On 30.4.2015 14:39, Christopher Lamb wrote: > Hi Petr > > Thanks, we solved this issue and reported that back on this thread. The > troubleshooting guide has even been updated as a result. > > https://www.redhat.com/archives/freeipa-users/2015-April/msg00605.html > > Your suggestion has however hit the nail on the head - the problem was > clock skew between the Server hosting freeIPA and the workstations.
Petr, could we detect this situation in initial Javascript? I can imagine that server sends its current UTC time to the browser while login page is loading and then client could compare (local UTC) - (server UTC) and scream if time difference is greater than ... 5 minutes or so? -- Petr^2 Spacek -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
