On Fri, Jun 8, 2018 at 12:25 PM Rowland Penny via samba <samba at lists.samba.org> wrote:> > > I have update the Time Synchronisation Wikipage: > > https://wiki.samba.org/index.php/Time_Synchronisation > > It now includes information for the 'chrony' time server. > > If you spot any errors or omissions, or if you think that something > could be said better, please report back ;-) > > Could I also thank Louis Van Belle for proofreading the page. > > Rowland >Hi Rowland, Many thanks for all your help to Samba Users, much appreciated. I had a look at your new WiKi page and noticed this statement which immediately raised questions in my mind: "By default domain joined Windows clients synchronize their clock via NT5DS with the AD-DC which holds the PDC-emulator FSMO role." I had always thought that Windows domain members used any DC providing Time Services, and didn't necessarily contact the DC holding the PDC emulator role. The Microsoft article which you cite in the para "Default time source" actually confirms this. Did you find another document which says clients always seek out the PDC Emulator DC? There are also a couple of typo's I've spotted: transfer (not tranfer) and "Deciding" doesn't need to be capitalised in the Introduction. Cheers, Roy
On Tue, 12 Jun 2018 20:10:21 +0100 Roy Eastwood via samba <samba at lists.samba.org> wrote:> On Fri, Jun 8, 2018 at 12:25 PM Rowland Penny via samba > <samba at lists.samba.org> wrote: > > > > > > I have update the Time Synchronisation Wikipage: > > > > https://wiki.samba.org/index.php/Time_Synchronisation > > > > It now includes information for the 'chrony' time server. > > > > If you spot any errors or omissions, or if you think that something > > could be said better, please report back ;-) > > > > Could I also thank Louis Van Belle for proofreading the page. > > > > Rowland > > > > Hi Rowland, > Many thanks for all your help to Samba Users, much appreciated. I > had a look at your new WiKi page and noticed this statement which > immediately raised questions in my mind: > > "By default domain joined Windows clients synchronize their clock via > NT5DS with the AD-DC which holds the PDC-emulator FSMO role." > > I had always thought that Windows domain members used any DC > providing Time Services, and didn't necessarily contact the DC > holding the PDC emulator role. The Microsoft article which you cite > in the para "Default time source" actually confirms this. Did > you find another document which says clients always seek out the PDC > Emulator DC?To be honest, I do not have a clue, the line you refer to is an hold-over from the old wikipage. The reason that I don't have a clue is a fairly reasonable one, I don't have any Windows clients ;-) I do have Windows in VM's which I start from time to time and they seem to work okay. The info I found seems to point towards Windows clients being able to use any DC as a time server, so lets throw it open. Can anybody provide proof that Windows must use the PDC emulator DC as the time server ???> > There are also a couple of typo's I've spotted: transfer (not > tranfer) and "Deciding" doesn't need to be capitalised in the > Introduction.The first one is mine, but the second is another hold-over, but I will fix them. Thanks for the feedback ;-) Rowland
According to my current experience with my Active Directory domain which includes a Windows Server 2012R2 DC with PDC Emulator DC and a newly added Samba DC: part of windows AD clients sync time with PDC Emulator DC and part with Samba DC that doesn't hold any FSMO role. I can see windows which clients syncing time with Samba DC when I run command: "chronyc clients". And I can see which DC Windows client connected to when I run "net time" command at Windows AD clients. So IMHO Roy's considerations are well based. But I can't figure out how can one receive list of all AD domain clients by DC they are connected to. On Tue, Jun 12, 2018 at 10:11 PM Roy Eastwood via samba <samba at lists.samba.org> wrote:> > On Fri, Jun 8, 2018 at 12:25 PM Rowland Penny via samba > <samba at lists.samba.org> wrote: > > > > > > I have update the Time Synchronisation Wikipage: > > > > https://wiki.samba.org/index.php/Time_Synchronisation > > > > It now includes information for the 'chrony' time server. > > > > If you spot any errors or omissions, or if you think that something > > could be said better, please report back ;-) > > > > Could I also thank Louis Van Belle for proofreading the page. > > > > Rowland > > > > Hi Rowland, > Many thanks for all your help to Samba Users, much appreciated. I had a look > at your new WiKi page and noticed this statement which immediately raised > questions in my mind: > > "By default domain joined Windows clients synchronize their clock via NT5DS with > the AD-DC which holds the PDC-emulator FSMO role." > > I had always thought that Windows domain members used any DC providing Time > Services, and didn't necessarily contact the DC holding the PDC emulator role. > The Microsoft article which you cite in the para "Default time source" actually > confirms this. Did you find another document which says clients always > seek out the PDC Emulator DC? > > There are also a couple of typo's I've spotted: transfer (not tranfer) and > "Deciding" doesn't need to be capitalised in the Introduction. > > Cheers, > > Roy > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-- Alexei Rozenvaser
