Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 3:35 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 9 posts ] 
Author Message
PostPosted: Sat Sep 06, 2008 11:53 am 
Offline

Joined: Sat Sep 06, 2008 11:24 am
Posts: 1
Hi everybody,

I notice Yubico's server timestamp response is not UTC as the Response table in http://www.yubico.com/developers/api/ claims, but UTC + 1, at least as of September's 6th, during the daylight saving time.

Also, the time provided in the response is inaccurate by about +9 minutes.

Am I missing something?

Thanks.

David


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Sat Sep 06, 2008 2:53 pm 
Offline

Joined: Mon Aug 25, 2008 9:46 am
Posts: 9
David Dávila wrote:
I notice Yubico's server timestamp response is not UTC as the Response table in http://www.yubico.com/developers/api/ claims, but UTC + 1, at least as of September's 6th, during the daylight saving time.

Also, the time provided in the response is inaccurate by about +9 minutes.

I have noticed the same thing.

Cheers,
Klaus


Top
 Profile  
Reply with quote  
PostPosted: Mon Sep 08, 2008 6:39 pm 
Offline
User avatar

Joined: Wed May 07, 2008 5:25 pm
Posts: 110
Location: Sunnyvale, California
Oops! You are right. It is fixed now.

Thanks

_________________
The YubiKey Server Guy


Top
 Profile  
Reply with quote  
PostPosted: Tue Sep 09, 2008 5:14 pm 
Offline

Joined: Mon Aug 25, 2008 9:46 am
Posts: 9
paul wrote:
Oops! You are right. It is fixed now.

Are you guys sure you're running NTP on the server? The time seems to be slightly less than 3 minutes ahead as of this writing.

Cheers,
Klaus


Top
 Profile  
Reply with quote  
PostPosted: Wed Sep 10, 2008 12:19 am 
Offline
User avatar

Joined: Wed May 07, 2008 5:25 pm
Posts: 110
Location: Sunnyvale, California
Klaus, you are right, I forgot I need to run the ntpdate command a few time to sync up with the NTP server's time. Now it should be accurate. I'll keep an eye on this for the next few days.

Thanks

_________________
The YubiKey Server Guy


Top
 Profile  
Reply with quote  
PostPosted: Wed Sep 10, 2008 1:36 am 
Offline
User avatar

Joined: Mon Jun 23, 2008 1:19 am
Posts: 12
Alternatives, if you haven't already implemented them, are:
    1. run the "ntpd" daemon and let it look after itself, or
    2. setup a cron job for ntpdate and let it look after itself.

_________________
http://www.securixlive.com/yubipam


Top
 Profile  
Reply with quote  
PostPosted: Wed Sep 10, 2008 6:30 pm 
Offline
User avatar

Joined: Wed May 07, 2008 5:25 pm
Posts: 110
Location: Sunnyvale, California
Thanks for the tips, I just set up the ntpd now. Just curious why need to duplicate the ntp server entries in both ntp.conf and step-tickers?

:?:

_________________
The YubiKey Server Guy


Top
 Profile  
Reply with quote  
PostPosted: Wed Sep 10, 2008 10:54 pm 
Offline
User avatar

Joined: Mon Jun 23, 2008 1:19 am
Posts: 12
The file step-tickers is an optional file that is used by the ntpd startup script. Upon startup, ntpd will grabs the servers from step-tickers file and performs an ntpdate on them to get your system clock as close to the referent ntp clock as possible, typically within 10's of milliseconds. If you don't use the step-tickers, I believe it will set the system clock from your hardware CMOS clock.

Why prefer one over the other?? I'm pretty sure that ntpd takes longer to maintain sync the further your system clock is skewed from the reference ntp clock you wish to use. It only has to be out by 5 to 10 minutes before ntpd starts to panic ;)

_________________
http://www.securixlive.com/yubipam


Last edited by firnsy on Mon Sep 15, 2008 10:34 pm, edited 1 time in total.

Top
 Profile  
Reply with quote  
PostPosted: Mon Sep 15, 2008 6:41 pm 
Offline
User avatar

Joined: Wed May 07, 2008 5:25 pm
Posts: 110
Location: Sunnyvale, California
The clock seems under control now. Thanks for your tips!

_________________
The YubiKey Server Guy


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group