source: networking/netprogs/ntp.xml@ 3f2d28f9

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 12.2 7.10 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gimp3 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk upgradedb xry111/for-12.3 xry111/intltool xry111/llvm18 xry111/soup3 xry111/spidermonkey128 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 3f2d28f9 was 39159bf, checked in by Fernando de Oliveira <fernando@…>, 10 years ago

Reword ntp.conf 'Security session' explanation.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@15248 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 12.2 KB
RevLine 
[d47e7ea9]1<?xml version="1.0" encoding="ISO-8859-1"?>
[6732c094]2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
[d47e7ea9]4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
[36474cb]7 <!ENTITY ntp-download-http "http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-&ntp-version;.tar.gz">
[6564aa1]8 <!ENTITY ntp-download-ftp "&gentoo-ftp-repo;/ntp-&ntp-version;.tar.gz">
[78b797d]9 <!ENTITY ntp-md5sum "6972a626be6150db8cfbd0b63d8719e7">
10 <!ENTITY ntp-size "6.5 MB">
11 <!ENTITY ntp-buildsize "59 MB">
12 <!ENTITY ntp-time "0.7 SBU">
[d47e7ea9]13]>
14
[286c613d]15<sect1 id="ntp" xreflabel="ntp-&ntp-version;">
[dc6715a]16 <?dbhtml filename="ntp.html"?>
[56ab82c]17
[dc6715a]18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
[56ab82c]22
[286c613d]23 <title>ntp-&ntp-version;</title>
[56ab82c]24
[dc6715a]25 <indexterm zone="ntp">
[286c613d]26 <primary sortas="a-ntp">ntp</primary>
[dc6715a]27 </indexterm>
28
29 <sect2 role="package">
[286c613d]30 <title>Introduction to ntp</title>
[56ab82c]31
[286c613d]32 <para>The <application>ntp</application> package contains a
[56ab82c]33 client and server to keep the time synchronized between various computers over
34 a network. This package is the official reference implementation of the
[dc6715a]35 NTP protocol.</para>
[56ab82c]36
[99e99c3]37 &lfs76_checked;
[6564aa1]38
[dc6715a]39 <bridgehead renderas="sect3">Package Information</bridgehead>
40 <itemizedlist spacing="compact">
41 <listitem>
42 <para>Download (HTTP): <ulink url="&ntp-download-http;"/></para>
43 </listitem>
44 <listitem>
45 <para>Download (FTP): <ulink url="&ntp-download-ftp;"/></para>
46 </listitem>
47 <listitem>
48 <para>Download MD5 sum: &ntp-md5sum;</para>
49 </listitem>
50 <listitem>
51 <para>Download size: &ntp-size;</para>
52 </listitem>
53 <listitem>
54 <para>Estimated disk space required: &ntp-buildsize;</para>
55 </listitem>
56 <listitem>
[2174baa]57 <para>Estimated build time: &ntp-time;</para>
58 </listitem>
[dc6715a]59 </itemizedlist>
[56ab82c]60
[286c613d]61 <bridgehead renderas="sect3">ntp Dependencies</bridgehead>
[56ab82c]62
[dc6715a]63 <bridgehead renderas="sect4">Optional</bridgehead>
[03f32bb]64 <para role="optional">
[56605b9]65 <xref linkend="libcap-pam"/>,
66 <xref linkend="openssl"/>, and
[03f32bb]67 <ulink url="http://www.thrysoee.dk/editline/">libedit</ulink>
68 </para>
[56ab82c]69
[061ec9d]70 <para condition="html" role="usernotes">User Notes:
71 <ulink url="&blfs-wiki;/ntp"/></para>
72
[dc6715a]73 </sect2>
[56ab82c]74
[dc6715a]75 <sect2 role="installation">
[286c613d]76 <title>Installation of ntp</title>
[dc6715a]77
[e38cfca]78 <para>
79 There should be a dedicated user and group to take control
80 of the <command>ntpd</command> daemon after it is
81 started. Issue the following commands as the
82 <systemitem class="username">root</systemitem> user:
83 </para>
84
