topic Dear Jan, in Network Access Control

Clock Skew joining domain

adamgibs7 — Mon, 11 Mar 2019 06:45:37 GMT

Dears,

i have a clock skew error when joining to the domain, i have syn cisco ise to the switch 6800 and the windows server is also at the same time just around 3 4 seconds difference, but when i m joining it gives me clock skew error. i m pretty sure that is becz of clock but as per cisco if it differs for 5 min also ise is able to join the domain but in my case it's only 5 sec then why i m not able to join,

i have setup other ISE with manual clock matching with AD and it worked for me i tried the same trick in this setup but is not working becz i have 3 DC so when i try to join to domain it jumps to any 3 no's of the DC and it popup with an error that DC1 skew clock error etc etc etc.

Any hints how to get rid of the NTP becz all has been stopped becz of no AD.

thanks

I think this might actually

jan.nielsen — Thu, 12 May 2016 15:38:22 GMT

I think this might actually be a bug, i seem to remember something about this. What ISE version are you running?

Dear Jan,

adamgibs7 — Mon, 16 May 2016 06:52:20 GMT

Dear Jan,

Attached is the error. and the version is 2.0.0.306

Dear Jan,

adamgibs7 — Sat, 21 May 2016 20:08:59 GMT

Dear Jan,

I opened a TAC case and the ise is sending request to the DC with the proper time but DC is replying to ISE with 4 hrs time backwards to the current time, this mean is going 4 hrs back becz of another timezone I have seen the timezone are perfect but the DC replies with incorrect time that's why it shows me the clock skew detection error.

can give more hints please. how can we solve the problem

thanks