Hi,
I am using a Freeipa 4.2.0 server.
I sometimes see, "clock skew too great" errors in /var/log/krb5kdc.log. And
when this happens, usually logins or new ipa-cleint-install fails.
When I checked on one of the hosts for which the clock skew was reported,
#> ntpq -p
remote refid st t when poll reach delay offset
jitter
==============================================================================
*ip-10-10-1-150.e 171.66.97.126 2 u 869 1024 377 0.448 0.047
0.142
Does the above o/p looks fine interms of the ntp sync
Whats the max sync time difference thats allowed for a client.
Thanks
Rakesh
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
