Re: [CentOS] chronyd configuration as a local ntp server

2016-12-29 Thread Robert Moskowitz
On 12/29/2016 11:22 PM, Phil Amy wrote: Robert, If your NTP server will be on 7/24, I would uninstall chrony and install ntpd which is still included in CentOS 7. Configure as usual. For the differences between chrony and ntpd reference: http://thegeekdiary.com/centos-rhel-7-chrony-vs-ntp-dif

[CentOS] chronyd configuration as a local ntp server

2016-12-29 Thread Phil Amy
Robert, If your NTP server will be on 7/24, I would uninstall chrony and install ntpd which is still included in CentOS 7. Configure as usual. For the differences between chrony and ntpd reference: http://thegeekdiary.com/centos-rhel-7-chrony-vs-ntp-differences-between-ntpd-and-chronyd/ Essentia

Re: [CentOS] chronyd configuration as a local ntp server

2016-12-27 Thread David Both
Here are the commands for that. Apparently restrict is replaced with deny. deny [] Deny access to subnet as a default deny all [] Deny access to subnet and all children On 12/27/2016 09:07 AM, Robert Moskowitz wrote: 'Modern' NTP allows for all sorts of updates to NTP serv

Re: [CentOS] chronyd configuration as a local ntp server

2016-12-27 Thread Robert Moskowitz
'Modern' NTP allows for all sorts of updates to NTP servers, with all sorts of attacks. So to prevent even local hosts from making changes to your NTP server, there is the restrict instead of allow command. Its intent is to limit what the server will accept from a host in the address range in

Re: [CentOS] chronyd configuration as a local ntp server

2016-12-27 Thread David Both
AFAIK the only thing needed to make your host an NTP server using chrony is to set the allow line to the network address in CIDR format of the network you want to be served, and uncomment it. The restart chronyd. You also need to ensure that port 123 (NTP) is open to your internal network on yo

Re: [CentOS] chronyd configuration as a local ntp server

2016-12-27 Thread Fred Smith
On Mon, Dec 26, 2016 at 11:04:22PM -0500, Robert Moskowitz wrote: > This is for centos 7 that has chronyd 2.1.1 > > I am looking into how to use chronyd as my local ntp server. > > On my old servers with ntpd I had local access control lines like: > > restrict 192.168.128.0 mask 255.255.255.0 no

[CentOS] chronyd configuration as a local ntp server

2016-12-26 Thread Robert Moskowitz
This is for centos 7 that has chronyd 2.1.1 I am looking into how to use chronyd as my local ntp server. On my old servers with ntpd I had local access control lines like: restrict 192.168.128.0 mask 255.255.255.0 nomodify notrap But in looking for documentation on chronyd I did not find anyt