[Samba] ads_sasl_spnego_krb5_bind failed: Ticket not yet valid

[Mark Casey]

Hello,

I have a samba server set up as a member server in a native 2003 domain. 
Its ubuntu server 8.4.02 LTS. Any idea what causes this when I try to 
leave the domain?

> user at dordal:/home/backups$ sudo net ads leave -U administrator at DOMAIN.COM
> administrator at DOMAIN.COM's password:
> [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330)
>   kinit succeeded but ads_sasl_spnego_krb5_bind failed: Ticket not yet 
> valid
> [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330)
>   kinit succeeded but ads_sasl_spnego_krb5_bind failed: Ticket not yet 
> valid
> user at dordal:/home/backups$

I'm hoping there is some sort of known cause for this, but I can send my 
confs if needed.

BTW: The time on the DC and the time on this server are matched to 
within 1 second. I've seen gaps in system time as a cause of this, but 
I'd be surprised to learn how it applies here.

TIA,
Mark