Displaying 20 results from an estimated 76 matches for "noquery".
2015 Feb 09
1
member ntp time sync
...servers and clients, so a
configuration
# that might be intended to block requests from certain clients could
also end
# up blocking replies from your own upstream servers.
# By default, exchange time with everybody, but don't allow
configuration.
restrict -4 default kod notrap nomodify nopeer noquery
restrict -6 default kod notrap nomodify nopeer noquery
# Local users may interrogate the ntp server more closely.
restrict 127.0.0.1
restrict ::1
# Clients from this (example!) subnet have unlimited access, but only if
# cryptographically authenticated.
#restrict 192.168.123.0 mask 255.255.255.0...
2017 Sep 12
4
File server questions
On Tue, 12 Sep 2017 14:41:42 -0300
Flávio Silveira via samba <samba at lists.samba.org> wrote:
>
> Ok, I understand now, one question though: if realm is
> AD.TECNOPON.COM.BR, does domain need to be AD?
No, you can use anything you like, provided it is one word, 15
characters or less, without punctuation.
> If I understand
> correctly, realm is "full domain with
2017 Sep 13
1
File server questions
...;> /etc/ntp.conf
> #
> ###### Needed for Samba 4 ####### in the restrict -4 or -6 added mssntp at the end
> # Location of the samba ntp_signed directory
> ntpsigndsocket /var/lib/samba/ntp_signd
> #
> EOF
>
> sed -i 's/restrict -4 default kod notrap nomodify nopeer noquery limited/restrict -4 default kod notrap nomodify nopeer noquery limited mssntp/g' /etc/ntp.conf
> sed -i 's/restrict -6 default kod notrap nomodify nopeer noquery limited/restrict -6 default kod notrap nomodify nopeer noquery limited mssntp/g' /etc/ntp.conf
> systemctl restart ntp...
2023 Oct 25
3
DC Time Problems
...tpsec/ntp.drift
logfile???????? /var/log/ntp.log
#logconfig =all
ntpsigndsocket? /var/lib/samba/ntp_signd/
# Access control
# Default restriction: Allow clients only to query the time
#restrict default kod nomodify notrap nopeer limited mssntp
restrict -4 default kod limited nomodify notrap nopeer noquery mssntp
# No restrictions for "localhost"
restrict 127.0.0.1
# Enable the time sources to only provide time to this host
restrict 0.pool.ntp.org?? mask 255.255.255.255??? nomodify notrap nopeer
noquery
restrict 1.pool.ntp.org?? mask 255.255.255.255??? nomodify notrap nopeer
noquery
restr...
2017 Sep 13
0
File server questions
...cation to ntp.conf
cat << EOF >> /etc/ntp.conf
#
###### Needed for Samba 4 ####### in the restrict -4 or -6 added mssntp at the end
# Location of the samba ntp_signed directory
ntpsigndsocket /var/lib/samba/ntp_signd
#
EOF
sed -i 's/restrict -4 default kod notrap nomodify nopeer noquery limited/restrict -4 default kod notrap nomodify nopeer noquery limited mssntp/g' /etc/ntp.conf
sed -i 's/restrict -6 default kod notrap nomodify nopeer noquery limited/restrict -6 default kod notrap nomodify nopeer noquery limited mssntp/g' /etc/ntp.conf
systemctl restart ntp
systemctl...
2023 Oct 25
1
DC Time Problems
...r/log/ntp.log
> #logconfig =all
> ntpsigndsocket? /var/lib/samba/ntp_signd/
>
> # Access control
> # Default restriction: Allow clients only to query the time
> #restrict default kod nomodify notrap nopeer limited mssntp
> restrict -4 default kod limited nomodify notrap nopeer noquery mssntp
> # No restrictions for "localhost"
> restrict 127.0.0.1
> # Enable the time sources to only provide time to this host
> restrict 0.pool.ntp.org?? mask 255.255.255.255??? nomodify notrap
> nopeer noquery
> restrict 1.pool.ntp.org?? mask 255.255.255.255??? nomodify...
