Trying to join to the domain the following message is seen:
KRB5KDC_ERR_NEVER_VALID (-1765328373): Requested effective lifetime is negative or too short
ERROR: Could not join to the domain
The system time is out of sync with AD by a lot.
When the system is out of sync with AD by a short amount the following message is seen:
KRB5KRB_AP_ERR_SKEW (-1765328347): Clock skew too great