From owner-freebsd-stable@FreeBSD.ORG  Thu Jun 17 00:01:07 2004
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EB4F016A4CE
	for <freebsd-stable@freebsd.org>;
	Thu, 17 Jun 2004 00:01:07 +0000 (GMT)
Received: from tomts20-srv.bellnexxia.net (tomts20.bellnexxia.net
	[209.226.175.74])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2A95A43D4C
	for <freebsd-stable@freebsd.org>;
	Thu, 17 Jun 2004 00:01:07 +0000 (GMT)
	(envelope-from dmagda@ee.ryerson.ca)
Received: from number6.magda.ca ([67.70.123.62])
	by tomts20-srv.bellnexxia.netESMTP
	<20040617000105.HQXL26030.tomts20-srv.bellnexxia.net@number6.magda.ca>;
	Wed, 16 Jun 2004 20:01:05 -0400
Received: from [192.168.1.132] (gandalf.magda.ca [192.168.1.132])
	by number6.magda.ca (8.12.11/8.12.11) with ESMTP id i5H013Sg002028;
	Wed, 16 Jun 2004 20:01:05 -0400 (EDT)
	(envelope-from dmagda@ee.ryerson.ca)
In-Reply-To: <40CFFAF8.00000C.10717@colgate.yandex.ru>
References: <40CFFAF8.00000C.10717@colgate.yandex.ru>
Mime-Version: 1.0 (Apple Message framework v618)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <6CDBFD00-BFF1-11D8-AF71-000A95B96FF8@ee.ryerson.ca>
Content-Transfer-Encoding: 7bit
From: David Magda <dmagda@ee.ryerson.ca>
Date: Wed, 16 Jun 2004 20:01:04 -0400
To: prebrov@yandex.ru
X-Mailer: Apple Mail (2.618)
cc: freebsd-stable@freebsd.org
Subject: Re: NTPD and SecureLevel
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: David Magda <dmagda@ee.ryerson.ca>
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Jun 2004 00:01:08 -0000


On Jun 16, 2004, at 03:47, Pavel M. Rebrov wrote:

> I've installed and configured ntpd daemon and was wondering if it 
> going to work with SecureLevel higher than 1. SecureLevel 2 forbids 
> changing the system date and, therefore, ntpdate and rdate won't work.

Have ntpdate run before hand to get the time with in a close amount of 
the 'real' time. There should be an rc.conf item for ntpdate.

ntpd(8) doesn't actually change the time by making it 'jump' to the 
correct time; it slows down or speeds up the rate at which the timer 
runs at.

So if your system time is ahead of the 'real' time, ntpd will slow down 
the rate at which time passes ('one second' on the system clock will 
actually take longer than a 'real' second to pass). Similarly if your 
system time is behind the 'real' time ntpd will adjust the rate so that 
timer will run faster than 'real' time.

This way there are no 'jumps' in time: it is continuous.