[Samba] Clock skew too great | joining ADS

brennion at buerstner.com brennion at buerstner.com
Tue Mar 15 14:54:29 GMT 2005

I've upgraded my pdc to 2000 (compatibility mode with nt), and I want the
linux server to communicate directly with ADS...

I've changed my smb.conf, and try 
net ads join -UAdministrator

But I get the following error : 

borealis:/var/lib/samba# net ads join -UAdministrator
Administrator's password:
[2005/03/15 15:47:20, 0] libads/ldap.c:ads_add_machine_acct(1368)
  ads_add_machine_acct: Host account for borealis already exists - modifying
old account
Using short domain name -- NT1
[2005/03/15 15:48:39, 0] libads/kerberos.c:get_service_ticket(335)
  get_service_ticket: kerberos_kinit_password BOREALIS$@NT1.LOCAL at NT1.LOCAL
failed: Clock skew too great

If I try directly with krb : 
borealis:/var/lib/samba# kinit Administrator at NT1.LOCAL
Password for Administrator at NT1.LOCAL:
kinit(v5): Clock skew too great while getting initial credentials

More information about the samba mailing list