3454
> Using principal: itrigger at CERN.CH
> Password for itrigger at CERN.CH: 
> kinit: Clock skew too great while getting initial credentials
> 
> I tried “service ntpd stop; ntpdate time1.triumf.ca; service ntpd start” but it didn’t fix anything.
> 
> What else can I check?
> 
> thanks
> Isabel
> 
> _______________________________________________
> Triumf-linux-managers mailing list
> Triumf-linux-managers at lists.triumf.ca
> http://lists.triumf.ca/mailman/listinfo/triumf-linux-managers

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.triumf.ca/pipermail/triumf-linux-users/attachments/20141006/84ac9daf/attachment.html>
-------------- next part --------------
_______________________________________________
Triumf-linux-managers mailing list
Triumf-linux-managers at lists.triumf.ca
http://lists.triumf.ca/mailman/listinfo/triumf-linux-managers