时间服务器搭建
时间服务器搭建
1 配置，下载文件
2 启动服务器
3 启动slave
4 测试：修改主服务器时间，看从是否更新时间
5 制成脚本
192.168.101.155
192.168.101.129
sshpass -p root scp /usr/sbin/ntpd [email protected]:/usr/sbin/
sshpass -p root scp /usr/lib64/libopts.so.25 [email protected]:/usr/lib64/
sshpass -p root scp /usr/sbin/ntpdate [email protected]:/usr/sbin/
sshpass -p root scp /etc/ntp.conf [email protected]:/etc/
sshpass -p root scp /usr/sbin/ntpd [email protected]:/usr/sbin/
sshpass -p root scp /usr/lib64/libopts.so.25 [email protected]:/usr/lib64/
sshpass -p root scp /usr/sbin/ntpdate [email protected]:/usr/sbin/
sshpass -p root scp /etc/ntp.conf [email protected]:/etc/
systemctl stop firewalld.service #停止firewall
systemctl disable firewalld.service #禁止firewall开机启动
server:/etc/ntp.conf
# For more information about this file, see the man pages
# ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5).
driftfile /var/lib/ntp/drift
# Permit time synchronization with our time source, but do not# permit the source to query or modify the service on this system.
restrict default nomodify notrap nopeer noquery
# Permit all access over the loopback interface. This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
restrict ::1
server 127.127.1.0
fudge 127.127.1.0 stratum
# Hosts on local network are less restricted.
#restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
server 192.168.101.129
#broadcast 192.168.1.255 autokey
# broadcast server#broadcastclient
# broadcast client
#broadcast 224.0.1.1 autokey
# multicast server#multicastclient 224.0.1.1
# multicast client
#manycastserver 239.255.254.254
# manycast server
#manycastclient 239.255.254.254 autokey
# manycast client
# Enable public key cryptography.
#crypto
includefile /etc/ntp/crypto/pw
# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
keys /etc/ntp/keys
# Specify the key identifiers which are trusted.
#trustedkey 4 8 42
# Specify the key identifier to use with the ntpdc utility.
#requestkey 8
# Specify the key identifier to use with the ntpq utility.
#controlkey 8
# Enable writing of statistics records.
#statistics clockstats cryptostats loopstats peerstats
# Disable the monitoring facility to prevent amplification attacks using ntpdc
# monlist command when default restrict does not include the noquery flag. See
# CVE-2013-5211 for more details.
# Note: Monitoring will not be disabled with the limited restriction flag.
disable monitor
client:/etc/ntp.conf
# For more information about this file, see the man pages# ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5).
driftfile /var/lib/ntp/drift
# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.restrict default nomodify notrap nopeer noquery
# Permit all access over the loopback interface. This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
restrict ::1
# Hosts on local network are less restricted.
#restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
restrict 192.168.101.155 nomodify notrap noquery
server 127.127.1.0 # local clock
fudge 127.127.1.0 stratum 10
#broadcast 192.168.1.255 autokey
# broadcast server
#broadcastclient
# broadcast client
#broadcast 224.0.1.1 autokey
# multicast server
#multicastclient 224.0.1.1
# multicast client
#manycastserver 239.255.254.254
# manycast server
#manycastclient 239.255.254.254 autokey
# manycast client
# Enable public key cryptography.
#crypto
includefile /etc/ntp/crypto/pw
# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.keys /etc/ntp/keys
# Specify the key identifiers which are trusted.
#trustedkey 4 8 42
# Specify the key identifier to use with the ntpdc utility.
#requestkey 8
# Specify the key identifier to use with the ntpq utility.
#controlkey 8
# Enable writing of statistics records.
#statistics clockstats cryptostats loopstats peerstats# Disable the monitoring facility to prevent amplification attacks using ntpdc
# monlist command when default restrict does not include the noquery flag. See
# CVE-2013-5211 for more details.
# Note: Monitoring will not be disabled with the limited restriction flag.
disable monitor
timedatectl set-timezone 'Asia/Shanghai'
date -s "2017-11-09 11:10:10"
ntpdate -d 192.168.101.129
测试：
改服务器上时间，观测slave上时间是否慢慢的在修正。
部署：
1 时间服务器上启动
/usr/sbin/ntpd -g -x
2 slave启动
/usr/sbin/ntpd -g -x
可能遇到的问题：
1 Server dropped: strata too high
可能是没有配置
2 Server dropped: no data
可能是防火墙没关。