samba - Feb 2020 - NTP configuration

On Wednesday, 5 February 2020 13:11:27 PST Rowland penny via samba
wrote:
> No, sorry, but your client needs to have the same time as the DC (+/- 5 
> mins), so if you haven't installed an NTP client, I suggest you do.
Speaking of which, any suggestions on what's the best way to found out which
NTP servers the client should be tuned to in AD DS? From what I understand, they
are not necessarily the same hosts as the actual DCs, but I can't seem to
find any specific info on how I can discover the NTP servers to use.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL:
<http://lists.samba.org/pipermail/samba/attachments/20200206/2255b902/signature.sig>

On 06/02/2020 19:27, Alexey A Nikitin wrote:
> On Wednesday, 5 February 2020 13:11:27 PST Rowland penny via samba wrote:
>> No, sorry, but your client needs to have the same time as the DC (+/- 5
>> mins), so if you haven't installed an NTP client, I suggest you do.
> Speaking of which, any suggestions on what's the best way to found out
which NTP servers the client should be tuned to in AD DS? From what I
understand, they are not necessarily the same hosts as the actual DCs, but I
can't seem to find any specific info on how I can discover the NTP servers
to use.
Have you read this:

https://wiki.samba.org/index.php/Time_Synchronisation

Where there is this:

*Recommended best practise*

internet time server
           ^
           |
           |
   PDC Emulator DC
    ^         ^
    |         |
    |         |
Other DC <----Workstation

Rowland

I humbly admit that my google-fu must be not up to the task, as my prior
attempts at finding out where I can find NTP servers did not yield any useable
results. But with this article you referenced I was able to find articles on MS
Docs
(https://docs.microsoft.com/en-us/windows-server/networking/windows-time-service/how-the-windows-time-service-works)
and MS TechNet
(https://social.technet.microsoft.com/wiki/contents/articles/50924.active-directory-time-synchronization.aspx)
that appear to confirm I can simply use the DCs as the NTP servers.

Thanks!


On Thursday, 6 February 2020 11:49:50 PST Rowland penny via samba
wrote:
> On 06/02/2020 19:27, Alexey A Nikitin wrote:
> > On Wednesday, 5 February 2020 13:11:27 PST Rowland penny via samba
wrote:
> >> No, sorry, but your client needs to have the same time as the DC
(+/- 5
> >> mins), so if you haven't installed an NTP client, I suggest
you do.
> > Speaking of which, any suggestions on what's the best way to found
out which NTP servers the client should be tuned to in AD DS? From what I
understand, they are not necessarily the same hosts as the actual DCs, but I
can't seem to find any specific info on how I can discover the NTP servers
to use.
> 
> Have you read this:
> 
> https://wiki.samba.org/index.php/Time_Synchronisation
> 
> Where there is this:
> 
> *Recommended best practise*
> 
> internet time server
>            ^
>            |
>            |
>    PDC Emulator DC
>     ^         ^
>     |         |
>     |         |
> Other DC <----Workstation
> 
> Rowland
> 
> 
> 
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL:
<http://lists.samba.org/pipermail/samba/attachments/20200206/a877f12e/signature.sig>