xntpd

[Sachin Patel]

Hi Mathew,

Sorry about multiple.

Canyou ping server?

I am in houston too.

Sachin

[Sachin Patel]

Hi Mathew,

Sorry about multiple.

Canyou ping server?

I am in houston too.

Sachin

[matthew bettinger]

I can ping the ntp server. Yes. This is a production box with ~120 people on it so i'd be in trouble if I couldn't ping out of it ;-)



Regards,

Matthew Bettinger
Champion Elevators, Inc.
Houston, Texas 77061
713.640.8500

[Michael Steele_2]

The xntpd daemon transmits on port udp 123, while the command ntpdate uses port tcp 123.

You need UDP 123 open, you can test with ntpdate.

Check your ports with 'lsof'.

lsof -i udp:123
lsof -i tcp:123

[Bill Hassell]

ping is the first test, but never troubleshoot NTP problems without using ntpq as in:

ntpq -p

and see if any of the servers are reachable. Oops, you are using a single server (tock) and that's not good! You need 3 to 5 servers and all of them must be reachable with ntpq -p as in:

ntpq -p tock.usnogps.navy.mil
ntpq -p tick.usnogps.navy.mil
ntpq -p ntp-cup.external.hp.com

Once you get a response from the external server(s), you can include them in your ntp.conf file. However, it is VERY common to find NTP protocol blocked by your local firewall. And there are two solutions, one is really easy:

1. Your local network team setup the firewall as an NTP server and forgot to tell anyone (hint: ntpq -p firewall-IP-addr)

2. Have your network team open up NTP as an acceptable passthrough port (or have the team look at option 1)

You need multiple sources for a reliable source. Note that NTP protocol is very complex and will never allow the time of day to skew erratically. Any server that presents a massive time change will be ignored, thuis keeping your local machines stable.
Once ntpq returns the remote server information, add the working servers to ntp.conf and restart xntpd (DON'T USE ntpdate as this is designed to step the time to the preferred NTP server). If you have the latest patches for NTP at 11.0, the man page will show a -B option (not -b) which will slowly slew the time over hours to obtain sync.

[Sachin Patel]

change net.conf file then try.

server ipaddress (rather then name)

Sachin

[Michael Steele_2]

Adding in your duplicate link which I just responded to.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xb5035ec05a7ad711abdc0090277a778c,00.html