2023 Oct 25
1
DC Time Problems
...r/log/ntp.log
> #logconfig =all
> ntpsigndsocket? /var/lib/samba/ntp_signd/
>
> # Access control
> # Default restriction: Allow clients only to query the time
> #restrict default kod nomodify notrap nopeer limited mssntp
> restrict -4 default kod limited nomodify notrap nopeer noquery mssntp
> # No restrictions for "localhost"
> restrict 127.0.0.1
> # Enable the time sources to only provide time to this host
> restrict 0.pool.ntp.org?? mask 255.255.255.255??? nomodify notrap nopeer
> noquery
> restrict 1.pool.ntp.org?? mask 255.255.255.255??? nomodif...
2023 Oct 25
1
DC Time Problems
...=all
> > ntpsigndsocket? /var/lib/samba/ntp_signd/
> >
> > # Access control
> > # Default restriction: Allow clients only to query the time
> > #restrict default kod nomodify notrap nopeer limited mssntp
> > restrict -4 default kod limited nomodify notrap nopeer noquery mssntp
> > # No restrictions for "localhost"
> > restrict 127.0.0.1
> > # Enable the time sources to only provide time to this host
> > restrict 0.pool.ntp.org?? mask 255.255.255.255??? nomodify notrap
> > nopeer noquery
> > restrict 1.pool.ntp.org?? ma...
2018 Oct 31
3
problem with time sync on windows 10 clients
| My DC is a samba4.3 over Ubuntu 16.04.
| I've configured ntp in the same server.
| However > when I join a windows 10 client to my domain, this one doesn't
| update its datetime.
| Once I logging in, I am able to set any datetime.
| And more > No matter the windows 10 client' s datetime, I can logging in with
| any user of the Active Directory.
| I need a proper time sync in
2023 Jun 23
1
Samba4 Windows Client Time Sync Issue
...ftfile /var/lib/ntp/ntp.drift
statistics loopstats peerstats clockstats
filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable
filegen clockstats file clockstats type day enable
server PFSENSE-SERVER iburst
restrict -4 default kod notrap nomodify nopeer noquery limited
restrict -6 default kod notrap nomodify nopeer noquery limited
restrict 127.0.0.1
restrict ::1
restrict source notrap nomodify noquery
Should this be working? If not what should I be correcting?
Thanks.
2015 Oct 28
6
net ads info: failed to get server's current time
...sed -i "s]#server ntp.your-provider.example]server ${NTPD_SERVER1_EXTERNAL} ]g" /etc/ntp.conf; fi
if [ ! -z "${NTPD_SERVER2_EXTERNAL}" ]; then echo "server ${NTPD_SERVER2_EXTERNAL}" /etc/ntp.conf; fi
sed -i "s]restrict -4 default kod notrap nomodify nopeer noquery]restrict -4 default kod notrap nomodify nopeer noquery mssntp]g" /etc/ntp.conf
sed -i "s]restrict -6 default kod notrap nomodify nopeer noquery]restrict -6 default kod notrap nomodify nopeer noquery mssntp]g" /etc/ntp.conf
cat << EOF >> /etc/ntp.conf
ntpsigndsocket /var/...
2010 Jul 31
1
Trying to get a grasp on NTP server/client access control options
...ew lines from ntp's default configuration in
CentOS :
--8<------ /etc/ntp.conf -----------------------------------------------
...
server 0.centos.pool.ntp.org
server 1.centos.pool.ntp.org
server 2.centos.pool.ntp.org
...
restrict 0.centos.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery
restrict 1.centos.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery
restrict 2.centos.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery
...
--8<--------------------------------------------------------------------
This means roughly : "use these three public NTP servers to s...
2015 Feb 13
2
ntpq -p ***Request timed out
...p/ntp.drift logfile /var/log/ntp # Access control # Default restriction restrict default ignore # Allow everything from localhost restrict 127.0.0.1 # Allow that our time source can only provide time and do nothing else rest
r
> ict dc02.dts***m.lan. mask 255.255.255.255 nomodify notrap nopeer noquery restrict dc01.dts***m.lan. mask 255.255.255.255 nomodify notrap nopeer noquery The ntp.conf from one of the DC's: cat /etc/ntp.conf # /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help driftfile /var/lib/ntp/ntp.drift # Enable this if you want statistics to be logged. #statsdir /va...
