HP CIFS Server and Kerberos

107
The “kinit administrator” fails.
Problem-4
The HP-UX server clock and the Windows KDC clock are not in sync. The Kerberos authentication
protocol will use a timestamp as part of the encryption algorithm, and if the clocks are out of sync,
then the authentication will fail.
Resolution-4
Set the system clocks to be in sync. If this does not work, then use the “clockskew” parameter in the
krb5.conf file to allow a larger window of clock error:
[libdefaults]
default_realm = SNSLATC.HP.COM
#default_tkt_enctypes = DES-CBC-CRC RC4-HMAC DES-CBC-MD5
#default_tgs_enctypes = DES-CBC-CRC RC4-HMAC DES-CBC-MD5
default_tkt_enctypes = DES-CBC-MD5
default_tgs_enctypes = DES-CBC-MD5
ccache_type = 2
clockskew = 1800