LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices

Reply
 
Search this Thread
Old 03-14-2013, 03:17 PM   #1
antnish
LQ Newbie
 
Registered: Feb 2011
Location: California
Posts: 16
Blog Entries: 1

Rep: Reputation: 0
NTP configuration in client to synchronize with NTP server.


Hi,
I had configured NTP before. I remember I don't need to do lots of configurations. I am not sure, why my servers are not getting synchronize with NTP server which is in our Headquater. I am at branch site.
Previously we have our own NTP server now we are changing our NTP configuration to NTP server at Headquarter.

Below is my configurations-
cat /etc/ntp.conf

restrict 127.0.0.1

server lin1.timeserver.com iburst maxpoll 6
server lin2.timeserver.com iburst maxpoll 6
server lin3.timeserver.com iburst maxpoll 6

server 127.127.1.0 # local clock
fudge 127.127.1.0 stratum 10

driftfile /var/lib/ntp/drift
keys /etc/ntp/keys

After ntpd service restart, if I check the status, My server synchronize Locally instead of lin1 server-

[root@Myserver]# ntpstat
synchronised to local net at stratum 11
time correct to within 12 ms
polling server every 1024 s

If I query the tcpdump, I am receiving packets-

[root@Myserver ~]# tcpdump udp port 123
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
13:12:05.057082 IP Myserver.engineering.com.ntp > 10.10.1.5.ntp: NTPv4, Client, length 48
13:12:05.125619 IP 10.10.1.5.ntp > Myserver.engineering.com.ntp: NTPv3, Server, length 48
13:12:24.056917 IP Myserver.engineering.com.ntp > 10.30.1.2.ntp: NTPv4, Client, length 48
13:12:24.085534 IP 10.30.1.2.ntp > Myserver.engineering.com.ntp: NTPv3, Server, length 48

4 packets captured
4 packets received by filter
0 packets dropped by kernel

Questions-
I don't have an access to the server, neither I know the configuration of the server. Do we need to add my network (10.70.0.0/16) in NTP server?
What is <restrict> in NTP server?Is it the low restrict to the specific networks?eg- in ntp.conf file--
restrict 127.0.0.1

Thanks in
 
Old 03-14-2013, 04:11 PM   #2
Emerson
Senior Member
 
Registered: Nov 2004
Location: Saint Amant, Acadiana
Distribution: Gentoo ~
Posts: 3,177

Rep: Reputation: Disabled
Do you connect to the headquarter over the internet?
 
Old 03-14-2013, 04:41 PM   #3
antnish
LQ Newbie
 
Registered: Feb 2011
Location: California
Posts: 16
Blog Entries: 1

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by Emerson View Post
Do you connect to the headquarter over the internet?
Thanks for replying,

No, we are connected over intranet. But the intranet is provided by ISP.
 
Old 03-15-2013, 12:51 AM   #4
bholland2
LQ Newbie
 
Registered: Aug 2011
Distribution: Slackware, Ubuntu
Posts: 16

Rep: Reputation: Disabled
Try this:

restrict default noquery nomodify
restrict 127.0.0.1
restrict 10.70.0.0 mask 255.255.0.0
fudge 127.127.1.0 stratum 10
server 127.127.1.0 # local clock
server lin1.timeserver.com iburst maxpoll 6
server lin2.timeserver.com iburst maxpoll 6
server lin3.timeserver.com iburst maxpoll 6
driftfile /var/lib/ntp/drift
keys /etc/ntp/keys


Note that, depending on circumstances, it can take as much as 5 minutes or more before it actually locks onto a server and quits the local clock.

Another potential problem is the keys. You are using a secured ntp server and the keys will be different than they were with the old server. Make sure you have new keys generated for the headquarters server.
 
Old 03-15-2013, 01:05 PM   #5
antnish
LQ Newbie
 
Registered: Feb 2011
Location: California
Posts: 16
Blog Entries: 1

Original Poster
Rep: Reputation: 0
Exclamation

Quote:
Originally Posted by bholland2 View Post
Try this:

restrict default noquery nomodify
restrict 127.0.0.1
restrict 10.70.0.0 mask 255.255.0.0
fudge 127.127.1.0 stratum 10
server 127.127.1.0 # local clock
server lin1.timeserver.com iburst maxpoll 6
server lin2.timeserver.com iburst maxpoll 6
server lin3.timeserver.com iburst maxpoll 6
driftfile /var/lib/ntp/drift
keys /etc/ntp/keys


Note that, depending on circumstances, it can take as much as 5 minutes or more before it actually locks onto a server and quits the local clock.

