[ntp:questions] help needed for ntpd ipv6 setup
E-Mail Sent to this address will be added to the BlackLists
Null at BlackList.Anitech-Systems.invalid
Thu Dec 2 03:09:34 UTC 2010
Marc-Andre Alpers wrote:
> Es schrieb horhe:
>> I think this is the same "bug" : http://bugs.gentoo.org/326209
>> I have got very similar problem.
>
> Thanks. This was the point. My Linux Kernel is grsec
> enabled by default.
> When i load a non grsec Kernel, then ntp works fine on ipv6.
A quick google shows plenty of potentially related results
<http://www.google.com/search?q=%2Bgrsec+NTP+IPv6>
e.g. <http://bugs.gentoo.org/show_bug.cgi?format=multiple&id=326209>
.... with grsec NTPd as root IPv6 worked, NTPd as user IPv6 didn't ...
<BlockQuote>
This problem occurs because ntpd does not have the needed
privileges to access /proc/net/if_inet6 when not run as
root (USE=caps).
You can reconfigure to getthe same level of security by
deselecting CONFIG_GRKERNSEC_PROC_USER and selecting
CONFIG_GRKERNSEC_PROC_USERGROUP instead.
You can then add the ntp user to the GID for the special
group to get it to read the needed info from /proc.
</BlockQuote>
The above aside;
Have you tried a current NTPd 4.2.7 ?
In the last three years since the NTP 4.2.4p4
that you mentioned you were using,
a lot of things have been worked on,
IPv6 among them, e.g.
<http://ntp.bkbits.net:8080/ntp-dev/?PAGE=search&EXPR=IPv6&SEARCH=ChangeSet+comments>
ChangeSet
1.2082.4.156 IPv6 addresses in selecting default multicast source addresses.
1.2259 [Bug 1715] sntp utilitiesTest.IPv6Address failed.
1.2082.22.21 [Bug 1080] ntpd on ipv6 routers very chatty.
1.2082.4.97 [Bug 715] libisc Linux IPv6 interface iteration drops multicast flags.
1.2110.1.1 support for IPv6.
1.2082.4.41 Remove ipv6.c as unnecessary
1.2060.10.1 [Bug 1358] AIX 4.3 sntp/networking.c IPV6_JOIN_GROUP undeclared.
1.2060.3.1 [Bug 1343] lib/isc build breaks on systems without IPv6 headers.
1.2058 [Bug 1342] ignore|drop one IPv6 address on an interface blocks all
1.2037 fix ipv4/ipv6 which are not equivalent in the libopts sense
1.2026.1.1 [Bug 1324] support bracketed IPv6 numeric addresses for restrict.
1.2005 Ensure IPv6 localhost address ::1 is included in libisc's Windows IPv6
1.1935 [Bug 1272] gsoc_sntp IPv6 build problems under HP-UX 10.
1.1926 [Bug 1270] CID 70: gsoc_sntp recv_bcst_data mdevadr.ipv6mr_interface
1.1881.2.2 it safe to initialize ipv4_works and ipv6_works before init_io()
1.1881.2.1 3 weeks of changes including IPv6 on Windows which was
1.1873.1.1 some previously separate IPv4/IPv6 paths into a single codepath.
1.1875 [Bug 1200] Enable IPv6 in Windows port
1.1867 [Bug 320] restrict default should apply to both IPv4 and IPv6
1.1735.1.63 IPv6 interfaces were being looked for twice; fix bug 474
1.1735.4.4 [Bug 828] Fix IPv4/IPv6 address parsing
1.1739.1.6 hack ISC_PLATFORM_HAVEIPV6
1.1436.9.5 [Bug 977] Fix mismatching #ifdefs for builds without IPv6
1.1690 [Bug 977] Fix mismatching #ifdefs for builds without IPv6
1.1642 [Bug 828] correct IPv6 address parsing
1.1600 [Bug 771] compare scopeid if available for IPv6 addresses
1.1600 Bug 771: compare scopeid if available for IPv6 addresses
1.1379.1.49 when attempting to send to an IPv6 address of a local interface.
--
E-Mail Sent to this address <BlackList at Anitech-Systems.com>
will be added to the BlackLists.
More information about the questions
mailing list