The following error is reported during sign on using the Safeguard Authentication Services (SAS) SAP plugin.
“The security context of the current session has expired TIME”
If the timezone on a computer is set to UTC+11 or UTC+12 users cannot login. If the tz is set to UTC +10 or less then they can login. Although this may vary depending on the ticket_lifetime value set in vas.conf.
By default the Kerberos ticket lifetime is 10 hours. If the time zone difference happens to be more than 10 hours (Kerberos ticket lifetime), the error is given.
1. Change the adjust the ticket lifetime in AD
https://www.ultimatewindowssecurity.com/wiki/page.aspx?spid=MaxLifeSerTx
2. Contact Microsoft to see if they have a hotfix for this issue.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center