Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Forums
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-12-2003 04:54 AM
11-12-2003 04:54 AM
Users are complaining about the time on my servers, they do a lot of percise validation and need time correct always. I have 45 UNIX systems using ntp, pointing to a windoze firewall for time. Firewall gets global time of course. Soooo, the firewall time is 15 minutes fast, sooo all of my servers are also. Is it safe to set time backwards? If so how should I do this. I believe the drift or lets say the gap is 15 minutes off, I dont think ntp will adjust correctly if the gap is too large. Any advice?????
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-12-2003 05:00 AM
11-12-2003 05:00 AM
SolutionNo, it's usually not safe to "jump" the time backwards - especially for DBs.
The safe way is to use the
date -a -XXX
where XXX=slew in seconds - max 999 seconds.
NOTE the negative value for XXX, w/o that it would slew forward.
Would take about 6-10 hours to slew the full 999 seconds.
NTP cannot slew any further than 999 seconds either. This is slightly more than 16 minutes.
But the real issue here is the NTP server itself. What good is it if it's off by that much? I'd be looking at another NTP config.
HTH,
Jeff
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-12-2003 05:01 AM
11-12-2003 05:01 AM
Re: NTP
Maybe I missed something. Why is the firewall 15 minutes fast? Shouldn't that be corrected first?
Pete
Pete
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-12-2003 05:23 AM
11-12-2003 05:23 AM
Re: NTP
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-12-2003 05:29 AM
11-12-2003 05:29 AM
Re: NTP
The problem is that, even if you correct all your servers, the fact that they're running NTP will bring them (gradually) back to whatever time their NTP source says. If you can get the NTP server to correct itself (preferably gradually), the other boxes should follow its lead.
Pete
Pete
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-12-2003 05:31 AM
11-12-2003 05:31 AM
Re: NTP
The firewall should be set back 15 minutes. It should then be pointed to a valid time source on the outside, which is apparently not happening.
You hp-ux servers will NOT jump back 15 minutes. They will run their clocks slightly slower, drifting, adjusting until then synch up with the firewall.
Setting time back is not a good idea unless the system is idle with no processing running other than the OS. You even want cron shut down to prevent problems.
SEP
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-12-2003 05:33 AM
11-12-2003 05:33 AM
Re: NTP
You need to pick a day and shutdown the DBs to fix the time. Oracle does not play well with records time&date stamped in the future.
mark
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-12-2003 05:36 AM
11-12-2003 05:36 AM
Re: NTP
Use that date command -> date -a -XXX
BUT you'll *have* to disable NTP on the clients or the two will just fight each other.
The date will still march the clock forward - just with minutely slower seconds until the slew value is complete. This will NOT affect DBs as they will always see time going forward.
But get that NTP server fixed or another accurate one in place.
Could it be that your external source is the problem here?
HTH,
Jeff
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-12-2003 05:45 AM
11-12-2003 05:45 AM
Re: NTP
But if UNIX/ntp wont jump forward 15 minutes, than how will the ntp server change it forward. Will this happen gradually forward if I point to a new ntp source and have the DB's down? Plus this may take a while correct?
So using ntp to adjust itself forward, gradually, is safer than setting the time forward?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-12-2003 05:54 AM
11-12-2003 05:54 AM
Re: NTP
Actually, jumping forward is OK, it's jumping backwards that can wreak havoc with timestamps on DB logs, etc. I believe you said that the Firewall was 15 minutes fast? If that's the case, you'd want to jump backwards. I would look into whether the firewall can utilize the nptdate command to make an immediate update while your other boxes are down. Once you get the firewall squared away, the other boxes should be able to gradually correct themselves.
Pete
Pete
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-12-2003 06:01 AM
11-12-2003 06:01 AM
Re: NTP
A backward adjustment not using the firewall time server will disrupt oracle and possibly cause a database crash.
In general, its better to adjust the firewall in your situation. ntp will handle the adjustment of the clocks on the 45 servers.
Its also less work. Do you really want to jump on 45 servers and run a time adjustment command? I wouln't/
Any unix ntp client will work the way I described in my first post.
SEP
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-12-2003 06:27 AM
11-12-2003 06:27 AM
Re: NTP
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-12-2003 08:49 AM
11-12-2003 08:49 AM
Re: NTP
There is NO NEED to change any of the clients nor is there a need to 'JUMP' the firewall unless it is way off (15 mins is getting close to 'way off'). First: the firewall MUST have several NTP sources, never use just one. NTP is very smart in handling network delays and server outages, but it is important to monitor the firewall. You can do this in HP-UX with ntpq -p
Now if the windoze firewall cannot slew it's clock, then you can still jump the time as long as it is less than the 16 minutes window mentioned previously. All the clients will see the jump but will NOT jump as the NTP standard defines how to slowly adjust. HP-UX will slowly adjust and the Oracle databases will never notice any difference--all seconds will be accounted for.
Now for HP-UX, if the server is jumped say 40 minutes, it will ignore the server and just run with the internal clock. However, upon reboot, long before Oracle is started, ntpdate -b will be run in the xntpd startup script and this *WILL* jump the clock, but then it's OK as none of the applications have been started yet. IMPORTANT: do NOT run the xntpd start/stop script on a production system--it is designed to jump sync on startup and whatever the NTPDATE_SERVER (/etc/rc.config.d/netdaemons) is set to will jump the time when /sbin/init.d/xntpd start is run.
And if the change is more than the maximum allowed, all running clients will ignore the time server and freewheel using their own internal clock. Again, no loss or gain in seconds even though the server has gone wacky. So if the windowze code can't slew it's internal clock, jump the time about 5 minutes each day in the right direction until windoze is within a minute of real time. It should then start syncing properly. All the clients will simply drift towards the new reference values provided by the firewall. (and you might consider replacing the windoze NTP server with something that works as the RFC 1305 standard says it should)
Bill Hassell, sysadmin
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-13-2003 02:12 AM
11-13-2003 02:12 AM
Re: NTP
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-13-2003 02:30 AM
11-13-2003 02:30 AM
Re: NTP
10x
RPM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-13-2003 04:00 AM
11-13-2003 04:00 AM
Re: NTP
Bill Hassell, sysadmin