When the IPA server will be installed, the settings for allowing listening to client addresses will be automatically changed in ntp confiles.

On Wed, 05 Sep 2018, Andrey Bychkov via FreeIPA-devel wrote:

Hello all. I have a problem, the ipa client does not synchronize with the ipa server, because ipa server does not listen to the ipa client's address. By default the "allow" option is disabled in the chrony.conf. Why is it done? And is there an alternative? If "allow" is enable, all ok.

As it was pointed earlier, before your patches arrived we decided to
discontinue providing NTP server support. Thus, a default setup has no
server configuration enabled.

With the changes you are proposing in
https://github.com/freeipa/freeipa/pull/2169 and
https://www.freeipa.org/page/V4/NTP_Servers_Configuration
does this policy need a change?