eb6d21b4ca
Subversion is being difficult here so take a hammer and get it in. MFC after: 2 weeks Security: CVE-2009-3563
569 lines
17 KiB
Plaintext
569 lines
17 KiB
Plaintext
@node ntpdsim Invocation
|
|
@section Invoking ntpdsim
|
|
@pindex ntpdsim
|
|
@cindex NTP daemon simulation program
|
|
@ignore
|
|
#
|
|
# EDIT THIS FILE WITH CAUTION (ntpdsim-opts.texi)
|
|
#
|
|
# It has been AutoGen-ed Tuesday December 8, 2009 at 08:13:15 AM EST
|
|
# From the definitions ntpdsim-opts.def
|
|
# and the template file aginfo.tpl
|
|
@end ignore
|
|
This program has no explanation.
|
|
|
|
|
|
|
|
This section was generated by @strong{AutoGen},
|
|
the aginfo template and the option descriptions for the @command{ntpdsim} program. It documents the ntpdsim usage text and option meanings.
|
|
|
|
This software is released under a specialized copyright license.
|
|
|
|
@menu
|
|
* ntpdsim usage:: ntpdsim usage help (-?)
|
|
* ntpdsim authnoreq:: authnoreq option (-A)
|
|
* ntpdsim authreq:: authreq option (-a)
|
|
* ntpdsim bcastsync:: bcastsync option (-b)
|
|
* ntpdsim configfile:: configfile option (-c)
|
|
* ntpdsim debug-level:: debug-level option (-d)
|
|
* ntpdsim driftfile:: driftfile option (-f)
|
|
* ntpdsim dvar:: dvar option (-V)
|
|
* ntpdsim endsimtime:: endsimtime option (-S)
|
|
* ntpdsim freqerr:: freqerr option (-T)
|
|
* ntpdsim interface:: interface option (-I)
|
|
* ntpdsim ipv4:: ipv4 option (-4)
|
|
* ntpdsim ipv6:: ipv6 option (-6)
|
|
* ntpdsim jaildir:: jaildir option (-i)
|
|
* ntpdsim keyfile:: keyfile option (-k)
|
|
* ntpdsim logfile:: logfile option (-l)
|
|
* ntpdsim modifymmtimer:: modifymmtimer option (-M)
|
|
* ntpdsim ndelay:: ndelay option (-Y)
|
|
* ntpdsim nice:: nice option (-N)
|
|
* ntpdsim nofork:: nofork option (-n)
|
|
* ntpdsim novirtualips:: novirtualips option (-L)
|
|
* ntpdsim panicgate:: panicgate option (-g)
|
|
* ntpdsim pdelay:: pdelay option (-Z)
|
|
* ntpdsim phasenoise:: phasenoise option (-C)
|
|
* ntpdsim pidfile:: pidfile option (-p)
|
|
* ntpdsim priority:: priority option (-P)
|
|
* ntpdsim propagationdelay:: propagationdelay option (-r)
|
|
* ntpdsim quit:: quit option (-q)
|
|
* ntpdsim servertime:: servertime option (-O)
|
|
* ntpdsim set-debug-level:: set-debug-level option (-D)
|
|
* ntpdsim simbroadcastdelay:: simbroadcastdelay option (-B)
|
|
* ntpdsim simslew:: simslew option (-H)
|
|
* ntpdsim slew:: slew option (-x)
|
|
* ntpdsim statsdir:: statsdir option (-s)
|
|
* ntpdsim trustedkey:: trustedkey option (-t)
|
|
* ntpdsim updateinterval:: updateinterval option (-U)
|
|
* ntpdsim user:: user option (-u)
|
|
* ntpdsim var:: var option (-v)
|
|
* ntpdsim walknoise:: walknoise option (-W)
|
|
@end menu
|
|
|
|
@node ntpdsim usage
|
|
@subsection ntpdsim usage help (-?)
|
|
@cindex ntpdsim usage
|
|
|
|
This is the automatically generated usage text for ntpdsim:
|
|
|
|
@exampleindent 0
|
|
@example
|
|
ntpd - NTP daemon program - Ver. 4.2.5p247-RC
|
|
USAGE: ntpdsim [ -<flag> [<val>] | --<name>[@{=| @}<val>] ]...
