CIFS shares not available due to time difference (KRB5KRB_AP_ERR_SKEW)
Applies to
- ONTAP 9
- CIFS/SMB
- Kerberos
Issue
- CIFS shares are unavailable
- Domain authentication is not working
- List of discovered domain controllers is empty in the SVM settings/domain tab
- SECD log show the following error message
Cluster and Domain Controller times differ by more than the configured clock skew (KRB5KRB_AP_ERR_SKEW)