Topic: e-smith behind IPCop - NTP issues

[Stephen Peilschmidt]

Hi guys,

I have installed the latest version (5.5) of e-smith in server only mode. I have an IPCop firewall and as per their recommendations I have installed the e-smith server on the orange subnet, with my local network on the green interface. I have configured access to the green subnet as a trusted network on the e-smith server. Email and web services work fine in the local network and also accessing them externally.

In the e-smith documentation it states that the server can be both an NTP client and server to the local network. I have configured the e-smith box to update to a time server on the internet - not sure if it is actually doing it though.

My problem is that when I install an NTP client on a W2000 box and try and get it to synchronise with the e-smith server it does not see the e-smith server as a valid NTP server.

Could this be because the server is on a different subnet?

Or is it possible that as I have installed the e-smith server in server only mode that NTP is not operational?

Is there anywhere where I could check on the e-smith server - preferably via the browser interface?

Has anyone got a similar setup to work correctly?

Unfortunately the manual is not very helpful in setting up the time synchronisation for clients other than to mention that it can be done.

Any help would be appreciated.

Thanks

[Jáder Marasca]

Stephen Peilschmidt wrote:
>
(...)
> In the e-smith documentation it states that the server can be
> both an NTP client and server to the local network. I have
> configured the e-smith box to update to a time server on the
> internet - not sure if it is actually doing it though.

Just check the log page of IPCop

> My problem is that when I install an NTP client on a W2000
> box and try and get it to synchronise with the e-smith server
> it does not see the e-smith server as a valid NTP server.

Why don´t use: NET TIME \(ip_of_IPCOP) /SET on your autoexec.bat or better in your NETLOGON.BAT (if your SME is PDC!)

I hope this help you!

Jáder

[Chris Meredith]

If you look in the date and time section of the Server-Manager it will show if its setup for ntp.  You can also check the Masq file for entries allow NTP.  One quick way to check is to change the time and see if it gets set back to the correct time.  NTP also can do logging I believe.  You might go check the man file or a NTP How-To to see how to check that.

I know that just editing the NTP conf files without changing the ipchains rules won't work (tried that myself).  If you setup NTP in the server manger it takes care of everything, and seems to work for me.

[Kees Blokland]

From my messages.log files:

Jul 24 22:29:51 bigbox ntpd[760]: time reset 0.526577 s

if it's working you will see it!