Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 8 Jun 2008 22:10:27 +1000
From:      Peter Jeremy <peterjeremy@optushome.com.au>
To:        xorquewasp@googlemail.com
Cc:        freebsd-hackers@freebsd.org
Subject:   Re: ntpd jail problem
Message-ID:  <20080608121027.GF67629@server.vk2pj.dyndns.org>
In-Reply-To: <20080608103254.GA99569@logik.internal.network>
References:  <20080608103254.GA99569@logik.internal.network>

next in thread | previous in thread | raw e-mail | index | archive | help

--ibvzjYYg+QDzMCy1
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2008-Jun-08 11:32:54 +0100, xorquewasp@googlemail.com wrote:
>I'm running an openntpd instance on the host machine, which syncs the
>clock from the pool at pool.ntp.org. From the log output, ntpd claims to
>be synced and the time does seem to be correct.
>
>I'm then running another openntpd in a jail which doesn't set the time,
>just serves it to clients.

I've never used openntpd but for the base ntpd, you should be able to
just use 'server 127.127.1.0' to make it trust (and not alter) the
base system time.  Note that this openntpd will not have access to the
stratum information from the main ntpd but will have a fixed value and
may need to be adjusted using a 'fudge' command (or equivalent).

I'd be interested in knowing why you chose this approach rather than
just syncing clients to the [open]ntpd instance in the host machine.

--=20
Peter Jeremy
Please excuse any delays as the result of my ISP's inability to implement
an MTA that is either RFC2821-compliant or matches their claimed behaviour.

--ibvzjYYg+QDzMCy1
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (FreeBSD)

iEYEARECAAYFAkhLzDMACgkQ/opHv/APuIfBuQCeM5Vrs9JBXEJ79RYyMFSMTkMI
qaUAnjfY4uv/Qn1eu58vorq22XSIN16s
=EVsI
-----END PGP SIGNATURE-----

--ibvzjYYg+QDzMCy1--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080608121027.GF67629>