linux - 在 Linux 机器上配置 IPA 客户端 (FreeIPA)

Question

我在 Linux 机器上配置 IPA Cleint (FreeIPA) 时遇到此错误。

Kerberos authentication failed
kinit: Clock skew too great while getting initial credentials

Please make sure the following ports are opened in the firewall settings:
     TCP: 80, 88, 389
     UDP: 88 (at least one of TCP/UDP ports 88 has to be open)
Also note that following ports are necessary for ipa-client working properly after enrollment:
     TCP: 464
     UDP: 464, 123 (if NTP enabled)
Installation failed. Rolling back changes.
IPA client is not configured on this system.

Answer 1

IPA 客户端和 IPA 服务器之间的时间不同步。转到您的客户端并激活 NTP yum 包以同步时钟:

yum install ntp
service ntpd restart
date

如果无法更新，请按照以下步骤更新本地时间:

rm -f /etc/localtime
ln -s /usr/share/zoneinfo/America/Chicago /etc/localtime 

(例如，您居住在中部时区)