From owner-freebsd-stable@FreeBSD.ORG Sat Feb 5 17:43:51 2005 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1DC3F16A4CE for ; Sat, 5 Feb 2005 17:43:51 +0000 (GMT) Received: from mailgate2.dslextreme.com (mailgate2.dslextreme.com [66.51.199.95]) by mx1.FreeBSD.org (Postfix) with ESMTP id B720943D48 for ; Sat, 5 Feb 2005 17:43:50 +0000 (GMT) (envelope-from junk-it@dslextreme.com) Received: from mail5.dslextreme.com (unknown [192.168.7.93]) by mailgate2.dslextreme.com (Postfix) with SMTP id 50F0A3A649F for ; Sat, 5 Feb 2005 09:43:48 -0800 (PST) Received: (qmail 24849 invoked from network); 5 Feb 2005 17:43:48 -0000 Received: from unknown (HELO [192.168.212.229]) (66.159.226.55) by mail5.dslextreme.com with (RC4-MD5 encrypted) SMTP; Sat, 05 Feb 2005 09:43:48 -0800 Message-ID: <420505D0.7040306@dslextreme.com> Date: Sat, 05 Feb 2005 09:43:44 -0800 From: Stan User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Scott Robbins , Kevin Oberman References: <20050204212903.GA2610@uws1.starlofashions.com> <20050204214140.273335D07@ptavv.es.net> <20050204215501.GA2845@uws1.starlofashions.com> In-Reply-To: <20050204215501.GA2845@uws1.starlofashions.com> X-DSLExtreme-MailGate-Information: Please contact the ISP for more information X-DSLExtreme-MailGate: Found to be clean X-MailScanner-From: junk-it@dslextreme.com Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.1 cc: freebsd-stable@freebsd.org Subject: Re: Adjusting time on a secured FreeBSD machine. X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Feb 2005 17:43:51 -0000 Thanks as well to both of you. I too learned something new. Scott Robbins wrote: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > >On Fri, Feb 04, 2005 at 01:41:39PM -0800, Kevin Oberman wrote: > > >>>Date: Fri, 4 Feb 2005 16:29:03 -0500 >>>From: Scott Robbins >>>Sender: owner-freebsd-stable@freebsd.org >>> >>>-----BEGIN PGP SIGNED MESSAGE----- >>>Hash: SHA1 >>> >>> >>>They do conflict with each other, I'm not sure what will happen if you >>>have both in rc.conf. Hopefully ntpdate will run first, then ntpd. If >>>ntpd is running then you will get an error message running ntpdate. >>> >>>On an unsecured box (the one that I mentioned, where ntpd choked because >>>the BIOS clock was too far off, I simply stopped ntpd, ran ntpdate and >>>then restarted ntpd. >>> >>> >>They do not conflict if you use the flags in defaults/rc.conf. >> >>ntpdate -b sets the time ONCE and is run before ntpd starts, the '-b' >>option will cause it to to set the time absolutely no matter hao far off >>the clock is at the time. This is exactly how ntpdate is intended to be >>used. >> >>That said, ntpdate is considered obsolete by the ntp folks and may >>disappear at some time in the future. Their recommendation is to use >>ntpd with the '-g' flag to force an unconditional clock set and to use >>the 'iburst' option on your servers in /etc/ntp.conf. I find this works >>well, but some have complained that it takes too long. >> >> > >Thank you. I have been using ntpd for awhile, and haven't read the man >pages recently, which I should have done before posting. I only ran >into the issue once and solved it as I mentioned. > >Thanks again. I just learned something. > > >- -- > >Scott > >GPG KeyID EB3467D6 >( 1B848 077D 66F6 9DB0 FDC2 A409 FA54 D575 EB34 67D6) >gpg --keyserver pgp.mit.edu --recv-keys EB3467D6 > >Buffy: No, but, see, Mom, that doesn't really work for me. We're >just going to the magic shop, no school supplies there. >Dawn: Yeah, Mom. I'm not going to Hogwarts. (chuckles) Hog- >(looks at Buffy, who's not amused) Jeez, crack a book sometime. >-----BEGIN PGP SIGNATURE----- >Version: GnuPG v1.4.0 (FreeBSD) > >iD8DBQFCA+81+lTVdes0Z9YRAhi5AKC9Y2EUCxlsj+m7fhxrM8R5q6v6MACfbzXZ >f/Lt+igi9J8TVMwuJ+CX8hE= >=GCnT >-----END PGP SIGNATURE----- >_______________________________________________ >freebsd-stable@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-stable >To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" > > > >