[Freeipa-users] Kerberos Clock Skew too great

[Rakesh Rajasekharan]

Hi,

I am using a Freeipa 4.2.0 server.

I sometimes see, "clock skew too great" errors in /var/log/krb5kdc.log. And
when this happens, usually logins or new ipa-cleint-install fails.

When I checked on one of the hosts for which the clock skew was reported,

#> ntpq -p
    remote           refid      st t when poll reach   delay   offset
jitter
==============================================================================
*ip-10-10-1-150.e 171.66.97.126    2 u  869 1024  377    0.448    0.047
0.142


Does the above o/p looks fine interms of the ntp sync

Whats the max sync time difference thats allowed for a client.

Thanks
Rakesh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170109/6e016017/attachment.htm>