Re:Explain like I’m 5: Kerberos (2013)
by sk5t on Monday June 26, 2017 @09:56PM
(#14642003)
I wouldn't shy away from serving SNTP from virtualized Windows domain controllers nowadays--it's okay for its designed purpose, although "good" time probably involves appliances / GPS or somesuch radio devices.
[ Parent
| on HN ]
w32time supports proper NTP (albeit NTPv3), and Windows Server 2016/Windows 10 Anniversary is capable of 1-millisecond accuracy:
https://docs.microsoft.com/en-us/windows-server/identity/ad-...
But if that isn't good enough for you, you can easily replace w32time with the reference NTP implementation, which is what I do to all of my Hyper-V hosts and physical forest root PDCs:
Re:Explain like I’m 5: Kerberos (2013)
by toomuchtodo on Monday June 26, 2017 @09:58PM
(#14642013)
You can do it with a GPS receiver and a Raspberry Pi for ~$80.
https://www.ntpsec.org/white-papers/stratum-1-microserver-ho...
http://www.satsignal.eu/ntp/Raspberry-Pi-NTP.html
https://hackaday.io/project/15137/instructions
Otherwise, if you're not interested in running your own hard, just use the NTP Pool service: http://www.pool.ntp.org/en/
I feel like the subset of computing applications that require accurate time doesn't intersect with the amount of applications where you want to rely on a raspberry pi and can get signals directly from a satellite (i.e. not in a DC).
A more practical example would probably just be to find a professionally hosted stratum 1 server to sync off.
Aye, all good and worthy things. A Windows domain, however, typically establishes its own hierarchical time system (PDCe -> RWDCs (+ clients) -> RODCs (+ clients)), with only the PDCe relying on external time sources. Windows SNTP is not really designed for high precision/high accuracy anyway, so, you just kinda go "meh good enough" not too far into the adventure. Also the time management CLI tools stink.
Whoever was responsible for naming the service "w32time" and naming the command to manage the configuration of that service "w32tm" should be fired out of a cannon into the sun.
Re:Explain like I’m 5: Kerberos (2013)
by Already__Taken on Tuesday June 27, 2017 @05:02AM
(#14643510)
Does this still work ok if GPS goes off?
Re:Explain like I’m 5: Kerberos (2013)
by toomuchtodo on Tuesday June 27, 2017 @08:59AM
(#14644927)
You'll have drift if GPS is down. Then again, if GPS is down, your time server's drift is probably the least of your concerns.
Re:Explain like I’m 5: Kerberos (2013)
by Already__Taken on Tuesday June 27, 2017 @06:15PM
(#14650053)
These things do happen albeit fairly targeted https://www.ofcom.org.uk/spectrum/information/gps-jamming-ex...