|
|
Flg Arg Option-Name Description
|
|
-4 no ipv4 Force IPv4 DNS name resolution
|
|
- prohibits these options:
|
|
ipv6
|
|
-6 no ipv6 Force IPv6 DNS name resolution
|
|
- prohibits these options:
|
|
ipv4
|
|
-a no authreq Require crypto authentication
|
|
- prohibits these options:
|
|
authnoreq
|
|
-A no authnoreq Do not require crypto authentication
|
|
- prohibits these options:
|
|
authreq
|
|
-b no bcastsync Allow us to sync to broadcast servers
|
|
-c Str configfile configuration file name
|
|
-d no debug-level Increase output debug message level
|
|
- may appear multiple times
|
|
-D Str set-debug-level Set the output debug message level
|
|
- may appear multiple times
|
|
-f Str driftfile frequency drift file name
|
|
-g no panicgate Allow the first adjustment to be Big
|
|
- may appear multiple times
|
|
-i --- jaildir built without --enable-clockctl or --enable-linuxcaps
|
|
-I Str interface Listen on an interface name or address
|
|
- may appear multiple times
|
|
-k Str keyfile path to symmetric keys
|
|
-l Str logfile path to the log file
|
|
-L no novirtualips Do not listen to virtual interfaces
|
|
-n no nofork Do not fork
|
|
-N no nice Run at high priority
|
|
-p Str pidfile path to the PID file
|
|
-P Num priority Process priority
|
|
-q no quit Set the time and quit
|
|
-r Str propagationdelay Broadcast/propagation delay
|
|
Str saveconfigquit Save parsed configuration and quit
|
|
-s Str statsdir Statistics file location
|
|
-t Str trustedkey Trusted key number
|
|
- may appear multiple times
|
|
-u --- user built without --enable-clockctl or --enable-linuxcaps
|
|
-U Num updateinterval interval in seconds between scans for new or dropped interfaces
|
|
Str var make ARG an ntp variable (RW)
|
|
- may appear multiple times
|
|
Str dvar make ARG an ntp variable (RW|DEF)
|
|
- may appear multiple times
|
|
-x no slew Slew up to 600 seconds
|
|
opt version Output version information and exit
|
|
-? no help Display extended usage information and exit
|
|
-! no more-help Extended usage information passed thru pager
|
|
|
|
Options are specified by doubled hyphens and their name
|
|
or by a single hyphen and the flag character.
|
|
|
|
The following option preset mechanisms are supported:
|
|
- examining environment variables named NTPD_*
|
|
|
|
|
|
|
|
please send bug reports to: http://bugs.ntp.org, bugs@@ntp.org
|
|
@end example
|
|
@exampleindent 4
|
|
|
|
@node ntpdsim ipv4
|
|
@subsection ipv4 option (-4)
|
|
@cindex ntpdsim-ipv4
|
|
|
|
This is the ``force ipv4 dns name resolution'' option.
|
|
|
|
This option has some usage constraints. It:
|
|
@itemize @bullet
|
|
@item
|
|
is a member of the ipv4 class of options.
|
|
@end itemize
|
|
|
|
Force DNS resolution of following host names on the command line
|
|
to the IPv4 namespace.
|
|
|
|
@node ntpdsim ipv6
|
|
@subsection ipv6 option (-6)
|
|
@cindex ntpdsim-ipv6
|
|
|
|
This is the ``force ipv6 dns name resolution'' option.
|
|
|
|
This option has some usage constraints. It:
|
|
@itemize @bullet
|
|
@item
|
|
is a member of the ipv4 class of options.
|
|
@end itemize
|
|
|
|
Force DNS resolution of following host names on the command line
|
|
to the IPv6 namespace.
|
|
|
|
@node ntpdsim authreq
|
|
@subsection authreq option (-a)
|
|
@cindex ntpdsim-authreq
|
|
|
|
This is the ``require crypto authentication'' option.
|
|
|
|
This option has some usage constraints. It:
|
|
@itemize @bullet
|
|
@item
|
|
must not appear in combination with any of the following options:
|
|
authnoreq.
|
|
@end itemize
|
|
|
|
Require cryptographic authentication for broadcast client,
|
|
multicast client and symmetric passive associations.
|
|
This is the default.
|
|
|
|
@node ntpdsim authnoreq
|
|
@subsection authnoreq option (-A)
|
|
@cindex ntpdsim-authnoreq
|
|
|
|
This is the ``do not require crypto authentication'' option.
|
|
|
|
This option has some usage constraints. It:
|
|
@itemize @bullet
|
|
@item
|
|
must not appear in combination with any of the following options:
|
|
authreq.
