On Tue, 2012-07-24 at 10:22 +0200, Sigbjorn Lie wrote: > Hi, > > I keep seing this error message in our production environment "Request is a > replay" in variuos > services using kerberos like ssh, sssd, automounter, squid +++ after the > upgrade to RHEL 6.3 / IPA > 2.2. > > > Jul 24 10:16:11 server027 sssd_be: GSSAPI Error: Unspecified GSS failure. > Minor code may provide > more information (Request is a replay) > > Seaching google seem to suggest that this is an error with time. However we > have NTP configured > (IPA servers as NTP servers) which is synchronized to external NTP servers. > There has been no > issue before, and I cannot find issue with the time being out of sync on the > machines where this > is happening.
This error usually appears only when a same request is found in the replay cache. It shouldn't be related to time issues, in that case you usually get clock-skew. Can you tell me what operation was being performed by sssd when you caught that error ? Can you check if immediately before another identical operation had been performed ? Simo. -- Simo Sorce * Red Hat, Inc * New York _______________________________________________ Freeipa-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/freeipa-users
