Reset Search
 

 

Article

KB45343 - Active Directory Domain Join fails due to time difference (clock skew)

« Go Back

Information

 
Last Modified Date9/26/2022 11:20 AM
Synopsis
This article describes an issue where the Active Directory Domain Join fails due to time difference (clock skew)
Problem or Goal
When the administrator configures the Active Directory on Pulse Connect Secure and the domain join fails and below logs can be seen in Events Logs :
 
Active Directory authentication server: Domain join failed

Following Kerberos related logs may appear :
 
Operation not permitted gss_init_sec_context failed with [Unspecified GSS failure.  Minor code may provide more information: Clock skew too great] 
An internal error occurred. Failed to join domain: failed to connect to AD: An internal error occurred.


 
Cause
The issue occurs when there is a time difference of more than 5 minutes between PCS and Active Directory server.
Solution
To resolve the problem, Please ensure the clock skew is less than 5 minutes between PCs and Active Directory server.
 
Related Links
Attachment 1 
Created Byshaukat alam

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255