similar to: The care and feeding of the signing socket; also NTPsec

On Thu, 19 Sep 2024 06:44:13 -0700 (PDT) James Browning via samba <samba at lists.samba.org> wrote: > TLDW: I have a Samba install, and I can use help getting the signing > socket to return a signature with either Chrony or NTPsec; I would > appreciate some guidance on what I am doing incorrectly. I partially > followed the instructions at [1]; after checking and revising, I saw

On 9/19/24 09:23, Rowland Penny via samba wrote: > On Thu, 19 Sep 2024 06:44:13 -0700 (PDT) > James Browning via samba <samba at lists.samba.org> wrote: > >> TLDW: I have a Samba install, and I can use help getting the signing >> socket to return a signature with either Chrony or NTPsec; I would >> appreciate some guidance on what I am doing incorrectly. I

On Thu, 19 Sep 2024 17:29:49 -0500 samba via samba <samba at lists.samba.org> wrote: > > Unless ntpsec has fixed its NTP server (and I haven't heard if they > > have), it doesn't work with a Samba DC, so I would suggest only > > using Chrony. > As of 03/10/24, ntpsec (version 1.2.3+dfsg1-1) is fixed in Debian > Trixie; I can't speak for Fedora. >

On Sat, 06 Jan 2024 13:06:48 -0500 Mark Foley via samba <samba at lists.samba.org> wrote: > On Sat Jan 6 03:34:43 2024 Rowland Penny via samba > <samba at lists.samba.org> wrote: > > > > On Fri, 5 Jan 2024 23:53:52 +0000 > > Luis Peromarta via samba <samba at lists.samba.org> wrote: > > > > > You think ntp works with samba but it doesn?t.

On Sat Jan 6 03:34:43 2024 Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Fri, 5 Jan 2024 23:53:52 +0000 > Luis Peromarta via samba <samba at lists.samba.org> wrote: > > > You think ntp works with samba but it doesn?t. > > Sorry, but 'ntp' does work, it is the rewrite for more security > 'ntpsec' that doesn't seem to

Hi there, In my experience NTP has been trouble lately with the NTPsec implementation. A few months back I decided to remove NTPsec and go with Chrony. These are my notes: http://samba.bigbird.es/doku.php?id=samba:install-chrony Hope it helps. On Oct 25, 2023 at 19:04 +0200, Ham <ham at kc0dxf.net>, wrote: > > Any ideas on what the problem is?

I was able to switch to Chony and verify that it is working. Clients are now getting time from the DC. Luis has good notes! On 10/25/23 12:06, Luis Peromarta via samba wrote: > Hi there, > > In my experience NTP has been trouble lately with the NTPsec implementation. > > A few months back I decided to remove NTPsec and go with Chrony. > > These are my notes: > >

On Fri, 5 Jan 2024 23:53:52 +0000 Luis Peromarta via samba <samba at lists.samba.org> wrote: > You think ntp works with samba but it doesn?t. Sorry, but 'ntp' does work, it is the rewrite for more security 'ntpsec' that doesn't seem to work. > > You *must* use chrony. It will take you exactly 5 minutes to get it > up and running. Chrony does seem to

On Fri Jan 5 03:23:48 2024 Peter Milesson via samba <samba at lists.samba.org> wrote: > > On 05.01.2024 1:28, Mark Foley via samba wrote: > > I've added a Windows 10 domain member to my Domain. I'm now following the > > procedure in https://wiki.samba.org/index.php/Time_Synchronisation#Configuring_Time_Synchronisation_on_a_Windows_Domain_Member. > > > >

I haven't seen anyone mention this on the list, but found on the Debian changelog for ntpsec: ntpsec (1.2.3+dfsg1-1) unstable; urgency=low [...] - We think we have fixed ms-sntp Thanks to Jakob Haufe for testing. (Closes: 1033088) [...] -- Richard Laager<rlaager at debian.org> Sun, 10 Mar 2024 22:01:29 -0500 This version is for Debian Trixie; currently, no mention of

> On 10/25/2023 11:16 AM PDT Rowland Penny via samba <samba at lists.samba.org> wrote: > > > On Wed, 25 Oct 2023 11:53:07 -0500 > Ham via samba <samba at lists.samba.org> wrote: > > > It appears that none of our windows clients are syncing their time > > with the samba DC.??? From what I can tell they are not able to get a > > response from the

On Wed, 25 Oct 2023 11:53:07 -0500 Ham via samba <samba at lists.samba.org> wrote: > It appears that none of our windows clients are syncing their time > with the samba DC.??? From what I can tell they are not able to get a > response from the DC.? For example, where the DC is named athena: > > >w32tm /monitor /computers:athena > > athena[10.10.1.10:123]

> On 10/25/2023 9:53 AM PDT Ham via samba <samba at lists.samba.org> wrote: > > > It appears that none of our windows clients are syncing their time with > the samba DC.??? From what I can tell they are not able to get a > response from the DC.? For example, where the DC is named athena: > > >w32tm /monitor /computers:athena > >

On Wed, 25 Oct 2023 11:10:57 -0700 (PDT) James Browning via samba <samba at lists.samba.org> wrote: > > On 10/25/2023 9:53 AM PDT Ham via samba <samba at lists.samba.org> > > wrote: > > > > > > It appears that none of our windows clients are syncing their time > > with the samba DC.??? From what I can tell they are not able to get > > a

On Wed, 25 Oct 2023 11:25:14 -0700 (PDT) James Browning via samba <samba at lists.samba.org> wrote: > > On 10/25/2023 11:16 AM PDT Rowland Penny via samba > > <samba at lists.samba.org> wrote: > > > > > > On Wed, 25 Oct 2023 11:53:07 -0500 > > Ham via samba <samba at lists.samba.org> wrote: > > > > > It appears that none of

On Sun, 2018-06-03 at 17:40 +0300, Alexei Rozenvaser via samba wrote: > By the way there is ntpsigndsocket option in chrony configuration > file. https://chrony.tuxfamily.org/doc/3.3/chrony.conf.html#ntpsigndsocket > Can you please look at > https://wiki.alpinelinux.org/wiki/Setting_up_a_samba-ad-dc and may be > https://chrony.tuxfamily.org/comparison.html ? Neat! While the

Hi folks, I have been spending the better part of the day, trying to get time synchronization to a Samba AD DC (Debian Bookworm 12.1) to work. Debian Bookworm has recently replaced ntp with ntpsec, and time synchronization stopped working. I have logged the behavior, and Windows 10 clients first send a Windows 2000! compatible request, and ntpsec chokes on it, and does not respond. The

On 05.01.2024 1:28, Mark Foley via samba wrote: > I've added a Windows 10 domain member to my Domain. I'm now following the > procedure in https://wiki.samba.org/index.php/Time_Synchronisation#Configuring_Time_Synchronisation_on_a_Windows_Domain_Member. > > I've created the Group Policy for the "Time Sources". This doesn't seem to be > working. This did

Hello Rowland, >> >> I guess this is because this specific machine has an old samba >> >> version (4.6.4) which lacks the necessary functions. >> >> >> >> What are my options now? >> >> a) update Samba on the old machine to a current version? (not >> >> preferred) >> > Excelent idea. Try: >> >>

Still pursuing my strange problem with windows clients randomly (2 or 3 a day on a network of about 200 pc's) ?not allowing logins until reboot. Nailing down some best practises in an attempt to fix. My best guess is that it's a Kerberos issue --sensitive to time sync and DNS. -- Installed chrony instead of ntpsec (seems to perform as advertised) -- (Today) moved to BIND9_DLZ instead of