在 SVM 和 DC 之间观察到时间偏斜错误

最后更新
另存为PDF

Views:: 54

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nas

Last Updated:

适用于

ONTAP 9
Domain Controller（域控制器）(DC)

问题描述

在 SVM 和 DC 之间观察到时间偏斜错误"Cluster and Domain Controller times differ by more than the configured clock skew (KRB5KRB_AP_ERR_SKEW)"

EMS 日志：

Tue Feb 21 03:11:10 +0100 [Node1: secd: secd.netlogon.noServers:EMERGENCY]: None of the Netlogon servers configured for Vserver (SVM) are currently accessible via the network.

或

Thu Oct 30 02:24:34 +0900 [Node1: secd: secd.lsa.noServers:EMERGENCY]: None of the LSA servers configured for Vserver (SVM) are currently accessible via the network.

SECD 日志：

Tue Feb 21 2023 03:11:10 +01:00 [kern_secd:info:9264] | [000.286.811] info : Cluster and Domain Controller times differ by more than the configured clock skew (KRB5KRB_AP_ERR_SKEW) Tue Feb 21 2023 03:11:10 +01:00 [kern_secd:info:9264] | [000.286.823] ERR : RESULT_ERROR_KERBEROS_SKEW:7537 in establishContext() at src/GssapiCtx.cpp:757 Tue Feb 21 2023 03:11:10 +01:00 [kern_secd:info:9264] | [000.286.830] ERR : establishContext: GSSAPI Error: (d0000), Kerberos Error: (Cluster and Domain Controller times differ by more than the configured clock skew (KRB5KRB_AP_ERR_SKEW))