Linux下快速搭建ntp时间同步服务器

一、搭建时间同步服务器
1、安装ntp server

(1)编译安装ntp server
 

wget http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2.6.tar.gz
tar zxvf ntp-4.2.6.tar.gz
cd ntp-4.2.6
./configure --prefix=/usr/local/ntp --enable-all-clocks --enable-parse-clocks
make && make install

(2)rpm包安装ntp server

yum -y intsall ntp*

注：如以上下载地址无法访问，请从ntp官方下载网页（http://www.ntp.org/downloads.html）寻找下载地址。

2、修改ntp.conf配置文件
 

vi /etc/ntp.conf

①、第一种配置：允许任何IP的客户机都可以进行时间同步
将“restrict default kod nomodify notrap nopeer noquery”这行修改成：
 

restrict default nomodify

配置文件示例：/etc/ntp.conf

②、第二种配置：只允许10.10.10.*网段的客户机进行时间同步
增加一行：

restrict default nomodify notrap noquery   表示默认拒绝所有IP的时间同步

restrict 10.10.10.0 mask 255.255.255.0 nomodify

我的ntp.conf配置文件：

[root@localhost etc]# cat /etc/ntp.conf
# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
#restrict default kod nomodify notrap nopeer noquery
#restrict -6 default kod nomodify notrap nopeer noquery

# Permit all access over the loopback interface.  This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
#restrict -6 ::1

# Hosts on local network are less restricted.
#restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap

# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
server 0.cn.pool.ntp.org
server 3.asia.pool.ntp.org
server 2.asia.pool.ntp.org

restrict 0.cn.pool.ntp.org  mask 255.255.255.255 nomodify notrap
restrict 3.asia.pool.ntp.org mask 255.255.255.255 nomodify notrap
restrict 2.asia.pool.ntp.org  mask 255.255.255.255 nomodify notrap

restrict default nomodify notrap noquery

restrict 10.10.10.0  mask  255.255.255.0  nomodify

#broadcast 192.168.1.255 key 42  # broadcast server
#broadcastclient   # broadcast client
#broadcast 224.0.1.1 key 42  # multicast server
#multicastclient 224.0.1.1  # multicast client
#manycastserver 239.255.254.254  # manycast server
#manycastclient 239.255.254.254 key 42 # manycast client

# Undisciplined Local Clock. This is a fake driver intended for backup
# and when no outside source of synchronized time is available.
server 127.127.1.0 # local clock
#fudge 127.127.1.0 stratum 10 

# Drift file.  Put this in a directory which the daemon can write to.
# No symbolic links allowed, either, since the daemon updates the file
# by creating a temporary in the same directory and then rename()'ing
# it to the file.
driftfile /var/lib/ntp/drift

logfile  /var/log/ntp.log
# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
keys /etc/ntp/keys

# Specify the key identifiers which are trusted.
#trustedkey 4 8 42

# Specify the key identifier to use with the ntpdc utility.
#requestkey 8

# Specify the key identifier to use with the ntpq utility.
#controlkey 8

 

配置文件示例：/etc/ntp.conf

3、以守护进程启动ntpd
 

/usr/local/ntp/bin/ntpd -c /etc/ntp.conf -p /tmp/ntpd.pid

4、ntpd启动后，客户机要等几分钟再与其进行时间同步，否则会提示“no server suitable for synchronization found”错误。

二、配置时间同步客户机
 

crontab -e

增加一行，在每天的5点13分、9点13分、14点13分、19点13分与时间同步服务器进行同步
 

13 5,9,14,19 * * * /usr/sbin/ntpdate 10.10.10.2

or

*/30  *  *  *  *   /usr/sbin/ntpdate   10.10.10.2   每隔30分钟同步

备注：如果客户机没有ntpdate，可以下载ntpdate.tar.gz到/usr/sbin/目录，然后解压：
 

wget http://blog.s135.com/attachment/200708/ntdate.tar.gz
cd /usr/sbin/
tar zxvf ntpdate.tar.gz

或者直接 yum -y install ntpdate