CIFS shares not available due to time difference (KRB5KRB_AP_ERR_SKEW)
Applies to
- ONTAP 9
- CIFS/SMB
- Kerberos
- Note: Kerberized NFS can also be impacted by time skew
Issue
- CIFS shares are unavailable
- For All or some users,
- Via FQDN or shortname or IP
- Domain authentication is not working
- List of discovered domain controllers is empty in the SVM settings/domain tab
SECD.log
OREMS.log
shows:
Cluster and Domain Controller times differ by more than the configured clock skew (KRB5KRB_AP_ERR_SKEW)