Red Hat Bugzilla – Bug 736617
ipa-client-install mishandles ntp service configuration
Last modified: 2015-01-04 18:50:54 EST
Description of problem: After running ipa-client-install on a system when ntpdate has already been configured using /etc/ntp/step-tickers, both ntpd and ntpdate are enabled after enrollment. This means that during system boot first ntpdate is run (using the non-IPA servers from step-tickers) and the ntpd is started which is using the configuration from ntp.conf with IPA settings. Also, after running ipa-client-install --uninstall, ntpd is left enabled even though it was not enabled before enrolling the system. Version-Release number of selected component (if applicable): RHEL 6.1 / IPA 2.1
Upstream ticket: https://fedorahosted.org/freeipa/ticket/1770
Fixed upstream: master: https://fedorahosted.org/freeipa/changeset/f93d71409aa78c4e5c860405cdcc3bc6ffc49280 ipa-2-1: https://fedorahosted.org/freeipa/changeset/12ac2bd20ac1ca810e566afa2e94a2452739040c
Verified using ipa-client-2.1.2-2.el6.x86_64 before installing: # service ntpd status ntpd is stopped # cat /etc/ntp/step-tickers # List of servers used for initial synchronization. clock.corp.redhat.com clock2.corp.redhat.com clock.redhat.com clock2.redhat.com after installing: # service ntpd status ntpd (pid 25162) is running... # cat /etc/ntp/step-tickers # Use IPA-provided NTP server for initial time rhel62-server1.testrelm after uninstalling: ntpd is stopped, and step-tickers is restored back
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: Cause: ipa-client-install does not configure /usr/sbin/ntpdate to use a correct NTP servers in /etc/ntp/step-tickers. Additionally, the the ipa-client-install does not store the state of the ntpd service before installation Consequence: When IPA client is installed, ntpdate may use incorrect servers to synchronize with. When the IPA client is uninstalled, ntpd may be set to incorrect state. Fix: ipa-client-install configures /usr/sbin/ntpdate to use the IPA NTP server for synchronization. When IPA client is uninstalled, both ntpdate configuration and ntpd status is restored Result: ntpdate run on IPA client machine synchronizes with correct NTP server and ntpdate and ntpd configuration is correctly restored after uninstallation
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2011-1533.html