|Applies To||RSA Product Set: RSA SecurID Access|
RSA Product/Service Type: Identity Router
|Issue||One of the items that should be configured on an Identity Router (IDR), is the address of an accessible Network Time Protocol (NTP) server to keep the IDR time accurate and synchronized with the rest of the deployment. The NTP server is set for an IDR when you Configure Network Settings Using the Identity Router Setup Console.|
Having accurate time is important for authentication session management and other purposes.
This article explains how to check if an IDR has been successfully connecting to an NTP server and adjusting its time accordingly.
|Tasks||The IDR's NTP daemon, known as ntpd, runs once daily to connect to its configured NTP server and adjust the IDR's time as necessary.|
Runtime events for ntpd are logged in the /var/log/messages file.
To check if ntpd has been able to connect to the NTP server and adjust time successfully each day, check /var/log/messages and search for any events containing ntpd. This must be done for every IDR, as follows:
A successful run of ntpd on an IDR will typically contain events such as the following in its /var/log/messages file (there may be some events from other components interleaved with these). Note the events time stamped starting at Jan 28 16:15:11: one states that ntpd synchronized with a specific IP address, and the next one states there was a non-zero time slew.
If the IDR has not been able to connect to the configured NTP server because the NTP server was not listed in the configured DNS, you will get something like the following example instead of the lines above. Note that here, instead of a server IP address in the synchronized event, it shows that it synchronized with LOCAL(0) and time slew is always 0:
|Notes||The stratum number reported by the NTP server in the synchronized event is an indication of how many NTP server hops there are between it and the reference clock. A lower number means it is closer, and so the time the NTP server delivers is more accurate.|