[NCLUG] NTP server question
Jeffrey D. Means
meaje at meanspc.com
Tue Feb 21 00:06:01 MST 2006
I thought my server was answering queries as to time. However when I explicity checked I found otherwise... Can someone spot my config error?
-- ntpd.conf
fudge 127.127.1.0 stratum 20
driftfile /var/lib/ntp/drift
broadcastdelay 0.008
authenticate yes
keys /etc/ntp/keys
# set clock if within 3 hours
tinker panic 10000
# Prohibit general access to this service.
restrict default ignore
# Permit all access over the loopback interface. This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
# -- CLIENT NETWORK -------
# Permit systems on this network to synchronize with this
# time service. Do not permit those systems to modify the
# configuration of this service. Also, do not use those
# systems as peers for synchronization.
restrict 192.168.0.0 mask 255.255.0.0 notrust nomodify notrap
restrict 216.17.224.192 mask 255.255.255.240 notrust nomodify notrap
restrict 216.17.224.208 mask 255.255.255.248 notrust nomodify notrap
# --- OUR TIMESOURCES -----
# or remove the default restrict line
# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict utcnist.colorado.edu mask 255.255.255.255 nomodify notrap noquery
server utcnist.colorado.edu
restrict clock-1.cs.cmu.edu mask 255.255.255.255 nomodify notrap noquery
server clock-1.cs.cmu.edu
restrict clock-2.cs.cmu.edu mask 255.255.255.255 nomodify notrap noquery
server clock-2.cs.cmu.edu
restrict tick.usnogps.navy.mil mask 255.255.255.255 nomodify notrap noquery
server tick.usnogps.navy.mil
restrict tock.usnogps.navy.mi mask 255.255.255.255 nomodify notrap noquery
SERVER tock.usnogps.navy.mi
restrict time-a.nist.gov mask 255.255.255.255 nomodify notrap noquery
server time-a.nist.gov
restrict time-b.nist.gov mask 255.255.255.255 nomodify notrap noquery
server time-b.nist.gov
restrict time-a.timefreq.bldrdoc.gov mask 255.255.255.255 nomodify notrap noquery
server time-a.timefreq.bldrdoc.gov
restrict time-b.timefreq.bldrdoc.gov mask 255.255.255.255 nomodify notrap noquery
server time-b.timefreq.bldrdoc.gov
restrict time-c.timefreq.bldrdoc.gov mask 255.255.255.255 nomodify notrap noquery
server time-c.timefreq.bldrdoc.gov
-- error message received:
[root at sahu base]# ntpdate bast.meanspc.com
20 Feb 23:53:15 ntpdate[16218]: no server suitable for synchronization found
Why can it not sync off the host as defined above?
--
Jeffrey D. Means meaje at meanspc.com
Owner / CIO for MeansPC http://www.meanspc.com/
Custom Web Development For Your Needs. (970)308-1298
- The stupidity of a stupid person is exercised in a restricted
field; the stupidity of an intelligent individual has a much broader
diffusion, and far greater effect, aided as it is by the element
of surprise.
My Public PGP Key ID is: 0x81F00126
and available via:
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x81F00126
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.nclug.org/pipermail/nclug/attachments/20060221/a5e41d6e/attachment.pgp>
More information about the NCLUG
mailing list