Re: [zones-discuss] NTP client in non-global zone

2009-02-19 Thread James Carlson
Jeff Victor writes: > On Thu, Feb 19, 2009 at 9:54 AM, Timothy Kennedy > wrote: > > > > > > Nicolas Dorfsman wrote: > >> > >> It would be a great idea to have a easy solution to give these privileges > >> to a zone. > > > > in zonecfg for a given zone, > > set limitpriv=default,proc_lock_memory,pr

Re: [zones-discuss] NTP client in non-global zone

2009-02-19 Thread Jeff Victor
On Thu, Feb 19, 2009 at 9:54 AM, Timothy Kennedy wrote: > > > Nicolas Dorfsman wrote: >> >> It would be a great idea to have a easy solution to give these privileges >> to a zone. > > in zonecfg for a given zone, > set limitpriv=default,proc_lock_memory,proc_priocntl,sys_time > > David Comay has a

Re: [zones-discuss] NTP client in non-global zone

2009-02-19 Thread Timothy Kennedy
Nicolas Dorfsman wrote: It would be a great idea to have a easy solution to give these privileges to a zone. in zonecfg for a given zone, set limitpriv=default,proc_lock_memory,proc_priocntl,sys_time David Comay has an interesting blog post on this that can be found here: http://blogs.sun.co

Re: [zones-discuss] NTP client in non-global zone

2009-02-19 Thread James Carlson
Nicolas Dorfsman writes: > Le 19 févr. 09 à 14:02, James Carlson a écrit : > > To expound on that a bit: non-global zones can have access to networks > > that the global zone cannot talk to. In these cases, it's possible > > for NTP to be configured to serve out time even if it can't manage the >

Re: [zones-discuss] NTP client in non-global zone

2009-02-19 Thread Nicolas Dorfsman
Le 19 févr. 09 à 14:02, James Carlson a écrit : Nicolas Dorfsman writes: Le 19 févr. 09 à 09:13, david.co...@sun.com a écrit : What is best practice here? Do not run {x}ntpd in the zones. Actually there is a use-case for doing so - given that it's a network-facing appliction, one might w

Re: [zones-discuss] NTP client in non-global zone

2009-02-19 Thread James Carlson
Nicolas Dorfsman writes: > Le 19 févr. 09 à 09:13, david.co...@sun.com a écrit : > > >>> What is best practice here? > >> > >> Do not run {x}ntpd in the zones. > > > > Actually there is a use-case for doing so - given that it's a > > network-facing appliction, one might want to run xntpd in a non-

Re: [zones-discuss] NTP client in non-global zone

2009-02-19 Thread Nicolas Dorfsman
Le 19 févr. 09 à 09:13, david.co...@sun.com a écrit : What is best practice here? Do not run {x}ntpd in the zones. Actually there is a use-case for doing so - given that it's a network-facing appliction, one might want to run xntpd in a non-global zone for isolation reasons. +1 It would

Re: [zones-discuss] NTP client in non-global zone

2009-02-19 Thread David . Comay
What is best practice here? Do not run {x}ntpd in the zones. Actually there is a use-case for doing so - given that it's a network-facing appliction, one might want to run xntpd in a non-global zone for isolation reasons. ___ zones-discuss mailing li

Re: [zones-discuss] NTP client in non-global zone

2009-02-19 Thread Paul Davis
NTP client should not be configured in zones. One kernel, one clock. This is also from the FAQ: Q: Can some non-global zones have different date and/or time settings (i.e. different clocks)? A: Although different zones can have 'be' in different time zones, each zone gets its date and time c

Re: [zones-discuss] NTP client in non-global zone

2009-02-18 Thread Thomas Törnblom
Charles Meo skrev: Just had a look at the FAQ and found this: Q: Can a zone be an NTP server? A: Because the NTP server software also sets the time clock, which a non-global zone cannot be allowed to do, a zone cannot be an NTP server. (June 2005) What about client? If I don't enable ntp in

[zones-discuss] NTP client in non-global zone

2009-02-18 Thread Charles Meo
Just had a look at the FAQ and found this: Q: Can a zone be an NTP server? A: Because the NTP server software also sets the time clock, which a non-global zone cannot be allowed to do, a zone cannot be an NTP server. (June 2005) What about client? If I don't enable ntp in a non-global zone, is