<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">2015-02-27 10:45 GMT+02:00 Martin Kosek <span dir="ltr"><<a href="mailto:mkosek@redhat.com" target="_blank">mkosek@redhat.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span class="">On 02/27/2015 09:39 AM, mete bilgin wrote:<br>
</span><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span class="">
<br>
<br>
2015-02-27 10:33 GMT+02:00 Martin Kosek <<a href="mailto:mkosek@redhat.com" target="_blank">mkosek@redhat.com</a><br></span>
<mailto:<a href="mailto:mkosek@redhat.com" target="_blank">mkosek@redhat.com</a>>>:<span class=""><br>
<br>
On 02/27/2015 09:30 AM, mete bilgin wrote:<br>
<br>
Hello,<br>
<br>
I'm trying to install ipa-server with trust (Win 2008R2).<br>
trustdomain-find will<br>
work but when i try to trust-fetch-domains "ipa: ERROR: AD domain<br>
controller<br>
complains about communication sequence. It may mean unsynchronized time<br>
on both<br>
sides, for example" return. Force to reinstall adtrust. Have any idea<br>
where is<br>
the problem?<br>
<br>
<br>
You probably done that, but did you indeed verify that the time on both<br>
your IPA server and AD are the same?<br>
<br></span>
<a href="http://www.freeipa.org/page/__Howto/IPAv3_AD_trust_setup#__Date.2Ftime_settings" target="_blank">http://www.freeipa.org/page/__<u></u>Howto/IPAv3_AD_trust_setup#__<u></u>Date.2Ftime_settings</a><span class=""><br>
<<a href="http://www.freeipa.org/page/Howto/IPAv3_AD_trust_setup#Date.2Ftime_settings" target="_blank">http://www.freeipa.org/page/<u></u>Howto/IPAv3_AD_trust_setup#<u></u>Date.2Ftime_settings</a>><br>
<br>
Martin<br>
<br>
Yes i did that.<br>
[root@ipa01 log]# ntpdate -u<br>
27 Feb 10:37:00 ntpdate[11281]: adjust time server 192.168.12.239 offset<br>
-0.016979 sec<br>
<br>
By the way,<br>
#wbinfo --online-status<br>
<br>
BUILTIN : online<br>
ipadomain: online<br>
addomain : offline<br>
</span></blockquote>
<br>
Right. Did you also check the actual AD? Especially when AD is in a VM, or of if for example it's time zone is wrong, the UTC time may not match.<span class=""><font color="#888888"><br>
<br>
Martin<br>
</font></span></blockquote></div>On AD time zone (UTC+02:00) Istanbul and the same time with ipa server.<br></div><div class="gmail_extra"><br></div></div>