Go to main content
Oracle® ZFS Storage Appliance Administration Guide, Release OS8.7.0

Exit Print View

Updated: July 2017
 
 

Configuring NTP (CLI)

  1. Under configuration services ntp, edit authorizations with the authkey command:
    hostname:configuration services ntp> authkey
    hostname:configuration services ntp authkey>
    
  2. From this context, new keys can be added with the create command:
    hostname:configuration services ntp authkey> create
    hostname:configuration services ntp authkey-000 (uncommitted)> get
                            keyno = (unset)
                             type = (unset)
                              key = (unset)
    hostname:configuration services ntp authkey-000 (uncommitted)> set keyno=1
                            keyno = 1 (uncommitted)
    hostname:configuration services ntp authkey-000 (uncommitted)> set type=A 
                             type = A (uncommitted)
    hostname:configuration services ntp authkey-000 (uncommitted)> set key=coconuts
                              key = ******** (uncommitted)
    hostname:configuration services ntp authkey-000 (uncommitted)> commit
    hostname:configuration services ntp authkey> 
  3. To associate authentication keys with servers via the CLI, the serverkeys property should be set to a list of values in which each value is a key to be associated with the corresponding server in the servers property.

    If a server does not use authentication, the corresponding server key should be set to 0. For example, to use the key created above to authenticate the servers "gefilte" and "carp":

    hostname:configuration services ntp> set servers=gefilte,carp
                          servers = gefilte,carp (uncommitted)
    hostname:configuration services ntp> set serverkeys=1,1
                       serverkeys = 1,1 (uncommitted)
    hostname:configuration services ntp> commit
    hostname:configuration services ntp>
  4. To associate authentication keys with servers, set the serverkeys property to a list of values in which each value is a key to be associated with the corresponding server in the servers property.

    If a server does not use authentication, the corresponding server key should be set to 0. For example, to use the key created above to authenticate the servers "gefilte" and "carp":

    hostname:configuration services ntp> set servers=gefilte,carp
                          servers = gefilte,carp (uncommitted)
    hostname:configuration services ntp> set serverkeys=1,1
                       serverkeys = 1,1 (uncommitted)
    hostname:configuration services ntp> commit
    hostname:configuration services ntp>
  5. To authenticate the server "gefilte" with key 1, "carp" with key 2 and "dory" with key 3:
    hostname:configuration services ntp> set servers=gefilte,carp,dory
                          servers = gefilte,carp,dory (uncommitted)
    hostname:configuration services ntp> set serverkeys=1,2,3
                       serverkeys = 1,2,3 (uncommitted)
    hostname:configuration services ntp> commit
    hostname:configuration services ntp>
  6. To authenticate the servers "gefilte" and "carp" with key 1, and to additionally have an unauthenticated NTP server "dory":
    hostname:configuration services ntp> set servers=gefilte,carp,dory
                          servers = gefilte,carp,dory (uncommitted)
    hostname:configuration services ntp> set serverkeys=1,1,0
                       serverkeys = 1,1,0 (uncommitted)
    hostname:configuration services ntp> commit
    hostname:configuration services ntp>