KRB5KRB_AP_ERR_SKEW EMS event on CVO cluster
Applies to
Issue
Observing EMS events:
secd.nfsAuth.problem: Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [ 115] Cluster, Domain Controller or Client time differs by more than the configured clock skew with respect to the others (KRB5KRB_AP_ERR_SKEW) [ 115] Kerberos authentication failed with result: 7537. [ 116] Unable to connect to LSA service on cgw-ad2d00ap01.root.local (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE) [ 138] Successfully connected to ip 10.100.0.0, port 445 using TCP [ 203] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [ 203] Cluster, Domain Controller or Client time differs by more than the configured clock skew with respect to the others (KRB5KRB_AP_ERR_SKEW)
From the cluster CLI, the cluster time and date is observed to be approximately 9 minutes behind the configure NTP server for the CIFS SVM.