How about timezone?
-----Original Message----- From: owner-scientific-linux-us...@listserv.fnal.gov [mailto:owner-scientific-linux-us...@listserv.fnal.gov] On Behalf Of Stephen Isard Sent: Wednesday, October 18, 2017 5:43 PM To: scientific-linux-us...@listserv.fnal.gov Subject: Re: clock skew too great ** EXTERNAL ** On Wed, 18 Oct 2017 21:02:53 +0000, Howard, Chris <howa...@prpa.org> wrote: >Is it possible the two boxes are talking to two different servers? Thanks for the idea, but no. The admin_server entry in /etc/krb5.conf is the same on both machines, and the host command returns the same ip address for that machine name on both machines. >-----Original Message----- >From: owner-scientific-linux-us...@listserv.fnal.gov >[mailto:owner-scientific-linux-us...@listserv.fnal.gov] On Behalf Of Stephen >Isard >Sent: Wednesday, October 18, 2017 2:47 PM >To: scientific-linux-us...@listserv.fnal.gov >Subject: clock skew too great ** EXTERNAL ** > >Hello, > >I have two laptops side by side, one running SL6, the other SL7, both up >to date. According to the date command, their times agree to within a >small fraction of a second. > >On both machines, I normally run kinit to get a kerberos ticket in the >same realm. Today, the SL7 machine gets its ticket normally, but the >SL6 one shows an error message "Clock skew too great while getting >initial credentials". Since the clocks of the two machines appear to >agree, I would have expected that either both should produce the error >or neither. From what I have read on the web, the standard tolerance >for clock skew is 5 minutes, and the agreement between the times on the >two machines is well within that. > >Both machines have ntpd running, using the time servers >[0-3].rhel.pool.ntp.org. Powering off the SL6 machine and rebooting >does not restore sanity. The problem just arose today. There have been >no system updates on the SL6 machine since it successfully got its >ticket yesterday. > >Any suggestions for what to try? > >Stephen Isard > > > *** This email is from an EXTERNAL sender *** >Use caution before responding. DO NOT open attachments or click links from >unknown senders or unexpected email. If this email appears to be sent from a >Platte River Power Authority employee or department, verify its authenticity >before acting or responding. Contact the IT Help Desk with any questions.
