Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » NTP synchronization with the domain on Windows 2012 R2 (Kerio Connect NTP problem)
  •  
monkluk

Messages: 7
Karma: 0
Send a private message to this user
Kerio Connect version 9. 0.4. User authentication takes place using Kerberos 5. The NTP service on a domain controller is configured correctly. At the moment the server time Kerio Connect rushes more than 300 seconds and users cannot authenticate with the error: Clock skew too great, error code 0x96c73a25 (-1765328347). Traffic between the controller and the Kerio is allowed.
Ask you suggest how can I correct this situation?
  •  
Pavel Dobry (Kerio)

Messages: 5144
Karma: 241
Send a private message to this user
If you are using VMware appliance, make sure that the clock of guest system is synchronised with vSphere host system. Otherwise configure your operating system to sync time with NTP (eg. https://wiki.debian.org/NTP)

Knowledge Base: http://kb.kerio.com/.
Technical support: http://www.kerio.com/support
------------------
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
  •  
monkluk

Messages: 7
Karma: 0
Send a private message to this user
Thank you so much. Your advice has helped. He did not do so earlier because he was not sure that VMtools guest mode can run synchronization.
  •  
Maerad

Messages: 147
Karma: 29
Send a private message to this user
Basic rule is, that you disable any kind of time sync if using kerberos/AD/LDAP in a virtualized enviroment. Even if the host has the right time, there could be a difference and the pc's sync their time with the domain controllers anyway.

I had to learn that the hard way too Smile
Previous Topic: CardDAV Performance
Next Topic: import ssl certificate
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sun Dec 11 10:58:55 CET 2016

Total time taken to generate the page: 0.00870 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.