Urgent: ntp and telnet port issue

leonshen

Hi All,

   I have 2 issues need experts help.

1. ntp cannot sync the ntp server,  

[root@hkg028 tmp]# ntpq -p
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
geionms.hkctr.i 0.0.0.0         16 u    - 1024    0    0.000    0.000 4000.00
198.151.229.19  0.0.0.0         16 u    - 1024    0    0.000    0.000 4000.00
ohiomgr4.ohctr. 0.0.0.0         16 u    - 1024    0    0.000    0.000 4000.00
ohiomgr5.ohctr. 0.0.0.0         16 u    - 1024    0    0.000    0.000 4000.00
*LOCAL(0)        LOCAL(0)        10 l   50   64  377    0.000    0.000   0.004



[root@hkg028 tmp]# more /var/log/ntp
18 Jan 15:15:12 ntpd[2182]: running as uid(3/gid(3 euid(3/egid(3.
18 Jan 15:18:27 ntpd[2182]: kernel time discipline status change 41
18 Jan 15:19:32 ntpd[2182]: kernel time discipline status change 1
18 Jan 15:21:39 ntpd[2182]: ntpd exiting on signal 15
18 Jan 15:22:02 ntpd[2858]: running as uid(3/gid(3 euid(3/egid(3.
18 Jan 15:25:31 ntpd[2858]: kernel time discipline status change 41
18 Jan 15:26:37 ntpd[2858]: kernel time discipline status change 1
18 Jan 15:52:08 ntpd[2858]: ntpd exiting on signal 15
18 Jan 15:52:11 ntpd[3107]: running as uid(3/gid(3 euid(38)/egid(38).
18 Jan 15:55:26 ntpd[3107]: kernel time discipline status change 41
18 Jan 15:56:29 ntpd[3107]: kernel time discipline status change 1

2. We cannot telnet to the master server 192.168.139.10 port 13782 until we allow it under hosts.allow file, please share any hints.

[root@hkg028 tmp]#  more /etc/hosts.allow
#
# hosts.allow   This file describes the names of the hosts which are
#               allowed to use the local INET services, as decided
#               by the '/usr/sbin/tcpd' server.
#
sshd:           10.24.88.143 10.24.88.0/255.255.255.0 198.151.229.19
ALL: 192.168.139.10

leonshen

大家好, 问题1,我已经解决了,
关于linux下时间服务器的配置：

check ntp.conf find the following configuration is error.

# Prohibit general access to this service.
restrict default ignore

1, must disable
restrict default ignore

like this:
#restrict default ignore（默认是禁止的）

2, must allow client to access.
# -- CLIENT NETWORK -------
# Permit systems on this network to synchronize with this
# time service.  Do not permit those systems to modify the
# configuration of this service.  Also, do not use those
# systems as peers for synchronization.
# restrict 192.168.1.0 mask 255.255.255.0 notrust nomodify notrap
restric 192.168.1.0 mask 255.255.255.0 notrust nomodify notrap(请注意，如果加no query则禁止访问)

第2个问题,还没有找到答案,各位大侠有什么想法. ?