Token used to early error on version 6.20.10

[Willhelm Rendahl]

Hi,

I started getting the token used to early warning a few weeks ago, before vacation, and now that I'm back it's still ongoing.

I was on 6.14 so I updated to, at the time, the latest version (6.20.10). Still getting the error and a coworker is having the same issue aswell, on 6.14.

I don't know what, if any, information I need to add to this but this might be a good start?

PS C:\Users\willhelm> gam version
GAMADV-XTD3 6.20.10 - https://github.com/taers232c/GAMADV-XTD3 - pyinstaller
Ross Scroggs <ross.s...@gmail.com>
Python 3.10.4 64-bit final
Windows 10 10.0.22000 SP0 Multiprocessor Free AMD64
Path: C:\GAMADV-XTD3
Config File: C:\Users\willhelm\.gam\gam.cfg, Section: DEFAULT, customer_id: my_customer, domain:
PS C:\Users\willhelm> gam info user willhelm.rendahl

ERROR: Please correct your system time.

ERROR: Token used too early, 1650879139 < 1650879201. Check that your computer's clock is set correctly.
PS C:\Users\willhelm> get-date

den 25 april 2022 11:32:24

PS C:\Users\willhelm> w32tm /query /status
Leap Indicator: 0(no warning)
Stratum: 2 (secondary reference - syncd by (S)NTP)
Precision: -23 (119.209ns per tick)
Root Delay: 0.0026722s
Root Dispersion: 18.4849945s
ReferenceId: 0x0AB4320B (source IP:  OUR.LOCAL.IP)
Last Successful Sync Time: 2022-04-25 11:27:01
Source: srvdc01.OUR.SERVER
Poll Interval: 12 (4096s)

[Ian Bevan]

I had this a while ago, turns out our NTP was running ahead of time, we then set it to Google Time server I believe (I didn't do it, but a colleague did), since then no issues.

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/df9dabd0-cdd0-4cd1-8e2f-f181f65f35f0n%40googlegroups.com.

Disclaimer

Please help to protect the environment by not printing e-mails unnecessarily. The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful.

[Willhelm Rendahl]

I'll ask about changing NTP for my machine but I assume that might be a no from IT.

I also raised my problem with local IT, assuming the error is on our side since this forum isn't overflowing with issues. They pointed me towards  tokenID verification error · Issue #1648 · googleapis/google-api-python-client (github.com) which in turn points to an issue raised by Ross Scroggs so I guess this is going full circle for us.

If all else fails, can I somehow changed the allowed clock skew for my instance of GAM? I checked the configurationpage in the wiki without success.

[Ross Scroggs]

Willhelm,

I can add a clock_skew_seconds variable to gam.cfg; currently 10 seconds of skew is allowed.

Ross

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/c9266550-913b-4ef3-8dc7-3e8a7ff03c2dn%40googlegroups.com.

--

Ross Scroggs

ross.s...@gmail.com

[Ross Scroggs]

Willhelm,

6.21.01

Added `clock_skew_in_seconds` variable to `gam.cfg` that defines the number of seconds

of clock skew allowed between local time and Google time. The default value is 10 seconds

which was the previous hard-coded value.

In your case, you're off by about 62 seconds.

gam config time_skew_in_seconds 65 save

Ross

--

Ross Scroggs

ross.s...@gmail.com

[Willhelm Rendahl]

I am continously humbled and amazed by your support for this product Ross.

This new version solved my issue, but I'll admit I feel horrible for allowing a 65 second window for my tokens.

And to be nitpicky there's an error in the command and it is: 'gam config clock_skew_in_seconds 65 save'. In case anyone else finds their way here and recieve an error.

[McMahon, Sean]

Hi Ross and team, 

I also still have this problem.  I successfully updated to 6.22 after manually editing my pc's time.  I ran the command(see paste below) and am getting: config is not a valid argument.

Am I doing something wrong?

Can I manually edit a config file with this clock skew variable?  If so, where is the config file on my Windows 10 machine?

C:\GAM>gam version check
GAM 6.22 - https://jaylee.us/gam - pyinstaller
Jay Lee <jay...@gmail.com>
Python 3.10.5 64-bit final
google-api-python-client 2.52.0
Windows 10 10.0.19043 SP0 Multiprocessor Free AMD64
Path: C:\GAM
Version Check:
 Current: 6.22
 Latest: 6.22

C:\GAM>gam config clock_skew_in_seconds 180 save

ERROR: config is not a valid argument for "gam"

C:\GAM>

Thanks,

Sean McMahon   Boston Public Schools
617-635-9185  617-592-6480	smcm...@bostonpublicschools.org  http://bostonpublicschools.org
2300 Washington Street, Roxbury, 02119

BPSTechnology has launched a new Help Portal!  Find helpful links, answers and report issues Right Here!

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/61ad7f1a-441c-40a7-83fc-be7eb758279an%40googlegroups.com.

[Kim Nilsson]

Sean,

you are trying to use "config" on regular GAM.

Ross' suggestion with config only works with GAMADV-XTD3.