"synchronisation lost" errors for Solaris NTP server Post: 303042095

Sponsored Content

Operating Systems Solaris "synchronisation lost" errors for Solaris NTP server Post 303042095 by Neo on Saturday 14th of December 2019 04:30:36 AM

12-14-2019

Administrator

Quote:

Originally Posted by MadeInGermany

It was stated in post#1 that the OS is Solaris 9, and we all know it's outdated.
Later it was stated that it is not hooked to the Internet, so there is no direct threat.
It is pointless to further ride that dead horse.

First, not having something "connected" to the Internet is no excuse for running obsolete code (at least to me, maybe to you it is). In my many decades of cybersecurity work, I have never seen the (bad) cybersecurity policy ... " if the host is not connected to the Interest, feel free to never upgrade obsolete code and feel free to call it 'beating a dead horse' if anyone suggests you upgrade".

FWIW, I have servers not connected to the Internet, but I keep them upgraded. Maybe I forgot to read this "it's a dead horse if not connected to the Internet policy"... LOL

So, in my view it is not a "dead horse" to encourage people to secure their systems, upgrade obsolete servers, and not run obsolete code; especially when it is trivia (and basically free) to replace.

You are free to disagree, of course; but I am free to disagree back (and I will push back).

In fact, if you run 17 year old server code and call up any company for support, the first thing they will tell you is "we do not support that version, so please upgrade and call us back when you do".

It's really basic, everyone should run servers and apps with the latest code and if you have an NTP server which is buggy, the first think you should do it upgrade it, not the last.

Also, we at unix.com should be encouraging people to run the latest version of all software and to insure the code they are running is a free of defects as possible.

Feel free to disagree, of course; but don't expect me to agree with this "it's beating a dead horse to encourage people to update buggy 17 year old code" worldview Smilie

But of course, you are free to reply with any and all technical approaches you want. It's always good to have many different ideas and approaches.

Additional Info:

The security issues raised when running obsolete security is basically irrelevant to "connected to the Internet or not" as MIG and the OP have mentioned. IT security is defined (in brief) as (1) confidentiality, (2) integrity and (3) availability. You do not need a "hacker from the dark web" to have an IT security issue. Running obsolete software which is known to be buggy is a larger cause of availability issues than "hackers from the web". In fact, in my many years as a leading expert in cybersecurity, the biggest security breeches mostly / always come from "insiders" (not outside hackers). In my view, running 17 year old, known to be buggy software, is a much larger security breech by "insiders" (who permit and encourage this kind of bad configuration management) than worrying about "hackers from the scary Internet".

Neo

View Public Profile for Neo

Visit Neo's homepage!

Find all posts by Neo

9 More Discussions You Might Find Interesting

1. Filesystems, Disks and Memory

Restoring back files from "lost+found" directory

Hi Friends, How can I Restore the Files present under "lost+found" Directory of a FileSystem (in Solaris & Tru64 OS) to their original Locations. Now-a-days I am loosing lots of files in 2 of my Machines, One running Solaris8 and other Tru64(Digital) Unix. Thanx in...

2. UNIX for Dummies Questions & Answers

Can you force local NTP server to be accepted as "suitable"?

Is there some way to force the NTP server on a brand-new install to be "suitable" to sync other servers from? (I'm more concerned with synchronization between machines, and less concerned with what the actual time they sync to is) For example, whenever I install fresh from the Fedora DVDs and...

3. Linux

NTP treshold "synchronisation lost"

does anyone know how to change the treshold of 128ms in NTP. in order to ignore these alarms: Oct 27 14:44:15 rt1 ntpd: synchronisation lost Oct 27 15:08:25 rt1 ntpd: time reset 0.688591 s Oct 27 15:08:25 rt1 ntpd: synchronisation lost Oct 27 15:28:45 rt1 ntpd: time reset 0.462257 s

4. UNIX for Advanced & Expert Users

All alias in .profile lost when "script" command is called

Hi, I was trying to call "script <an ip add>" command from .profile file to log everything whenever anyone logs in to this user. I did the following at the end of .profile. 1) Extracted the IP address who logged in 2) Called script < ip add> . The problem I am facing is all, aliases etc. written...

