On Tue, 12 Nov 2013, Alexander Bokovoy wrote:
Hi,
I stumbled upon another case of clock skew breaking trust-add code and
in this case we actually get a separate error code --
NT_STATUS_INVALID_PARAMETER that, along with a specific case we get it
in, allows to deduce that there is a possible clock skew without parsing
debug output from Samba client libraries.
I made this small patch that suggests there is indeed clock skew between
IPA and an AD DC.
Ticket #4024.
https://fedorahosted.org/freeipa/ticket/4024
--
/ Alexander Bokovoy
_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel