How to address error: Clock skew too great

book

Article ID: 160526

calendar_today

Updated On:

Products

Data Loss Prevention Enforce

Issue/Introduction

How to address KINIT error: Exception: krb_error 37 Clock skew too great (37) Clock skew too great

Resolution

Ensure that the clocks on the Enforce Server and detection server(s) hosts are time synched with the Active Directory host using the Network Time Protocol (NTP) against a high stratum (lower numeric stratum value infers better time quality or high stratum) NTP server. Using this protocol, the DLP server hosts should be time synched within 5 minutes of the Active Directory host.