Time skew errors observed between SVM and DC
Applies to
- ONTAP 9
- Domain Controller (DC)
Issue
- Time skew errors observed between SVM and DC
"Cluster and Domain Controller times differ by more than the configured clock skew (KRB5KRB_AP_ERR_SKEW)"
- EMS logs:
Tue Feb 21 03:11:10 +0100 [SWPLSVNAS01: secd: secd.netlogon.noServers:EMERGENCY]: None of the Netlogon servers configured for Vserver (nscnvf15) are currently accessible via the network.
- SECD Logs:
Tue Feb 21 2023 03:11:10 +01:00 [kern_secd:info:9264] | [000.286.811] info : Cluster and Domain Controller times differ by more than the configured clock skew (KRB5KRB_AP_ERR_SKEW)
Tue Feb 21 2023 03:11:10 +01:00 [kern_secd:info:9264] | [000.286.823] ERR : RESULT_ERROR_KERBEROS_SKEW:7537 in establishContext() at src/GssapiCtx.cpp:757
Tue Feb 21 2023 03:11:10 +01:00 [kern_secd:info:9264] | [000.286.830] ERR : establishContext: GSSAPI Error: (d0000), Kerberos Error: (Cluster and Domain Controller times differ by more than the configured clock skew (KRB5KRB_AP_ERR_SKEW))