Clock skew too great

wbinfo -u command did not display any Active Directory users although the server is part of the its domain. Checking the trust secret for this domain with wbinfo -t provides a successful output.

The Samba log file for this domain reports the following error :

winbind_error_clock_skew_too_great

To make it work again, on Centos 6.7, make sure that the server’s time is up to date.
Restart the ntpd daemon :

[root@localhost:~]# service ntpd status

Restart the winbind daemon :

[root@localhost:~]# service winbind status

As a test, retrieve details from a given user using the id command :

[fool@localhost:~]$ id username

If successful, all the groups the user belongs to will be listed.

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s