|
|
@end itemize
|
|
|
|
Do not require cryptographic authentication for broadcast client,
|
|
multicast client and symmetric passive associations.
|
|
This is almost never a good idea.
|
|
|
|
@node ntpdsim bcastsync
|
|
@subsection bcastsync option (-b)
|
|
@cindex ntpdsim-bcastsync
|
|
|
|
This is the ``allow us to sync to broadcast servers'' option.
|
|
|
|
|
|
@node ntpdsim simbroadcastdelay
|
|
@subsection simbroadcastdelay option (-B)
|
|
@cindex ntpdsim-simbroadcastdelay
|
|
|
|
This is the ``simulator broadcast delay'' option.
|
|
|
|
|
|
@node ntpdsim configfile
|
|
@subsection configfile option (-c)
|
|
@cindex ntpdsim-configfile
|
|
|
|
This is the ``configuration file name'' option.
|
|
The name and path of the configuration file,
|
|
/etc/ntp.conf
|
|
by default.
|
|
|
|
@node ntpdsim phasenoise
|
|
@subsection phasenoise option (-C)
|
|
@cindex ntpdsim-phasenoise
|
|
|
|
This is the ``phase noise level'' option.
|
|
|
|
|
|
@node ntpdsim debug-level
|
|
@subsection debug-level option (-d)
|
|
@cindex ntpdsim-debug-level
|
|
|
|
This is the ``increase output debug message level'' option.
|
|
|
|
This option has some usage constraints. It:
|
|
@itemize @bullet
|
|
@item
|
|
may appear an unlimited number of times.
|
|
@item
|
|
must be compiled in by defining @code{DEBUG} during the compilation.
|
|
@end itemize
|
|
|
|
Increase the debugging message output level.
|
|
|
|
@node ntpdsim set-debug-level
|
|
@subsection set-debug-level option (-D)
|
|
@cindex ntpdsim-set-debug-level
|
|
|
|
This is the ``set the output debug message level'' option.
|
|
|
|
This option has some usage constraints. It:
|
|
@itemize @bullet
|
|
@item
|
|
may appear an unlimited number of times.
|
|
@item
|
|
must be compiled in by defining @code{DEBUG} during the compilation.
|
|
@end itemize
|
|
|
|
Set the output debugging level. Can be supplied multiple times,
|
|
but each overrides the previous value(s).
|
|
|
|
@node ntpdsim driftfile
|
|
@subsection driftfile option (-f)
|
|
@cindex ntpdsim-driftfile
|
|
|
|
This is the ``frequency drift file name'' option.
|
|
The name and path of the frequency file,
|
|
/etc/ntp.drift
|
|
by default.
|
|
This is the same operation as the
|
|
driftfile driftfile
|
|
configuration specification in the
|
|
/etc/ntp.conf
|
|
file.
|
|
|
|
@node ntpdsim panicgate
|
|
@subsection panicgate option (-g)
|
|
@cindex ntpdsim-panicgate
|
|
|
|
This is the ``allow the first adjustment to be big'' option.
|
|
Normally,
|
|
ntpd
|
|
exits with a message to the system log if the offset exceeds the panic threshold, which is 1000 s by default. This option allows the time to be set to any value without restriction; however, this can happen only once. If the threshold is exceeded after that,
|
|
ntpd
|
|
will exit with a message to the system log. This option can be used with the
|
|
-q
|
|
and
|
|
-x
|
|
options.
|
|
See the
|
|
tinker
|
|
configuration file directive for other options.
|
|
|
|
@node ntpdsim simslew
|
|
@subsection simslew option (-H)
|
|
@cindex ntpdsim-simslew
|
|
|
|
This is the ``simuator slew'' option.
|
|
|
|
|
|
@node ntpdsim jaildir
|
|
@subsection jaildir option (-i)
|
|
@cindex ntpdsim-jaildir
|
|
|
|
This is the ``jail directory'' option.
|
|
Chroot the server to the directory
|
|
jaildir
|
|
.
|
|
This option also implies that the server attempts to drop root privileges at startup (otherwise, chroot gives very little additional security), and it is only available if the OS supports to run the server without full root privileges.
|
|
You may need to also specify a
|
|
-u
|
|
option.
|
|
|
|
@node ntpdsim interface
|
|
@subsection interface option (-I)
|
|
@cindex ntpdsim-interface
|
|
|
|
This is the ``listen on interface'' option.
