[Freeipa-users] FreeIPA Server Install - Why --no-ntp?

[Simo Sorce]

On Mon, 2013-12-23 at 12:57 -0700, Jason Becker wrote:
> Section 2.1.4.5. NTP in the Fedora 18 / 3.1.5 Guide states:
> 
> "If a server is being installed on a virtual machine, that server *should
> not* run an NTP server. To disable NTP for FreeIPA, use the *--no-ntp*option."
> 
> There is no further explanation.
> 
> I would like to install FreeIPA Server on a vSphere VM where NTP is
> recommended as part of their timekeeping best practices for Linux guests.

Often happens that VMs do not do very good time keeping, so using a VM
as the central NTP server is not really advised, you should instead get
a good source for NTP external to the virtualized environment and you
that one  as the time source for your network.

Of course if your virtualization environment guarantees a good clock, go
for it.

The recommendation is in the spirit of avoiding issues in the common
case, that up to the time of the writing was not very good :)

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York