How about timezone?





-----Original Message-----

From: [log in to unmask] [mailto:[log in to unmask]] On Behalf Of Stephen Isard

Sent: Wednesday, October 18, 2017 5:43 PM

To: [log in to unmask]

Subject: Re: clock skew too great ** EXTERNAL **



On Wed, 18 Oct 2017 21:02:53 +0000, Howard, Chris <[log in to unmask]> wrote:



>Is it possible the two boxes are talking to two different servers?



Thanks for the idea, but no.  The admin_server entry in /etc/krb5.conf is the same on both machines, and the host command returns the same ip address for that machine name on both machines.







>-----Original Message-----

>From: [log in to unmask] [mailto:[log in to unmask]] On Behalf Of Stephen Isard

>Sent: Wednesday, October 18, 2017 2:47 PM

>To: [log in to unmask]

>Subject: clock skew too great ** EXTERNAL **

>

>Hello,

>

>I have two laptops side by side, one running SL6, the other SL7, both up 

>to date.  According to the date command, their times agree to within a 

>small fraction of a second.

>

>On both machines, I normally run kinit to get a kerberos ticket in the 

>same realm.  Today, the SL7 machine gets its ticket normally, but the 

>SL6 one shows an error message "Clock skew too great while getting 

>initial credentials".  Since the clocks of the two machines appear to 

>agree, I would have expected that either both should produce the error 

>or neither.  From what I have read on the web, the standard tolerance 

>for clock skew is 5 minutes, and the agreement between the times on the 

>two machines is well within that.

>

>Both machines have ntpd running, using the time servers 

>[0-3].rhel.pool.ntp.org.  Powering off the SL6 machine and rebooting 

>does not restore sanity.  The problem just arose today.  There have been 

>no system updates on the SL6 machine since it successfully got its 

>ticket yesterday.

>

>Any suggestions for what to try?

>

>Stephen Isard

>

>

> *** This email is from an EXTERNAL sender *** 

>Use caution before responding. DO NOT open attachments or click links from unknown senders or unexpected email. If this email appears to be sent from a Platte River Power Authority employee or department, verify its authenticity before acting or responding. Contact the IT Help Desk with any questions.