85<screen role="root"><userinput>groupadd -g 87 ntp &amp;&amp;
86useradd -c "Network Time Protocol" -d /var/lib/ntp -u 87 \
87 -g ntp -s /bin/false ntp</userinput></screen>
88
[286c613d]89 <para>Install <application>ntp</application> by running
[dc6715a]90 the following commands:</para>
91
[f82ac3f]92<screen><userinput>./configure --prefix=/usr \
[78b797d]93 --bindir=/usr/sbin \
[2dcc08c0]94 --sysconfdir=/etc \
95 --enable-linuxcaps \
[78b797d]96 --with-lineeditlibs=readline \
97 --docdir=/usr/share/doc/ntp-&ntp-version; &amp;&amp;
[11cf9f2]98make</userinput></screen>
99
100 <para>To test the results, issue: <command>make check</command>.</para>
[56ab82c]101
[11cf9f2]102 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
[56ab82c]103
[339fbfb9]104<screen role="root"><userinput>make install &amp;&amp;
[78b797d]105install -v -o ntp -g ntp -d /var/lib/ntp</userinput></screen>
[36474cb]106
107 </sect2>
108
109 <sect2 role="commands">
110 <title>Command Explanations</title>
111
[78b797d]112 <para><parameter>--bindir=/usr/sbin</parameter>: This parameter places
[36474cb]113 the administrative programs in <filename
114 class="directory">/usr/sbin</filename>.</para>
[11cf9f2]115
[2dcc08c0]116 <para><parameter>--enable-linuxcaps</parameter>: ntpd is run as user
117 ntp, so use Linux capabilities for non-root clock control.</para>
118
[a01b1bf]119 <para><option>--with-lineeditlibs=readline</option>: This option enables
120 <application>Readline</application> support for <command>ntpdc</command>
121 and <command>ntpq</command> programs. If omitted,
122 <application>libedit</application> will be used if installed, otherwise no
123 readline capabilites will be compiled.</para>
124
[dc6715a]125 </sect2>
[56ab82c]126
[dc6715a]127 <sect2 role="configuration">
[286c613d]128 <title>Configuring ntp</title>
[56ab82c]129
[dc6715a]130 <sect3 id="ntp-config">
131 <title>Config Files</title>
[56ab82c]132
[dc6715a]133 <para><filename>/etc/ntp.conf</filename></para>
[56ab82c]134
[dc6715a]135 <indexterm zone="ntp ntp-config">
136 <primary sortas="e-etc-ntp.conf">/etc/ntp.conf</primary>
137 </indexterm>
[56ab82c]138
[dc6715a]139 </sect3>
[56ab82c]140
[dc6715a]141 <sect3>
142 <title>Configuration Information</title>
143
[286c613d]144 <para>The following configuration file defines various ntp servers
[a88b03e]145 with open access from different continents. It also creates a
146 drift file where <command>ntpd</command> stores the frequency
147 offset and a pid file to store the <command>ntpd</command> process
148 ID. Since the documentation included with the package is sparse,
[286c613d]149 visit the ntp website at <ulink url="http://www.ntp.org/"/> and
[a88b03e]150 <ulink url="http://www.pool.ntp.org/"/> for more information.</para>
[dc6715a]151
152<screen role="root"><userinput>cat &gt; /etc/ntp.conf &lt;&lt; "EOF"
[6e26273]153<literal># Asia
[bca6dfb6]154server 0.asia.pool.ntp.org
[d47e7ea9]155
156# Australia
[bca6dfb6]157server 0.oceania.pool.ntp.org
[56ab82c]158
[d47e7ea9]159# Europe
[ea57941f]160server 0.europe.pool.ntp.org
[d47e7ea9]161
162# North America
[ea57941f]163server 0.north-america.pool.ntp.org
164
165# South America
[bca6dfb6]166server 2.south-america.pool.ntp.org
[d47e7ea9]167
[1e72251e]168driftfile /var/lib/ntp/ntp.drift
[a5d7e29]169pidfile /var/run/ntpd.pid</literal>
[78b797d]170EOF</userinput></screen>
171
[39159bf]172 <para>
173 You may wish to add a <quote>Security session</quote>. For
174 explanations, see
175 <ulink url="http://www.eecis.udel.edu/~mills/ntp/html/accopt.html#restrict"/>.
