Kerio Control Domain users login problem [message #115306] |
Wed, 06 August 2014 15:53  |
sheriff
Messages: 12 Registered: September 2011 Location: Azerbaijan
|
|
|
|
I have DC and ADC. I want to use domain users for authentication. Domain users listed on aaa.local list. But when i try to login "Incorrect username or password" shown on browser. I cannot login domain users on web interface.
NTLM authentication is working.
Please help
|
|
|
|
|
|
|
|
|
Re: Kerio Control Domain users login problem [message #115463 is a reply to message #115455] |
Thu, 14 August 2014 16:54   |
markt
Messages: 27 Registered: July 2007 Location: Leeds, UK
|
|
|
|
sheriff wrote on Thu, 14 August 2014 11:44Kerio control version is 8.3.1 build 2108.
Debug LOG
{auth} Krb5: get_init_creds_password(krbtgt/BOTL.LOCAL<_at_>BOTL.LOCAL, serxan<_at_>BOTL.LOCAL): Clock skew too great, error code 0x96c73a25 (-1765328347)
AD is extremely time sensitive, it looks like there is a disparity between your DC and the Kerio installation - do you have any time sync in place (i.e. out to an external NTP server)? If you want to lock down the DC, have Kerio sync to a NTP server and have the DC time sync to Kerio. Check time zones etc are set the same.
|
|
|
|