tmakinen/puppet
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ntpd: Added option to disable strict ACLs for isc-ntpd

Browse source
This commit is contained in:
Ossi Salmi 2013-06-13 12:28:38 +03:00
parent 7a335ec644
commit 246816f417
2 changed files with 20 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

13
ntpd/templates/ntp.conf.erb
View file

@ -3,13 +3,20 @@
tinker panic 0
<% end -%>
<% if @ntp_strict == "true" -%>
# By default deny everything.
restrict -4 default ignore
restrict -6 default ignore
<% else -%>
# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict -4 default nomodify notrap nopeer noquery
restrict -6 default nomodify notrap nopeer noquery
<% end -%>
# Local users may interrogate the ntp server more closely.
restrict 127.0.0.1
restrict ::1
restrict 127.0.0.1 nomodify
restrict ::1 nomodify
# Drift file.
driftfile /var/lib/ntp/ntp.drift
@ -17,7 +24,9 @@ driftfile /var/lib/ntp/ntp.drift
# Remote servers.
<% @ntp_server.each do |server| -%>
server <%= server %>
<% if @ntp_strict == "true" -%>
restrict <%= server %> nomodify notrap nopeer noquery
<% end -%>
<% end -%>
<% if @is_virtual == "false" -%>