[Samba] Time sync issue

miguel medalha medalist at sapo.pt
Thu Mar 6 16:01:40 UTC 2025


>> And feedback from Chrony list was, that it seems, that Windows was 
>> using "extended MS-SNTP authenticator", that they think is not supported 
>> by samba... After registry change it used classic MS-SNTP authenticator 
>> requests.

> I confirm that your tip does work and effectively solves the issue of
secure NTP.
> HKLM\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders\NtpClient/
SignatureAuthAllowed
> Change from 1 to 0.
> After distributing this registry setting via GPO, the Windows clients are
synchronizing correctly.

Can someone with the required access please update the Samba Wiki with this
information?

https://wiki.samba.org/index.php/Time_Synchronisation

This could  prevent a lot of grief and head scratching to many sysadmins...





More information about the samba mailing list