|
|
|
|
This option has some usage constraints. It:
|
|
@itemize @bullet
|
|
@item
|
|
may appear an unlimited number of times.
|
|
@end itemize
|
|
|
|
|
|
|
|
@node ntpdsim keyfile
|
|
@subsection keyfile option (-k)
|
|
@cindex ntpdsim-keyfile
|
|
|
|
This is the ``path to symmetric keys'' option.
|
|
Specify the name and path of the symmetric key file.
|
|
/etc/ntp.keys
|
|
is the default.
|
|
This is the same operation as the
|
|
keys keyfile
|
|
configuration file directive.
|
|
|
|
@node ntpdsim logfile
|
|
@subsection logfile option (-l)
|
|
@cindex ntpdsim-logfile
|
|
|
|
This is the ``path to the log file'' option.
|
|
Specify the name and path of the log file.
|
|
The default is the system log file.
|
|
This is the same operation as the
|
|
logfile logfile
|
|
configuration file directive.
|
|
|
|
@node ntpdsim novirtualips
|
|
@subsection novirtualips option (-L)
|
|
@cindex ntpdsim-novirtualips
|
|
|
|
This is the ``do not listen to virtual ips'' option.
|
|
Do not listen to virtual IPs. The default is to listen.
|
|
|
|
@node ntpdsim modifymmtimer
|
|
@subsection modifymmtimer option (-M)
|
|
@cindex ntpdsim-modifymmtimer
|
|
|
|
This is the ``modify multimedia timer (windows only)'' option.
|
|
|
|
This option has some usage constraints. It:
|
|
@itemize @bullet
|
|
@item
|
|
must be compiled in by defining @code{SYS_WINNT} during the compilation.
|
|
@end itemize
|
|
|
|
Set the Windows Multimedia Timer to highest resolution.
|
|
|
|
@node ntpdsim nofork
|
|
@subsection nofork option (-n)
|
|
@cindex ntpdsim-nofork
|
|
|
|
This is the ``do not fork'' option.
|
|
|
|
|
|
@node ntpdsim nice
|
|
@subsection nice option (-N)
|
|
@cindex ntpdsim-nice
|
|
|
|
This is the ``run at high priority'' option.
|
|
To the extent permitted by the operating system, run
|
|
ntpd
|
|
at the highest priority.
|
|
|
|
@node ntpdsim servertime
|
|
@subsection servertime option (-O)
|
|
@cindex ntpdsim-servertime
|
|
|
|
This is the ``server time'' option.
|
|
|
|
|
|
@node ntpdsim pidfile
|
|
@subsection pidfile option (-p)
|
|
@cindex ntpdsim-pidfile
|
|
|
|
This is the ``path to the pid file'' option.
|
|
Specify the name and path of the file used to record
|
|
ntpd's
|
|
process ID.
|
|
This is the same operation as the
|
|
pidfile pidfile
|
|
configuration file directive.
|
|
|
|
@node ntpdsim priority
|
|
@subsection priority option (-P)
|
|
@cindex ntpdsim-priority
|
|
|
|
This is the ``process priority'' option.
|
|
To the extent permitted by the operating system, run
|
|
ntpd
|
|
at the specified
|
|
sched_setscheduler(SCHED_FIFO)
|
|
priority.
|
|
|
|
@node ntpdsim quit
|
|
@subsection quit option (-q)
|
|
@cindex ntpdsim-quit
|
|
|
|
This is the ``set the time and quit'' option.
|
|
ntpd
|
|
will exit just after the first time the clock is set. This behavior mimics that of the
|
|
ntpdate
|
|
program, which is to be retired.
|
|
The
|
|
-g
|
|
and
|
|
-x
|
|
options can be used with this option.
|
|
Note: The kernel time discipline is disabled with this option.
|
|
|
|
@node ntpdsim propagationdelay
|
|
@subsection propagationdelay option (-r)
|
|
@cindex ntpdsim-propagationdelay
|
|
|
|
This is the ``broadcast/propagation delay'' option.
|
|
Specify the default propagation delay from the broadcast/multicast server to this client. This is necessary only if the delay cannot be computed automatically by the protocol.
|
|
|
|
@node ntpdsim updateinterval
|
|
@subsection updateinterval option (-U)
|
|
@cindex ntpdsim-updateinterval
|
|
|
|
This is the ``interval in seconds between scans for new or dropped interfaces'' option.
