000037920 - NTP error in RSA SecurID: Crtical event notification NTP out of sync

Document created by RSA Customer Support Employee on Sep 10, 2019
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000037920
Applies ToRSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.4.0
 
Issue-Critical even notification of NTP server going out of sync at random times while the NTP server is already in sync

Getting Critical Event Notification: 

Attention! The following critical system event occurred: Not able to sync time. Either the NTP service is not running or unable to sync time from the NTP server(s) {IP of NTP} 
CauseThe AM is checking the NTP sync using the command below, which is disabled by default on the AM version and should be enabled in the ntp.conf file 

ntpdc
Resolution
  1. Login to the server that is reporting the NTP sync issue on
  2. Run the command 

    > ntpdc -c kerninfo

  3. If the output of the command above is:

    localhost: timed out, nothing received
    ***Request timed out

  4. Go into text editor on the ntp.conf file 

    vi /etc/ntp.conf

  5. Under #local users may interrogate the ntp server, add the line below.

    # Allow ntpdc to stay backwards compatible with SLE-11 before SP4.
    enable mode7

  6. Restart the ntpd services

    service ntpd restart

Notesmode7 
Enables processing of NTP mode 7 implementation-specific requests which are used by the deprecated ntpdc program. The default for this flag is disabled. This flag is excluded from runtime configuration using ntpq. The ntpq program provides the same capabilities as ntpdc using standard mode 6 requests

Attachments

    Outcomes