Trend Micro - Securing Your Journey to the Cloud Business
Support
Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

“Clock skew too great…” appears in the HTTP logs

    • Updated:
    • 30 Aug 2013
    • Product/Version:
    • InterScan Web Security Virtual Appliance 5.6
    • Platform:
    • VMware vSphere 5.x
Summary
You get an error in the HTTP logs similar to the following:
Error: LDAP module failed to initialize authentication [get_TGT : Clock skew too great Unknown error while getting initial ticket]
Error: MIT Kerberos5: get_TGT : Clock skew too great Unknown error while getting initial ticket\n
Details
Public
The default skew range for InterScan Web Security Virtual Appliance (IWSVA) is five (5) minutes. You can see this value in the [libdefaults]/clockskew parameter of the krb5.conf file.
The error shows when the difference between the system time of IWSVA and Kerberos server is higher than the default skew range. To synchronize the time, point the IWSVA and Kerberos server to one of the NTP servers.
To add an NTP server in IWSVA:
  1. Log in to the IWSVA web console.
  2. Go to Administration > IWSVA Configuration > System Time.
  3. Configure the system time and time zone settings.
  4. Click Save.
Premium
Internal
Rating:
Category:
Configure; Troubleshoot
Solution Id:
1098589
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

Related Articles