Pre-auth encrypted timestamp clock skew

2017-08-23 Thread Benjamin N Hall
Hi, Long-time lurker, first-time writer... We recently started testing pre-authentication for certain principals, and I'm seeing an odd issue whereby kinit fails with "Clock skew too great while getting initial credentials", despite all three KDCs and the client systems' time being within one sec

Re: Pre-auth encrypted timestamp clock skew

2017-08-23 Thread Greg Hudson
On 08/23/2017 05:23 AM, Benjamin N Hall wrote: > We recently started testing pre-authentication for certain principals, and > I'm seeing an odd issue whereby kinit fails with "Clock skew too great > while getting initial credentials", despite all three KDCs and the client > systems' time being with