Question about internal 'private' servers

Matt Selsky Matthew.Selsky at twosigma.com
Mon Jul 22 15:38:36 UTC 2024


On Mon, Jul 22, 2024 at 10:17:21AM -0400, Dave Hall via users wrote:

>    I have until recently had a two-tier NTP configuration running on an
>    internal subnet with 2 'primary' servers configured to connect to external
>    stratum 1 services, and 4 secondary servers syncing with the primaries. 
>    All other systems ('clients') in the subnet are configured to sync with
>    the 4 secondary servers.  In 'ntpq -c pe' the 2 primary servers show as
>    stratum 2.  
>    WIth the upgrade to Debian 12, NTP is replaced by NTPSEC, and this no
>    longer works:  The 4 secondary servers come up as stratum 16, causing all
>    of the 'client' to become unsynced. 
>    In studying the documentation and with many experiments, I have not found
>    a way to get past this.  Not that I have not configured any SSL
>    certificates anywhere, the assumption being that my network segment is
>    isolated enough that I should not need this.  Further, all of my systems
>    are willing to sync with the 2 'primaries' even though they are still
>    running the same old ntp.conf.
>    So how do I get my secondaries to be something other than stratum 16, and
>    where is this documented?

Hi Dave,

Can you please share your ntp.conf from both your primary and secondaries?

Thanks,
-Matt


More information about the users mailing list