[Samba] Samba4 Windows Client Time Sync Issue

Marco Shmerykowsky PE
Mon, 26 Jun 2023 15:10:41 -0000

On 6/24/2023 5:23 PM, Andrey Repin wrote:
> Hello Marco Shmerykowsky PE,
>
> Friday, June 23, 2023, 6:32:38 PM, you wrote:
>
>> I just realized that some of my Windows 10 clients do
>> not appear to be syncing the time correctly.
>
>> I setup NTP to run on my Netgate PFSense server.  It is
>> using pfsense.pool.ntp.org Time Servers.  I configured NTP
>> on my Samba servers to point to back to the PFSense Server.
>
>> NTP on the samba servers have the following ntp.conf files:
>
>> # /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help
>
>> driftfile /var/lib/ntp/ntp.drift
>
>> statistics loopstats peerstats clockstats
>> filegen loopstats file loopstats type day enable
>> filegen peerstats file peerstats type day enable
>> filegen clockstats file clockstats type day enable
>
>> server PFSENSE-SERVER iburst
>
> Write full DNS name here for clarity, or use IP address if name resolution
> could fail.
>
>> restrict -4 default kod notrap nomodify nopeer noquery limited
>> restrict -6 default kod notrap nomodify nopeer noquery limited
>
>> restrict 127.0.0.1
>> restrict ::1
>
>> restrict source notrap nomodify noquery
>
>> Should this be working? If not what should I be correcting?
>
> For win10 clients, reset and restart w32tm service.
>
> w32tm /unregister
> w32tm /register
> w32tm /config ...
>
>

The ip address is specified in the config files.
I just "redacted" it for the post.

The win32tm commands above didn't change anything.  The client computers
that are not syncing report "Local CMOS Clock" in response to the
command "w32tm /query /source".  The machines where the clock is
syncing report:

ip_address_of_NTP_Server,0x9

Another point.  The Samba wiki notes to set

ntpsigndsocket /usr/local/samba/var/lib/ntp_signd/

in the ntp.conf file.  I don't have that line in the config files, but
'netstat -xpln|grep signd' des return something:

unix  2      [ ACC ]     STREAM     LISTENING     106800290 32101/samba:
task[n  /var/lib/samba/ntp_signd/socket