You receive unlimited authentication popup and in proxy relatime monitor, you receive this error
gss_accept_sec_context() failed: Unspecified GSS failure. Minor code may provide more information. Ticket not yet valid
¶ Cause:
The postdated ticket is not valid yet.
Date as been changed or fixed after the ticket creation.
¶ Solution:
Create a new ticket with the correct date, or wait until the current ticket is valid.
The system clock on the client system is not synchronized with the system clock on the Active Directory server.
When you use Kerberos, these clocks must be synchronized.
For a permanent solution, deploy a time synchronization service on your system.
For a temporary solution, adjust the clocks on the system so that they are within one minute of each other.
To make sure this error did not occurs, enable the NTP service on your Active Directory server and set your Artica client as NTP client of your Active Directory.
You can also set your Artica server as NTP server and set your Active Directory server as NTP Client