Richard B. Gilbert <rgilber...@comcast.net> wrote:
> Rob wrote:
>> Maynard <maynard7f...@gmail.com> wrote:
>>> On 1/7/10, the date on our domain controller jumped to 12/7/10, and
>>> was there for about 11 minutes before it reverted back to the current
>>> date.  At the time this happened, our NTP server was pointed to
>>> pool.ntp.org.  We also have a few Novell servers that were pointed to
>>> the same IP addresses as our Server 2003 Domain Controller, and the
>>> NTP server for our Novell network also jumped ahead.  Are we the only
>>> ones that had this issue on this day?  Or are there others out there
>>> that experienced the same problem on the 7th.  Thanks
>> 
>> This can happen any time.  pool.ntp.org is a large collection of
>> servers that joined a voluntary pool of servers.  Any single server
>> in this pool can send the wrong date and time if it likes to, or if
>> there is an error.
> <snip>
>> It is better to use at least 3 different servers from the pool.  I.e.
>> use servernames 1.pool.ntp.org 2.pool.ntp.org 3.pool.ntp.org for 3
>> different servers.
>> 
>> That way, of one fails or plays nasty games, your time will not be
>> affected.
>
> Better still to use at least four servers, whether from the pool or not.
> Using only three servers leaves you vulnerable; if one of them fails you 
> are left with two and no possibility of "voting one out" if one the 
> remaining servers fails, for it is written that a man with two clocks 
> can never be certain what time it is!

I am not going to play the game "it is better to use 25 servers because
if you use 24 and 23 of them fail it leaves you vulnerable".

_______________________________________________
questions mailing list
questions@lists.ntp.org
http://lists.ntp.org/listinfo/questions

Reply via email to