#3183 If time is moved back on the IPA server, ipasam does not invalidate the existing ticket
Closed: Fixed None Opened 11 years ago by dpal.

https://bugzilla.redhat.com/show_bug.cgi?id=866576 (Red Hat Enterprise Linux 6)

Description of problem:
If time is moved back on the IPA server, ipasam does not invalidate the
existing ticket

Version-Release number of selected component (if applicable):
ipa-server-trust-ad-3.0.0-2

How reproducible:


Steps to Reproduce:

[root@rasalghul ~]# date
Mon Oct 15 20:35:08 IST 2012

[root@rasalghul ~]# klist -c /var/run/samba/krb5cc_samba
Ticket cache: FILE:/var/run/samba/krb5cc_samba
Default principal: cifs/rasalghul.ipa.qe@IPA.QE

Valid starting     Expires            Service principal
10/15/12 20:59:24  10/16/12 20:59:24  krbtgt/IPA.QE@IPA.QE
10/15/12 20:59:24  10/16/12 20:59:24  ldap/rasalghul.ipa.qe@IPA.QE



Actual results:


Expected results:

Additional info:

Should be fixed upstream.
Medium priority, it is annoying to handle, but ipa servers should never really have time issues in production, this mostly affect tests in VMs I suspect.

Metadata Update from @dpal:
- Issue assigned to abbra
- Issue set to the milestone: FreeIPA 3.0.2

7 years ago

Login to comment on this ticket.

Metadata