On Tue, 2014-07-29 at 15:35 +0300, Alexander Bokovoy wrote: > On Tue, 29 Jul 2014, Joseph, Matthew (EXP) wrote: > >Figured out the issue. > >My time was off by about 10 minutes between the replica and master > >server. This caused the credential errors. > > > >I put the time back to where it should be and the replication went perfect. > > > >Would a newer version of FreeIPA display this better in the logs? > >Currently I'm using 2.2.0-16 > Yes, in RHEL 7 we have updated version of Kerberos libraries that can > deal with time difference within the same Kerberos realm, so once your > machines are running RHEL 7, these errors will be rare.
This is true only for a client, but not for a server, so it probably won't change anything for this case TBH. Simo. -- Simo Sorce * Red Hat, Inc * New York -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project