|
|
Give the time in seconds between two scans for new or dropped interfaces.
|
|
For systems with routing socket support the scans will be performed shortly after the interface change
|
|
has been detected by the system.
|
|
Use 0 to disable scanning.
|
|
|
|
@node ntpdsim statsdir
|
|
@subsection statsdir option (-s)
|
|
@cindex ntpdsim-statsdir
|
|
|
|
This is the ``statistics file location'' option.
|
|
Specify the directory path for files created by the statistics facility.
|
|
This is the same operation as the
|
|
statsdir statsdir
|
|
configuration file directive.
|
|
|
|
@node ntpdsim endsimtime
|
|
@subsection endsimtime option (-S)
|
|
@cindex ntpdsim-endsimtime
|
|
|
|
This is the ``simulation end time'' option.
|
|
|
|
|
|
@node ntpdsim trustedkey
|
|
@subsection trustedkey option (-t)
|
|
@cindex ntpdsim-trustedkey
|
|
|
|
This is the ``trusted key number'' option.
|
|
|
|
This option has some usage constraints. It:
|
|
@itemize @bullet
|
|
@item
|
|
may appear an unlimited number of times.
|
|
@end itemize
|
|
|
|
Add a key number to the trusted key list.
|
|
|
|
@node ntpdsim freqerr
|
|
@subsection freqerr option (-T)
|
|
@cindex ntpdsim-freqerr
|
|
|
|
This is the ``simulation frequency error'' option.
|
|
|
|
|
|
@node ntpdsim walknoise
|
|
@subsection walknoise option (-W)
|
|
@cindex ntpdsim-walknoise
|
|
|
|
This is the ``simulation random walk noise'' option.
|
|
|
|
|
|
@node ntpdsim user
|
|
@subsection user option (-u)
|
|
@cindex ntpdsim-user
|
|
|
|
This is the ``run as userid (or userid:groupid)'' option.
|
|
Specify a user, and optionally a group, to switch to.
|
|
This option is only available if the OS supports to run the server without full root privileges.
|
|
Currently, this option is supported under NetBSD (configure with
|
|
--enable-clockctl
|
|
) and Linux (configure with
|
|
--enable-linuxcaps
|
|
).
|
|
|
|
@node ntpdsim var
|
|
@subsection var option (-v)
|
|
@cindex ntpdsim-var
|
|
|
|
This is the ``make arg an ntp variable (rw)'' option.
|
|
|
|
This option has some usage constraints. It:
|
|
@itemize @bullet
|
|
@item
|
|
may appear an unlimited number of times.
|
|
@end itemize
|
|
|
|
|
|
|
|
@node ntpdsim dvar
|
|
@subsection dvar option (-V)
|
|
@cindex ntpdsim-dvar
|
|
|
|
This is the ``make arg an ntp variable (rw|def)'' option.
|
|
|
|
This option has some usage constraints. It:
|
|
@itemize @bullet
|
|
@item
|
|
may appear an unlimited number of times.
|
|
@end itemize
|
|
|
|
|
|
|
|
@node ntpdsim slew
|
|
@subsection slew option (-x)
|
|
@cindex ntpdsim-slew
|
|
|
|
This is the ``slew up to 600 seconds'' option.
|
|
Normally, the time is slewed if the offset is less than the step threshold, which is 128 ms by default, and stepped if above the threshold.
|
|
This option sets the threshold to 600 s, which is well within the accuracy window to set the clock manually.
|
|
Note: Since the slew rate of typical Unix kernels is limited to 0.5 ms/s, each second of adjustment requires an amortization interval of 2000 s.
|
|
Thus, an adjustment as much as 600 s will take almost 14 days to complete.
|
|
This option can be used with the
|
|
-g
|
|
and
|
|
-q
|
|
options.
|
|
See the
|
|
tinker
|
|
configuration file directive for other options.
|
|
Note: The kernel time discipline is disabled with this option.
|
|
|
|
@node ntpdsim ndelay
|
|
@subsection ndelay option (-Y)
|
|
@cindex ntpdsim-ndelay
|
|
|
|
This is the ``simulation network delay'' option.
|
|
|
|
|
|
@node ntpdsim pdelay
|
|
@subsection pdelay option (-Z)
|
|
@cindex ntpdsim-pdelay
|
|
|
|
This is the ``simulation processing delay'' option.
|
|
|