Ntpd has evolved considerably in recent years and the handbook has fallen
out of date. Notable updates include...
- The sample ntp.conf file in the handbook was a bad example that, if used,
would expose the user to potential network attacks or exploits by
allowing full query and control access to ntpd. The sample config now
contains the restrict options that are considered current best practices
for a public-facing ntpd daemon. The config would actually work (and be
safe) even if a user just blindly cut and pastes it.
- The new(-ish) ntp.conf 'pool' keyword is featured prominently in the
sample, and the existence of the FreeBSD project-sponsored pool is
documented.
- Separate subsections now exist for ntp.conf and the rc.conf variables
that affect how ntpd runs. The existence and effect of the un-obvious
ntpd_oomprotect rc variable is mentioned.
- A new subsection describes running ntpd as the unpriveleged ntpd user. It
details how certain configurations can prevent the rc.d script from
automatically running ntpd unpriveleged, and describes how to manually
configure unpriveleged operation in those cases.
- It now mentions the fact that firewalls need to be configured to pass udp
packets on port 123 for ntpd to operate.
Approved by: allanjude
Differential Revision: https://reviews.freebsd.org/D21659
Mention the chpass command as a way to change the language.
Add an example with a short description on how to use chpass to change the
language for an existing user.
- use two spaces at sentence start
- space before content
- wrap long line
- start content on same line
- straggling <tag>
- put listing on same line
- add blank line after <tag> on previous line
- wrap long lines
- use tabs instead of spaces
- space after content (inserting a )
- capitalization
- use two spaces at sentence start
Event: vBSDcon 2019
- wrap long line
- use two spaces at sentence start
- use tabs instead of spaces
- space after content
- straggling <tag>
Event: vBSDcon FreeBSD Hackathon
- wrap long line
- use tabs istead of spaces
- straggling closing tags (like </entry>)
- add blank line after <tag> on previous line
Event: vBSDcon FreeBSD Hackathon
