https://progress.opensuse.org/https://progress.opensuse.org/themes/openSUSE/favicon/favicon.ico?15829177842019-12-19T13:33:59ZopenSUSE Project Management ToolinvisAD-setup - action #40241: Switch to chrony as timeserverhttps://progress.opensuse.org/issues/40241?journal_id=2658722019-12-19T13:33:59Zflaccostefan@invis-server.org
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>In Progress</i></li><li><strong>% Done</strong> changed from <i>0</i> to <i>10</i></li></ul><p>Now I did the first steps towards chrony.</p>
<p>First Point is, that we hve to build our own packages, because the packages inside leap 15.0, .1 and the upcoming 15.2are compiled whithout signed support. First builds in our repos build successfully.</p>
<p>A first chrony.conf example is to find inside the xsrc folder.</p>
<p>First tests will follow.</p>
invisAD-setup - action #40241: Switch to chrony as timeserverhttps://progress.opensuse.org/issues/40241?journal_id=2659172019-12-19T17:29:44Zflaccostefan@invis-server.org
<ul><li><strong>% Done</strong> changed from <i>10</i> to <i>40</i></li></ul><p>It seems to work with the following configuration extension in /etc/chrony.d/:</p>
<pre><code># invis-Server chrony extension
# Serve time even if not synchronized to a time source.
local stratum 10
# Allow NTP client access from local network.
allow 192.168.220.0/24 127.0.0.1
# Signd Socket for AD time synchronisation
ntpsigndsocket /var/lib/samba/ntp_signd
# Interface on which chronyd will listen for monitoring command packets
# set to DC-Address as explaned in samba-wki
bindcmdaddress 192.168.220.10
</code></pre> invisAD-setup - action #40241: Switch to chrony as timeserverhttps://progress.opensuse.org/issues/40241?journal_id=2671652019-12-22T12:34:24Zingogoeppert
<ul></ul><p>It seams SUSE likes to keep the "old" version in 15.x leap. Any chance to push them to switch to the new version? It is used since more than a year in tumbleweed...</p>
invisAD-setup - action #40241: Switch to chrony as timeserverhttps://progress.opensuse.org/issues/40241?journal_id=3021942020-05-25T06:24:01Zflaccostefan@invis-server.org
<ul><li><strong>Due date</strong> set to <i>2020-06-01</i></li><li><strong>Target version</strong> changed from <i>Future</i> to <i>14.2</i></li></ul> invisAD-setup - action #40241: Switch to chrony as timeserverhttps://progress.opensuse.org/issues/40241?journal_id=3040002020-05-30T09:53:12Zingogoeppert
<ul></ul><p>Actual state: Leap 15.2 still comes with chrony 3.2 with signd disabled. We need to provide our own build.</p>
invisAD-setup - action #40241: Switch to chrony as timeserverhttps://progress.opensuse.org/issues/40241?journal_id=3040632020-05-31T14:16:12Zingogoeppert
<ul></ul><p>We have to:</p>
<ol>
<li>Configure Samba to the same ntp_signd directory: <code>/var/lib/samba/ntp_signd</code></li>
<li>Change der group ownership of this directory to group chrony</li>
</ol>
invisAD-setup - action #40241: Switch to chrony as timeserverhttps://progress.opensuse.org/issues/40241?journal_id=3040662020-05-31T17:43:20Zflaccostefan@invis-server.org
<ul><li><strong>Category</strong> set to <i>Feature</i></li><li><strong>% Done</strong> changed from <i>40</i> to <i>80</i></li></ul><p>Done, but untested yet</p>
invisAD-setup - action #40241: Switch to chrony as timeserverhttps://progress.opensuse.org/issues/40241?journal_id=3040722020-05-31T19:43:44Zflaccostefan@invis-server.org
<ul><li><strong>% Done</strong> changed from <i>80</i> to <i>90</i></li></ul><p>Setup works</p>
invisAD-setup - action #40241: Switch to chrony as timeserverhttps://progress.opensuse.org/issues/40241?journal_id=3041952020-06-01T12:48:50Zflaccostefan@invis-server.org
<ul></ul><p>Even after using "w32tm /config /syncfromflags:domhier /update" the timesynchronisation fails.</p>
<p>w32tm /monitor says:</p>
<p>invis.142-net.loc *** PDC ***[172.18.0.10:123]:<br>
ICMP: 0ms Verzögerung<br>
NTP: Fehler ERROR_TIMEOUT - Keine Rückmeldung vom Server seit 1000ms</p>
<p>net time works, but this seems to work without ntp.</p>
invisAD-setup - action #40241: Switch to chrony as timeserverhttps://progress.opensuse.org/issues/40241?journal_id=3041982020-06-01T12:54:43Zflaccostefan@invis-server.org
<ul></ul><p>Sorry, my fault... There is still an error at the chronyd setup. ;-(</p>
invisAD-setup - action #40241: Switch to chrony as timeserverhttps://progress.opensuse.org/issues/40241?journal_id=3042012020-06-01T12:59:32Zflaccostefan@invis-server.org
<ul><li><strong>Status</strong> changed from <i>In Progress</i> to <i>Closed</i></li><li><strong>% Done</strong> changed from <i>90</i> to <i>100</i></li></ul><p>fixed</p>