Requesting Help Configuring check_ntp_time

[jdalrymple]

They don't need to be specifically those servers. Do you have any servers in the configuration?

Quite commonly you'll have

0.pool.ntp.org
1.pool.ntp.org
2.pool.ntp.org

Anything "like" that should be fine - you do need to be able to resolve them though, and connect to them on port 123/TCP.

[rockxd]

I dont not have anything from pool.ntp.org

[jdalrymple]

Do you have any lines that begin with the word "server" and aren't commented out? If so, please post them. Somebody MAY already have NTP configured for you, and perhaps using internal time sources.

[rockxd]

I do have a server configured, but I'd have to look into if it is satisfying the NTP_protocols.

Ignoring that, if I were to add some pool.npt.org configurations, would that solve my problem as well?

[jdalrymple]

If your company firewalls allow you to then absolutely yes.

Code: Select all

server 0.pool.ntp.org

Just 1 should give you some semblance of reliable time.

[rockxd]

I added that server configuration to the ntp.conf file, reloaded nagios, and but to no avail. Still getting the same critical message.

[jdalrymple]

rockxd - sorry, I'm not sure I know what error you're talking about. What is the output if you run check_ntp from the command line?

Code: Select all

[root@localhost libexec]# ./check_ntp -H pool.ntp.org -w .01
NTP OK: Offset 0.002687722445 secs|offset=0.002688s;0.010000;120.000000;

If you're still having the "no response from server" error I would inquire with your network team about whether or not they let NTP queries out of the network.

[rockxd]

Also it is worth noting that after a while, the ntp.conf files seems to be deleting the ntp.pool configuration line.

[rockxd]

I am in libexec but that command is not working. It doesn't appear that check_ntp is located in my libexec.

[jdalrymple]

rockxd - your machine doesn't need to have ntp.conf at all for check_ntp to work. I was just trying to use ntpdate as a connectivity troubleshooting tool since telnet doesn't really work in this case. We could use nmap if you have it installed on the server:

Code: Select all

[jdalrymple@localhost ~]$ sudo nmap -sU -p 123 pool.ntp.org

Starting Nmap 5.51 ( http://nmap.org ) at 2015-03-27 12:49 CDT
Nmap scan report for pool.ntp.org (142.54.181.202)
Host is up (0.035s latency).
Other addresses for pool.ntp.org (not scanned): 65.19.178.219 129.250.35.250 108.61.73.244
PORT    STATE SERVICE
123/udp open  ntp

Nmap done: 1 IP address (1 host up) scanned in 0.18 seconds

Also, I pulled up a screenshot from your old check_time thread and it appears that check_ntp is there. Why would it have been removed?