[Freeipa-users] FreeIPA Server Install - Why --no-ntp?

[Simo Sorce]

On Mon, 2014-01-06 at 09:08 +0100, Petr Spacek wrote:
> On 23.12.2013 21:57, Simo Sorce wrote:
> > On Mon, 2013-12-23 at 12:57 -0700, Jason Becker wrote:
> >> Section 2.1.4.5. NTP in the Fedora 18 / 3.1.5 Guide states:
> >>
> >> "If a server is being installed on a virtual machine, that server *should
> >> not* run an NTP server. To disable NTP for FreeIPA, use the *--no-ntp*option."
> >>
> >> There is no further explanation.
> >>
> >> I would like to install FreeIPA Server on a vSphere VM where NTP is
> >> recommended as part of their timekeeping best practices for Linux guests.
> >
> > Often happens that VMs do not do very good time keeping, so using a VM
> > as the central NTP server is not really advised, you should instead get
> > a good source for NTP external to the virtualized environment and you
> > that one  as the time source for your network.
> >
> > Of course if your virtualization environment guarantees a good clock, go
> > for it.
> >
> > The recommendation is in the spirit of avoiding issues in the common
> > case, that up to the time of the writing was not very good :)
> 
> Would the option --no-ntp-server be better?

I think just the Docs need to be clearer on the VM thing.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York