ntpstat shows unsynchronised

[avij]

That ntpq -pn output is meaningless if you have just restarted ntpd. I told you to wait 10 minutes.

[mshafiuddin]

@avij : I did check after 10 minutes or after day as well and things are same, "Synchronized"

Below are the output from ntpq -as


[root@prod1 ~]# ntpq
ntpq> peers
remote refid st t when poll reach delay offset jitter
==============================================================================
dns-server.tawt .LOCL. 1 u 56 64 377 0.584 17285.1 0.813
time1.isu.net.s .INIT. 16 u - 1024 0 0.000 0.000 0.000
time2.isu.net.s .INIT. 16 u - 1024 0 0.000 0.000 0.000
ntpq> as

ind assid status conf reach auth condition last_event cnt
===========================================================
1 60453 9024 yes yes none reject reachable 2
2 60454 8011 yes no none reject mobilize 1
3 60455 8011 yes no none reject mobilize 1

for my NTP "60453 " it shows reachable and for other 2 it shows mobilize.

Could you please let know are the ntpstat or timedatectl only way to confirm ? that my CentOS clients syncing with NTP server ?

[avij]

You had this configuration at some point:

Friends : i have removed # to get updated rest of 3 servers /etc/ntp.conf file
server 10.33.1.30 iburst prefer
server 0.centos.pool.ntp.org iburst
server 1.centos.pool.ntp.org iburst
server 2.centos.pool.ntp.org iburst

Please let your ntpd run for around 10 minutes (to be safe) with this configuration, then post the ntpq -pn output.

The two additional NTP servers you have there now are not pool servers and I can't verify if they are working properly. Besides, it seems to be one server with two names.

Maybe you could try with the above pool configuration as I asked? Then wait 10 minutes and post the ntpq -pn output.

[mshafiuddin]

@ avij : Hi Brother, i think it wont help, because my NTP server is not connected to Internet.
My basic query is, is ntpstat and timedatectl only things to confirm the syncing ?

Secondly my ntp client still has below lines in ntp.conf
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
server 10.33.1.30 iburst prefer
server 0.centos.pool.ntp.org iburst
server 1.centos.pool.ntp.org iburst
server 2.centos.pool.ntp.org iburst

[avij]

@ avij : Hi Brother, i think it wont help, because my NTP server is not connected to Internet.
My basic query is, is ntpstat and timedatectl only things to confirm the syncing ?

No, ntpq -pn would be an excellent way to confirm the syncing. It's unfortunate that you're refusing to show its output when your client has been configured to use the pool servers. Seeing that information would give us valuable information if the problem is at the NTP server or at the NTP client. If your client can sync to pool servers but not to your own internal NTP server, the internal NTP server is to blame. If your client can reach the pool servers but can't sync to them, then your client is to blame. In the latter case I'd specifically point to ESXi, because the config you have would work just fine outside ESXi.

Secondly my ntp client still has below lines in ntp.conf
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
server 10.33.1.30 iburst prefer
server 0.centos.pool.ntp.org iburst
server 1.centos.pool.ntp.org iburst
server 2.centos.pool.ntp.org iburst

Then, if your client can connect to the internet, you should restart ntpd so that it would use this config, wait 10 minutes, then post the output of ntpq -pn.

[mshafiuddin]

@avij: Okay brother, I will ask to network team to enable internet on my NTP client, and will restart ntpd service > 10 mins wait -> output of ntpq -pn.
So will update you once i have done this.

[mshafiuddin]

Dear @avij and Thanks to All - NTP Issue fixed


Below is the settings in ntp.conf in client
( we have changed the IP because this IP from our DMZ zone so that NTP server can connect with external clock or i can say public NTP )

server 10.33.3.20 iburst prefer
server 0.asia.pool.ntp.org iburst
server 1.asia.pool.ntp.org iburst
server 2.asia.pool.ntp.org iburst

observations :
1 - ntp.conf file of clients should be updated with pool based servers, you can see mine is 0.asia.pool.ntp.org and these are geo location based
2 - your NTP server should have continues connectivity with internet ( The Network & firewall team need to enable the NTP in firewall ) here firewall is not local firewall of NTP server, it is the firewall in Network & Security

Thanks again all of you for time