目录
一. 安装相关软件
二. 修改配置文件
三. 启动
四. 测试
一. 安装相关软件
1. 没有rpm文件时
需要到与需要安装ntp服务操作系统相同的且有网络的服务器上,下载所需依赖包
yum install ntp ntpdate --downloadonly --downloaddir=/package
#语法释义:
#--downloadonly: 表示仅下载,不安装
#--downloaddir: 表示下载依赖包的路径
如此就可以将安装ntp和ntpdate的所有依赖包下载到/package下面了,然后将/package/下的所有依赖包拷贝到需要安装ntp服务的服务器中
2. 如果有依赖包了就可以直接执行安装,命令如下:
rpm -ivh /package/*.rpm
#/package/*.rpm 指的是依赖包的绝对路径
二. 修改配置文件
安装好依赖之后,就是对配置文件进行修改了,我这里列出自己的安装环境:
主服务:192.168.52.140
客户端节点A:192.168.52.141
客户端节点B:192.168.52.142
说明: 由主服务提供校时服务,客户端节点A,B每5~10分钟向主服务同步一次时间
我将分别列出主服务与客户端节点的配置文件(目录是:/etc/ntp.conf)
1. 主服务
# For more information about this file, see the man pages
# ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5).
driftfile /var/lib/ntp/drift
# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
#restrict default nomodify notrap nopeer noquery
# Permit all access over the loopback interface. This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
restrict ::1
# Hosts on local network are less restricted.
#restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap #这一行默认的注释掉
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
#server 0.centos.pool.ntp.org iburst #这一行默认的注释掉
#server 1.centos.pool.ntp.org iburst #这一行默认的注释掉
#server 2.centos.pool.ntp.org iburst #这一行默认的注释掉
#server 3.centos.pool.ntp.org iburst #这一行默认的注释掉
restrict 192.168.52.140 nomodify notrap nopeer noquery #新增该行
server 127.127.1.0 iburst local clock #新增该行
restrict 192.168.52.0 mask 255.255.255.0 nomodify #新增该行
Fudge 127.127.1.0 stratum 10 #新增该行
#broadcast 192.168.1.255 autokey # broadcast server
#broadcastclient # broadcast client
#broadcast 224.0.1.1 autokey # multicast server
#multicastclient 224.0.1.1 # multicast client
#manycastserver 239.255.254.254 # manycast server
#manycastclient 239.255.254.254 autokey # manycast client
# Enable public key cryptography.
#crypto
includefile /etc/ntp/crypto/pw
# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
keys /etc/ntp/keys
# Specify the key identifiers which are trusted.
#trustedkey 4 8 42
# Specify the key identifier to use with the ntpdc utility.
#requestkey 8
# Specify the key identifier to use with the ntpq utility.
#controlkey 8
# Enable writing of statistics records.
#statistics clockstats cryptostats loopstats peerstats
# Disable the monitoring facility to prevent amplification attacks using ntpdc
# monlist command when default restrict does not include the noquery flag. See
# CVE-2013-5211 for more details.
# Note: Monitoring will not be disabled with the limited restriction flag.
disable monitor
2. 客户端A(192.168.52.141)?
# For more information about this file, see the man pages
# ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5).
driftfile /var/lib/ntp/drift
# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
#restrict default nomodify notrap nopeer noquery
# Permit all access over the loopback interface. This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
restrict ::1
# Hosts on local network are less restricted.
#restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap #这一行默认的注释掉
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
#server 0.centos.pool.ntp.org iburst #这一行默认的注释掉
#server 1.centos.pool.ntp.org iburst #这一行默认的注释掉
#server 2.centos.pool.ntp.org iburst #这一行默认的注释掉
#server 3.centos.pool.ntp.org iburst #这一行默认的注释掉
restrict 192.168.52.141 nomodify notrap nopeer noquery #新增该行
server 192.168.52.140 #新增该行
restrict 192.168.52.0 mask 255.255.255.0 nomodify #新增该行
Fudge 192.168.52.140 stratum 10 #新增该行
#broadcast 192.168.1.255 autokey # broadcast server
#broadcastclient # broadcast client
#broadcast 224.0.1.1 autokey # multicast server
#multicastclient 224.0.1.1 # multicast client
#manycastserver 239.255.254.254 # manycast server
#manycastclient 239.255.254.254 autokey # manycast client
# Enable public key cryptography.
#crypto
includefile /etc/ntp/crypto/pw
# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
keys /etc/ntp/keys
# Specify the key identifiers which are trusted.
#trustedkey 4 8 42
# Specify the key identifier to use with the ntpdc utility.
#requestkey 8
# Specify the key identifier to use with the ntpq utility.
#controlkey 8
# Enable writing of statistics records.
#statistics clockstats cryptostats loopstats peerstats
# Disable the monitoring facility to prevent amplification attacks using ntpdc
# monlist command when default restrict does not include the noquery flag. See
# CVE-2013-5211 for more details.
# Note: Monitoring will not be disabled with the limited restriction flag.
disable monitor
3. 客户端B(192.168.52.142)?
# For more information about this file, see the man pages
# ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5).
driftfile /var/lib/ntp/drift
# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
#restrict default nomodify notrap nopeer noquery
# Permit all access over the loopback interface. This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
restrict ::1
# Hosts on local network are less restricted.
#restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap #这一行默认的注释掉
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
#server 0.centos.pool.ntp.org iburst #这一行默认的注释掉
#server 1.centos.pool.ntp.org iburst #这一行默认的注释掉
#server 2.centos.pool.ntp.org iburst #这一行默认的注释掉
#server 3.centos.pool.ntp.org iburst #这一行默认的注释掉
restrict 192.168.52.142 nomodify notrap nopeer noquery #新增该行
server 192.168.52.140 #新增该行
restrict 192.168.52.0 mask 255.255.255.0 nomodify #新增该行
Fudge 192.168.52.140 stratum 10 #新增该行
#broadcast 192.168.1.255 autokey # broadcast server
#broadcastclient # broadcast client
#broadcast 224.0.1.1 autokey # multicast server
#multicastclient 224.0.1.1 # multicast client
#manycastserver 239.255.254.254 # manycast server
#manycastclient 239.255.254.254 autokey # manycast client
# Enable public key cryptography.
#crypto
includefile /etc/ntp/crypto/pw
# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
keys /etc/ntp/keys
# Specify the key identifiers which are trusted.
#trustedkey 4 8 42
# Specify the key identifier to use with the ntpdc utility.
#requestkey 8
# Specify the key identifier to use with the ntpq utility.
#controlkey 8
# Enable writing of statistics records.
#statistics clockstats cryptostats loopstats peerstats
# Disable the monitoring facility to prevent amplification attacks using ntpdc
# monlist command when default restrict does not include the noquery flag. See
# CVE-2013-5211 for more details.
# Note: Monitoring will not be disabled with the limited restriction flag.
disable monitor
三. 启动
#首先在主服务中先手动校时一次,并同步到硬件上
date -s '20220302 18:44:40' && hwclock -w
#启动服务(在所有服务中都执行)
systemctl start ntpd
#设置开机自启(在所有服务中都执行)
systemctl enable ntpd
#查看服务状态(在所有服务中都执行)
systemctl status ntpd
四. 测试
所有服务都启动之后,等待10分钟左右,就会发现所有的客户端(A,B)的时间已经和主服务同步了
#查看服务器当前时间
date
?如此就算大功告成啦,喜欢的就点个赞和关注吧(*￣︶￣)
|