Hi,
Periodically we are seeing the following error on one or more of our SharePoint Search Servers:
EventID: 0x0000005 (5)
The Kerberos client received a KRB_AP_ERR_TKT_NYV error from the server XX XX. This indicates that the ticket presented to that server is not yet valid (due to a discrepancy between ticket and server time. Contact your administrator to make sure the hosthostyclient and server times are synchronised and that the time for the Key Distribution Center Service (KDC) in realm XX XX is synchronised with the KDC in the client realm.
By the time we are alerted and have investigated the error has gone away and the server and the KDC are correctly time synched. We don't believe that the servers actually ever lost time synch anyway.
The only other clue we have is that this always seems to happen at a point when the SP Search Server is under high CPU/Memory so our thinking is perhaps the server is trying to contact the KDC and then failing because its over-resourced.
Has anyone else seen this error with regards to SharePoint Search?
Please don't point me towards any MS articles on synching time - for example https://social.technet.microsoft.com/wiki/contents/articles/12846.event-id-5-kerberos-client-configuration.aspx - as we're already aware of this resolution. We just need to understand why this is happening on individual SP Search Servers from time to time.
Thanks