From 2bb92b969abc805be95f58ab5aafe9cde09e2238 Mon Sep 17 00:00:00 2001
From: Pavel Reichl <preichl@redhat.com>
Date: Fri, 20 Mar 2015 05:35:25 -0400
Subject: KRB5: add debug hint

Reviewed-by: Sumit Bose <sbose@redhat.com>
---
 src/providers/krb5/krb5_child.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/providers/krb5/krb5_child.c b/src/providers/krb5/krb5_child.c
index 8fb2e6b2..4164e75c 100644
--- a/src/providers/krb5/krb5_child.c
+++ b/src/providers/krb5/krb5_child.c
@@ -1895,7 +1895,8 @@ static krb5_error_code check_fast_ccache(TALLOC_CTX *mem_ctx,
 
     if (tgtt.endtime < time(NULL)) {
         DEBUG(SSSDBG_OP_FAILURE,
-              "Valid FAST TGT not found after attempting to renew it\n");
+              "FAST TGT was renewed but is already expired, please check that "
+              "time is synchronized with server.\n");
         kerr = ERR_CREDS_EXPIRED;
         goto done;
     }
-- 
cgit