Exacq exacqVision Server/Client OS: Linux Active Directory User Manual User Manual
Page 14
www.e
x
acq.com
Page 14 of 14
4/30/2015
Server-Side Kerberos Errors
The exacqVision server log could contain the following error:
StreamPI Error SSPI error: SEC_E_TIME_SKEW
This means the clocks on the client and server computers do not match. The exacqVision server time can be no
more than five minutes off the DC's time.
Make sure the User and Group OU/Container are nested under the Base DN (see discussion earlier in this
document).
Can you ping all your DC FQDNs and resolve them from the client and server?
You have entered your Service Principle Name (SPN) incorrectly. In a Command Prompt on the DC, enter setspn
-l hostname (hostname should be the hostname of your exacqVision server).
Cannot Log In to the admin Account After Joining the Domain
You have an AD account named admin but did not add it to the /etc/centrifydc/user.ignore file. To recover:
1. Rename the AD user from admin to another name.
2. Log in to Ubuntu using your local admin account.
3. Add admin to /etc/centrifydc/user.ignore.
4. Rename the AD account to admin.