Environment
Novell Access Manager 3.1 Linux Access Gateway
Situation
The following line in the /etc/ntp.conf is preventing queries:
"restrict default ignore"
Running ntpq -pn fails:
testag1:~ # ntpq -pn
localhost: timed out, nothing received
***Request timed out
Commenting the line "restrict default ignore" and restarting the NTP daemon resolves the issue, but only temporarily as any update to the configuration that is applied through the administration console will overwrite the change.
"restrict default ignore"
Running ntpq -pn fails:
testag1:~ # ntpq -pn
localhost: timed out, nothing received
***Request timed out
Commenting the line "restrict default ignore" and restarting the NTP daemon resolves the issue, but only temporarily as any update to the configuration that is applied through the administration console will overwrite the change.
Resolution
under /chroot/lag/opt/novell/bin, copy postapply.sh.orig to postapply.sh
add the following lines:
cp /etc/ntp.conf.bak /etc/ntp.conf
/etc/init.d/ntp restart
Save and exit.
Next go to /etc/ and copy the ntp.conf file: cp ntp.conf ntp.conf.bak
Edit the ntp.conf.bak
Go to the section called Miscellaneous stuff and add:
## Miscellaneous stuff
restrict 127.0.0.1 mask 255.255.255.255 noserve nomodify notrap
restrict xx.xx.xx.xx mask 255.255.255.0 nomodify notrap
(replace xx.xx.xx.xx with the actual subnet hosting your ntp server.)
Save and exit.
Go make any change to the LAG configuration and apply. Look at the /etc/ntp.conf and verify it has the above lines.
Test ntp query command: ntpq-pn
add the following lines:
cp /etc/ntp.conf.bak /etc/ntp.conf
/etc/init.d/ntp restart
Save and exit.
Next go to /etc/ and copy the ntp.conf file: cp ntp.conf ntp.conf.bak
Edit the ntp.conf.bak
Go to the section called Miscellaneous stuff and add:
## Miscellaneous stuff
restrict 127.0.0.1 mask 255.255.255.255 noserve nomodify notrap
restrict xx.xx.xx.xx mask 255.255.255.0 nomodify notrap
(replace xx.xx.xx.xx with the actual subnet hosting your ntp server.)
Save and exit.
Go make any change to the LAG configuration and apply. Look at the /etc/ntp.conf and verify it has the above lines.
Test ntp query command: ntpq-pn