Article Number
000037920
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.4.0
Issue
-Critical even notification of NTP server going out of sync at random times while the NTP server is already in sync
Getting Critical Event Notification:
Attention! The following critical system event occurred: Not able to sync time. Either the NTP service is not running or unable to sync time from the NTP server(s) {IP of NTP}
Cause
The AM is checking the NTP sync using the command below, which is disabled by default on the AM version and should be enabled in the ntp.conf file
ntpdc
Resolution
- Login to the server that is reporting the NTP sync issue on
- Run the command
> ntpdc -c kerninfo
- If the output of the command above is:
localhost: timed out, nothing received
***Request timed out
- Go into text editor on the ntp.conf file
vi /etc/ntp.conf
- Under #local users may interrogate the ntp server, add the line below.
# Allow ntpdc to stay backwards compatible with SLE-11 before SP4.
enable mode7
- Restart the ntpd services
service ntpd restart
Notes
mode7
Enables processing of NTP mode 7 implementation-specific requests which are used by the deprecated ntpdc program. The default for this flag is disabled. This flag is excluded from runtime configuration using ntpq. The ntpq program provides the same capabilities as ntpdc using standard mode 6 requests