Hai, https://docs.microsoft.com/en-us/windows-server/networking/windows-time-service/how-the-windows-time-service-works Look in the above link, search for "Time Synchronization in an AD DS Hierarchy". There you find the PDC Emulator role. In the piramide. ;-) This one explains even better then the technet link. It also explains Alexei's question i believe. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Alexei Rozenvaser via samba > Verzonden: dinsdag 12 juni 2018 21:44 > Aan: spindles7 at gmail.com > CC: samba at lists.samba.org > Onderwerp: Re: [Samba] Samba Time Synchronisation wikipage > > According to my current experience with my Active Directory domain > which includes a Windows Server 2012R2 DC with PDC Emulator DC and a > newly added Samba DC: part of windows AD clients sync time with PDC > Emulator DC and part with Samba DC that doesn't hold any FSMO role. > I can see windows which clients syncing time with Samba DC when I run > command: "chronyc clients". > And I can see which DC Windows client connected to when I run "net > time" command at Windows AD clients. > So IMHO Roy's considerations are well based. > > But I can't figure out how can one receive list of all AD domain > clients by DC they are connected to. > On Tue, Jun 12, 2018 at 10:11 PM Roy Eastwood via samba > <samba at lists.samba.org> wrote: > > > > On Fri, Jun 8, 2018 at 12:25 PM Rowland Penny via samba > > <samba at lists.samba.org> wrote: > > > > > > > > > I have update the Time Synchronisation Wikipage: > > > > > > https://wiki.samba.org/index.php/Time_Synchronisation > > > > > > It now includes information for the 'chrony' time server. > > > > > > If you spot any errors or omissions, or if you think that > something > > > could be said better, please report back ;-) > > > > > > Could I also thank Louis Van Belle for proofreading the page. > > > > > > Rowland > > > > > > > Hi Rowland, > > Many thanks for all your help to Samba Users, much > appreciated. I had a look > > at your new WiKi page and noticed this statement which > immediately raised > > questions in my mind: > > > > "By default domain joined Windows clients synchronize their > clock via NT5DS with > > the AD-DC which holds the PDC-emulator FSMO role." > > > > I had always thought that Windows domain members used any > DC providing Time > > Services, and didn't necessarily contact the DC holding the > PDC emulator role. > > The Microsoft article which you cite in the para "Default > time source" actually > > confirms this. Did you find another document which > says clients always > > seek out the PDC Emulator DC? > > > > There are also a couple of typo's I've spotted: transfer > (not tranfer) and > > "Deciding" doesn't need to be capitalised in the Introduction. > > > > Cheers, > > > > Roy > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > > > -- > Alexei Rozenvaser > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
On Wed, 13 Jun 2018 08:36:36 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:> Hai, > > https://docs.microsoft.com/en-us/windows-server/networking/windows-time-service/how-the-windows-time-service-works > > Look in the above link, search for "Time Synchronization in an AD DS > Hierarchy". There you find the PDC Emulator role. In the > piramide. ;-) This one explains even better then the technet link. > > It also explains Alexei's question i believe. >Yes it shows that the PDC emulator DC is the one that gets the time from an external time server. The other DC's get their time from the PDC emulator DC, but it quite clearly says a workstation (and I quote) 'Can synchronize with any domain controller in its own domain' So, by my reading, workstations do not have to use the PDC emulator DC, they can use any DC. DC's MUST use the PDC emulator DC as their time server, but can be set up to take over the PDC emulator role. If we can agree, I will alter the wiki page again. Rowland
Hai,> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland Penny via samba > Verzonden: woensdag 13 juni 2018 8:49 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Samba Time Synchronisation wikipage > > Yes it shows that the PDC emulator DC is the one that gets the time > from an external time server. The other DC's get their time from the > PDC emulator DC, but it quite clearly says a workstation (and I quote) > 'Can synchronize with any domain controller in its own domain' > > So, by my reading, workstations do not have to use the PDC > emulator DC, they can use any DC.Yes.> DC's MUST use the PDC emulator DC as their time server, but can be set > up to take over the PDC emulator role.Yes. The part Time Source Selection, is exact what you want to put in the wiki, but then less words. ;-)> > If we can agree, I will alter the wiki page again. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >I agree, you alter the wiki :-). Greetz, Louis