| Re: [chrony-users] rejecting one of two trusted hosts |
[ Thread Index |
Date Index
| More chrony.tuxfamily.org/chrony-users Archives
]
- To: chrony-users@xxxxxxxxxxxxxxxxxxxx
- Subject: Re: [chrony-users] rejecting one of two trusted hosts
- From: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
- Date: Mon, 14 Feb 2022 16:45:51 +0100
- Authentication-results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=mlichvar@xxxxxxxxxx
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1644853555; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=j7Wkz76Iyty8JJHNNFePcF50dazKbwslpkOaXbfX45M=; b=Od2M0t4UKylMplF9BfrZP5EyBouTwcQFsUYmKcEbEb5HrerMksauwS+V7XNr+RzR1MEI7t EkRJw+pemBtROLEzAmrlYVgVmLHsS7L9Hrbk4eY3iJmVa2h7MO0gtYLo1Mqg78ykx9QlyM FAi2wzGUPb6hFbH9V0LR/Rer3c4Kqz8=
On Mon, Feb 14, 2022 at 10:29:37AM -0500, Aaron Ball wrote:
> >
> > If you are willing to accept a majority with time-alt1, why is it not
> > trusted?
> >
>
> Well, I'm asking because I'm not clear on how best to express what we want
> to do. Should we be using "prefer" instead of "trust"? The alternate time
> servers are fine servers, but far enough away that they won't be setting
> time precisely enough.
Yes, I think "prefer" would work better in what you describe here. If
you trust all specified servers, you don't need to mark them as
trusted. The trust option is about detecting falsetickers, not
selecting best sources for synchronization.
chrony prefers closer servers by default, in terms of the root
distance. With the combinelimit directive you can control how distant
sources are accepted relative to the closest server. The default limit
is 3, meaning that if the closest server has a distance of 1
millisecond, other sources up to 3 milliseconds will be combined with
it.
--
Miroslav Lichvar
--
To unsubscribe email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "unsubscribe" in the subject.
For help email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "help" in the subject.
Trouble? Email listmaster@xxxxxxxxxxxxxxxxxxxx.