[Samba] Correct NTP Settings for Samba 4.0.6?

[Thomas Simmons]

On Sat, Jul 27, 2013 at 2:26 AM, Andrew Martin <amartin at xes-inc.com> wrote:

> Hello,
>
> I recently compiled Samba 4.0.6 (as an AD DC) and am running it on Ubuntu
> 12.04.
> I followed the instructions on the Samba wiki (
> https://wiki.samba.org/index.php/Configure_NTP)
> for how to configure ntp, however the domain clients are rejecting the DCs
> as
> being acceptable time sources. Below is my ntp.conf:
>
> server 127.127.1.0
> fudge  127.127.1.0 stratum 10
> server 0.pool.ntp.org  iburst prefer
> server 1.pool.ntp.org  iburst prefer
> driftfile /var/lib/ntp/ntp.drift
> logfile /var/log/ntp
> ntpsigndsocket /var/run/samba/ntp_signd
> restrict default kod nomodify notrap nopeer mssntp
> restrict 127.0.0.1
> restrict 0.pool.ntp.org mask 255.255.255.255 nomodify notrap nopeer
> noquery
> restrict 1.pool.ntp.org mask 255.255.255.255 nomodify notrap nopeer
> noquery
>
> Using Ubuntu, I am not using SELinux. I do not believe there to be any
> problems
> with apparmor, as it contains these lines in /etc/apparmor.d/usr.sbin.ntpd:
>   # samba4 ntp signing socket
>   /{,var/}run/samba/ntp_signd/socket rw,
>
> What is the correct procedure for configuring NTP for a Samba4 AD DC?
>
> Thanks,
>
> Andrew
>
> When you compiled Samba, did you not use the standard install path
(/usr/local/samba) or did you add an entry in smb.conf to use
/var/run/samba/ntp_signd for the socket?