Thank you sir.  I'll mix up the order of public ntp servers and see what happens.


On Tuesday, April 3, 2018 1:24 PM, Rob Crittenden via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:


Andrew Meyer wrote:
> This is a mix of VMware VMs an AWS instances.  All CentOS 7.

It was VMware that had the poor time keeping but this was 7 or 8 years
ago in the Fedora 11/12 time period. I'd find it hard to believe the
same time problems exist today but some googling might turn up something
for you.

rob

>
>
> On Tuesday, April 3, 2018 1:04 PM, Rob Crittenden <rcritten@redhat.com>
> wrote:
>
>
> Andrew Meyer via FreeIPA-users wrote:
>
>> I need some clarification on this.  I have my FreeIPA server in
>> talking.  NTP is working.  However Some servers are getting ntp drift. 
>> If I go into /etc/ntp.conf I see that at the bottom FreeIPA adds server
>> at the bottom of the file.
>>
>> ### Added by IPA Installer ###
>> server 127.127.1.0 iburst
>> fudge 127.127.1.0 stratum 10
>> server 1.2.3.4   # added by /sbin/dhclient-script
>> server 5.6.7.8   # added by /sbin/dhclient-script
>> server 9.0.1.2   # added by /sbin/dhclient-script
>> server 3.4.5.6   # added by /sbin/dhclient-script
>> [centos@freeipa03 <mailto:centos@freeipa03> ~]$

>>
>> But under the public servers at the top should I leave the the centos
>> public ntp servers?  Should I add the FreeIPA servers?
>
>
> The theory for making IPA an NTP server was that even if time was off on
> the IPA master it would be sharing its same incorrect time with all its
> clients so they would all be in the same time universe and things would
> continue to work.
>
> It wouldn't hurt if you re-ordered things (I think). Just keep an eye on
> it for a while.
>
> Is this real hardware or VMs? In the past (like many moons ago) one
> particular VM tech was particularly bad at time keeping so extra work
> was needed on the VM host to ensure its RTC was passed into the VMs.
>
> I wonder if connectivity to the centos pool is a problem, or if a VM, it
> has bad timing.
>
> rob
>
>
>
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org