On Mon, 2021-11-15 at 06:59 +0000, Tony Delov via FreeIPA-users wrote:
I seem to have an intermittent problem.
When I ssh into it my server,( using sssd and registered to a freeipa server). I often
get dates starting at 1970! I seem to be able to login without any issue.
I suspect this may be that our AD server has multiple realms. Strangely enough, our AD
has no "MYEDU.EDU" realm but has got an "AD.MYEDU.EDU", which is what
I see when it works normally.
I've logged the output of 'sssd -i -d 9 ' plenty of times, but I'm not
sure what to even start looking for, nothing obvious is noticeable at the moment.
I've noticed the same problem on Redhat 7, 8 and Ubuntu 18.04. Ubuntu 20.04 has not
shown this issue and just works. The dates from klist on Ubuntu 20.04 look OK.
They all have the same krb5.conf and sssd.conf.
How would I debug this?
What sort of things should I be looking at?
@ipa-testp01 ~]$ klist
Ticket cache: KCM:500876:97839
Default principal: tony(a)MYEDU.EDU
Valid starting Expires Service principal
01/01/70 10:00:00 01/01/70 10:00:00 krbtgt/MYEDU.EDU(a)MYEDU.EDU
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
Hi,
I had an issue quite similiar just yesterday. It appears my ipa client could not
synchronize time through ntp and was quite off.
I suggest you check the date and time and make sure you are synced to the same ntp servers
between the client and server.
I assume you could log in because the user was present in cache. In my case, when I
cleaned the cache, I was unable to login anymore.
Regards