[Samba] help with chrony time synchronisation

[Rémi]

Hi,

I have a samba 4.21.4 dc on debian bookworm with chrony, and my domain
joined Windows 10 and 11 workstations seem to be using NT5DS.

I really didn't do anything fancy, just installed bookworm + samba from
backports, joined the domain as a dc, transfered FSMO roles from a very
old dc that I was decomissionning, removed the old dc, and completely
forgot about time :-)

A few weeks later, problems started to appear (no kidding... ), I
installed and configured chrony, and worstations started to sync. It
just works.

Thanks,
-- 
Rémi 

Kacper Wirski via samba <samba at lists.samba.org> writes:

> It's the thread I mentioned earlier, after re-reading the thread, I
> gather that NT5DS  just doesn't work with chrony with samba 4.21
> onwards (now I'm running 4.22.3) and clients need to switch to NTP, or
> is there a different solution that makes nt5ds, default windows domain
> joined pc's setting, that I somehow miss in this thread?
>
> Although there were mentions in the same thread, that it works for
> some people.
>
> I noticed, that when comparing to information about samba/chrony here
>
> http://samba.bigbird.es/doku.php?id=samba:install-chrony
>
> that requests, that my client send (in nt5ds mode) don't have "key id"
> and "authentication" in packets captured by tcpdump.
>
>
> Also definately my setup was working before.
>
> I would be very glad If someone confirmed that has working time
> service with similar config (samba 4 on debian bookworm with chrony
> 4.22.3+ and windows clients using nt5ds, default for domain joined
> clients).