3 ms·
Mainly periodic random unexplainable KDC_ERR_C_PRINCIPAL_UNKNOWN which appears to be the Kerberos equivalent of "fuck you!"
by cjsuk 9y ago
Mainly periodic random unexplainable KDC_ERR_C_PRINCIPAL_UNKNOWN which appears to be the Kerberos equivalent of "fuck you!"
- dijit 9y agoCheck your ntp; this happens when kerberos loses trust with the principle. Happens on Windows too but they mitigate it by _forcing_ you to use NTP against the AD servers.
- cjsuk 9y agoWe already use NTP (chrony) against the DCs. We did have some problems with timedatectl being a dick in the early days of CentOS 7 which reported NTP as enabled but it wasn't. That caused the same issue but we resolved that one and it still periodically happens. I can't quote for the state of the DC's though; they're not mine and I don't want them! :)