Lukas Slebodnik via FreeIPA-users wrote:
On (15/01/18 10:53), Rob Crittenden via FreeIPA-users wrote:
> Anvar Kuchkartaev via FreeIPA-users wrote:
>> If you installed freeipa service or client with option --no-ntp then it won't
use ntp to synchronise clock.
>>
>> If you have already ipa server with ntpd installed:
>>
>> ā€ˇhttps://www.redhat.com/archives/freeipa-users/2014-August/msg00197.html
>
> As I read it he has the reverse problem. He installed with NTP support
> and now wants to remove it.
>
> You need to remove NTP as a managed IPA service by removing the entry:
>
> cn=NTP,cn=ipa.example.com,cn=masters,cn=ipa,cn=etc,dc=example,dc=com
>
> ipactl will no longer try to start the service.
>
> Note that without good time then you may run into serious issues with
> Kerberos and replication.
>
I do not have any time related problems with chronyd + fedora *default* configuration.
That's fine but it doesn't address the original problem: he doesn't want
anything managing the clock on his system at all:
"some ipa servers in my environment are not permitted to change
the clock."
rob