Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Hardware, Installation, Up2Date, Licensing
Reload this Page [7.306] Clock / NTP out of sync
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 01-12-2010, 09:46 PM
Moderator
  
Join Date: Jul 2001
Location: southern California
Posts: 5,461
Exclamation [7.306] Clock / NTP out of sync
Hi, all our systems' clocks were off by a minute today, including Astaro (our local NTP server).

Running 'ntpdate -q pool.ntp.org' on the console verified the clock was wrong but that the servers were reachable.

Restarting the NTP server in webadmin (at 14:33) reset the clock, but I'm worried that it's drifting so much.

Thanks,
Barry


Code:
fw2:/var/log # ntpdate -q  pool.ntp.org           
server 72.1.194.82, stratum 3, offset 67.531043, delay 0.12061
server 24.83.71.119, stratum 2, offset 67.536980, delay 0.06778
server 24.215.0.24, stratum 2, offset 67.530904, delay 0.12042
12 Jan 14:26:29 ntpdate[29707]: step time server 24.83.71.119 offset 67.536980 sec

fw2:/var/log # grep ntp *.log                   
confd.log:2010:01:12-14:33:06 (none) confd[29755]: id="310c" severity="info" sys="System" sub="confd" name="config node changed" client="index.plx" facility="webadmin" user="barry" srcip="10.40.8.35" node="ntp->status"
confd.log:2010:01:12-14:33:12 (none) confd[29755]: id="310c" severity="info" sys="System" sub="confd" name="config node changed" client="index.plx" facility="webadmin" user="barry" srcip="10.40.8.35" node="ntp->status"
named.log:2010:01:12-05:15:57 (none) named[3633]: too many timeouts resolving 'pool.ntp.org/A' (in 'pool.ntp.org'?): disabling EDNS
system.log:2010:01:12-02:22:57 (none) ntpd[5787]: synchronized to 174.133.44.162, stratum 2
system.log:2010:01:12-02:34:35 (none) ntpd[5787]: synchronized to LOCAL(0), stratum 10
system.log:2010:01:12-11:29:07 (none) ntpd[5787]: synchronized to 174.133.44.162, stratum 2
system.log:2010:01:12-12:24:07 (none) ntpd[5787]: synchronized to LOCAL(0), stratum 10
system.log:2010:01:12-14:33:08 (none) ntpd[5787]: ntpd exiting on signal 15
system.log:2010:01:12-14:33:10 (none) ntpd[30026]: ntpd 4.2.4@1.1437-o Wed Apr 18 07:34:56 UTC 2007 (1)
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: precision = 1.000 usec
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: ntp_io: estimated max descriptors: 1024, initial socket boundary: 16
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #0 wildcard, 0.0.0.0#123 Disabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #1 lo, 127.0.0.1#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #2 eth0, 64.34.248.134#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #3 eth0:HGbUIv, 146.12.79.3#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #4 eth0:COkNeZ, 146.12.79.10#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #5 eth0:BjzjWn, 146.12.79.1#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #6 eth0:LcgLys, 146.12.79.49#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #7 eth0:vwXnYU, 146.12.79.35#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #8 eth0:AwqoCd, 146.12.79.36#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #9 eth0:cjWrnJ, 146.12.79.21#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #10 eth0:TfmGul, 146.12.79.19#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #11 eth0:KTfmvW, 146.12.79.17#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #12 eth0:IKQWXP, 146.12.79.18#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #13 eth0:rtAiiT, 146.12.79.50#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #14 eth0:ekrneB, 146.12.79.51#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #15 eth0:VgPMGk, 146.12.79.52#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #16 eth0:sSYYpg, 146.12.79.53#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #17 eth0:UZmFte, 146.12.79.34#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #18 eth0:PmRTzi, 146.12.79.37#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #19 eth0:uROVOY, 146.12.79.38#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #20 eth0:MWwhYB, 146.12.79.33#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #21 eth0:bTsgUJ, 146.12.79.39#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #22 eth0:VKmFbf, 146.12.79.40#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #23 eth0:kwytDk, 146.12.79.41#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #24 eth0:nibcXD, 146.12.79.42#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #25 eth0:OOehBT, 146.12.79.54#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #26 eth1, 10.42.6.1#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #27 eth1:EdKVRC, 10.42.6.254#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: Listening on interface #28 tun0, 10.242.6.1#123 Enabled
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: kernel time sync status 0040
system.log:2010:01:12-14:33:10 (none) ntpd[30027]: frequency initialized 43.879 PPM from /var/ntp.drift
system.log:2010:01:12-14:33:15 (none) ntpd[30027]: ntpd exiting on signal 15
system.log:2010:01:12-14:33:16 (none) ntpd[30189]: ntpd 4.2.4@1.1437-o Wed Apr 18 07:34:56 UTC 2007 (1)
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: precision = 1.000 usec
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: ntp_io: estimated max descriptors: 1024, initial socket boundary: 16
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #0 wildcard, 0.0.0.0#123 Disabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #1 lo, 127.0.0.1#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #2 eth0, 64.34.248.134#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #3 eth0:HGbUIv, 146.12.79.3#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #4 eth0:COkNeZ, 146.12.79.10#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #5 eth0:BjzjWn, 146.12.79.1#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #6 eth0:LcgLys, 146.12.79.49#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #7 eth0:vwXnYU, 146.12.79.35#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #8 eth0:AwqoCd, 146.12.79.36#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #9 eth0:cjWrnJ, 146.12.79.21#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #10 eth0:TfmGul, 146.12.79.19#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #11 eth0:KTfmvW, 146.12.79.17#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #12 eth0:IKQWXP, 146.12.79.18#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #13 eth0:rtAiiT, 146.12.79.50#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #14 eth0:ekrneB, 146.12.79.51#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #15 eth0:VgPMGk, 146.12.79.52#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #16 eth0:sSYYpg, 146.12.79.53#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #17 eth0:UZmFte, 146.12.79.34#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #18 eth0:PmRTzi, 146.12.79.37#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #19 eth0:uROVOY, 146.12.79.38#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #20 eth0:MWwhYB, 146.12.79.33#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #21 eth0:bTsgUJ, 146.12.79.39#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #22 eth0:VKmFbf, 146.12.79.40#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #23 eth0:kwytDk, 146.12.79.41#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #24 eth0:nibcXD, 146.12.79.42#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #25 eth0:OOehBT, 146.12.79.54#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #26 eth1, 10.42.6.1#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #27 eth1:EdKVRC, 10.42.6.254#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: Listening on interface #28 tun0, 10.242.6.1#123 Enabled
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: kernel time sync status 0040
system.log:2010:01:12-14:33:16 (none) ntpd[30190]: frequency initialized 43.879 PPM from /var/ntp.drift
fw2:/var/log # date
Tue Jan 12 14:33:24 PST 2010
fw2:/var/log # ntpdate -q  pool.ntp.org           
dateserver 72.51.27.50, stratum 3, offset -0.017072, delay 0.06476
server 24.215.0.24, stratum 2, offset -0.023080, delay 0.12183
server 206.248.190.142, stratum 2, offset -0.022484, delay 0.12921
12 Jan 14:34:37 ntpdate[30197]: adjust time server 24.215.0.24 offset -0.023080 sec

