-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 tags 764603 + unreproducible moreinfo thanks
Hi Leo, thanks for reporting the issue. Am 09.10.2014 um 16:21 schrieb leo weppelman: > After hardening the ntp configuration, I noticed that the nagios > check was no longer functioning. The line I added to ntp.conf was: > restrict default limited kod nomodify notrap nopeer noquery > > The culprit turned out to be the 'kod' option in the restrict > line. The default in /etc/ntp.conf on wheezy is: restrict -4 default kod notrap nomodify nopeer noquery restrict -6 default kod notrap nomodify nopeer noquery > The nagios check does not understand the contents of the 'KoD' > package and only reports that the server stratum is 0. Which is > part of the KoD packet. On wheezy I adjusted the ntp.conf like you said: $ grep limit /etc/ntp.conf | grep -v ^# restrict -4 default kod notrap nomodify nopeer noquery limited restrict -6 default kod notrap nomodify nopeer noquery limited Checking with check_ntp_time binary from the soon to be released next upstream: $ /usr/lib/nagios/plugins/check_ntp_time -H localhost NTP OK: Offset -0,0002338594495 secs|offset=-0,000234s;60,000000;120,000000; $ dpkg -l | grep monitoring-plugins-basic ii monitoring-plugins-basic 2.0+git20141006-1~2~bpo70+1 i386 Plugins for nagios compatible monitoring systems (basic) Even with the check_ntp_time binary from the 1.4.16-1 it seems to work: $ /tmp/check_ntp_time -H localhost NTP OK: Offset 4,751665983e-06 secs|offset=0,000005s;60,000000;120,000000; $ /tmp/check_ntp_time -V check_ntp_time v1.4.16 (nagios-plugins 1.4.16) Unfortunately I can reproduce your problem. Maybe you can test my latest packages for wheezy (see http://ftp.cyconet.org/instructions for installing experimental monitoring-plugins packages from my wheezy-backports repository). Even you can describe a bit more specific your environment to reproduce this issue. Many thanks, Jan. - -- Never write mail to <w...@spamfalle.info>, you have been warned! - -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GIT d-- s+: a C+++ UL++++ P+ L+++ E--- W+++ N+++ o++ K++ w--- O M V- PS PE Y++ PGP++ t-- 5 X R tv- b+ DI D+ G++ e++ h---- r+++ y++++ - ------END GEEK CODE BLOCK------ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBVDb26wxwVXtaBlE+AQjyOA/+OC9Prw4uOArz+yXRQHwZaxZ/+kVgKJ4y 00iKpJsj/+aHnNJjdSfp5jhcD3V3BH9CJ+p4UEqD6xkj7EidwjEbGl5qDoPljwle V0+/NXQRbajJOAAVNSF3Tl/ubImtBtkC3Wl/lAPQwlUUMPlTIV+0qpE/+fcJbQen 9MmTF3xtaUShkTRAQeusT8o/UizohXgdqsA04ude7qY96CDcvveFBk15oUOBL6js 41OCiHzGk5YSJn7UYOYViN6dfIL+GoaGXCeE36Hzv+XLswjOoBCzoOy396NCYOEj OBdroER4xtDbbZIfE2gXYXq5IMW9Eind611svoGWhI0UzFfn4PjT53ep6/Wuv5hm XLqPuqKd7LmzAuOUDR5rcqEirVEytOW7EKXZk6vtH27q+WeA9nlNDpHgpjzL+/rE 3IQznnlUneFK8qcRXstSaNXobyM8O1WxB1xNFw7OTCyHf64OnIVJ4gsWMBHGF2oR 0AACMHLtZ9xJ8PLNV8rBWrlMsr5gp3bLkNrvomDb6FbYFs1mFIr57d2NTh9DsYTb z0ZRno4N7iGqsUicXLg8m/aedyt/V0MPNrXZrSgJEtoYJvPy+ItY3JjsNOtINs7q MV+uOWjkUYx0as4ArTN6kYJINRvohvMA8UoooyYkMiv4XX8Q4tr+m17W3iipPdjq rmW1j6BMhlc= =xkAA -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org