https://bugzilla.redhat.com/show_bug.cgi?id=866576 (Red Hat Enterprise Linux 6)
Description of problem: If time is moved back on the IPA server, ipasam does not invalidate the existing ticket Version-Release number of selected component (if applicable): ipa-server-trust-ad-3.0.0-2 How reproducible: Steps to Reproduce: [root@rasalghul ~]# date Mon Oct 15 20:35:08 IST 2012 [root@rasalghul ~]# klist -c /var/run/samba/krb5cc_samba Ticket cache: FILE:/var/run/samba/krb5cc_samba Default principal: cifs/rasalghul.ipa.qe@IPA.QE Valid starting Expires Service principal 10/15/12 20:59:24 10/16/12 20:59:24 krbtgt/IPA.QE@IPA.QE 10/15/12 20:59:24 10/16/12 20:59:24 ldap/rasalghul.ipa.qe@IPA.QE Actual results: Expected results: Additional info:
Should be fixed upstream. Medium priority, it is annoying to handle, but ipa servers should never really have time issues in production, this mostly affect tests in VMs I suspect.
Patch posted for review: https://www.redhat.com/archives/freeipa-devel/2012-November/msg00254.html
master: 2093007[[BR]] ipa-3-0: b7dcd08
Metadata Update from @dpal: - Issue assigned to abbra - Issue set to the milestone: FreeIPA 3.0.2
Login to comment on this ticket.