On Wed, Apr 01, 2015 at 07:45:10PM +0300, Ben .T.George wrote: > HI > > yes i have creared cache. tried from different browsers, tried from > portable browser, configure kerbros plugin in firefox > > this is what i got from inspect: > > http://s9.postimg.org/51c5809xr/kerb.jpg
Just to be sure, the policies for ticket lifetimes are still set to their defaults, right? Is there anything in the server-side logs (/var/log/krb5kdc.log, /var/log/httpd/error_log) that might shed some light on things, perhaps after having set "debug=True" in the [global] section of the server's /etc/ipa/default.conf and restarted the httpd service? Nalin -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project