Setting up NTP on ESX server 3.0.2

[pdowning]

I have setup 15 servers so far and have had no troubles. This one though is giving me fits. When I issue the command "ntpq -c pe" to start the ntp setu process, I get a return of "No Association ID's returned". What is that? The knowledge base shows nothing on it.

Thanks for helping out a newcomer to the community.

Paul

[mbtomczyk]

What we have done to configure the NTP setup is just VI the /etc/ntp.conf file and the /etc/ntp/stepticketer and then just restart the ntpd deamon

[mikepodoherty]

There is a knowledgebase article that works:

http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=1339&slice...

If the link doesn't work - go to vmware\support\knowledgebase and search for article 1339.

I've used the article to setup ntp on multiple systems.

HTH

Mike

[pdowning]

Actually, those steps are the ones I have followed, yet I still get that blasted msg. Does anyone have a clue as to what it means?

[mbtomczyk]

Paul, The only thing that I can think of there is something in your ntp.conf file.

Here is what I have in my ntp.conf file

restrict kod nomodify notrap noquery nopeer

restrict 127.0.0.1

server 0.north-america.pool.ntp.org

server 1.north-america.pool.ntp.org

server 2.north-america.pool.ntp.org

server 3.north-america.pool.ntp.org

driftfile /var/lib/ntp/drift

and I have the 1st 2 servers in my steptickers file

Hope this helps.

Also do you have the firewall ports open on your esx server.

[pdowning]

Thanks. I'll double check my ntp.conf file. Also, the firewall ports are open.

[rpartmann]

hi,

the ntp.conf file has a section that configures a fake driver.

If you leave that on, you will see the "LOCAL" peer.

When you comment it out, ntpq "peers" will return "No association ID's returned".

hope that helps,

Reinhard.

[pdowning]

restrict default kod nomodify notrap

server 10.1x1.1.xx

server 10.1x1.1.xx

server 10.1x1.1.xx

driftfile /var/lib/ntp/drift

broadcastdelay 0.008

That is the ntp.conf file we use and has worked just fine till this install. Any more ideas?

[jjbakker]

Did you opened the firewall port 123/NTP?

[pdowning]

Yes, it is open.

[jhanekom]

Can you add "restrict 127.0.0.1" and try again?

[jlanders]

pdowning,

You need a "restrict 127.0.0.1" entry in your configuration. As KB

Article 1339 explains, this allows you to contact the local DNS

resolver in the Service Console. Without it, none of your the NTP

servers get added. With no NTP servers, you have no associations:

that's what the NTP tools are trying to tell you.

Joe

[pdowning]

I'll give that a shot and see what happens. Thanks guys.

[pdowning]

I added the restrict 127 line. Now I get this error:

(1654) ERROR: Unknown service 'ntpclient'

when I type : esxcfg-firewall --enableService ntpclient

This is frustrating .....

[Dave_Mishchenko · Accepted solution]

It's case sensitive - esxcfg-firewall --enableService ntpClient

[pdowning]

Duh .. thanks. I apparently can't read my own typing

[pdowning]

Thanks fellas. This has been one of the most helpful support forums I've run across. I'll return to stump you again, I'm sure.