#48 ipsilon-server-install should enforce ntp time sync, kerberos logins silently fail otherwise
Opened 6 years ago by jdennis. Modified 4 years ago

I had a lot of trouble debugging why Kerberos login was not working. Granted, part of the problem was not understanding the right Apache config options to get mod_auth_kerb to log debug information. But once the mod_auth_kerb debugging was solved it turned out to be too much clock skew.

I'm going to make a wild guess that time sync is not the first place an admin is going to look after installing ipsilon and discovers kerberos login silently fails.

The ipsilon server should ensure the ntpd time sync daemon running, if it isn't ntpdate should be run and then it should be stared. There should also be a packaging dependency on ntp.

Fields changed

component: framework => Documentation
milestone: => 1.0
patch_available: => 0

Fields changed

owner: simo => someone
status: new => assigned

Fields changed

milestone: 1.0 m4 => Backlog

Metadata Update from @nkinder:
- Issue assigned to someone
- Issue set to the milestone: Backlog

4 years ago

Login to comment on this ticket.