- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Querying NTP in AM 8.1
Hi,
Looking to try and query NTP remotely using ntpq.
Doesn't seem to respond on it's actual IP, if I test locally it responds on 127.0.0.1 but not on its IP.
Anyone had this issue or got any instructions how to do this?
I have added my remote server into the ntp.conf file
restrict (IP address)
Thanks
- Tags:
- authentication manager 8.2 sp1
- CAS
- Cloud
- Cloud Auth
- Cloud Authentication
- Cloud Authentication Service
- Community Thread
- Discussion
- Forum Thread
- ntp
- RSA SecurID
- RSA SecurID Access
- SaaS
- SecurID
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes.
As root on command line
unrestrict IPv4 and restrict IPv6...
-----------------
edit /etc/ntp.conf
put a # in front of restrict 127.0.0.1
put a new line
restrict ::1
restart ntp
service ntp restart
Now ntpq will operate as expected.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have tried that and on the AM server tried to run ntpq -c rv then the IP of my AM server but it times out.
Any other ideas?
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
run ntpq to get on ntpq command line
>as
should like associations
>rv
should show your local ntp clock
>rv assid
should show details about the server you are associated with
>pe
should see peers
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks.
I am able to query itself by its IP now which is good but still cannot remotely. Errors shown below:
ntpq -c rv IP address
ntpq: read: No error k
OR
ntpq -c rv hostname
ntpq: read: No such file or directory
Similarly if I query from AM replica to another replica I get.
ntpq: read: Connection refused
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Don't attempt to use ntp and ntpq like an ordinary Suse linux system. It is not designed to be used across systems. RSA servers are pre-hardened and a lot of things are blocked, or removed from the OS.
Just use ntpq to probe ntp sources for the machine you are on. If you need to use advanced ntp diags, use a different operating system than an RSA server itself.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Added in an IP table rule and now it works!