5. AIX

"too big" and "not enough memory" errors in shell script

Hi, This is odd, however here goes. There are several shell scripts that run in our production environment AIX 595 LPAR m/c, which has sufficient memory 14GB (physical memory) and horsepower 5CPUs. However from time to time we get the following errors in these shell scripts. The time when these...

6. Shell Programming and Scripting

awk command to replace ";" with "|" and ""|" at diferent places in line of file

Hi, I have line in input file as below: 3G_CENTRAL;INDONESIA_(M)_TELKOMSEL;SPECIAL_WORLD_GRP_7_FA_2_TELKOMSEL My expected output for line in the file must be : "1-Radon1-cMOC_deg"|"LDIndex"|"3G_CENTRAL|INDONESIA_(M)_TELKOMSEL"|LAST|"SPECIAL_WORLD_GRP_7_FA_2_TELKOMSEL" Can someone...

7. Solaris

Printer configuration Migration from Solaris 10 "LP" to Solaris 11 "CUPS"

Need to find a way to import an LP printers.conf file to CUPS. I have some new Solaris 11.1 boxes that need to have 300 printers added.

8. UNIX for Dummies Questions & Answers

"Help with bash script" - "License Server and Patch Updates"

Hi All, I'm completely new to bash scripting and still learning my way through albeit vey slowly. I need to know where to insert my server names', my ip address numbers through out the script alas to no avail. I'm also searching on how to save .sh (bash shell) script properly....

9. Shell Programming and Scripting

Bash script - Print an ascii file using specific font "Latin Modern Mono 12" "regular" "9"

Hello. System : opensuse leap 42.3 I have a bash script that build a text file. I would like the last command doing : print_cmd -o page-left=43 -o page-right=22 -o page-top=28 -o page-bottom=43 -o font=LatinModernMono12:regular:9 some_file.txt where : print_cmd ::= some printing...

LEARN ABOUT OSX

fsf-funding

FSF-FUNDING(7)								GNU							    FSF-FUNDING(7)

NAME

       fsf-funding - Funding Free Software

DESCRIPTION

       Funding Free Software

       If you want to have more free software a few years from now, it makes sense for you to help encourage people to contribute funds for its
       development.  The most effective approach known is to encourage commercial redistributors to donate.

       Users of free software systems can boost the pace of development by encouraging for-a-fee distributors to donate part of their selling
       price to free software developers---the Free Software Foundation, and others.

       The way to convince distributors to do this is to demand it and expect it from them.  So when you compare distributors, judge them partly
       by how much they give to free software development.  Show distributors they must compete to be the one who gives the most.

       To make this approach work, you must insist on numbers that you can compare, such as, ``We will donate ten dollars to the Frobnitz project
       for each disk sold.''  Don't be satisfied with a vague promise, such as ``A portion of the profits are donated,'' since it doesn't give a
       basis for comparison.

       Even a precise fraction ``of the profits from this disk'' is not very meaningful, since creative accounting and unrelated business
       decisions can greatly alter what fraction of the sales price counts as profit.  If the price you pay is $50, ten percent of the profit is
       probably less than a dollar; it might be a few cents, or nothing at all.

       Some redistributors do development work themselves.  This is useful too; but to keep everyone honest, you need to inquire how much they do,
       and what kind.  Some kinds of development make much more long-term difference than others.  For example, maintaining a separate version of
       a program contributes very little; maintaining the standard version of a program for the whole community contributes much.  Easy new ports
       contribute little, since someone else would surely do them; difficult ports such as adding a new CPU to the GNU Compiler Collection
       contribute more; major new features or packages contribute the most.

       By establishing the idea that supporting further development is ``the proper thing to do'' when distributing free software for a fee, we
       can assure a steady flow of resources into making more free software.

SEE ALSO

       gpl(7), gfdl(7).

COPYRIGHT

       Copyright (c) 1994 Free Software Foundation, Inc.  Verbatim copying and redistribution of this section is permitted without royalty;
       alteration is not permitted.

gcc-4.0.1							    2009-05-18							    FSF-FUNDING(7)