Hi, I am using a Freeipa 4.2.0 server.
I sometimes see, "clock skew too great" errors in /var/log/krb5kdc.log. And when this happens, usually logins or new ipa-cleint-install fails. When I checked on one of the hosts for which the clock skew was reported, #> ntpq -p remote refid st t when poll reach delay offset jitter ============================================================================== *ip-10-10-1-150.e 171.66.97.126 2 u 869 1024 377 0.448 0.047 0.142 Does the above o/p looks fine interms of the ntp sync Whats the max sync time difference thats allowed for a client. Thanks Rakesh
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project