[Freeipa-users] how can i avoid error :ipa: ERROR: AD domain controller complains about communication sequence. It may mean unsynchronized time on both sides

[Alexander Bokovoy]

On Tue, 03 Mar 2015, Ben .T.George wrote:
>HI
>
>i am getting below error while trying* ipa trust-fetch-domains
>kwttestdc.com <http://kwttestdc.com> *
>
>ipa: ERROR: AD domain controller complains about communication sequence. It
>may mean unsynchronized time on both sides
>
>time is synced through ntpd and there is no time difference between ad ans
>IPA server
>
>but if i am getting
>
>[root at kwtpocpbis01 ~]# ipa trust-fetch-domains kwttestdc.com
>ipa: ERROR: AD domain controller complains about communication sequence. It
>may mean unsynchronized time on both sides, for example
>[root at kwtpocpbis01 ~]# ipa trustdomain-find "kwttestdc.com"
>  Domain name: kwttestdc.com
>  Domain NetBIOS name: KWTTESTDC
>  Domain Security Identifier: S-1-5-21-3321666283-4099738591-2270060621
>  Domain enabled: True
>----------------------------
>Number of entries returned 1
>
>pleaswe help me solve this issue
First fix the problems like I referred in the previous discussion, this
one is a direct consequence of non-working trust.

-- 
/ Alexander Bokovoy