KRB5KRB_AP_ERR_SKEW EMS event on CVO cluster
Applies to
- Cloud Volumes ONTAP (CVO)
- CIFS SVM
Issue
- Observing EMS events:
secd.nfsAuth.problem: Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [ 115] Cluster, Domain Controller or Client time differs by more than the configured clock skew with respect to the others (KRB5KRB_AP_ERR_SKEW) [ 115] Kerberos authentication failed with result: 7537. [ 116] Unable to connect to LSA service on Net-ad201.root.local (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE) [ 138] Successfully connected to ip 10.XXX.XXX.XXX, port 445 using TCP [ 203] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [ 203] Cluster, Domain Controller or Client time differs by more than the configured clock skew with respect to the others (KRB5KRB_AP_ERR_SKEW)
- From the cluster CLI, the cluster time and date is observed to be approximately 9 minutes behind the configure NTP server for the CIFS SVM.