176 </para>
[78b797d]177
178<screen role="root"><userinput>cat &gt;&gt; /etc/ntp.conf &lt;&lt; "EOF"
179<literal># Security session
180restrict default limited kod nomodify notrap nopeer noquery
181restrict -6 default limited kod nomodify notrap nopeer noquery
182
183restrict 127.0.0.1
184restrict ::1</literal>
[dc6715a]185EOF</userinput></screen>
186
187 </sect3>
[56ab82c]188
[dc6715a]189 <sect3 id="ntp-init">
190 <title>Synchronizing the Time</title>
191
192 <para>There are two options. Option one is to run <command>ntpd</command>
[56ab82c]193 continuously and allow it to synchronize the time in a gradual manner. The
[dc6715a]194 other option is to run <command>ntpd</command> periodically (using cron)
195 and update the time each time <command>ntpd</command> is scheduled.</para>
[56ab82c]196
197 <para>If you choose Option one, then install the
[dc6715a]198 <filename>/etc/rc.d/init.d/ntp</filename>
199 init script included in the
[5254d12]200 <xref linkend="bootscripts"/> package.</para>
[56ab82c]201
202 <indexterm zone="ntp ntp-init">
[dc6715a]203 <primary sortas="f-ntp">ntp</primary>
[56ab82c]204 </indexterm>
[dc6715a]205
[286c613d]206<screen role="root"><userinput>make install-ntpd</userinput></screen>
[dc6715a]207
[56ab82c]208 <para>If you prefer to run <command>ntpd</command> periodically, add the
209 following command to <systemitem class="username">root</systemitem>'s
[dc6715a]210 <filename>crontab</filename>:</para>
[56ab82c]211
[dc6715a]212<screen><literal>ntpd -q</literal></screen>
213
214 <para>Execute the following command if you would like to set the
[339fbfb9]215 hardware clock to the current system time at shutdown and reboot:</para>
[dc6715a]216
[e3353b3]217<screen role="root"><userinput>ln -v -sf ../init.d/setclock /etc/rc.d/rc0.d/K46setclock &amp;&amp;
218ln -v -sf ../init.d/setclock /etc/rc.d/rc6.d/K46setclock</userinput></screen>
[dc6715a]219
220 <para>The other way around is already set up by LFS.</para>
[56ab82c]221
[dc6715a]222 </sect3>
[56ab82c]223
[dc6715a]224 </sect2>
[56ab82c]225
[dc6715a]226 <sect2 role="content">
227 <title>Contents</title>
[56ab82c]228
[dc6715a]229 <segmentedlist>
230 <segtitle>Installed Programs</segtitle>
231 <segtitle>Installed Libraries</segtitle>
[78b797d]232 <segtitle>Installed Directories</segtitle>
[56ab82c]233
[dc6715a]234 <seglistitem>
[78b797d]235 <seg>calc_tickadj, ntp-keygen, ntp-wait, ntpd, ntpdate, ntpdc, ntpq,
[36474cb]236 ntptime, ntptrace, sntp and tickadj</seg>
[dc6715a]237 <seg>None</seg>
[78b797d]238 <seg>/usr/share/ntp,
239 /usr/share/doc/ntp-4.2.8 and
240 /var/lib/ntp</seg>
[dc6715a]241 </seglistitem>
242 </segmentedlist>
[56ab82c]243
[dc6715a]244 <variablelist>
245 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
246 <?dbfo list-presentation="list"?>
247 <?dbhtml list-presentation="table"?>
[56ab82c]248
[78b797d]249 <varlistentry id="calc_tickadj">
250 <term><command>calc_tickadj</command></term>
251 <listitem>
252 <para>calculates optimal value for tick given ntp drift file.</para>
253 <indexterm zone="ntp calc_tickadj">
254 <primary sortas="b-calc_tickadj">calc_tickadj</primary>
255 </indexterm>
256 </listitem>
257 </varlistentry>
258
[dc6715a]259 <varlistentry id="ntp-keygen">
260 <term><command>ntp-keygen</command></term>
261 <listitem>
[56ab82c]262 <para>generates cryptographic data files used by the NTPv4 authentication
[dc6715a]263 and identification schemes.</para>
264 <indexterm zone="ntp ntp-keygen">
265 <primary sortas="b-ntp-keygen">ntp-keygen</primary>
266 </indexterm>
267 </listitem>
268 </varlistentry>
[56ab82c]269
