SUMMARY: ntp configuration and software
sun-managers@sunmanagers.ececs.uc.edu
Thanks to:
Simon-Bernard Drolet <sbdrolet@M3iSystems.com>
Carl Brewer <carl@bl.echidna.id.au>
Andrew Leonard <lists@nildp1.arme.cornell.edu>
"Bernstein, Zmira" <Zmira.Bernstein@goliath.com>
Below are the answers to how to configure ntp:
Simon-Bernard Drolet <sbdrolet@M3iSystems.com>
Hi,
In the ntp.conf file, you can set which systems are your servers
and/or
peers and setup authentication for each. You'll have to set a
ntp.keys
file on the servers and the clients. ntp use keys in that file
to
authenticate servers/peers/clients.
Here is part of my /etc/inet/ntp.conf
server servera key 1
server serverb key 2 prefer
peer peera key 1
peer peerb key 2
authenticate yes
keys /etc/inet/ntp.keys
trustedkey 1 2 3 4 5
requestkey 4
controlkey 5
And then, the /etc/inet/ntp.keys is:
# ntp keys in ASCII
#
1 A keyone.
2 A key#2
3 A andthree
4 A whyfour
5 A yepfive
Here you go!
Also, check http://www.eecis.udel.edu/~ntp/
Simon.
Carl Brewer <carl@bl.echidna.id.au>
NTP is very good at using specific servers
My config file for my local time master is attached :
server 127.127.1.0
fudge 127.127.1.0 stratum 8
server ntp.e-Secure.com.au
#server murgon.cs.mu.OZ.au
server ntp.connect.com.au
server ntp.mel.aone.net.au
driftfile /etc/ntp.drift
The 127.127.1.0 is the local host clock, so it can work as a
server for my
internal domains
Additionally, you can use shared secret keys for authentication.
For more info, see http://www.eecis.udel.edu/~ntp/
cheers
Carl
Andrew Leonard <lists@nildp1.arme.cornell.edu>
Have a look at http://www.eecis.udel.edu/~ntp/ - it should have
answers
to all your questions (and more...). In short, yes, you can
specify
which NTP servers you sync from, and if you don't control what
machines
might be broadcast NTP servers on your intranet, this is
probably a very
good idea.
I don't have a Solaris box in front of me right now to verify
this, but
I believe that NTP has been included with Solaris from 2.6 on.
best,
andy
"Bernstein, Zmira" <Zmira.Bernstein@goliath.com>
xntp is provided with Solaris 2.7 & 2.6.
In regard with setting up a client you do specify the server
from which they are going to synchronize their time from.
Zmira Bernstein
Goliath Networks Inc.
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:14:04 CDT