InformationCorrect date and time settings are required for authentication protocols, file creation, modification dates and log entries. Ensure that time on the computer is within acceptable limits. Truly accurate time is measured within milliseconds, for this audit a drift under four and a half minutes passes the control check. Since Kerberos is one of the important features of macOS integration into Directory systems the guidance here is to warn you before there could be an impact to operations. From the perspective of accurate time this check is not strict, it may be too great for your organization, adjust to a smaller offset value as needed.
Kerberos may not operate correctly if the time on the Mac is off by more than 5 minutes. This in turn can affect Apple's single sign-on feature, Active Directory logons, and other features. Audit check is for more than 4 minutes and 30 seconds ahead or behind.
Accurate time is required for many computer functions.
SolutionRun the following commands to ensure your time is set within an appropriate limit:
$ sudo systemsetup -getnetworktimeserver
The output will include Network Time Server: and the name of your time server
example: Network Time Server: time.apple.com
$ sudo ntpdate -sv <your.time.server>
$ sudo sudo systemsetup -getnetworktimeserver
Network Time Server: time.apple.com
$ sudo ntpdate -sv time.apple.com
The associated check will fail if no network connection is available.