diff options
| author | Alexander Bokovoy <abokovoy@redhat.com> | 2013-11-12 11:36:22 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2013-11-13 12:28:55 +0100 |
| commit | d2fbcd121eaeb56ab36da6b2f84c780e3af14125 (patch) | |
| tree | 12b1f06ca029bdb4a66ddd952f0e4f7514914213 /ipaserver/dcerpc.py | |
| parent | efdeb0b66744f232aaf1934100d4118219824265 (diff) | |
| download | freeipa.git-d2fbcd121eaeb56ab36da6b2f84c780e3af14125.tar.gz freeipa.git-d2fbcd121eaeb56ab36da6b2f84c780e3af14125.tar.xz freeipa.git-d2fbcd121eaeb56ab36da6b2f84c780e3af14125.zip | |
Map NT_STATUS_INVALID_PARAMETER to most likely error cause: clock skew
When we get NT_STATUS_INVALID_PARAMETER in response to establish
DCE RPC pipe with Kerberos, the most likely reason is clock skew.
Suggest that it is so in the error message.
https://fedorahosted.org/freeipa/ticket/4024
Diffstat (limited to 'ipaserver/dcerpc.py')
| -rw-r--r-- | ipaserver/dcerpc.py | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/ipaserver/dcerpc.py b/ipaserver/dcerpc.py index 86bb4288..0dde3473 100644 --- a/ipaserver/dcerpc.py +++ b/ipaserver/dcerpc.py @@ -82,6 +82,9 @@ dcerpc_error_codes = { -1073741614: access_denied_error, -1073741603: errors.ValidationError(name=_('AD domain controller'), error=_('unsupported functional level')), + -1073741811: # NT_STATUS_INVALID_PARAMETER + errors.RemoteRetrieveError( + reason=_('AD domain controller complains about communication sequence. It may mean unsynchronized time on both sides, for example')), } dcerpc_error_messages = { |