no difference there the time in both protocals are based on EPOC which means it is always using GMT time regardless of the OS settings. So that should make no difference in this case, though without NTP involved that has been a know issue for encrytion in genneral so its not a bad question just most likely irrelivant in this case.
On Thu, Oct 19, 2017 at 9:42 AM, Howard, Chris <howa...@prpa.org> wrote: > How about timezone? > > > -----Original Message----- > From: owner-scientific-linux-us...@listserv.fnal.gov [mailto: > owner-scientific-linux-us...@listserv.fnal.gov] On Behalf Of Stephen Isard > Sent: Wednesday, October 18, 2017 5:43 PM > To: scientific-linux-us...@listserv.fnal.gov > Subject: Re: clock skew too great ** EXTERNAL ** > > On Wed, 18 Oct 2017 21:02:53 +0000, Howard, Chris <howa...@prpa.org> > wrote: > > >Is it possible the two boxes are talking to two different servers? > > Thanks for the idea, but no. The admin_server entry in /etc/krb5.conf is > the same on both machines, and the host command returns the same ip address > for that machine name on both machines. > > > > >-----Original Message----- > >From: owner-scientific-linux-us...@listserv.fnal.gov [mailto: > owner-scientific-linux-us...@listserv.fnal.gov] On Behalf Of Stephen Isard > >Sent: Wednesday, October 18, 2017 2:47 PM > >To: scientific-linux-us...@listserv.fnal.gov > >Subject: clock skew too great ** EXTERNAL ** > > > >Hello, > > > >I have two laptops side by side, one running SL6, the other SL7, both up > >to date. According to the date command, their times agree to within a > >small fraction of a second. > > > >On both machines, I normally run kinit to get a kerberos ticket in the > >same realm. Today, the SL7 machine gets its ticket normally, but the > >SL6 one shows an error message "Clock skew too great while getting > >initial credentials". Since the clocks of the two machines appear to > >agree, I would have expected that either both should produce the error > >or neither. From what I have read on the web, the standard tolerance > >for clock skew is 5 minutes, and the agreement between the times on the > >two machines is well within that. > > > >Both machines have ntpd running, using the time servers > >[0-3].rhel.pool.ntp.org. Powering off the SL6 machine and rebooting > >does not restore sanity. The problem just arose today. There have been > >no system updates on the SL6 machine since it successfully got its > >ticket yesterday. > > > >Any suggestions for what to try? > > > >Stephen Isard > > > > > > *** This email is from an EXTERNAL sender *** > >Use caution before responding. DO NOT open attachments or click links > from unknown senders or unexpected email. If this email appears to be sent > from a Platte River Power Authority employee or department, verify its > authenticity before acting or responding. Contact the IT Help Desk with any > questions. >
