ntp服务

软件：  ntp  tzdata

配置文件

/etc/ntp.conf   ntp配置文件

/usr/share/zoneinfo  时区对应档案

/etc/sysconfig/clock  设定时区

/etc/localtime  开机后对应文件复制到此处

/bin/date 时间修改与显示

/sbin/hwclock 硬件时间

/usr/sbin/ntpd ntpd服务

/usr/sbin/ntpdate  客户端时间校证

 

 For more information about this file, see the man pages
# ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5).

driftfile /var/lib/ntp/drift

# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery

# Permit all access over the loopback interface.  This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
restrict -6 ::1

# Hosts on local network are less restricted.
#restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap

# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
server 0.centos.pool.ntp.org
server 1.centos.pool.ntp.org
server 2.centos.pool.ntp.org

driftfile 后面的文件记录误差时间

server 设定上层服务器  prefer 参数设定优先使用

restrict 设定放行范围

restrict 【ip】 mask 【parameter】

restrict 192.168.0.0 mask 255.255.255.0 nomodify notrap

parameter参数：

ignore 拒绝所有NTP联机

nomodify 客户端不能使用ntpc与ntpq修改服务器参数 但仍然可以网络校时

noquery 不能使用ntpc与ntpq查询服务器时间

notrap 不提供trap远程登录

notrust 拒绝没有认证客户端

kod 组织“kiss of death“攻击

nopeer 不与其他同一层ntp服务器同步

开启服务 /etc/init.d/ntpd start

开机启动 chkconfig on