If there is an unrelated ticket with time skew at the default location # klist -v Credentials cache: FILE:/tmp/krb5cc_0 Principal: h...@stacken.kth.se Cache version: 4 KDC time offset: -23 minutes 22 seconds
Server: krbtgt/stacken.kth...@stacken.kth.se Client: h...@stacken.kth.se Ticket etype: aes256-cts-hmac-sha1-96, kvno 1 Ticket length: 328 Auth time: Dec 22 13:33:51 2016 End time: Dec 29 13:33:51 2016 Ticket flags: pre-authent, initial, forwardable Addresses: addressless the following tests fail for that reason (shouldn't the tests be independent of such stuff like unrelated old tickets?) FAIL: check-kdc FAIL: check-kdc-weak When I remove the offending ticket: PASS: check-kdc PASS: check-kdc-weak Now I "only" have to find the reason why these still fail in the kdc tests: FAIL: check-pkinit FAIL: check-iprop Harald.