fw2:/var/log # uptime
  2:35pm  up 51 days 14:59,  1 user,  load average: 1.45, 1.00, 0.80
__________________
http://DealBert.net
Home & business end-user since v1.x
  • ASL 6.3x, HP DL145 Dual Opteron, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  • ASL 7.5x, HP DL360G5, Xeon 5160, 3GB, RAID, gigE NICs, 50-IP Platinum License
  • ASL 7.5x, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD
    Netgear GS108T gigE VLAN switch & Linksys WRT54G WAP
    Total network infrastructure: 27 watts. 100-IP Home User. FiOS 10mb/2mb
Reply With Quote
  #2 (permalink)  
Old 02-03-2010, 03:35 PM
Super Moderator
  
Join Date: Feb 2009
Location: In a galaxy far far away
Posts: 1,151
Default
Hi Barry

Are you still having this issue?
__________________

Running Astaro ASG virtual appliance | Home power user v8.0xx
Intel Dual Core 2.4GHz (800MHz) | 4GB (2 x 2GB) PC2-6400 800Mhz 5-5-5-18 | WD 160GB |3 x Intel Pro/1000
GPG Key Fingerprint: 2220 44E7 2E1A 5288 F81D 4B21 029F 8626 4A88 779E
Reply With Quote
  #3 (permalink)  
Old 02-04-2010, 03:47 AM
Moderator
  
Join Date: Jul 2001
Location: southern California
Posts: 5,461
Default
Hi,
The time is correct (0.013 seconds offset according to ntpdate) at the moment, but other than restarting the NTP service, I haven't done anything to 'fix' it, and suspect it will happen again (the above post wasn't the first time I've had this problem in the 7.x series).

