2976457 - "The received token is either outdated or not yet valid" error in transaction SNCWIZARD or SPNEGO

When configuring SPNego through transaction SNCWIZARD or launching transaction SPNEGO, the following error occurs:

The received token is either outdated or not yet valid, check your systems' clock skews. Current time: <yyyyMMddHHmmss1>, Token creation time: <yyyyMMddHHmmss2>, Token expiration time: <yyyyMMddHHmmss3>

Or:

The received token is either outdated or not yet valid, check your systems' clock skews. Current time: <yyyyMMddHHmmss>, Token creation time: ?, Token expiration time: ?

Read more...

• ABAP (component SAP_BASIS):
  • 7.40 SP 2 (or higher) (additionally apply SAP Notes 1819808 and 1832706)
  • 7.31 SP 7 (or higher) (additionally apply SAP Notes 1819808 and 1832706)
  • 7.30 SP 10 (or higher) and SAP Note 1879371 (SP 11) (corrections of SAP Notes 1819808 and 1832706 are already contained)
  • 7.02 SP 14 (or higher) and SAP Note 1879371 (SP 15) (corrections of SAP Notes 1819808 and 1832706 are already contained)
• Kernel: 7.21 (EXT) PL 41 (or higher), see SAP Note 1716826 (recommended: 7.21 EXT PL 110 or higher, see SAP Note 1819808)
• CommonCryptoLib (CCL), as part of latest stack kernel shipments (see SAP Note 1848999)
  
• SAP S/4HANA

ABAP platform all versions ; SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP S/4HANA all versions ; SAP enhancement package 1 for SAP NetWeaver 7.3 ; SAP enhancement package 2 for SAP NetWeaver 7.0

SNCWIZARD, SPNEGO, clock, time, AD server, KDC, ABAP, kerberos, token, configure, clock skew, synchronize clocks, keytab, , KBA , BC-IAM-SSO-SL , Secure Login , BC-SEC-LGN , Authentication , BC-SEC-CRYPTOLIB , CommonCryptoLib , Problem