samba - Aug 2023 - Samba domain time sync woes (Debian Bookworm)

On 09.08.2023 10:32, Rowland Penny via samba wrote:
>
>
> On 09/08/2023 09:26, Peter Milesson via samba wrote:
>>
>>
>> On 09.08.2023 10:08, Luis Peromarta via samba wrote:
>>> I had the impression (out of NTP/ chrony config of DCs) they were 
>>> getting time from upstream NTP servers ?
>>>
>>> LP
>>> On 9 Aug 2023 at 09:52 +0200, samba at lists.samba.org, wrote:
>>>> the DCs get
>>>> their time from the DC with the PDC_Emulator FSMO role.
>> Hi,
>>
>> I have checked up which one of my 2 DCs (Debian Bookworm, Samba 
>> 4.17.9) that has got the FSMO roles. The one with the FSMO roles does 
>> not supply time to the Windows client I checked. Doesn't it depend
on
>> which of the DCs that is listed first in the DNS list? Shouldn't
any
>> DC be able to supply time services, in case other ones are off line?
>>
>> Well, this is nitpicking, but every bit of knowledge is precious.
>>
>> Thanks for your comments.
>>
>> Best regards,
>>
>> Peter
>>
>>
>
> Windows clients can and will use any DC, The DCs are supposed to get 
> their time from the DC that holds the PDC_Emulator FSMO role.
>
> Trying reading this: 
> https://wiki.samba.org/index.php/Time_Synchronisation
>
> Paying particular attention to the pretty diagram.
>
> Rowland
>
Thanks for the link Rowland. But there is an ambiguity. Below the 
diagram, there is stated that "all other workstations get their time 
from any DC".? In the next sentence there is "Windows clients get
their
time from the PDC emulator DC". In my case, the Windows 10 client does 
not get the time from the DC with the PDC emulator role, which also 
contradicts the second statement.

Best regards,

Peter

On 09/08/2023 09:46, Peter Milesson via samba wrote:
>>
> Thanks for the link Rowland. But there is an ambiguity. Below the 
> diagram, there is stated that "all other workstations get their time 
> from any DC".? In the next sentence there is "Windows clients get
their
> time from the PDC emulator DC". In my case, the Windows 10 client does
> not get the time from the DC with the PDC emulator role, which also 
> contradicts the second statement.
> 
> Best regards,
> 
> Peter
> 
> 
Thanks for pointing that out, I have rewritten it.
Basically a client will ask any DC for the current time and it will 
return what it thinks is the time. All DCs get their time from the DC 
that holds the PDC_Emulator FSMO role, which gets its time from an 
external source.

Rowland

From my experience clients get their time for the logon server (any DC)

Type in a command window ?w32tm /query /status? to find out.

You can find out the logon server by opening a cmd windows and type ?set l?

LP
On 9 Aug 2023 at 10:47 +0200, Peter Milesson <miles at atmos.eu>,
wrote:
>
> Windows clients get their
> time from the PDC emulator DC