# Troubleshooting

## Network Issues
To be able to debug early network issues in the boot process the 2 test VMs lxdev04 and lxdev05 have network port mirroring enabled.

I.e. lxdev04 has a second interface that mirrors the primary interface of lxdev05 and lxdev05 has a second interface that mirrors the primary interface of lxdev04.

Bring the device up without IP address:

```
ip link set dev ens192 up
ip addr flush dev ens192
```
and then use `tcpdump -i ens192 ...`


## Accounts

### AD Attributes / Login Information
There are some Active directory attributes that are not synced between the different ActiveDirectory servers. This results in the fact, that depending on which Active Directory server answers your query you might get different answers back. The not synced attributes include:

- badPasswordTime
- badPwdCount
- lastLogon

These attributes are synced:

- lastLogonTimestamp
- whenCreated
- whenChanged

### Password Reset e-account

A usual password reset of an e-accounts in DUO need max 5 minutes to be visible on all PSI systems.
(IAM checks every minute for DUO jobs + IAM workflow execution time + AD distribution time)