[Samba] Samba 4 ad client not syncing time

[L.P.H. van Belle]

Hai, 

Check a few things. 

In ntp.conf 
Rule 1 : DONT USE POOL NTP SERVERS ! 
Rule 2 : Use a stratum 1 ntp server close to you. 
Look up here : 
http://support.ntp.org/bin/view/Servers/StratumOneTimeServers 

Now point all your DC's to the selected ntp server(s)

Add/change these lines to ntp.conf 
restrict -4 default kod notrap nomodify nopeer noquery mssntp
restrict -6 default kod notrap nomodify nopeer noquery mssntp

and check if this is set in ntp.conf 
ntpsigndsocket /var/lib/samba/ntp_signd 

if you not using ipv6 for example, add these to ntp.conf 
interface listen lo
interface listen eth0
interface ignore wildcard
interface ignore ipv6


Make sure in smb.conf is : 

        time server = yes 

now  restart ntp/samba or the whole server. 
Reboot the pc. 
Check time again. 
If you pc time is off more then 5 min a manualy adjustment often is needed. 

'w32tm /config /update /manualpeerlist:IP-of-your-DC-with-ntp-running' 
Should not be needed. 
Time is synced over the AD. 
A good example can be found here. 
https://blogs.technet.microsoft.com/nepapfe/2013/03/01/its-simple-time-configuration-in-active-directory/ 

Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Dante F. B. Colò
> Verzonden: dinsdag 9 augustus 2016 15:14
> Aan: lingpanda101 at gmail.com
> CC: samba at lists.samba.org
> Onderwerp: Re: [Samba] Samba 4 ad client not syncing time
> 
> yes, Ntpd is running on the same server that Samba is running which is ,I
> forgot to add "mssntp" on restrict parameter in ntp.conf, after that some
> client machines synced time with the server but not all of them  , i can
> sync time manually on any windows machine using command "net time
> \\ntpserver /set /yes" but the w32tm command has no effect. Sorry for my
> late response, i'm struggling here to make this thing works, anyway thanks
> for the help.
> 
> 
> ----- Original Message -----
> From: lingpanda101 at gmail.com
> To: "Dante F. B. Colò" <dante.colo at stwbrasil.com>
> Cc: samba at lists.samba.org
> Sent: Monday, August 1, 2016 2:20:58 PM
> Subject: Re: [Samba] Samba 4 ad client not syncing time
> 
> On 8/1/2016 1:14 PM, Dante F. B. Colò wrote:
> > Hello James
> >
> > I read this article, it's not working on Windows clients.
> >
> >
> >
> > ----- Original Message -----
> > From: lingpanda101 at gmail.com
> > To: samba at lists.samba.org
> > Sent: Monday, August 1, 2016 2:05:09 PM
> > Subject: Re: [Samba] Samba 4 ad client not syncing time
> >
> > On 8/1/2016 12:56 PM, Dante F. B. Colò wrote:
> >> Hello folks
> >>
> >> I've deployed Samba 4.0.26 using Sernet binary packages and running on
> active directory mode , everything works fine except that client machines
> don't sync time with server , ntp_signd is enabled in smb.conf , Ntpd is
> installed and running , is there anyway to debug this functionality on
> Samba ?
> >>
> > Did you follow the wiki?
> >
> > https://wiki.samba.org/index.php/Time_synchronisation
> >
> > Are these Linux or Windows clients having trouble, or both?
> >
> 
> Is this a windows 7,8 or 10 client? From a elevated windows command
> prompt type
> 
> 'w32tm /config /update /manualpeerlist:IP-of-your-DC-with-ntp-running'
> 
> I assume it's working on the Linux side?
> 
> --
> -James
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba