Distribution EOLE

root@dc2:~# diff --side-by-side /etc/ntp.conf /etc/ntpsec/ntp.conf
# /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for  |    # /etc/ntpsec/ntp.conf, configuration for ntpd; see ntp.conf(

driftfile /var/lib/ntp/ntp.drift                  |    driftfile /var/lib/ntpsec/ntp.drift
ntpsigndsocket /var/lib/samba/ntp_signd/              |    leapfile /usr/share/zoneinfo/leap-seconds.list

# Enable this if you want statistics to be logged.          |    # To enable Network Time Security support as a server, obtain
#statsdir /var/log/ntpstats/                      |    # (e.g. with Let's Encrypt), configure the paths below, and u
                                  >    # nts cert CERT_FILE
                                  >    # nts key KEY_FILE
                                  >    # nts enable

                                  >    # You must create /var/log/ntpsec (owned by ntpsec:ntpsec) to
                                  >    #statsdir /var/log/ntpsec/
#statistics loopstats peerstats clockstats            #statistics loopstats peerstats clockstats
#filegen loopstats file loopstats type day enable        #filegen loopstats file loopstats type day enable
#filegen peerstats file peerstats type day enable        #filegen peerstats file peerstats type day enable
#filegen clockstats file clockstats type day enable        #filegen clockstats file clockstats type day enable

                                  >    # This should be maxclock 7, but the pool entries count towar
                                  >    tos maxclock 11
                                  >
                                  >    # Comment this out if you have a refclock and want it to be a
                                  >    # the clock by itself (e.g. if the system is not connected to
                                  >    tos minclock 4 minsane 3
                                  >
# Specify one or more NTP servers.                # Specify one or more NTP servers.
# You do need to talk to an NTP server or two (or three).     <
server hestia.eole.lan iburst                      <

# AD member must be synchronized on domain controller only    |    # Public NTP servers supporting Network Time Security:
server 192.168.0.5 iburst                      |    # server time.cloudflare.com nts
                                  >
                                  >    # Use servers from the NTP Pool Project. Approved by Ubuntu T
                                  >    # on 2011-02-08 (LP: #104525). See https://www.pool.ntp.org/j
                                  >    # more information.
                                  >    pool 0.ubuntu.pool.ntp.org iburst
                                  >    pool 1.ubuntu.pool.ntp.org iburst
                                  >    pool 2.ubuntu.pool.ntp.org iburst
                                  >    pool 3.ubuntu.pool.ntp.org iburst
                                  >
                                  >    # Use Ubuntu's ntp server as a fallback.
                                  >    server ntp.ubuntu.com
                                  >
                                  >    # Access control configuration; see /usr/share/doc/ntpsec-doc
                                  >    # for details.
                                  >    #
                                  >    # Note that "restrict" applies to both servers and clients, s
                                  >    # that might be intended to block requests from certain clien
                                  >    # up blocking replies from your own upstream servers.

# By default, exchange time with everybody, but don't allow c    # By default, exchange time with everybody, but don't allow c
restrict -4 default kod notrap nomodify nopeer noquery limite |    restrict default kod nomodify nopeer noquery limited

# Local users may interrogate the ntp server more closely.    # Local users may interrogate the ntp server more closely.
restrict 127.0.0.1                        restrict 127.0.0.1
restrict ::1                            restrict ::1
                                  <
# Clients from this (example!) subnet have unlimited access,  <
# cryptographically authenticated.                  <
#restrict 192.168.123.0 mask 255.255.255.0 notrust          <
                                  <
# If you want to provide time to your local subnet, change th <
# (Again, the address is an example only.)              <
#broadcast 192.168.123.255                      <
                                  <
# If you want to listen to time broadcasts on your local subn <
# next lines.  Please do this only if you trust everybody on  <
#disable auth                              <
#broadcastclient                          <

If you are running the Unix Domain Member in a VM, you should consider adding tinker panic 0 to the end of the ntp.conf. This tells NTP not to panic and exit, no matter what the time offset is. This is recommended because virtual machines have no physical clock and can be paused at any time and started back up hours later. For further information see: https://www.redhat.com/en/blog/avoiding-clock-drift-vms

A ajouter au template.

Par rapport au tinker panic 0. Il a été convenu de mettre l'option tout le temps (peu de risque)