Another potential problem is the keys. You are using a secured ntp server and the keys will be different than they were with the old server. Make sure you have new keys generated for the headquarters server.
Thanks for your reply,
Yes, it take around 5 minutes but still it is synchronize locally, But if I tcpdump and query the packets, it is sending and receiving packets to timeserver-

[root@Myserver ~]# tcpdump udp port 123
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
10:51:21.413150 IP Myserver.engineering.com.ntp > 10.30.1.2.ntp: NTP v4, Client, length 48
10:51:21.492043 IP 10.30.1.2.ntp > Myserver.engineering.com.ntp: NTP v3, Server, length 48
10:51:22.413869 IP Myserver.engineering.com.ntp > 10.10.1.5.ntp: NTP v4, Client, length 48
10:51:22.450006 IP 10.10.1.5.ntp > Myserver.engineering.com.ntp: NTP v3, Server, length 48
10:52:20.413794 IP Myserver.engineering.com.ntp > 10.30.1.1.ntp: NTP v4, Client, length 48
10:52:20.429561 IP 10.30.1.1.ntp > Myserver.engineering.com.ntp: NTP v3, Server, length 48
10:52:25.412996 IP Myserver.engineering.com.ntp > 10.10.1.5.ntp: NTPv4, Client, length 48
10:52:25.691622 IP 10.10.1.5.ntp > Myserver.engineering.com.ntp: NTPv3, Server, length 48
10:52:26.412392 IP Myserver.engineering.com.ntp > 10.30.1.2.ntp: NTPv4, Client, length 48
10:52:26.680315 IP 10.30.1.2.ntp > Myserver.engineering.com.ntp: NTPv3, Server, length 48

where- 10.30.1.1 is lin1 timeserver.

But if I query the satus-

[root@Myserver ~]# ntpstat
synchronised to local net at stratum 6
time correct to within 74 ms
polling server every 64 s


I checked in NTP, there was nothing, neither before nor after changing the configuration--

[root@Myserver ~]# cat /etc/ntp/keys
#
# PLEASE DO NOT USE THE DEFAULT VALUES HERE.
#
#65535 M akey
#1 M pass

Thanks.
 
Old 03-16-2013, 01:14 AM   #6
bholland2
LQ Newbie
 
Registered: Aug 2011
Distribution: Slackware, Ubuntu
Posts: 16

Rep: Reputation: Disabled
And what about the security keys? Did you check with HQ and get the keys?
 
Old 03-18-2013, 01:28 PM   #7
antnish
LQ Newbie
 
Registered: Feb 2011
Location: California
Posts: 16
Blog Entries: 1

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by bholland2 View Post
And what about the security keys? Did you check with HQ and get the keys?
No, they don't have security key. Can we synchronize Linux server to Windows Domain Controllers ?
 
Old 03-18-2013, 03:36 PM   #8
michaelk
Moderator
 
Registered: Aug 2002
Posts: 11,890

Rep: Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743
Post the output of the command:
ntpq -pn

Are other clients able to synch time with the server?
 
Old 03-19-2013, 12:30 PM   #9
antnish
LQ Newbie
 
Registered: Feb 2011
Location: California
Posts: 16
Blog Entries: 1

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by michaelk View Post
Post the output of the command:
ntpq -pn

Are other clients able to synch time with the server?
[root@Myserver ~]# ntpq -p
remote refid st t when poll reach delay offset jitter
==============================================================================
10.30.1.1 .LOCL. 1 u 55 64 17 15.030 5167.30 172.344
*LOCAL(0) .LOCL. 10 l 51 64 17 0.000 0.000 0.001


[root@Myserver ~]# ntpstat
synchronised to local net at stratum 11
time correct to within 949 ms
polling server every 64 s

Where 10.30.1.1 is the Time server which is located at headquarter. Other clients are not able to synch time with the server too.
 
Old 03-19-2013, 03:33 PM   #10
michaelk
Moderator
 
Registered: Aug 2002
Posts: 11,890

Rep: Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743
Since the offset is to high the client will not sync with the server. Do you have any idea how the new time server was configured?

What linux distribution / version runs on the clients?

Here is some useful information:
http://www.eecis.udel.edu/~mills/ntp/html/debug.html
 
Old 03-22-2013, 04:31 PM   #11
antnish
LQ Newbie
 
Registered: Feb 2011
Location: California
Posts: 16
Blog Entries: 1

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by michaelk View Post
Since the offset is to high the client will not sync with the server. Do you have any idea how the new time server was configured?

What linux distribution / version runs on the clients?

Here is some useful information:
http://www.eecis.udel.edu/~mills/ntp/html/debug.html
No, I don't have an idea how the new time server was configured. CentOS 5 is runs on the clients.
 
Old 04-01-2013, 01:07 PM   #12
antnish
LQ Newbie
 
Registered: Feb 2011
Location: California
Posts: 16
Blog Entries: 1

Original Poster
Rep: Reputation: 0
Can we sync our CentOS server to Windows time server?
 
Old 04-01-2013, 01:49 PM   #13
michaelk
Moderator
 
Registered: Aug 2002
Posts: 11,890

Rep: Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743
net time set -I ipaddressofyouradserver

http://www.tutorialspoint.com/unix_commands/net.htm

Did you ever find out how the server was configured? Is it a virtual machine?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
NTP client is not syncing to ntp server LittleMaster Linux - Newbie 6 04-05-2013 02:37 PM
[SOLVED] How to synchronize time on 2 server CentOS (do not use NTP) huydq_bk Linux - Server 5 02-14-2012 12:07 PM
NTP client configuration sujitg Linux - Newbie 1 01-16-2011 10:51 AM
ntp drift file in /etc/ntp instead of /var/lib/ntp - suggestion for a patch in Slack niels.horn Slackware 16 05-07-2009 07:35 PM
synchronize ntp client rizvi_iut Linux - Newbie 6 12-08-2008 09:54 PM


All times are GMT -5. The time now is 02:38 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration