Time Sync

Moved: See Time Sync-Clock Skew — Kerberos clock skew, timedatectl set-ntp false, ntpdate -u DC_IP, ntpdate -q.

Quick fix when you see Clock skew too great:

sudo timedatectl set-ntp false
sudo ntpdate -u DC_IP
sudo ntpdate -q DC_IP

If NTP fails (HTB / blocked) — set clock manually to DC time:

sudo timedatectl set-ntp false
sudo date -u -s "2026-07-07 23:37:42"

Full reference → Time Sync-Clock Skew

Kerberos client config → Kerberos Setup - krb5.conf

Related Notes

• Time Sync-Clock Skew
• Change password AD - NT_STATUS_PASSWORD_MUST_CHANGE
• Kerberos