When I run ntpq -p from my web server I get

10.0.0.22 .INIT. 16u -1024 0 0.000 0.00 0.00




When I look on my NTP server I see this in the logs:

NTP packet received from unauthorised host 10.0.0.26 port 123

The NTP ports are open on both machines.




Here is the config on the NTP server:


driftfile /var/lib/ntp/drift


restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery

restrict 127.0.0.1
restrict -6 ::1


restrict 10.0.0.0 mask 255.255.255.0


server 0.fedora.pool.ntp.org iburst
server 1.fedora.pool.ntp.org iburst
server 2.fedora.pool.ntp.org iburst
server 3.fedora.pool.ntp.org iburst


restrict 0.fedora.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery
restrict 1.fedora.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery
restrict 2.fedora.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery
restrict 3.fedora.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery


# Enable public key cryptography.
#crypto

includefile /etc/ntp/crypto/pw

# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
keys /etc/ntp/keys
# Specify the key identifiers which are trusted.
#trustedkey 4 8 42

# Specify the key identifier to use with the ntpdc utility.
#requestkey 8

# Specify the key identifier to use with the ntpq utility.
#controlkey 8

# Enable writing of statistics records.
#statistics clockstats cryptostats loopstats peerstats

Are these physical or virtual machines?
On the client machine stop ntp and run the command ntpdate -du 10.0.0.22

Is the server time synched? From the posted results of ntpq it only appears to be a stratum 16 which is not good enough for the client to use. Please post the client's ntp.conf. Try changing the server confuration from

restrict 10.0.0.0 mask 255.255.255.0
to
restrict 10.0.0.0 mask 255.255.255.0 nomodify notrap

The ntp server is a physical server the client seeking ntp sync is a Xen domu. I used to have the "nomodify notrap" on that line but when I first tried to fix this I saw in an old post that some fedora builds wont accept that. I'll go ahead and try adding that back and see what happens. Ill reply here when I try.

Is the server synched to the outside world? Post the output of ntpq -p from it. I have not played with Xen but is the host synced to NTP?