[Freeipa-users] Web ui error “Your session has expired. Please re-login.” from a browser on a remote client.

[Petr Spacek]

On 30.4.2015 14:39, Christopher Lamb wrote:
> Hi Petr
> 
> Thanks, we solved this issue and reported that back on this thread. The
> troubleshooting guide has even been updated as a result.
> 
> https://www.redhat.com/archives/freeipa-users/2015-April/msg00605.html
> 
> Your suggestion has however hit the nail on the head - the problem was
> clock skew between the Server hosting freeIPA and the workstations.

Petr, could we detect this situation in initial Javascript?

I can imagine that server sends its current UTC time to the browser while
login page is loading and then client could compare (local UTC) - (server UTC)
and scream if time difference is greater than ... 5 minutes or so?

-- 
Petr^2 Spacek