I am seeing an error message in my EZproxy Messages file about SAML Instant Time Disagreement
Applies to
- EZproxy
Answer
If you encounter issues related to clock discrepancies in EZproxy SAML integration, follow these steps to resolve the problem:
Check System Clocks
Ensure that the clock on both the SAML machine and your EZproxy machine is correct. Any discrepancies may lead to authentication issues.
Review Messages.txt
Check the EZproxy log file, messages.txt, for lines similar to the following:
2023-09-05 13:46:30 SAML Instant time disagreement, check system clock if recurrent.
2023-09-05 13:46:30 SAML Instant 2023-09-05T16:40:42.919Z, issuer https://auth.school.edu/idp/shibboleth, now 2023-09-05T17:46:30Z, diff 3947, max diff 300
These messages indicate SAML Instant time disagreements, and you should verify the system clock.
Additional information
Checking Time in Linux
Use the timedatectl command in Linux to get and set time.
$ timedatectl
Local time: Thu 2023-12-07 14:37:50 EST
Universal time: Thu 2023-12-07 19:37:50 UTC
RTC time: Thu 2023-12-07 19:37:51
Time zone: America/New_York (EST, -0500)
System clock synchronized: yes
NTP service: active
RTC in local TZ: no
To set the system time, use the set-time option, for example:
timedatectl set-time "2030-01-22 12:00:00"
Checking Time in Windows
In Windows, navigate to Start > Settings > Time & language > Date & time. Here, you can set your time and time zone either manually or automatically.
For further assistance, contact your SAML Administrator and refer them to this documentation to ensure synchronization between the SAML and EZproxy machines.