The officially official Devuan Forum!

bai4Iej2need

Member

From: Ortenau

Registered: 2021-04-25

Posts: 142  

ntp and intranet

I have a variety of Ethernet clients in my intranet.
They should all have the same time.
I have an elderly fritz.box router, which can and does provide time service in the intranet on its port 123 , udp
It has a time server pool upstream.

I checked sntp :

LANG=C apt show sntp
Package: sntp
Version: 1:4.2.8p15+dfsg-2~1.2.2+dfsg1-1+deb12u1
...
Source: ntpsec (1.2.2+dfsg1-1+deb12u1)
 ...
APT-Sources: http://de.deb.devuan.org/merged daedalus/main amd64 Packages
Description: Network Time Protocol client (transitional package)
 This is a transitional package to transition to NTPsec.
 It can be safely removed once all uses of sntp(1) have been converted to
 run ntpdig instead.
Replaces: ntp (<< 1:4.2.8p15+dfsg-2~), time-daemon

transitional : don't install

LANG=C apt show ntpsec
Package: ntpsec
Version: 1.2.2+dfsg1-1+deb12u1
Priority: optional
...
Breaks: ntp (<< 1:4.2.8p15+dfsg-2~)
Replaces: ntp (<< 1:4.2.8p15+dfsg-2~), time-daemon

This service contacts about 19 pool servers. I felt this was too much

I set the ntpsec.conf to resolve only to the Fritz!box
But Instead it contacted a google time server and named it *fritz.box in the output of ntpq -p
what a scam.

So I searched an found

LANG=C apt show ntpsec-ntpdate -a
Package: ntpsec-ntpdate
Version: 1.2.2+dfsg1-1+deb12u1
Priority: optional

...
APT-Sources: http://deb.devuan.org/merged daedalus/main amd64 Packages
Description: client for setting system time from NTP servers
 NTP, the Network Time Protocol, is used to keep computer clocks
 accurate by synchronizing them over the Internet or a local network,
 or by following an accurate hardware receiver that interprets GPS,
 DCF-77, or similar time signals.
 .
 ntpdate is a simple NTP client that sets a system's clock to match
 the time obtained by communicating with one or more NTP servers.  It
 is not sufficient, however, for maintaining an accurate clock in the
 long run.  ntpdate by itself is useful for occasionally setting the
 time on machines that do not have full-time network access, such as
 laptops.
 .
 This is the NTPsec version of ntpdate.  NTPsec is a secure, hardened,
 and improved implementation derived from the original NTP project.
 .
...

This contacts about 21 servers in the wild

finally  I installed openntpd, which accepted the setting of listening to the local router fritz!box.
which is exactly one hop away.

ntpctl -s peers
peer
   wt tl st  next  poll          offset       delay      jitter
192.168.4.1 
 *  1 10  3   28s   31s        -0.093ms     0.525ms     0.102ms

This whole idea of unveiling the existence of all the internal hardware by each one for himself contacting is b?llsh?t

---

The devil, you know, is better than the angel, you don't know. by a British Citizen, I don't know too good.
One generation abandons the enterprises of another like stranded vessels. By Henry David Thoreau, WALDEN, Economy. Line 236 (Gutenberg text Version)
broken by design :
https://bugs.debian.org/cgi-bin/bugrepo … bug=958390

tux_99

Member

Registered: 2025-06-17

Posts: 87  

Re: ntp and intranet

Yes openntp is the best one, I have been using it for decades, it's from OpenBSD, one of the few FOSS projects that still uses common sense (Devuan obviously is one of them too ).

Last edited by tux_99 (Today 15:13:39)