• Mostly a time setting problem
  • log in to the host in question, and try kinit afsuser@CERN.CH - this should give you more verbose output, e.g.:

    [root@plus01 etc]# kinit artur@CERN.CH
    artur@CERN.CH's Password:
    kinit: krb5_get_init_creds: time skew (375) larger than max (300)
    

  • check time (have your watch synchronised to the CERN time) : ntpq -p
    • you should have at least one time server listed (apart from LOCAL) and synchronised
    • as an indicator, a jitter value of 4000.00 will tell you that the synchronisation has failed
  • if time is bad, check the following files (contents to be published soon):
    • /etc/ntp.conf
    • /etc/ntp/steptickers
  • then run system time synchronisation:
    • /etc/init.d/ntpd stop
    • ntpdate -u time01.daq.lhcb
    • etc/init.d/ntpd start
    • hwclock --systohc (to synchronise hardware time)
• else check following files (contents to be published soon):
  • /etc/krb5.conf
  • /etc/ssh/sshd_config
  • /usr/vice/etc/ThisCell

-- LoicBrarda - 08 May 2006