CVOクラスタでのKRB5KRB_AP_ERR_SKEW EMSイベント
環境
問題
EMSイベントの監視:
secd.nfsAuth.problem: Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [ 115] Cluster, Domain Controller or Client time differs by more than the configured clock skew with respect to the others (KRB5KRB_AP_ERR_SKEW) [ 115] Kerberos authentication failed with result: 7537. [ 116] Unable to connect to LSA service on cgw-ad2d00ap01.root.local (Error: RESULT_ERROR_SECD_NO_CONNECTIONS_AVAILABLE) [ 138] Successfully connected to ip 10.100.0.0, port 445 using TCP [ 203] Encountered NT error (NT_STATUS_MORE_PROCESSING_REQUIRED) for SMB command SessionSetup [ 203] Cluster, Domain Controller or Client time differs by more than the configured clock skew with respect to the others (KRB5KRB_AP_ERR_SKEW)
クラスタCLIでは、クラスタの時刻と日付がCIFS SVM用に設定したNTPサーバから約9分遅れています。