On Tue, Feb 19, 2008 at 4:03 PM, Simo Sorce <<a href="mailto:ssorce@redhat.com">ssorce@redhat.com</a>> wrote: <div class="gmail_quote"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> This is to avoid nasty problems with certificates, LDAP entries creation dates, password expiration dates, account expiration dates, and in short, any dates :) _______________________________________________ Freeipa-devel mailing list <a href="mailto:Freeipa-devel@redhat.com">Freeipa-devel@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/freeipa-devel" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-devel</a> </blockquote></div> Maybe there shoud also be a check whether this is a virtualized guest or not before running ntpd? For example, if you are running freeipa inside of a para-virtualized guest on Xen, it doesn't make sense to run ntpd inside the domU -- Paul Batkowski (pbat) GPG Public Key ID: 0xE9A6AF81