LAG unable to query NTP server and falling out of sync

  • 7010666
  • 22-Aug-2012
  • 27-Sep-2012

Environment

Novell Access Manager 3.1 Linux Access Gateway

Situation

The following line in the /etc/ntp.conf is preventing queries:
 "restrict default ignore"

Running ntpq -pn fails:
 testag1:~ # ntpq -pn
 localhost: timed out, nothing received
 ***Request timed out

 Commenting the line "restrict default ignore" and restarting the NTP daemon resolves the issue, but only temporarily as any update to the configuration that is applied through the administration console will overwrite the change.

Resolution

under /chroot/lag/opt/novell/bin, copy postapply.sh.orig to postapply.sh

add the following lines:

cp /etc/ntp.conf.bak /etc/ntp.conf
/etc/init.d/ntp restart

Save and exit.

Next go to /etc/ and copy the ntp.conf file: cp ntp.conf ntp.conf.bak
Edit the ntp.conf.bak
Go to the section called Miscellaneous stuff and add:

## Miscellaneous stuff
 restrict 127.0.0.1 mask 255.255.255.255 noserve nomodify notrap
 restrict xx.xx.xx.xx mask 255.255.255.0 nomodify notrap

(replace xx.xx.xx.xx with the actual subnet hosting your ntp server.)

Save and exit.
Go make any change to the LAG configuration and apply. Look at the /etc/ntp.conf and verify it has the above lines.
Test ntp query command: ntpq-pn