#4024 Improve error reporting for adding trust case
Closed: Fixed None Opened 10 years ago by abbra.

When establishing trust IPA might report following error message:

[root@host ~]# ipa trust-add ipaqe.com --type=ad --admin administrator --password
Active directory domain administrator's password:
ipa: ERROR: CIFS server communication error: code "-1073741811",
                message "Unexpected information received" (both may be "None")

The error code -1073741811 is NT_STATUS_INVALID_PARAMETER. What happens is that Samba library that we use tries to establish an authenticated connection to the AD DC using Kerberos credentials of the AD administrator and that fails due to Kerberos-related issue.

In most cases the actual issue is clock skew, so it would be good to suggest to check time difference between AD and IPA.


Metadata Update from @abbra:
- Issue assigned to abbra
- Issue set to the milestone: FreeIPA 3.3.x - 2013/11 (bug fixing)

7 years ago

Login to comment on this ticket.

Metadata