[Freeipa-users] Centos 7 - ipa-server-3.3.3 AD trust trust-fetch-domains and add external group problem

[Martin Kosek]

On 02/27/2015 09:30 AM, mete bilgin wrote:
> Hello,
>
> I'm trying to install ipa-server with trust (Win 2008R2). trustdomain-find will
> work but when i try to trust-fetch-domains "ipa: ERROR: AD domain controller
> complains about communication sequence. It may mean unsynchronized time on both
> sides, for example" return. Force to reinstall adtrust. Have any idea where is
> the problem?

You probably done that, but did you indeed verify that the time on both your 
IPA server and AD are the same?

http://www.freeipa.org/page/Howto/IPAv3_AD_trust_setup#Date.2Ftime_settings

Martin