On Wed, 18 Oct 2017 21:02:53 +0000, Howard, Chris <[log in to unmask]> wrote:

>Is it possible the two boxes are talking to two different servers?

Thanks for the idea, but no.  The admin_server entry in /etc/krb5.conf is the same on both machines, and the host command returns the same ip address for that machine name on both machines.



>-----Original Message-----
>From: [log in to unmask] [mailto:[log in to unmask]] On Behalf Of Stephen Isard
>Sent: Wednesday, October 18, 2017 2:47 PM
>To: [log in to unmask]
>Subject: clock skew too great ** EXTERNAL **
>
>Hello,
>
>I have two laptops side by side, one running SL6, the other SL7, both up 
>to date.  According to the date command, their times agree to within a 
>small fraction of a second.
>
>On both machines, I normally run kinit to get a kerberos ticket in the 
>same realm.  Today, the SL7 machine gets its ticket normally, but the 
>SL6 one shows an error message "Clock skew too great while getting 
>initial credentials".  Since the clocks of the two machines appear to 
>agree, I would have expected that either both should produce the error 
>or neither.  From what I have read on the web, the standard tolerance 
>for clock skew is 5 minutes, and the agreement between the times on the 
>two machines is well within that.
>
>Both machines have ntpd running, using the time servers 
>[0-3].rhel.pool.ntp.org.  Powering off the SL6 machine and rebooting 
>does not restore sanity.  The problem just arose today.  There have been 
>no system updates on the SL6 machine since it successfully got its 
>ticket yesterday.
>
>Any suggestions for what to try?
>
>Stephen Isard
>
>
> *** This email is from an EXTERNAL sender *** 
>Use caution before responding. DO NOT open attachments or click links from unknown senders or unexpected email. If this email appears to be sent from a Platte River Power Authority employee or department, verify its authenticity before acting or responding. Contact the IT Help Desk with any questions.