Hi,
Long-time lurker, first-time writer...
We recently started testing pre-authentication for certain principals, and
I'm seeing an odd issue whereby kinit fails with "Clock skew too great
while getting initial credentials", despite all three KDCs and the client
systems' time being within one sec
"How does one generate a ccache file with a 20
minute offset on one host without changing the system time?"
I'm guessing that however that happened, i's not really a problem with
Kerberos.
Thanks,
ben
On Wed, Aug 23, 2017 at 5:36 PM, Greg Hudson wrote:
> On 08/23/2017