SASL Authentication Failure 3

Symptom

When using SASL authentication (Kerberos V5), the following error appears in the log file:

(Active Directory) Exception: "LDAPException(resultCode=82 (local error), errorMessage='An error occurred while attempting to initialize the JAAS login context for GSSAPI authentication: javax.security.auth.login.LoginException: Clock skew too great (37) caused by KrbException: Clock skew too great (37) caused by KrbException: Identifier doesn't match expected value (906)')"

Cause

The authentication failure is caused by a significant discrepancy in the system time between the FME Server host machine and the Active Directory service.

Resolution

Update the system time on one or both systems.