samba - Mar 2005 - Clock skew too great | joining ADS

I've upgraded my pdc to 2000 (compatibility mode with nt), and I want the
linux server to communicate directly with ADS...

I've changed my smb.conf, and try 
net ads join -UAdministrator

But I get the following error : 


borealis:/var/lib/samba# net ads join -UAdministrator
Administrator's password:
[2005/03/15 15:47:20, 0] libads/ldap.c:ads_add_machine_acct(1368)
  ads_add_machine_acct: Host account for borealis already exists - modifying
old account
Using short domain name -- NT1
[2005/03/15 15:48:39, 0] libads/kerberos.c:get_service_ticket(335)
  get_service_ticket: kerberos_kinit_password BOREALIS$@NT1.LOCAL@NT1.LOCAL
failed: Clock skew too great
Speicherzugriffsfehler

If I try directly with krb : 
borealis:/var/lib/samba# kinit Administrator@NT1.LOCAL
Password for Administrator@NT1.LOCAL:
kinit(v5): Clock skew too great while getting initial credentials

>If I try directly with krb : 
>borealis:/var/lib/samba# kinit Administrator@NT1.LOCAL
>Password for Administrator@NT1.LOCAL:
>kinit(v5): Clock skew too great while getting initial credentials
>  
>
Have you tried to sync your clocks with a central source?  Do you run 
ntp?  Accurate timekeeping becomes very important with all the various 
protocols running around out there.  Dynamic DNS likes it, Kerberos, 
I've run into atleast a couple extra ones too that I can't remember.

-- 
Paul Gienger                    Office: 701-281-1884
Applied Engineering Inc.
Systems Architect               Fax:    701-281-1322
URL: www.ae-solutions.com       mailto: pgienger@ae-solutions.com