You encounter a login failure with a message that says "Your system's internal clock is not synchronized with your authentication server" or "KRB5KRB_AP_ERR_SKEW" when your system clock needs to be synchronized with Active Directory.
To synchronize your system clock with Active Directory, run the following command as root: vastool timesync.