{"id":1285,"date":"2022-11-08T23:36:47","date_gmt":"2022-11-08T22:36:47","guid":{"rendered":"https:\/\/alessandromasciadri.com\/?p=1285"},"modified":"2022-11-08T23:57:55","modified_gmt":"2022-11-08T22:57:55","slug":"come-risolvere-errore-di-autenticazione-samba-active-directory-clock-skew-too-great","status":"publish","type":"post","link":"https:\/\/alessandromasciadri.com\/come-risolvere-errore-di-autenticazione-samba-active-directory-clock-skew-too-great\/","title":{"rendered":"Come risolvere l&#8217;errore di autenticazione Samba con Active Directory (Clock skew too great)"},"content":{"rendered":"\t\t<div data-akihiro-type=\"ama-post\" data-akihiro-id=\"1285\" class=\"akihiro akihiro-1285\" data-akihiro-post-type=\"post\">\n\t\t\t\t<div class=\"akihiro-element akihiro-element-2aca476 e-flex e-con-boxed e-con e-parent\" data-id=\"2aca476\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"akihiro-element akihiro-element-38a4f01 akihiro-widget akihiro-widget-text-editor\" data-id=\"38a4f01\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"akihiro-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Lo scenario coinvolge un Samba File Server unito a dominio Windows Active Directory che non permette pi\u00f9 agli utenti di collegarsi alle cartelle condivise e quindi di sfogliarne i file.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"akihiro-element akihiro-element-5a589be akihiro-widget akihiro-widget-heading\" data-id=\"5a589be\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"akihiro-widget-container\">\n\t\t\t\t\t<h3 class=\"akihiro-heading-title akihiro-size-default\">Diagnostica del problema<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"akihiro-element akihiro-element-a199350 akihiro-widget akihiro-widget-text-editor\" data-id=\"a199350\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"akihiro-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Lato Windows il messaggio di errore non \u00e8 molto significativo, restituisce infatti:<\/p><blockquote><p>Microsoft Windows Network: Nome di dispositivo locale gi\u00e0 in uso.<\/p><p>La connessione non \u00e8 stata ripristinata.<\/p><\/blockquote><p>\u00c8 lato linux che il messaggio pi\u00f9 esplicito ci permette di eseguire una diagnostica pi\u00f9 precisa. Lanciando infatti il comando<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"akihiro-element akihiro-element-5dfaf19 akihiro-widget akihiro-widget-code-highlight\" data-id=\"5dfaf19\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"code-highlight.default\">\n\t\t\t\t<div class=\"akihiro-widget-container\">\n\t\t\t\t\t\t\t<div class=\"prismjs-okaidia copy-to-clipboard \">\n\t\t\t<pre data-line=\"\" class=\"highlight-height language-bash \">\n\t\t\t\t<code readonly=\"true\" class=\"language-bash\">\n\t\t\t\t\t<xmp>sudo net ads status -U [domain-admin-user]<\/xmp>\n\t\t\t\t<\/code>\n\t\t\t<\/pre>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"akihiro-element akihiro-element-d2949fa akihiro-widget akihiro-widget-text-editor\" data-id=\"d2949fa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"akihiro-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>otteniamo in risposta un messaggio che contiene questa stringa<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"akihiro-element akihiro-element-617217a akihiro-widget akihiro-widget-code-highlight\" data-id=\"617217a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"code-highlight.default\">\n\t\t\t\t<div class=\"akihiro-widget-container\">\n\t\t\t\t\t\t\t<div class=\"prismjs-okaidia copy-to-clipboard \">\n\t\t\t<pre data-line=\"\" class=\"highlight-height language-bash \">\n\t\t\t\t<code readonly=\"true\" class=\"language-bash\">\n\t\t\t\t\t<xmp>gse_get_client_auth_token: gss_init_sec_context failed with [ Miscellaneous failure (see text): Clock skew too great](2529638949)<\/xmp>\n\t\t\t\t<\/code>\n\t\t\t<\/pre>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"akihiro-element akihiro-element-8db4dc3 akihiro-widget akihiro-widget-text-editor\" data-id=\"8db4dc3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"akihiro-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Questo ci fa intuire che c&#8217;\u00e8 un problema sul clock di sistema. \u00c8 infatti confrontando l&#8217;ora di sistema del file server con l&#8217;ora di sistema del Windows Domain Controller che si noter\u00e0 un disallineamento dell&#8217;orario.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"akihiro-element akihiro-element-8a591f9 akihiro-widget akihiro-widget-heading\" data-id=\"8a591f9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"akihiro-widget-container\">\n\t\t\t\t\t<h3 class=\"akihiro-heading-title akihiro-size-default\">Soluzione del problema <\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"akihiro-element akihiro-element-1953c9e akihiro-widget akihiro-widget-text-editor\" data-id=\"1953c9e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"akihiro-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>La soluzione al problema Miscellaneous failure (see text): Clock skew too great prevede un semplice allineamento dell&#8217;orario dei due server, possibilmente lanciando una sincronizzazione con un NTP server.<\/p><p>Nel mio caso specifico il problema era riconducibile all&#8217;orologio di sistema di Windows Server, il quale dovrebbe essere automaticamente allineato con il server NTP di Microsoft, ma la realt\u00e0 \u00e8 invece descritta in questo articolo: <a href=\"https:\/\/learn.microsoft.com\/en-us\/troubleshoot\/windows-server\/identity\/specialpollinterval-polling-interval-time-service-not-correct\">https:\/\/learn.microsoft.com\/en-us\/troubleshoot\/windows-server\/identity\/specialpollinterval-polling-interval-time-service-not-correct<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Lo scenario coinvolge un Samba File Server unito a dominio Windows Active Directory che non permette pi\u00f9 agli utenti di collegarsi alle cartelle condivise e quindi di sfogliarne i file. Diagnostica del problema Lato Windows il messaggio di errore non \u00e8 molto significativo, restituisce infatti: Microsoft Windows Network: Nome di dispositivo locale gi\u00e0 in uso. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[20,44,25],"class_list":["post-1285","post","type-post","status-publish","format-standard","hentry","category-sistemistica","tag-linux","tag-samba","tag-windows"],"_links":{"self":[{"href":"https:\/\/alessandromasciadri.com\/ama-json\/wp\/v2\/posts\/1285","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/alessandromasciadri.com\/ama-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/alessandromasciadri.com\/ama-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/alessandromasciadri.com\/ama-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/alessandromasciadri.com\/ama-json\/wp\/v2\/comments?post=1285"}],"version-history":[{"count":5,"href":"https:\/\/alessandromasciadri.com\/ama-json\/wp\/v2\/posts\/1285\/revisions"}],"predecessor-version":[{"id":1290,"href":"https:\/\/alessandromasciadri.com\/ama-json\/wp\/v2\/posts\/1285\/revisions\/1290"}],"wp:attachment":[{"href":"https:\/\/alessandromasciadri.com\/ama-json\/wp\/v2\/media?parent=1285"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/alessandromasciadri.com\/ama-json\/wp\/v2\/categories?post=1285"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/alessandromasciadri.com\/ama-json\/wp\/v2\/tags?post=1285"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}