After making the configuration change, did you run 'sudo adreload' or restart the CentrifyDC client?
That is needed for the changes to be committed.
Note that at that point you are responsible for keeping the client time within 5 minutes of the AD domain controllers.
R.P