👾 Overview

Oftentimes when using kerberos authentication or attempting attacks like Kerberoasting in HTB or other labs the Kerberos SessionError: KRB_AP_ERR_SKEW(Clock skew too great) error can crop up. This issue is caused by a machine’s local time being out of sync with the target domain controller and is relatively easy to fix.

📌 The Fix

# Using ntpdate (deprecated)
ntpdate [Target IP]
 
# Using rdate
rdate -n [IP of Target]