четверг, 12 декабря 2013 г.

Настройка NTP - сервера



Сервер

#aptitude install ntp ntpdate

Конфиг сервера:

#/etc/ntp.conf, configuration for ntpd

driftfile /var/lib/ntp/ntp.drift
 
statsdir /var/log/ntpstats/

statistics loopstats peerstats clockstats
filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable
filegen clockstats file clockstats type day enable

# You do need to talk to an NTP server or two (or three).
#server ntp.your-provider.example

# pool.ntp.org maps to more than 300 low-stratum NTP servers.
# Your server will pick a different set every time it starts up.
# *** Please consider joining the pool! ***
# *** ***
#server 0.debian.pool.ntp.org iburst dynamic
#server 1.debian.pool.ntp.org iburst
dynamic
#server 2.debian.pool.ntp.org iburst dynamic
#server 3.debian.pool.ntp.org iburst dynamic

server ntp-server-1 iburst dynamic
server ntp-server-2 iburst dynamic

server 127.127.1.0 # local clock
#fudge 127.127.1.0 stratum 10
restrict 127.127.1.0
 

# By default, exchange time with everybody, but don't allow configuration.
# See /usr/share/doc/ntp-doc/html/accopt.html for details.
restrict -4 default kod notrap nomodify nopeer noquery
restrict -6 default kod notrap nomodify nopeer noquery

# Local users may interrogate the ntp server more closely.
restrict 127.0.0.1
restrict ::1

# Clients from this (example!) subnet have unlimited access,
# but only if cryptographically authenticated
#restrict 192.168.123.0 mask 255.255.255.0 notrust

# If you want to provide time to your local subnet, change the next line.
# (Again, the address is an example only.)
#broadcast 192.168.123.255

# If you want to listen to time broadcasts on your local subnet,
# de-comment the next lines. Please do this only if you trust everybody
# on the network!
#disable auth
#broadcastclient


Перезапуск службы времени

#/etc/init.d/ntp stop
#/etc/init.d/ntp start


P.S. В течение некоторого времени после запуска параметр stratum сервера времени будет слишком велик, для того, чтобы клиенты "захотели" синхронизировать свое время от него. Stratum (уровень) это число от 1 до 16, указывающее на точность сервера.



Клиент


#aptitude install ntp ntpdate



Конфиг клиента

#/etc/ntp.conf
server ntp-server-3 iburst burst
restrict ntp-server-3 nomodify noquery notrap ntpport nopeer
Перезапуск службы времени

#/etc/init.d/ntp stop
#/etc/init.d/ntp start


Источник
http://www.debianadmin.com/ntp-server-and-client-configuration-in-debian.html

Комментариев нет:

Отправить комментарий