Pre-auth encrypted timestamp clock skew

2017-08-23 Thread Benjamin N Hall
Hi, Long-time lurker, first-time writer... We recently started testing pre-authentication for certain principals, and I'm seeing an odd issue whereby kinit fails with "Clock skew too great while getting initial credentials", despite all three KDCs and the client systems' time being within one sec

Re: Pre-auth encrypted timestamp clock skew

2017-08-25 Thread Benjamin N Hall
"How does one generate a ccache file with a 20 minute offset on one host without changing the system time?" I'm guessing that however that happened, i's not really a problem with Kerberos. Thanks, ben On Wed, Aug 23, 2017 at 5:36 PM, Greg Hudson wrote: > On 08/23/2017