Scénario #12188: Mise à niveau de la configuration NTP - eole-common - Ensemble Ouvert Libre Évolutif

Scénario #12188

Mise à niveau de la configuration NTP

Added by Emmanuel GARETTE almost 8 years ago. Updated over 7 years ago.

Status:

Terminé (Sprint)

Priority:

Normal

Assigned To:

Category:

Version mineure

Target version:

Distribution EOLE - Sprint 2015 49-51 - Équipe MENESR

Start date:

11/13/2015

Due date:

12/18/2015

% Done:

100%

Estimated time:

(Total: 2.00 h)

Spent time:

(Total: 2.08 h)

Story points:

2.0

Remaining (hours):

0.00 hour

Velocity based estimate:

Release:

EOLE 2.5.2

Release relationship:

Auto

Description

La configuration de NTP est évolué sur Ubuntu.

Notre fichier de configuration n'est plus adapté et génère des erreurs dans les logs :

Jun 25 09:28:45 zephir.ac-test.lan ntpd_intres²⁵³⁵: message repeated 10 times: [ ntp_intres.request: permission denied]

Subtasks

History

#1 Updated by Joël Cuissinat over 7 years ago

Tracker changed from Anomalie to Scénario
Subject changed from Erreur récurente sur NTP to Erreur récurente sur NTP à étudier
Start date deleted (~~06/25/2015~~)
Release set to EOLE 2.5.1

#2 Updated by Emmanuel GARETTE over 7 years ago

A priori ce n'est pas un problème bloquant : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=571469

The nomodify will only be a problem in case the resolver process
needs to be started, which it does when it can't resolve the
hostsnames when ntpd starts.  So this is mostly when the network
isn't up yet.

Pour éviter ce problème il faudrait remplacer

restrict 127.0.0.1 nomodify

Par :

restrict 127.0.0.1
restrict ::1<pre>

#3 Updated by Emmanuel GARETTE over 7 years ago

Voici le fichier par défaut de ubuntu :

# /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help

driftfile /var/lib/ntp/ntp.drift

# Enable this if you want statistics to be logged.
#statsdir /var/log/ntpstats/

statistics loopstats peerstats clockstats
filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable
filegen clockstats file clockstats type day enable

# Specify one or more NTP servers.

# Use servers from the NTP Pool Project. Approved by Ubuntu Technical Board
# on 2011-02-08 (LP: #104525). See http://www.pool.ntp.org/join.html for
# more information.
server 0.ubuntu.pool.ntp.org
server 1.ubuntu.pool.ntp.org
server 2.ubuntu.pool.ntp.org
server 3.ubuntu.pool.ntp.org

# Use Ubuntu's ntp server as a fallback.
server ntp.ubuntu.com

# Access control configuration; see /usr/share/doc/ntp-doc/html/accopt.html for
# details.  The web page <http://support.ntp.org/bin/view/Support/AccessRestrictions>
# might also be helpful.
#
# Note that "restrict" applies to both servers and clients, so a configuration
# that might be intended to block requests from certain clients could also end
# up blocking replies from your own upstream servers.

# By default, exchange time with everybody, but don't allow configuration.
restrict -4 default kod notrap nomodify nopeer noquery
restrict -6 default kod notrap nomodify nopeer noquery

# Local users may interrogate the ntp server more closely.
restrict 127.0.0.1
restrict ::1

# Clients from this (example!) subnet have unlimited access, but only if
# cryptographically authenticated.
#restrict 192.168.123.0 mask 255.255.255.0 notrust

# If you want to provide time to your local subnet, change the next line.
# (Again, the address is an example only.)
#broadcast 192.168.123.255

# If you want to listen to time broadcasts on your local subnet, de-comment the
# next lines.  Please do this only if you trust everybody on the network!
#disable auth
#broadcastclient