Clock skew too great status code

[Arpit Srivastava]

Hi,

What is the difference between these two minor status codes ?

 -1765328373 KRB5KDC_ERR_NEVER_VALID Requested effective lifetime is
negative or too short
and
 -1765328347 KRB5KRB_AP_ERR_SKEW Clock skew too great

Because both of them seem to be getting generated when time on the
client-side is incorrect.

I also obseved that, in case of clock skew is great - I am getting
credentials expired error code instead of clock skew too great error code.
Is there any explaination for this behaviour.

Please help !

Arpit