[Freeipa-users] Re: klist Valid and expiry dates problem 01/01/70 10:00:00

2021-11-15 Thread Tony Delov via FreeIPA-users
I'm reasonably sure the time is ok (on the client at least). I actually have been removing the cache and restarting. My ID was not in the cache. systemctl stop sssd ; rm -rf /var/log/sssd/* /var/lib/sss/{db,mc}/* ; systemctl start sssd # chronyd -q 2021-11-15T09:17:21Z chronyd version 3.5 star

[Freeipa-users] klist Valid and expiry dates problem 01/01/70 10:00:00

2021-11-14 Thread Tony Delov via FreeIPA-users
I seem to have an intermittent problem. When I ssh into it my server,( using sssd and registered to a freeipa server). I often get dates starting at 1970! I seem to be able to login without any issue. I suspect this may be that our AD server has multiple realms. Strangely enough, our AD has no

[Freeipa-users] Freeipa connecting to Redhat IPA server.

2017-12-14 Thread Tony Delov via FreeIPA-users
I've been having difficulties connecting a freeipa-client on Ubuntu 16.06 LTS, to a Redhat IPA server that has a trusted connection to Microsoft AD server. Ssh authentications are pretty slow, however, once I do get on, I find sudo commands often do not work for several minutes saying I am not in