The clocks on the server and client must have at most 15 seconds of difference (in UTC time)
The time is hashed into the rcon command to add more security... You may want to synchronize the two machines to a NTP server!
Or if you're lazy, rcon_secure 0 on the server (if you own it and don't care about packet sniffing)