Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 1177 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[7.306] http-proxy auth. failed (clock skew too great)

synopex
Hi,

i used the http proxy with AD SSO. After some time many clients get an "authentication failed" if surft to a site.

httpd.log
(none) httpproxy[3745]: [ 0x807af40] adir_auth_process_negotiate (auth_adir.c:298) gss_accept_sec_context: Clock skew too great


Disable/Enable the proxy, flush the authentication cache, ... did not resolve this. Only restart of asg btw. restart of client, helps.

Any ideas?


This thread was automatically locked due to age.
Parents
  • 0
    Hi, 

    please check the time difference between the ASG and your Active directory Server. 
    You are using Kerberos, which is issuing time limited tickets. 

    If the two systems are not in time sync, than you might see such problems.

    regards
    Gert
Reply
  • 0
    Hi, 

    please check the time difference between the ASG and your Active directory Server. 
    You are using Kerberos, which is issuing time limited tickets. 

    If the two systems are not in time sync, than you might see such problems.

    regards
    Gert
Children
No Data