[Freeipa-devel] Re: The "allow" option in chrony.conf is disabled by default

[Andrey Bychkov]

When the IPA server will be installed, the settings for allowing 
listening to client addresses will be automatically changed in ntp confiles.


05.09.2018 11:00, Alexander Bokovoy пишет:
>  On Wed, 05 Sep 2018, Andrey Bychkov via FreeIPA-devel wrote:
> > Hello all. I have a problem, the ipa client does not synchronize with 
> > the ipa server, because ipa server does not listen to the ipa 
> > client's address. By default the "allow" option is disabled in the 
> > chrony.conf. Why is it done? And is there an alternative? If "allow" 
> > is enable, all ok.
>  As it was pointed earlier, before your patches arrived we decided to
>  discontinue providing NTP server support. Thus, a default setup has no
>  server configuration enabled.
>
>  With the changes you are proposing in
>  https://github.com/freeipa/freeipa/pull/2169 and
>  https://www.freeipa.org/page/V4/NTP_Servers_Configuration
>  does this policy need a change?
>
>