Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 Feb 2005 19:05:27 -0500
From:      David Magda <dmagda@ee.ryerson.ca>
To:        "Eli K. Breen" <eli@gopostal.ca>
Cc:        freebsd-stable@freebsd.org
Subject:   Re: Adjusting time on a secured FreeBSD machine.
Message-ID:  <64c5e2ba1167d18c672dadc0c93a0879@ee.ryerson.ca>
In-Reply-To: <42014C9B.7090609@gopostal.ca>
References:  <42014C9B.7090609@gopostal.ca>

next in thread | previous in thread | raw e-mail | index | archive | help

On Feb 2, 2005, at 16:56, Eli K. Breen wrote:

> Lastly this machine is in production and cannot be rebooted.

Stop the NTP daemon and restart it so that it uses the "-x" option. 
 From ntpd(8):

>      -x      Normally, the time is slewed if the offset is less than 
> the step
>              threshold, which is 128 ms by default, and stepped if 
> above the
>              threshold.  This option forces the time to be slewed in 
> all
>              cases.  If the step threshold is set to zero, all offsets 
> are
>              stepped, regardless of value and regardless of the -x 
> option.  In
>              general, this is not a good idea, as it bypasses the 
> clock state
>              machine which is designed to cope with large time and 
> frequency
>              errors Note: Since the slew rate is limited to 0.5 ms/s, 
> each
>              second of adjustment requires an amortization interval of 
> 2000 s.
>              Thus, an adjustment of many seconds can take hours or 
> days to
>              amortize.  This option can be used with the -q option.

When you restart it make sure it's done with all the CLI options it has 
now, with the addition of the "-x".



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?64c5e2ba1167d18c672dadc0c93a0879>