summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAlexander Bokovoy <abokovoy@redhat.com>2013-11-12 11:36:22 +0200
committerMartin Kosek <mkosek@redhat.com>2013-11-13 12:28:48 +0100
commit3693b8e51ae11b4bcda9cd7e90ff729fc66a5862 (patch)
tree5242c795d2b3b1b8d2cb1ad23c72ef1a5a973f88
parentf9a8a30b2721cc1c9d989ede3e088a9f69ad3ba1 (diff)
downloadfreeipa-3693b8e51ae11b4bcda9cd7e90ff729fc66a5862.tar.gz
freeipa-3693b8e51ae11b4bcda9cd7e90ff729fc66a5862.tar.xz
freeipa-3693b8e51ae11b4bcda9cd7e90ff729fc66a5862.zip
Map NT_STATUS_INVALID_PARAMETER to most likely error cause: clock skew
When we get NT_STATUS_INVALID_PARAMETER in response to establish DCE RPC pipe with Kerberos, the most likely reason is clock skew. Suggest that it is so in the error message. https://fedorahosted.org/freeipa/ticket/4024
-rw-r--r--ipaserver/dcerpc.py3
1 files changed, 3 insertions, 0 deletions
diff --git a/ipaserver/dcerpc.py b/ipaserver/dcerpc.py
index 86bb42884..0dde3473b 100644
--- a/ipaserver/dcerpc.py
+++ b/ipaserver/dcerpc.py
@@ -82,6 +82,9 @@ dcerpc_error_codes = {
-1073741614: access_denied_error,
-1073741603:
errors.ValidationError(name=_('AD domain controller'), error=_('unsupported functional level')),
+ -1073741811: # NT_STATUS_INVALID_PARAMETER
+ errors.RemoteRetrieveError(
+ reason=_('AD domain controller complains about communication sequence. It may mean unsynchronized time on both sides, for example')),
}
dcerpc_error_messages = {