Re: clock skew too great ** EXTERNAL **

2017-10-19 Thread Stephen Isard
On Thu, 19 Oct 2017 12:48:42 -0400, Paul Robert Marino wrote: >Here is a question was it using preauth? >In other words is there a key tab file in /etc? No. >The other question is NTP set to sync the time on shutdown to the bios? I don't think so. Certainly no setting

Re: clock skew too great ** EXTERNAL **

2017-10-19 Thread Paul Robert Marino
Here is a question was it using preauth? In other words is there a key tab file in /etc? The other question is NTP set to sync the time on shutdown to the bios? There are a couple of reasons why I can think this might happen the first involves how NTP corrects the time and how it may interact

Re: clock skew too great ** EXTERNAL **

2017-10-19 Thread Stephen Isard
On Thu, 19 Oct 2017 09:09:32 -0500, Pat Riehecky wrote: >If memory serves, SL7 has "Less Brittle Kerberos"[1] where as SL6 does >not.  This could account for why one works and the other does not. > >Pat > >[1] https://fedoraproject.org/wiki/Features/LessBrittleKerberos That

Re: clock skew too great ** EXTERNAL **

2017-10-19 Thread Stephen Isard
On Thu, 19 Oct 2017 09:16:00 -0400, Paul Robert Marino wrote: >well the clock sqew allowed is a client side setting and may be different >on the two the real question is what is the time on the kerberos server? My only access to the server is via kinit, so I can't see the

Re: clock skew too great ** EXTERNAL **

2017-10-19 Thread Paul Robert Marino
ov] On Behalf Of Stephen Isard > Sent: Wednesday, October 18, 2017 5:43 PM > To: scientific-linux-us...@listserv.fnal.gov > Subject: Re: clock skew too great ** EXTERNAL ** > > On Wed, 18 Oct 2017 21:02:53 +, Howard, Chris <howa...@prpa.org> > wrote: > > >

RE: clock skew too great ** EXTERNAL **

2017-10-19 Thread Howard, Chris
How about timezone? -Original Message- From: owner-scientific-linux-us...@listserv.fnal.gov [mailto:owner-scientific-linux-us...@listserv.fnal.gov] On Behalf Of Stephen Isard Sent: Wednesday, October 18, 2017 5:43 PM To: scientific-linux-us...@listserv.fnal.gov Subject: Re: clock skew

Re: clock skew too great ** EXTERNAL **

2017-10-19 Thread Paul Robert Marino
well the clock sqew allowed is a client side setting and may be different on the two the real question is what is the time on the kerberos server? the clock sqew probably there not on the clients, The clock sqew allowed is set in the/etc/krb5.conf file by default (and also has a default value if

Re: clock skew too great ** EXTERNAL **

2017-10-18 Thread Stephen Isard
On Wed, 18 Oct 2017 17:12:46 -0400, R P Herrold wrote: >On Wed, 18 Oct 2017, Howard, Chris wrote: > >> Is it possible the two boxes are talking to two different servers? > >as the initial post mentioned and showed it was using remote >host lists to a pool alias, almost

Re: clock skew too great ** EXTERNAL **

2017-10-18 Thread Stephen Isard
On Wed, 18 Oct 2017 21:02:53 +, Howard, Chris wrote: >Is it possible the two boxes are talking to two different servers? Thanks for the idea, but no. The admin_server entry in /etc/krb5.conf is the same on both machines, and the host command returns the same ip address

RE: clock skew too great ** EXTERNAL **

2017-10-18 Thread Howard, Chris
Is it possible the two boxes are talking to two different servers? -Original Message- From: owner-scientific-linux-us...@listserv.fnal.gov [mailto:owner-scientific-linux-us...@listserv.fnal.gov] On Behalf Of Stephen Isard Sent: Wednesday, October 18, 2017 2:47 PM To: