If you get errors like ‘ticket not yet valid’ or ‘ticket is expired’, this is probably due to wrong time synchronization.
Check QTIMZON and QTIME system values using WRKSYSVAL. Also check the time clock and time zone for the domain controller and end-users’ machines.