any idea as to why im getting these errors?
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Here is the log that I sent in yesterday. With
server1 and server2 down, but server3 up.
kdc=server1
kdc=server2
kdc=server3
kdc_master=server1
kdc_master=server2
kdc_master=server3
kinit tries server1 and server2 but never even attempts server3
KRB5_TRACE=/dev/stdout kinit user(a)test.domain
[1
Ludwig,
what about this 'fix'
https://bugzilla.redhat.com/show_bug.cgi?id=1009122
won't the setting of nsslapd -ignore-time-skew==on effectively solve the issue?
IE on the down server edit the value in /etc/dirsrv/slapd-DOMAIN/dse.ldif to
nsslapd-ignore-time-skew=on
and then try to bring up
ok thats great news! But I just want to make sure even if the server IS ALREADY
DOWN due to this bug we can still manually edit the database (dse.ldif) for
this value and then bring up the processes. Would that work?
___
FreeIPA-users mailing list -- fr
I'd appreciate any advise on how to even troubleshoot this further. KRB_TRACE
is the only utility that I'm aware to assist with this.
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le.
also, any repercussions to leaving the CSN number skewed like this long-term(as
nsslapd -ignore-time-skew will only mask the problem). I take it that there
aren't. We'll just get log messages but no ill effects otherwise.
thank you
___
FreeIPA-users m
Rob, this is from replica.
I have sent you logs from master in private.
thank you
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
