Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Silver

"There is a time difference between the client and the server"

Unity 4.0.3

All was working fine, and suddenly I am not able to log into Unity server using any domain account. When I enter the username/password/domain, I get this error message:

************************************************

The system can not log you on due to the following error:

There is a time difference between the client and the server.

Please try again or consult your system administrator.

**************************************************

I can use the same domain account (unityinstall) and log into other machines. I can log into the Unity machine using a local account. There is no time difference between the DC and Unity server.

Need help,

Thanks,

Partha

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: "There is a time difference between the client and the serve

log on to your computer LOCALLY using an account with administrative privileges

At the command prompt type the following:

NET TIME /DOMAIN:name /SET

Found this on MS site:

Cannot Log On If Time and Date Are Not Synchronized

http://support.microsoft.com/default.aspx?scid=kb;en-us;232386&Product=win2000

7 REPLIES
Cisco Employee

Re: "There is a time difference between the client and the serve

log on to your computer LOCALLY using an account with administrative privileges

At the command prompt type the following:

NET TIME /DOMAIN:name /SET

Found this on MS site:

Cannot Log On If Time and Date Are Not Synchronized

http://support.microsoft.com/default.aspx?scid=kb;en-us;232386&Product=win2000

Silver

Re: "There is a time difference between the client and the serve

You rock! It worked !!!

New Member

Re: "There is a time difference between the client and the serve

I'm curious -- why did this have any effect if in fact there was no time difference between the Unity box and the DC?

Cisco Employee

Re: "There is a time difference between the client and the serve

If the client computer's time or date is not synchronized with the authenticating domain controller, Kerberos validation does not succeed.

This occurs because of the variation in the time stamps between the AS_Req and AS_reply between the client and server.

New Member

Re: "There is a time difference between the client and the serve

I know that, and I know how Kerberos works. But in the original message, pbarman said "There is no time difference between the DC and Unity server." "No time difference" implies synchronization, doesn't it?

Silver

Re: "There is a time difference between the client and the serve

Yes indeed there was no time difference. I did confirm that the minutes were exactly matching and to the best of my knowledge the seconds were too. Not sure why this would still happen ???

New Member

Re: "There is a time difference between the client and the serve

I'm more than just mildly curious about this -- we saw the same problem when we were running a Windows 2000 AD domain. Even spent $99 on a Microsoft case to try to resolve it. Even though we provided network monitor traces that showed the times agreed to within a few milliseconds, Kerberos complained about time synchronization, and Microsoft just gave up. We bumped the Kerberos tolerance up to 15 minutes, which minimized the problem, but ultimately just lived with it until we upgraded to Windows 2003, at which time the problem went away.

13526
Views
0
Helpful
7
Replies
CreatePlease to create content