Red Hat Bugzilla – Bug 1108208
The Synchronizing time with KDC... message looks strange between login and password prompts
Last modified: 2015-03-05 05:11:32 EST
This bug is created as a clone of upstream ticket: https://fedorahosted.org/freeipa/ticket/3957 Entering credentials is usually done as one operation. It seems strange that ipa-client-install asks for user name, then synchronizes time which introduces small delay, then asks for password: {{{ Continue to configure the system with these values? [no]: yes User authorized to enroll computers: admin Synchronizing time with KDC... Password for admin@REALM.COM: Successfully retrieved CA cert }}} Unless there is a strong technical reason to know the user name before the time sync or not to ask for the password before the time sync, I propose to change the orde either to {{{ User authorized to enroll computers: admin Password for admin@REALM.COM: Synchronizing time with KDC... }}} or to {{{ Synchronizing time with KDC... User authorized to enroll computers: admin Password for admin@REALM.COM: }}} In other words, when login is prompted for and entered, without any delay password prompt should appear if the password is needed.
This request is already fixed in upstream FreeIPA project. Please refer to the linked ticket for additional details and related commits.
Verified. Version :: ipa-client-4.1.0-16.el7.x86_64 Results :: [root@rhel7-2 ~]# ipa-client-install Discovery was successful! Hostname: rhel7-2.example.com Realm: EXAMPLE.COM DNS Domain: example.com IPA Server: rhel7-1.example.com BaseDN: dc=example,dc=com Continue to configure the system with these values? [no]: yes Synchronizing time with KDC... User authorized to enroll computers: admin Password for admin@EXAMPLE.COM: ...trunc... See time sync before user login/password prompts.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-0442.html