Edit Cómo configurar un servidor NTP (y sus clientes) en Linux

Title:

Last edited: 6:45:46 pm on 18 June 2007 by salchicha.sico.local

! Poner un servidor de NTP en una red usando debian

Si el servidor no tiene conexión a internet
Según *este mensaje>http://archives.postgresql.org/pgsql-es-ayuda/2005-01/msg00552.php*, la única manera de poner un servidor "aislado" es usando el <tt>*chrony>http://chrony.sunsite.dk*</tt> (por mucho que en las lista del ntpd digan lo contrario, resulta que en el ntpd es código sin probar...).

Procedimiento:
# Instalar el chrony: <tt># apt-get install chrony</tt>
# Configurar la red a la que se quiere dar servicio (p.ej. a la 12.x.x.x): <tt># sed -i "/^allow 10.8/iallow 12/8" /etc/chrony/chrony.conf
# Rearrancar el servidor <tt># /etc/init.d/chrony restart</tt>

_
 Si el servidor tiene conexión a internet
En el servidor hay que instalar ntp-simple, sin poner nada en el <tt>/etc/ntp.conf</tt>

En los clientes hay que instalarlo también, pero esta vez sí que hay que configurar el <tt>/etc/ntp.conf</tt>, tal y como se explica abajo (pero poniendo el hostname del servidor que has configurado en vez del que ahí dicen).

Set up a time server for clients on a LAN
(taken from *google cache of a page in bryanconsulting.com>http://www.google.es/search?q=cache:K38tMBG_F7YJ:linux.bryanconsulting.com/stories/storyReader%24179+how+to+set+up+ntp&hl=es&ie=UTF-8*)

For the servers that sync with the outside, put these two lines in your <tt>/etc/ntp.conf</tt> (the other lines in the file are probably correct and should be left alone):

= server ntp-0.cso.uiuc.edu 
= server ntp-1.mcs.anl.gov

You can get a list of public NTP (stratum 2 or 3) servers at *http://www.eecis.udel.edu/~mills/ntp/clock2.htm*. People report excellent results with <tt>tick.usno.navy.mil</tt> and <tt>tock.usno.navy.mil</tt>, but you really shouldn't use those, since they're stratum 1 servers.

When you're done, the server has this in its </tt>/etc/ntp.conf</tt>:

|<tt>server ntp2.cs.wisc.edu server ntp-1.cso.uiuc.edu driftfile /etc/ntp/drift|

Before we start the NTP daemon, run <tt>ntpdate</tt> from the command line to set the initial date and time, otherwise it will take forever for the daemon to get the clock set to the correct time. Of course, if you have something time-sensitive running on your computer, be careful.

Then just start NTP:

= /etc/init.d/ntp restart

On the clients, change the server lines in <tt>/etc/ntp.conf</tt> to point to your new (level 3) servers and start NTP on them.

The <tt>ntpdc</tt> utility will come in handy to make sure that the daemon is communicating with your upstream time servers. Within <tt>ntpdc</tt>, the <tt>monlist</tt> command will give a list of hosts and stats.

For any other questions, head over to the main source of NTP info at *http://www.ntp.org/* or check out *http://www.eecis.udel.edu/~ntp/documentation.html* 
_
! Muy importante: quitar el nopeer del /etc/ntp.conf

Según *esta página>http://ftp.cl.debian.org/man-es/ntp.html*, la única cosa importante si se es servidor, es quitar de las líneas donde aparezca la palabra clave "<tt>nopeer</tt>".
_
Notas sobre las pruebas realizadas entre frontml03 y pboadilla:
+^_@
_
<tt>Monday, 18 June 2007, 6:30:14 pm</tt>
Al final la solución pasaba por usar el chrony Y es la única solución, por lo que parece, ya que con el chrony sí hay informes de éxito, mientras que con el ntpd sólo hay preguntas (y nadie informa que haya conseguido ponerlo).
_
<tt>Monday, 18 June 2007, 5:51:32 pm</tt>
LocalRefClocks *Este mensaje pregunta justo lo que necesitamos>http://lists.ntp.isc.org/pipermail/questions/2007-January/012438.html*, y la respuesta es que *configures un LocalRefclocks>http://ntp.isc.org/Support/ConfiguringLocalRefclocks*. A ver qué tal. Porque ya he configurado el modo orphan y no parece que vaya muy bien...
<blockquote>In the default mode the behavior of the clock selection algorithm is modified when this driver is in use. The algorithm is designed so that this driver will never be selected unless no other discipline source is available. This can be overridden with the prefer keyword of the server configuration command, in which case only this driver will be selected for synchronization and all other discipline sources will be ignored. This behavior is intended for use when an external discipline source controls the system clock. See the Mitigation Rules and the prefer Keyword page for a detailed description of the exact behavior.
</blockquote>

_
<tt>Wednesday, 6 June 2007, 7:26:57 pm</tt>
Orphan mode sample configuration En *este post>http://lists.ntp.isc.org/pipermail/hackers/2007-March/002809.html*:
This is a working minimal broadcast configuration for participants in an
orphan group (orphange?) on the 192.168.0.0/24 network:

"client" /etc/ntp.conf:
<table border=1><tr><td><tt>
driftfile /var/lib/ntp/ntp.drift
keys /etc/ntp.keys
trustedkey 1
tos orphan 5
broadcastclient
broadcast 192.168.0.255 key 1
</tt></td></tr></table>

"server" /etc/ntp.conf:
<table border=1><tr><td><tt>
driftfile /var/lib/ntp/ntp.drift
keys /etc/ntp.keys
trustedkey 1
tos orphan 5
broadcastclient
broadcast 192.168.0.255 key 1
server pool.ntp.org iburst
server pool.ntp.org iburst
server pool.ntp.org iburst
server pool.ntp.org iburst
</tt></td></tr></table>

/etc/ntp.keys:
<table border=1><tr><td><tt>
1 M password
</tt></td></tr></table>

_
<tt>Tuesday, 5 June 2007, 7:38:51 pm</tt>
Importante: "tos orphan stratum" Ver *este post>http://lists.ntp.isc.org/pipermail/questions/2007-March/013524.html*.
_
<tt>Tuesday, 5 June 2007, 7:26:55 pm</tt>
Alternativa: usar el chrony en vez del ntp
_
<tt>Tuesday, 5 June 2007, 7:26:39 pm</tt>
Hacer que Debian no toque el reloj hardware Se hace con *lo siguiente>http://linux.derkeiler.com/Mailing-Lists/Debian/2004-08/3537.html*:
<tt>/etc/default/rcS</tt>
<table border=1><tr><td>HWCLOCKACCESS=no</td></tr></table>
_
<tt>Tuesday, 5 June 2007, 7:05:17 pm</tt>
Intentando instalar el NTP en frontml02/03 Según *este mensaje>http://linux.derkeiler.com/Mailing-Lists/Debian/2004-06/3613.html*, hay que tener instalado <tt>ntp ntp-simple ntpdate</tt>. Los instalo con: <tt># dpkg -i /var/cache/apt/archives/ntp_4.2.2.p4+dfsg-2_i386.deb /var/cache/apt/archives/ntpdate_4.2.2.p4+dfsg-2_i386.deb /var/cache/apt/archives/ntp-simple_4.2.2.p4+dfsg-2_all.deb</tt>

- lock this page
- enter new password
- reenter same password

Send e-mail alerts to these addresses upon next save: