News for hackers. Stuff that matters.
Re:Explain like I’m 5: Kerberos (2013) by sk5t on Monday June 26, 2017 @09:56PM (#14642003)
I wouldn't shy away from serving SNTP from virtualized Windows domain controllers nowadays--it's okay for its designed purpose, although "good" time probably involves appliances / GPS or somesuch radio devices.
Re:Explain like I’m 5: Kerberos (2013) by xenophonf on Tuesday June 27, 2017 @09:21AM (#14645102)
w32time supports proper NTP (albeit NTPv3), and Windows Server 2016/Windows 10 Anniversary is capable of 1-millisecond accuracy:

https://docs.microsoft.com/en-us/windows-server/identity/ad-...

But if that isn't good enough for you, you can easily replace w32time with the reference NTP implementation, which is what I do to all of my Hyper-V hosts and physical forest root PDCs:

https://www.meinbergglobal.com/english/sw/ntp.htm

Re:Explain like I’m 5: Kerberos (2013) by toomuchtodo on Monday June 26, 2017 @09:58PM (#14642013)
You can do it with a GPS receiver and a Raspberry Pi for ~$80.

https://www.ntpsec.org/white-papers/stratum-1-microserver-ho...

http://www.satsignal.eu/ntp/Raspberry-Pi-NTP.html

https://hackaday.io/project/15137/instructions

Otherwise, if you're not interested in running your own hard, just use the NTP Pool service: http://www.pool.ntp.org/en/

Re:Explain like I’m 5: Kerberos (2013) by asdfaoeu on Monday June 26, 2017 @11:50PM (#14642443)
I feel like the subset of computing applications that require accurate time doesn't intersect with the amount of applications where you want to rely on a raspberry pi and can get signals directly from a satellite (i.e. not in a DC).

A more practical example would probably just be to find a professionally hosted stratum 1 server to sync off.

Re:Explain like I’m 5: Kerberos (2013) by sk5t on Monday June 26, 2017 @10:05PM (#14642045)
Aye, all good and worthy things. A Windows domain, however, typically establishes its own hierarchical time system (PDCe -> RWDCs (+ clients) -> RODCs (+ clients)), with only the PDCe relying on external time sources. Windows SNTP is not really designed for high precision/high accuracy anyway, so, you just kinda go "meh good enough" not too far into the adventure. Also the time management CLI tools stink.
Re:Explain like I’m 5: Kerberos (2013) by hug on Monday June 26, 2017 @11:49PM (#14642436)
Whoever was responsible for naming the service "w32time" and naming the command to manage the configuration of that service "w32tm" should be fired out of a cannon into the sun.
Re:Explain like I’m 5: Kerberos (2013) by Already__Taken on Tuesday June 27, 2017 @05:02AM (#14643510)
Does this still work ok if GPS goes off?
Re:Explain like I’m 5: Kerberos (2013) by toomuchtodo on Tuesday June 27, 2017 @08:59AM (#14644927)
You'll have drift if GPS is down. Then again, if GPS is down, your time server's drift is probably the least of your concerns.
Re:Explain like I’m 5: Kerberos (2013) by Already__Taken on Tuesday June 27, 2017 @06:15PM (#14650053)
These things do happen albeit fairly targeted https://www.ofcom.org.uk/spectrum/information/gps-jamming-ex...
Re:Explain like I’m 5: Kerberos (2013) by wbl on Tuesday June 27, 2017 @12:23PM (#14646802)
GPS reception can vary for reasons short of thermonuclear war. TXCO slaves are not that expensive.