[Freeipa-users] FreeIPA Server Install - Why --no-ntp?

[Petr Spacek]

On 23.12.2013 21:57, Simo Sorce wrote:
> On Mon, 2013-12-23 at 12:57 -0700, Jason Becker wrote:
>> Section 2.1.4.5. NTP in the Fedora 18 / 3.1.5 Guide states:
>>
>> "If a server is being installed on a virtual machine, that server *should
>> not* run an NTP server. To disable NTP for FreeIPA, use the *--no-ntp*option."
>>
>> There is no further explanation.
>>
>> I would like to install FreeIPA Server on a vSphere VM where NTP is
>> recommended as part of their timekeeping best practices for Linux guests.
>
> Often happens that VMs do not do very good time keeping, so using a VM
> as the central NTP server is not really advised, you should instead get
> a good source for NTP external to the virtualized environment and you
> that one  as the time source for your network.
>
> Of course if your virtualization environment guarantees a good clock, go
> for it.
>
> The recommendation is in the spirit of avoiding issues in the common
> case, that up to the time of the writing was not very good :)

Would the option --no-ntp-server be better?

-- 
Petr^2 Spacek