NTP Problems and questions

johnpoz · Nov 19, 2015, 3:21 PM

Well I am really curious what the actual ntp config is.. A search for supermicro ntp finds a issue with fixing the old ntp being used for ddos, looks like 313 for the code - you say your on 3.4 so what is your specific board. Would like to download the firmware to check the config for ntp they have in there, and possible what version of ntp is included. You can tell its v4 in your sniff… But there are lots of different versions of v4.. current is 4.2.8p4 -- but I have been running dev versions 4.3 for quite some time..

https://www.supermicro.com/support/bios/firmware0.aspx

If you state what board you have can download the specific firmware and take a look see.

doktornotor · Nov 19, 2015, 6:19 PM

Sounds like a dead CMOS battery to me in the first place.

johnpoz · Nov 19, 2015, 10:11 PM

yeah thats a valid point, it seems odd that it would reset to 2006 date after it had synced just because you restarted ntp to point it to a different server..

Visseroth · Nov 20, 2015, 11:18 PM

Holy crap! It must be a bug!

I just checked the battery voltage from the IPMI and it's reading 3.24v

The motherboard is the X8TH-iF

So I just got it working. I had the NTP set to 0.pool.ntp.org and it was syncing. I just for the heck of it changed it to my firewall and it was successful for the first time.

So here is my thought….

The IPMI wouldn't sync because the date was to far out of range. Setting it manually then trying to change it back to NTP locally just reset the clock and made it try to set the time via NTP.
Setting it to a external NTP (for some reason) allowed it to sync the clock. Once synced for a while then changing the NTP to my local address without turning the service off kept the time without resetting back to the factory default time.

Why it's doing this? I have no idea, but it's stupid and annoying!

Oh, and have to correct my IPMI version, it's 3.04

Firmware Revision : 3.04
Firmware Build Time : Dec 23 2014 19:33:27

Visseroth · Nov 20, 2015, 11:22 PM

Well I take it back, I just checked back and it errored again

![Time Sync Error.JPG](/public/imported_attachments/1/Time Sync Error.JPG)
![Time Sync Error.JPG_thumb](/public/imported_attachments/1/Time Sync Error.JPG_thumb)

eduardr · Jan 23, 2016, 3:02 PM

Same issue here. SuperMicro IPMI can no longer sync with the pfSense ntp server. Tried from two SuperMicro servers with different firmware/motherboards.

Works fine syncing to 0.pool.ntp.org though! (had to reboot the IPMI interface to get it to work with this server).

Something must have changed with the pfSense ntp server because it used to work fine with IPMI. Not sure when or what change would have affected things though.

Linux servers have no problem syncing with pfSense NTP, only the IPMI management interface has a problem.

Visseroth · Jan 23, 2016, 3:23 PM

I had a SuperMicro tech look into it. He couldn't sync either. I finally had to just sync to another server on my network that was syncing to PfSense.

charliem · Jan 23, 2016, 3:26 PM

Please see these threads:
https://forum.pfsense.org/index.php?topic=104710.0 and
https://forum.pfsense.org/index.php?topic=91781.0

Newer versions of ntpd on FreeBSD have a problem with older versions of ntpdate (like what's built into your IPMI). Try turning off KOD packets in access restrictions, as detailed here:
https://forum.pfsense.org/index.php?topic=104710.msg584433#msg584433

eduardr · Jan 23, 2016, 3:33 PM

To follow up, a couple of the SuperMicro servers which use a different IPMI interface sync fine to the pfSense IP address.
These servers are likely using a different IPMI chip and firmware.

So problem appears related to one or more of SuperMicro's IPMIs.

I'll try the KOD modification suggestion described above, thanks!

Visseroth · Jan 25, 2016, 7:22 PM

Worked for me! ;D