IDP reports: Message was expired but times look valid

[Christopher Bongaarts]

On 11/14/2013 10:30 AM, Brent Putman wrote:
> Allowing for a couple of seconds for transmission and processing and
> minor clock drift, that's just about exactly 12hours earlier than the
> IdP's clock.  So my off-the-cuff guess would be that the SP's clock is
> set to AM time instead PM time. Or the IdP's is similarly set
> incorrectly.  Or something like that.

And if it's intermittent, perhaps one machine in a cluster is set wrong.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%