在SVM和DC之间观察到时间偏差错误

最后更新
另存为PDF

Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用场景

ONTAP 9
Domain Controller（域控制器）(DC)

问题描述

在SVM和DC之间观察到时间偏差错误"Cluster and Domain Controller times differ by more than the configured clock skew (KRB5KRB_AP_ERR_SKEW)"

EMS 日志：

Tue Feb 21 03:11:10 +0100 [SWPLSVNAS01: secd: secd.netlogon.noServers:EMERGENCY]: None of the Netlogon servers configured for Vserver (nscnvf15) are currently accessible via the network.

SECD日志：

Tue Feb 21 2023 03:11:10 +01:00 [kern_secd:info:9264] | [000.286.811] info : Cluster and Domain Controller times differ by more than the configured clock skew (KRB5KRB_AP_ERR_SKEW) Tue Feb 21 2023 03:11:10 +01:00 [kern_secd:info:9264] | [000.286.823] ERR : RESULT_ERROR_KERBEROS_SKEW:7537 in establishContext() at src/GssapiCtx.cpp:757 Tue Feb 21 2023 03:11:10 +01:00 [kern_secd:info:9264] | [000.286.830] ERR : establishContext: GSSAPI Error: (d0000), Kerberos Error: (Cluster and Domain Controller times differ by more than the configured clock skew (KRB5KRB_AP_ERR_SKEW))