[Bug 985727] [NEW] krb5-admin-server falsely claiming clock skew errors

[Brian Knoll]

Public bug reported:

I installed a Kerberos KDC and Admin Server onto an Ubuntu 12.04 64-bit
VM.  I created a test realm, and added principals.

When I kinit, it works, and I get a ticket back.  However, when I try to
use kadmin, kadmin is extremely slow to respond, then eventually gives
an "unspecified GSS failure: clock skew too great" error.  This occurs
even when I am simply using kadmin to connect to the same machine I am
on.  In other words, I can use it to connect to localhost, meaning the
clocks would be identical, yet I still get this error.

This does not happen when the guest VM onto which I install the KDC is
an Ubuntu 10.04 VM.  However, installing onto 12.04 causes this failure.

The clock is synchronized since it is a VM, so that is not the problem.
However, as I said, this occurs even if I connect from the KDC to the
KDC using kadmin.  Of course, kadmin.local works just fine, but I would
rather not have to rely on that for management of my Kerberos realms,
especially since it worked in 10.04.

Thanks,
Brian

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: krb5-admin-server 1.10+dfsg~beta1-2
ProcVersionSignature: Ubuntu 3.2.0-23.36-generic 3.2.14
Uname: Linux 3.2.0-23-generic x86_64
ApportVersion: 2.0.1-0ubuntu5
Architecture: amd64
Date: Thu Apr 19 12:02:53 2012
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Beta amd64 (20120327.1)
ProcEnviron:
 TERM=xterm
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: krb5
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: krb5 (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug precise

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/985727

Title:
  krb5-admin-server falsely claiming clock skew errors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/985727/+subscriptions