Troubleshooting Strict Authentication Issues
If the Historian Server rejects valid collector or client user credentials while connecting, consider the following condition:
Time Sync between the Server Time and Domain Controller Time
If a client or collector is attempting to connect to the Historian server with Strict Authentication enabled on a Kerberos configuration, ensure that the Server time and Domain Controller time match with each other. Otherwise, the server rejects valid credentials and does not allow the connection.