]>
Commit | Line | Data |
---|---|---|
5ea6a4f0 ER |
1 | # For more information about this file, see the man pages |
2 | # ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5). | |
3 | ||
ca429a5e ER |
4 | # Drift file. Put this in a directory which the daemon can write to. |
5 | # No symbolic links allowed, either, since the daemon updates the file | |
6 | # by creating a temporary in the same directory and then rename()'ing | |
7 | # it to the file. | |
8 | driftfile /var/lib/ntp/drift | |
9 | ||
10 | # This command loads the NIST leapseconds file and initializes the leapsecond | |
11 | # values for the next leapsecond time, expiration time and TAI offset. The file | |
12 | # can be obtained directly from NIST national time servers using ftp as the | |
13 | # ASCII file pub/leap-seconds. | |
14 | leapfile /etc/ntp/ntp.leapseconds | |
15 | ||
5ea6a4f0 ER |
16 | # Permit time synchronization with our time source, but do not |
17 | # permit the source to query or modify the service on this system. | |
8ee97dcb | 18 | restrict default kod limited nomodify notrap nopeer noquery |
19 | restrict -6 default kod limited nomodify notrap nopeer noquery | |
7cbf232a | 20 | |
5ea6a4f0 ER |
21 | # Permit all access over the loopback interface. This could |
22 | # be tightened as well, but to do so would effect some of | |
23 | # the administrative functions. | |
7d4a7cf3 | 24 | restrict 127.0.0.1 |
5ea6a4f0 ER |
25 | restrict -6 ::1 |
26 | ||
27 | # Hosts on local network are less restricted. | |
28 | #restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap | |
7d4a7cf3 | 29 | |
192efee3 | 30 | # restrict default ignore |
8ee97dcb | 31 | # restrict ntp.example.com noquery noserve |
32 | # restrict ntp.example.net noquery noserve | |
192efee3 SZ |
33 | # restrict 127.0.0.1 |
34 | # restrict 127.127.1.0 | |
91f83bd9 | 35 | |
91f83bd9 JR |
36 | # Undisciplined Local Clock. This is a fake driver intended for backup |
37 | # and when no outside source of synchronized time is available. The | |
38 | # default stratum is usually 3, but in this case we elect to use stratum | |
39 | # 0. Since the server line does not have the prefer keyword, this driver | |
40 | # is never used for synchronization, unless no other other | |
41 | # synchronization source is available. In case the local host is | |
42 | # controlled by some external source, such as an external oscillator or | |
43 | # another protocol, the prefer keyword would cause the local host to | |
44 | # disregard all other synchronization sources, unless the kernel | |
45 | # modifications are in use and declare an unsynchronized condition. | |
143625c2 | 46 | |
7cbf232a SZ |
47 | server 127.127.1.0 # local clock |
48 | fudge 127.127.1.0 stratum 10 | |
143625c2 | 49 | |
5e46ff5d | 50 | # multicastclient 224.0.1.1 # listen on default 224.0.1.1 |
91f83bd9 JR |
51 | broadcastdelay 0.008 |
52 | ||
53 | # | |
54 | # Authentication delay. If you use, or plan to use someday, the | |
55 | # authentication facility you should make the programs in the auth_stuff | |
56 | # directory and figure out what this number should be on your machine. | |
263e8815 | 57 | disable auth |
91f83bd9 | 58 | |
ca429a5e | 59 | # Key file containing the keys and key identifiers used when operating |
0251f18b | 60 | # with symmetric key cryptography. |
04cdf15a | 61 | #keys /etc/ntp/keys |
ca429a5e ER |
62 | |
63 | # Specify the key identifiers which are trusted. | |
64 | #trustedkey 4 8 42 | |
65 | ||
66 | # Specify the key identifier to use with the ntpdc utility. | |
67 | #requestkey 8 | |
68 | ||
69 | # Specify the key identifier to use with the ntpq utility. | |
70 | #controlkey 8 | |
71 | ||
72 | # Enable writing of statistics records. | |
73 | #statistics clockstats cryptostats loopstats peerstats | |
2786e2b8 | 74 | |
8ee97dcb | 75 | # NTP pool project. See: http://www.pool.ntp.org/ |
76 | pool pool.ntp.org |