Unusual clock-skew issue

[Gedaliah Wolosh <gwolosh@njit.edu>]

Hi,

A couple of days ago, we experienced a network glitch and the 3 kdc
servers dropped link for a couple of minutes.  When the link was
restored, hprop was unable to replicate the database to one of the two
slaves. The error reported was --

2004-12-15T10:45:26 krb5_read_priv_message: Clock skew too great

NTP is running and all clocks agree within a couple of seconds.  The
clock skew is set for 300 seconds.  There should have been no issue.

An additional, and perhaps related problem, is that klog gave an error
that the AFS user does not exist for a known principal.  We run with the
KAS emulation. No problem with kinit.

I tried restarting the kdc process and the ntp process but this did not
resolve the problem.  Finally, rebooting the machine rectified the
problem with the clock skew.  Not sure whether th klog problem is
rectified.

Has anybody experienced this type of behavior.

_________________________________________________________________
Gedaliah Wolosh, Ph.D.
Manager Computing Resources - CCS
New Jersey Institute of Technology	 Office 973 596-5437
323 King Blvd 	GITC 2203		 Fax    973 642-4761
Newark, NJ 07102                         Email  gwolosh@njit.edu