Kerberos Errors

Kerberos Common Errors

Who would've guessed? Kerberos throws errors too. The most common one is:

KRB-ERROR (37) KRB_AP_ERR_SKW

This means that the clock is not in sync with the DC. To fix this on Windows:

Query the source clock. If the response is something like LOCAL CMOS or anything that is not a DC, then you identified the cause.

w32tm /query /source

Enable Clock Sync with DC:

w32tm /config /syncfromflags:domhier /update

Additionally you might need to stop/start the service:

net stop w32time && net start w32time