significant clock differences

[dmlee]

I saw this error message when I tried to login splunk web , the whole message is Login will fail due to significant clock differences between the server and this machine

I check both machine's system time , there is only a few differences between them (seconds).

any idea about this ? thanks

[carmackd]

Check the login.html file in $SPLUNK_HOME/share/splunk/search_mrsparkle/templates/account/ and make sure it is current with the Splunk version you're running. I had the same problem and saw differences between the login.html page that was in that directory and the one that was supposed to install during my upgrade to 4.3.1.

Old login.html page contain the following, while the latest did not:

#some code here#
var s = $.cookie('${cherrypy.config['tools.sessions.name']}');
#some code here#
else if (!s) {
        $('.error').hide();
        $('#jserror').text(_('Login will fail due to a significant clock differences between the server and this machine')).show();
    }

After updating the file with the latest, the error message went away.

[troywollenslege]

We are getting the same problem with one of our servers. Running Splunk 4.3.1 build 119532.
Both servers have NTP enabled and are within 2-3 seconds of the client. (within about 2 seconds of each other). One server works fine, one server gives this error.

Login will fail due to a significant clock differences between the server and this machine

[MHibbin]

Any chance of using NTP?