[dc6715a]270 <varlistentry id="ntp-wait">
271 <term><command>ntp-wait</command></term>
272 <listitem>
[56ab82c]273 <para>is useful at boot time, to delay the boot sequence until
[dc6715a]274 <command>ntpd</command> has set the time.</para>
275 <indexterm zone="ntp ntp-wait">
276 <primary sortas="b-ntp-wait">ntp-wait</primary>
277 </indexterm>
278 </listitem>
279 </varlistentry>
[56ab82c]280
[dc6715a]281 <varlistentry id="ntpd">
282 <term><command>ntpd</command></term>
283 <listitem>
[286c613d]284 <para>is a ntp daemon that runs in the background and keeps
[56ab82c]285 the date and time synchronized based on response from configured
[286c613d]286 ntp servers. It also functions as a ntp server.</para>
[dc6715a]287 <indexterm zone="ntp ntpd">
288 <primary sortas="b-ntpd">ntpd</primary>
289 </indexterm>
290 </listitem>
291 </varlistentry>
[56ab82c]292
[dc6715a]293 <varlistentry id="ntpdate">
294 <term><command>ntpdate</command></term>
295 <listitem>
[56ab82c]296 <para>is a client program that sets the date and time based on
[286c613d]297 the response from an ntp server. This command is deprecated.</para>
[dc6715a]298 <indexterm zone="ntp ntpdate">
299 <primary sortas="b-ntpdate">ntpdate</primary>
300 </indexterm>
301 </listitem>
302 </varlistentry>
[56ab82c]303
[dc6715a]304 <varlistentry id="ntpdc">
305 <term><command>ntpdc</command></term>
306 <listitem>
[286c613d]307 <para>is used to query the ntp daemon about its current state
[dc6715a]308 and to request changes in that state.</para>
309 <indexterm zone="ntp ntpdc">
310 <primary sortas="b-ntpdc">ntpdc</primary>
311 </indexterm>
312 </listitem>
313 </varlistentry>
[56ab82c]314
[dc6715a]315 <varlistentry id="ntpq">
316 <term><command>ntpq</command></term>
317 <listitem>
[56ab82c]318 <para>is an utility program used to monitor <command>ntpd</command>
[dc6715a]319 operations and determine performance.</para>
320 <indexterm zone="ntp ntpq">
321 <primary sortas="b-ntpq">ntpq</primary>
322 </indexterm>
323 </listitem>
324 </varlistentry>
[56ab82c]325
[dc6715a]326 <varlistentry id="ntptime">
327 <term><command>ntptime</command></term>
328 <listitem>
329 <para>reads and displays time-related kernel variables.</para>
330 <indexterm zone="ntp ntptime">
331 <primary sortas="b-ntptime">ntptime</primary>
332 </indexterm>
333 </listitem>
334 </varlistentry>
[56ab82c]335
[dc6715a]336 <varlistentry id="ntptrace">
337 <term><command>ntptrace</command></term>
338 <listitem>
[286c613d]339 <para>traces a chain of ntp servers back to the primary source.</para>
[dc6715a]340 <indexterm zone="ntp ntptrace">
[56ab82c]341 <primary sortas="b-ntptrace">ntptrace</primary>
[dc6715a]342 </indexterm>
343 </listitem>
344 </varlistentry>
[56ab82c]345
[36474cb]346 <varlistentry id="sntp">
347 <term><command>sntp</command></term>
348 <listitem>
349 <para>is a Simple Network Time Protocol (SNTP) client.</para>
350 <indexterm zone="ntp sntp">
351 <primary sortas="b-sntp">sntp</primary>
352 </indexterm>
353 </listitem>
354 </varlistentry>
355
[dc6715a]356 <varlistentry id="tickadj">
357 <term><command>tickadj</command></term>
358 <listitem>
[56ab82c]359 <para>reads, and optionally modifies, several timekeeping-related
360 variables in older kernels that do not have support for precision
[dc6715a]361 timekeeping.</para>
362 <indexterm zone="ntp tickadj">
363 <primary sortas="b-tickadj">tickadj</primary>
364 </indexterm>
365 </listitem>
366 </varlistentry>
[56ab82c]367
[dc6715a]368 </variablelist>
[56ab82c]369
[dc6715a]370 </sect2>
[56ab82c]371
[39f01ca]372</sect1>
Note: See TracBrowser for help on using the repository browser.