LW_ERROR_CLOCK_SKEW [code 0x00009c97]

Error

When attempting to join a domain, the following is returned:

LW_ERROR_CLOCK_SKEW [code 0x00009c97]

Cause

This message indicates that the system time on the Linux or Unix host you are trying to join to your domain is different from that of the domain controller by greater than 5 minutes (300 seconds). AD Bridge cannot operate with a clock skew greater than 300 seconds, so the domain join is halted.

Resolution

To resolve the error, update the time on the client host and then run domainjoin-cli again.

/opt/pbis/bin/domainjoin-cli join <arguments>

/opt/pbis/bin/domainjoin-cli join mydomain.com MyAdminUser