Dear David,
I’ve had similar problems in the past with VMs running SLES.
The following KB article helped me:
http://www.novell.com/support/kb/doc.php?id=3858673
Good luck
AL
_______________________________________
Mr. Alexander Roberts
Web Team Manager - Rheolwr Tîm y We
Information Services and Systems - Gwasanaethau a Systemau Gwybodaeth
Swansea University - Prifysgol Abertawe
Tel: +44 (0)1792 513239
Email:
[log in to unmask]
LinkedIn:
http://uk.linkedin.com/in/alexanderroberts
About Me:
http://about.me/alexander.roberts
Please, only print this message if you think future generations would benefit from it.
From: Discussion list for Shibboleth developments [mailto:[log in to unmask]]
On Behalf Of David Perry
Sent: 03 June 2013 11:08
To: [log in to unmask]
Subject: VM time sync issue
Hi all - somewhat gory one here so deep breath...
All our VM(ware) hosts are time sync'd to a physical NTP server.
Does anyone else have their IdP on a SLES v10 or 11 VM? Ours is 4 minutes faster than a Windows VM on the same farm (but different hosts), but 4 mins out is failing the security check on an SP - that's if I have vmtools refreshing the time on the VM to be the
same as the host it's running on.
I've tried disabling the vmtools sync, and relying on NTP, but whilst that helped initially it drifted to make the IdP 5mins ahead of the SP. It's affecting one of our external services as well (which has a fussier tolerance on time differences).
I've also tried the advice here:
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1006427
But when I put in the kernel parameters it came up with an error on reboot saying it couldn't find the path to clock or hpet.
Any advice appreciated - our VMware admin is off today so sadly I can't double check things right now.
Thanks,
Dave
David Perry
eLearning Technologist (L34 - Library)
Hull College Group
Wilberforce Drive, Queen's Gardens, Hull
HU1 3DG
Extension 2230 / Direct Dial 01482 381930
Message scanned
**********************************************************************
This message is sent in confidence for the addressee
only. It may contain confidential or sensitive
information. The contents are not to be disclosed
to anyone other than the addressee. Unauthorised
recipients are requested to preserve this
confidentiality and to advise us of any errors in
transmission. Any views expressed in this message
are solely the views of the individual and do not
represent the views of the College. Nothing in this
message should be construed as creating a contract.
Hull College owns the email infrastructure, including the contents.
Hull College is committed to sustainability, please reflect before printing this email.
**********************************************************************