samba - Oct 2018 - problem with time sync on windows 10 clients

| My DC is a samba4.3 over Ubuntu 16.04.
| I've configured ntp in the same server.
| However > when I join a windows 10 client to my domain, this one
doesn't
| update its datetime.
| Once I logging in, I am able to set any datetime.
| And more > No matter the windows 10 client' s datetime, I can logging
in with
| any user of the Active Directory.

| I need a proper time sync in my whole domain. Any idea why it is not working?

| Thanks in advance,
| Felipe.

Hi,
on my Samba Server i use this config for the ntpd:


server 127.127.1.0
fudge  127.127.1.0 stratum 10
server 0.gentoo.pool.ntp.org iburst prefer
server 1.gentoo.pool.ntp.org iburst prefer
server 2.gentoo.pool.ntp.org iburst prefer
server 3.gentoo.pool.ntp.org iburst prefer
driftfile       /var/lib/ntp/ntp.drift
logfile /var/log/ntp
ntpsigndsocket /var/lib/samba/ntp_signd/
restrict default kod nomodify notrap nopeer mssntp
restrict 127.0.0.1
restrict [::1]

restrict 192.168.0.0 mask 255.255.255.0 nomodify nopeer notrap

restrict 0.gentoo.pool.ntp.org mask 255.255.255.255 nomodify notrap 
nopeer noquery
restrict 1.gentoo.pool.ntp.org mask 255.255.255.255 nomodify notrap 
nopeer noquery
restrict 2.gentoo.pool.ntp.org mask 255.255.255.255 nomodify notrap 
nopeer noquery
restrict 3 gentoo.pool.ntp.org mask 255.255.255.255 nomodify notrap 
nopeer noquery

tinker panic 0


Am 31.10.18 um 14:16 schrieb Felipe_G0NZÁLEZ_SANTIAG0 via
samba:
> | My DC is a samba4.3 over Ubuntu 16.04.
> | I've configured ntp in the same server.
> | However > when I join a windows 10 client to my domain, this one
doesn't
> | update its datetime.
> | Once I logging in, I am able to set any datetime.
> | And more > No matter the windows 10 client' s datetime, I can
logging in with
> | any user of the Active Directory.
> 
> | I need a proper time sync in my whole domain. Any idea why it is not
working?
> 
> | Thanks in advance,
> | Felipe.
> 
Mit freundlichen Grüßen,
René Fuchs


-- 
***********************************************
aixtema GmbH
René Fuchs
Philipsstr. 8, 52068 Aachen, Germany
Tel.: +49 241 70515-1323, Fax: +49 241 70515-15
mailto:r.fuchs at aixtema.de

WWW: http://www.aixtema.de
Shop: http://shop.aixtema.de

Geschaeftsfuehrer: Oliver Rossbruch
HRB 8201, Amtsgericht Aachen
USt.-Id-Nr. DE 210 906 744
St.-Nr. 201/5942/3737, Finanzamt Aachen Stadt
***********************************************

I guess your DC take the time from an external ntps server. But I want to serve
time from the same DC, so this is my ntp config:

#nano /etc/ntp.conf 
server 127.127.1.0 
fudge 127.127.1.0 stratum 12 
ntpsigndsocket /var/lib/samba/ntp_signd/restrict default mssntp 

___________________________________________ 
Felipe_ González_Santiago 

KNOW THAT EVERYTHING WILL HAPPEN AT JUST THE RIGHT TIME, 

AT JUST THE RIGHT PLACE, WITH JUST THE RIGHT PEOPLE 

----- Original Message -----

| Hi,
| on my Samba Server i use this config for the ntpd:

| server 127.127.1.0
| fudge 127.127.1.0 stratum 10
| server 0.gentoo.pool.ntp.org iburst prefer
| server 1.gentoo.pool.ntp.org iburst prefer
| server 2.gentoo.pool.ntp.org iburst prefer
| server 3.gentoo.pool.ntp.org iburst prefer
| driftfile /var/lib/ntp/ntp.drift
| logfile /var/log/ntp
| ntpsigndsocket /var/lib/samba/ntp_signd/
| restrict default kod nomodify notrap nopeer mssntp
| restrict 127.0.0.1
| restrict [::1]

| restrict 192.168.0.0 mask 255.255.255.0 nomodify nopeer notrap

| restrict 0.gentoo.pool.ntp.org mask 255.255.255.255 nomodify notrap
| nopeer noquery
| restrict 1.gentoo.pool.ntp.org mask 255.255.255.255 nomodify notrap
| nopeer noquery
| restrict 2.gentoo.pool.ntp.org mask 255.255.255.255 nomodify notrap
| nopeer noquery
| restrict 3 gentoo.pool.ntp.org mask 255.255.255.255 nomodify notrap
| nopeer noquery

| tinker panic 0

| Am 31.10.18 um 14:16 schrieb Felipe_G0NZÁLEZ_SANTIAG0 via samba:
| > | My DC is a samba4.3 over Ubuntu 16.04.
| > | I've configured ntp in the same server.
| > | However > when I join a windows 10 client to my domain, this one
doesn't
| > | update its datetime.
| > | Once I logging in, I am able to set any datetime.
| > | And more > No matter the windows 10 client' s datetime, I can
logging in
| > | with
| > | any user of the Active Directory.
| >
| > | I need a proper time sync in my whole domain. Any idea why it is not
| > | working?
| >
| > | Thanks in advance,
| > | Felipe.
| >

| Mit freundlichen Grüßen,
| René Fuchs

| --
| ***********************************************
| aixtema GmbH
| René Fuchs
| Philipsstr. 8, 52068 Aachen, Germany
| Tel.: +49 241 70515-1323, Fax: +49 241 70515-15
| mailto:r.fuchs at aixtema.de

| WWW: http://www.aixtema.de
| Shop: http://shop.aixtema.de

| Geschaeftsfuehrer: Oliver Rossbruch
| HRB 8201, Amtsgericht Aachen
| USt.-Id-Nr. DE 210 906 744
| St.-Nr. 201/5942/3737, Finanzamt Aachen Stadt
| ***********************************************

| --
| To unsubscribe from this list go to the following URL and read the
| instructions: https://lists.samba.org/mailman/options/samba

Hai, 

I know, im not the best in english, but i've updated the time sync page on
the wiki.
If someone can check it and update where needed.

I've added this part. 
https://wiki.samba.org/index.php/Time_Synchronisation#Requirements_2 

And 
https://wiki.samba.org/index.php/Time_Synchronisation#Set_up_time_with_systemd-timesyncd_on_a_Unix_Domain_Member


Greetz, 

Louis