2015 Feb 13
4
SOLVED Re: ntpq -p ***Request timed out
...ft logfile /var/log/ntp # Access control # Default restriction restrict default ignore # Allow everything from localhost restrict 127.0.0.1 # Allow that our time source can only provide time and do nothing else rest r
>
>> ict dc02.dts***m.lan. mask 255.255.255.255 nomodify notrap nopeer noquery restrict dc01.dts***m.lan. mask 255.255.255.255 nomodify notrap nopeer noquery The ntp.conf from one of the DC's: cat /etc/ntp.conf # /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help driftfile /var/lib/ntp/ntp.drift # Enable this if you want statistics to be logged. #statsdir /va...
2015 Feb 13
2
ntpq -p ***Request timed out
...lib/ntp/ntp.drift
logfile /var/log/ntp
# Access control
# Default restriction
restrict default ignore
# Allow everything from localhost
restrict 127.0.0.1
# Allow that our time source can only provide time and do nothing else
restrict dc02.dts***m.lan. mask 255.255.255.255 nomodify notrap nopeer
noquery
restrict dc01.dts***m.lan. mask 255.255.255.255 nomodify notrap nopeer
noquery
The ntp.conf from one of the DC's:
cat /etc/ntp.conf
# /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help
driftfile /var/lib/ntp/ntp.drift
# Enable this if you want statistics to be logged.
#statsd...
2017 Sep 13
4
File server questions
...omodify notrap nopeer mssntp
> >
> > # No restrictions for "localhost"
> > restrict 127.0.0.1
> >
> > # Enable the time sources to only provide time to this host
> > restrict a.st1.ntp.br mask 255.255.255.255 nomodify
> notrap nopeer
> > noquery
> > restrict b.st1.ntp.br mask 255.255.255.255 nomodify
> notrap nopeer
> > noquery
> > restrict c.st1.ntp.br mask 255.255.255.255 nomodify
> notrap nopeer
> > noquery
> > restrict d.st1.ntp.br mask 255.255.255.255 nomodify
> notrap nopeer...
2019 Jan 08
7
AD DC in a container: NTP
...estriction: Allow clients only to query the time
restrict default kod nomodify notrap nopeer mssntp
# No restrictions for "localhost"
restrict 127.0.0.1
# Enable the time sources to only provide time to this host
# restrict 0.pool.ntp.org mask 255.255.255.255 nomodify notrap nopeer noquery
# restrict 1.pool.ntp.org mask 255.255.255.255 nomodify notrap nopeer noquery
# restrict 2.pool.ntp.org mask 255.255.255.255 nomodify notrap nopeer noquery
tinker panic 0
However, ntpd is still trying to change/adjust the system time, leading to a couple of errors in the syslog:
start_...
2015 Feb 13
2
ntpq -p ***Request timed out
.../lib/ntp/ntp.drift logfile /var/log/ntp # Access control # Default restriction restrict default ignore # Allow everything from localhost restrict 127.0.0.1 # Allow that our time source can only provide time and do nothing else restr
ict
dc02.dts***m.lan. mask 255.255.255.255 nomodify notrap nopeer noquery restrict dc01.dts***m.lan. mask 255.255.255.255 nomodify notrap nopeer noquery The ntp.conf from one of the DC's: cat /etc/ntp.conf # /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help driftfile /var/lib/ntp/ntp.drift # Enable this if you want statistics to be logged. #statsdir /va...
2015 Oct 28
0
net ads info: failed to get server's current time
Hai Guy,
Yes, it make a backup of your previous version so you can revert if needed.
And review your config after your run it, you micht see a these line :
restrict
> -4 default kod notrap nomodify nopeer noquery mssntp mssntp
( check if you dont see mssntp 2 x, if so, remove 1 of them )
This is because normaly this is run against a "default" ntp.conf
And change the variables in the script where needed before running it.
Below is my ntp.conf after running the script on a DC !
Member server...
2015 Feb 13
0
ntpq -p ***Request timed out
...le /var/log/ntp # Access control # Default restriction restrict default ignore # Allow everything from localhost restrict 127.0.0.1 # Allow that our time source can only provide time and do nothing else rest
>
> r
>
>> ict dc02.dts***m.lan. mask 255.255.255.255 nomodify notrap nopeer noquery restrict dc01.dts***m.lan. mask 255.255.255.255 nomodify notrap nopeer noquery The ntp.conf from one of the DC's: cat /etc/ntp.conf # /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help driftfile /var/lib/ntp/ntp.drift # Enable this if you want statistics to be logged. #statsdir /va...