On Wed, 05 Sep 2018, Andrey Bychkov via FreeIPA-devel wrote:
Hello all. I have a problem, the ipa client does not synchronize with the ipa server, because ipa server does not listen to the ipa client's address. By default the "allow" option is disabled in the chrony.conf. Why is it done? And is there an alternative? If "allow" is enable, all ok.
As it was pointed earlier, before your patches arrived we decided to discontinue providing NTP server support. Thus, a default setup has no server configuration enabled.
With the changes you are proposing in https://github.com/freeipa/freeipa/pull/2169 and https://www.freeipa.org/page/V4/NTP_Servers_Configuration does this policy need a change? -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland _______________________________________________ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org