TIBCO LogLogic LMI - "Clock skew too great while getting initial credentials" message appears in sys.log
Article ID: KB0077082
Updated On:
| Products | Versions |
|---|---|
| TIBCO LogLogic Log Management Intelligence | all versions |
Description
After configuring LMI for Kerberos-based Active Directory authentication, you may receive the following error in /var/log/sys.log:
Clock skew too great while getting initial credentials
Clock skew too great while getting initial credentials
Issue/Introduction
This article shows what this error message means and how to resolve it.
Resolution
This error means that there is too great a difference in the local clock time between LMI and the server you are trying to authenticate to (note that time zone differences are automatically accounted for and so should not produce this error). For Kerberos ticketing to work the two clocks (LMI's and the Kerberos server) need to be within 5 minutes of each other. You will therefore need to change the time on the authentication server or, much more likely, on LMI. We strongly recommend that you configure NTP on your LMI appliance, and confirm that it is operating correctly, so as to avoid issues like this.
Feedback
Yes
No
Powered by
