Package: ntp-server
Version: 1:4.2.0a+stable-2
Severity: wishlist

I am in the process of upgrading some machines from Woody to Sarge. 
After upgrading my internal NTP server and some client machines, I
discovered that the ntptrace program on upgraded clients was timing out
when attempting to get info about on the internal server.  ntptrace
worked fine from the internal server itself -- and also on machines
running Woody's version the ntp package.

After poking around a bit I discovered that the old ntptrace binary has
been replaced with a new perl script built on top of the "ntpq" command,
which lead me to realize that the reason ntptrace was failing on client
machines was the "restrict default [...] noquery" line in the default
ntp.conf.  Adding a restrict line for my internal network with the
"noquery" changed to "nomodify" in the config file on the internal
server allowed ntptrace to work again from the Sarge clients.

I think the current "restrict default" line is a good idea, but it might
also be nice to mention somewhere that it prevents ntptrace from working
on machines that use this one as server.  This could be an additional
comment in the sample ntp.conf, or mentioned in 
/usr/share/doc/ntp/README.Debian.gz, or whatever.

(The current ntp.conf does have a comment pointing the reader to 
the accopt.html file -- but that file doesn't mention ntptrace anywhere,
so it still wasn't obvious that the "restrict" setting was causing the
problem)

Thanks.

                                                Nathan


-- System Information:
Debian Release: 3.1
Architecture: i386 (i486)
Kernel: Linux 2.4.27
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages ntp-server depends on:
ii  ntp                    1:4.2.0a+stable-2 Network Time Protocol: network uti
ii  ntp-simple             1:4.2.0a+stable-2 Network Time Protocol: daemon for 

-- no debconf information

----------------------------------------------------------------------------
Nathan Stratton Treadway  -  [EMAIL PROTECTED]  -  Mid-Atlantic region
Ray Ontko & Co.  -  Software consulting services  -   http://www.ontko.com/
 GPG Key: http://www.ontko.com/~nathanst/gpg_key.txt   ID: 1023D/ECFB6239
 Key fingerprint = 6AD8 485E 20B9 5C71 231C  0C32 15F3 ADCD ECFB 6239

Attachment: pgpvjseKuyZng.pgp
Description: PGP signature

Reply via email to