Why can't clients get the time from my NTP box?

kf4otn · 05-27-2006, 11:13 AM

I set up my RH box to be an NTP server. It is going out and getting the time from three other NTP boxes and is gathering the time appropriately.

I only intend to use this for my home network. The RH box has a static IP and I configured my XP laptop to look at that particular IP for the time. I get an EventID 29 error which says:
"The time provider NtpClient is configured to acquire time form one or more time sources, however none of the sources are currently accessible. ..."

Why is it not getting the time from my local box? Is there another service I'm suppose to enable?

GL1800 · 05-27-2006, 02:27 PM

I'm doing this here, but it's linux boxes. All I can think of is port 123 must be able to communicate within your LAN. Perhaps?

kf4otn · 05-27-2006, 02:31 PM

Quote:

Originally Posted by GL1800

I'm doing this here, but it's linux boxes. All I can think of is port 123 must be able to communicate within your LAN. Perhaps?

That is what I was thinking as well, HOWEVER, when I check my entries in iptables it is basically allowing everything (right now). There wasn't anything in there that I could see as blocking that port, specifically.

There isn't anything to configure for clients to be able to connect, is there?

GL1800 · 05-27-2006, 02:44 PM

No, I haven't done anything to cause that to happen. At least, not that I recall.

It "just worked".
There's a file /etc/ntp.conf which you might have a look at.

kf4otn · 05-27-2006, 03:34 PM

Below is my ntp.conf file. I can't see anything in there that would prevent my clients from connecting. Of course I'm a newbie so I may be missing something easy.

Quote:

[root@localhost ~]# cat /etc/ntp.conf
# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.

restrict default nomodify notrap noquery

# Permit all access over the loopback interface. This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1

# -- CLIENT NETWORK -------
# Permit systems on this network to synchronize with this
# time service. Do not permit those systems to modify the
# configuration of this service. Also, do not use those
# systems as peers for synchronization.
restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap

# --- OUR TIMESERVERS -----
server 0.us.pool.ntp.org
server 1.us.pool.ntp.org
server 2.us.pool.ntp.org

# --- NTP MULTICASTCLIENT ---
#multicastclient # listen on default 224.0.1.1
# restrict 224.0.1.1 mask 255.255.255.255 nomodify notrap
# restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap

# --- GENERAL CONFIGURATION ---
#
# Undisciplined Local Clock. This is a fake driver intended for backup
# and when no outside source of synchronized time is available. The
# default stratum is usually 3, but in this case we elect to use stratum
# 0. Since the server line does not have the prefer keyword, this driver
# is never used for synchronization, unless no other other
# synchronization source is available. In case the local host is
# controlled by some external source, such as an external oscillator or
# another protocol, the prefer keyword would cause the local host to
# disregard all other synchronization sources, unless the kernel
# modifications are in use and declare an unsynchronized condition.
#
server 127.127.1.0
fudge 127.127.1.0 stratum 10

#
# Drift file. Put this in a directory which the daemon can write to.
# No symbolic links allowed, either, since the daemon updates the file
# by creating a temporary in the same directory and then rename()'ing
# it to the file.
#
driftfile /var/lib/ntp/drift
broadcastdelay 0.008

#
# Keys file. If you want to diddle your server at run time, make a
# keys file (mode 600 for sure) and define the key number to be
# used for making requests.
#
# PLEASE DO NOT USE THE DEFAULT VALUES HERE. Pick your own, or remote
# systems might be able to reset your clock at will. Note also that
# ntpd is started with a -A flag, disabling authentication, that
# will have to be removed as well.
#
keys /etc/ntp/keys
#restrict 0.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery
#restrict 1.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery
#restrict 2.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery
#server us.pool.ntp.org
#restrict us.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery
#broadcastclient