Thanks,
Barry
__________________
http://DealBert.net
Home & business end-user since v1.x
  • ASL 6.3x, HP DL145 Dual Opteron, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  • ASL 7.5x, HP DL360G5, Xeon 5160, 3GB, RAID, gigE NICs, 50-IP Platinum License
  • ASL 7.5x, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD
    Netgear GS108T gigE VLAN switch & Linksys WRT54G WAP
    Total network infrastructure: 27 watts. 100-IP Home User. FiOS 10mb/2mb
Reply With Quote
  #4 (permalink)  
Old 02-04-2010, 09:03 AM
Super Moderator
  
Join Date: Feb 2009
Location: In a galaxy far far away
Posts: 1,151
Default
The issue I am having is that I can see all devices updating their clocks via NTP server from ASG with no issues. I can see the allowed NTP request on the firewall itself via the packet tracer but I am unable to perform windows update as it says the clocks are out of sync
__________________

Running Astaro ASG virtual appliance | Home power user v8.0xx
Intel Dual Core 2.4GHz (800MHz) | 4GB (2 x 2GB) PC2-6400 800Mhz 5-5-5-18 | WD 160GB |3 x Intel Pro/1000
GPG Key Fingerprint: 2220 44E7 2E1A 5288 F81D 4B21 029F 8626 4A88 779E
Reply With Quote
  #5 (permalink)  
Old 02-04-2010, 11:55 AM
Super Moderator
  
Join Date: Feb 2009
Location: In a galaxy far far away
Posts: 1,151
Default
UPDATE: I think there is something wrong with the NTP service. My domain controller was unable to connect to the ntp server and it was part of the NTP allowed networks.

I can see the block on the packet rule

UDP
192.168.2.1 : 123
→
192.43.244.18 : 123
I've disabled the NTP function and everything works fine at the moment. I think there is still an issue with 7.XX series
__________________

Running Astaro ASG virtual appliance | Home power user v8.0xx
Intel Dual Core 2.4GHz (800MHz) | 4GB (2 x 2GB) PC2-6400 800Mhz 5-5-5-18 | WD 160GB |3 x Intel Pro/1000
GPG Key Fingerprint: 2220 44E7 2E1A 5288 F81D 4B21 029F 8626 4A88 779E
Reply With Quote
  #6 (permalink)  
Old 02-04-2010, 02:17 PM
BAlfson's Avatar
Moderator
  
Join Date: Mar 2007
Location: Oklahoma City
Posts: 7,014
Default
I'm not seeing this issue anywhere. Which servers do you have listed on the 'Time and Date' tab of 'Mnagement >> System Settings'?

Cheers - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #7 (permalink)  
Old 02-04-2010, 05:41 PM
Moderator
  
Join Date: Jul 2001
Location: southern California
Posts: 5,461
Default
Hi Wingman, I frequently see time sync errors on my WinXP boxes (syncing to Astaro 7.502). I've complained about that several times before here, but there doesn't seem to be a real fix.

It seems to fail about 50% of the time for me, so my computers still stay in pretty good sync and I've given up worrying about it at home.

The problem I mentioned here is with Astaro getting out of sync though.

Barry
__________________
http://DealBert.net
Home & business end-user since v1.x
  • ASL 6.3x, HP DL145 Dual Opteron, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  • ASL 7.5x, HP DL360G5, Xeon 5160, 3GB, RAID, gigE NICs, 50-IP Platinum License
  • ASL 7.5x, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD
    Netgear GS108T gigE VLAN switch & Linksys WRT54G WAP
    Total network infrastructure: 27 watts. 100-IP Home User. FiOS 10mb/2mb
Reply With Quote
  #8 (permalink)  
Old 02-04-2010, 05:53 PM
Super Moderator
  
Join Date: Feb 2009
Location: In a galaxy far far away
Posts: 1,151
Default
Quote:
Originally Posted by BAlfson View Post
I'm not seeing this issue anywhere. Which servers do you have listed on the 'Time and Date' tab of 'Mnagement >> System Settings'?

Cheers - Bob
I had my internal network (192.168.2.0/24) + my vpn pool
so really getting the block on the pf for 192.168.2.1 is strange. I've disabled though and add the appropriate rules and everything works fine
__________________

Running Astaro ASG virtual appliance | Home power user v8.0xx
Intel Dual Core 2.4GHz (800MHz) | 4GB (2 x 2GB) PC2-6400 800Mhz 5-5-5-18 | WD 160GB |3 x Intel Pro/1000
GPG Key Fingerprint: 2220 44E7 2E1A 5288 F81D 4B21 029F 8626 4A88 779E
Reply With Quote
Reply

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT. The time now is 07:46 AM.

 
Contact Us - Astaro User Bulletin Board - Archive - Top

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.