[Samba] MS-SNTP signd block

[Łukasz Rolbiecki]

Hello,

How can I solve the following message ?

"MS-SNTP signd operations currently block ntpd degrading service to all
clients"

distribution centos 6.3 x64
selinux disabled
ntpd Ver. 4.2.6p5
samba Version 4.0.3 (source)

# ps aux
ntp 8399 0.0 0.1 30432 2120 ? Ss 14:07 0:00 ntpd -u
ntp:ntp -p /var/run/ntpd.pid -g

ls -al /usr/local/samba/var/lib/ntp_signd/
razem 8
drwxr-x--- 2 root ntp 4096 03-01 14:09 .
drwxr-xr-x 4 root root 4096 03-01 14:09 ..
srwxrwxrwx 1 root root 0 03-01 14:09 socket

# cat /etc/ntp.conf
server 127.127.1.0
fudge 127.127.1.0 stratum 10
server 0.pool.ntp.org iburst prefer
server 1.pool.ntp.org iburst prefer
driftfile /var/lib/ntp/ntp.drift
logfile /var/log/ntp
ntpsigndsocket /usr/local/samba/var/lib/ntp_signd/
restrict default kod nomodify notrap nopeer mssntp
restrict 127.0.0.1
restrict 0.pool.ntp.org mask 255.255.255.255 nomodify notrap nopeer noquery
restrict 1.pool.ntp.org mask 255.255.255.255 nomodify notrap nopeer noquery

Any suggestions?

Thanks,
Roli

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

[fe...@epepm.cupet.cu]

> Hello,
>
> How can I solve the following message ?
>
> "MS-SNTP signd operations currently block ntpd degrading service to all
> clients"
>

I think it is normal behaviour.

Felix.

[Andrew Bartlett]

On Fri, 2013-03-01 at 08:39 -0500, fe...@epepm.cupet.cu wrote:
> > Hello,
> >
> > How can I solve the following message ?
> >
> > "MS-SNTP signd operations currently block ntpd degrading service to all
> > clients"
> >
>
> I think it is normal behaviour.

Correct. Essentially the ntpd code is not optimal, it would be great if
it would use an async framework and fully non-blocking operations. This
wasn't practical in the codebase at the time I wrote the patch.

Therefore, if samba was running, but took time to reply (perhaps because
it was waiting on an open transaction) then the process of serving other
clients would be delayed.

Andrew Bartlett

--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org

[Łukasz Rolbiecki]

W dniu 3/1/2013 10:29 PM, Andrew Bartlett pisze:

> On Fri, 2013-03-01 at 08:39 -0500, fe...@epepm.cupet.cu wrote:
>>> Hello,
>>>
>>> How can I solve the following message ?
>>>
>>> "MS-SNTP signd operations currently block ntpd degrading service to all
>>> clients"
>>>
>> I think it is normal behaviour.
> Correct. Essentially the ntpd code is not optimal, it would be great if
> it would use an async framework and fully non-blocking operations. This
> wasn't practical in the codebase at the time I wrote the patch.
>
> Therefore, if samba was running, but took time to reply (perhaps because
> it was waiting on an open transaction) then the process of serving other
> clients would be delayed.

Ok good to know, thanks to You for the explanation.

--
Thanks,
Roli