1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
|
#include autogen-version.def
test-main;
flag = {
name = ipv4;
value = 4;
equivalence = ipv4;
descrip = "Force IPv4 DNS name resolution";
doc = <<- _EndOfDoc_
Force DNS resolution of following host names on the command line
to the IPv4 namespace.
_EndOfDoc_;
};
flag = {
name = ipv6;
value = 6;
equivalence = ipv4;
descrip = "Force IPv6 DNS name resolution";
doc = <<- _EndOfDoc_
Force DNS resolution of following host names on the command line
to the IPv6 namespace.
_EndOfDoc_;
};
flag = {
name = authreq;
value = a;
descrip = "Require crypto authentication";
flags-cant = authnoreq;
doc = <<- _EndOfDoc_
Require cryptographic authentication for broadcast client,
multicast client and symmetric passive associations.
This is the default.
_EndOfDoc_;
};
flag = {
name = authnoreq;
value = A;
descrip = "Do not require crypto authentication";
flags-cant = authreq;
doc = <<- _EndOfDoc_
Do not require cryptographic authentication for broadcast client,
multicast client and symmetric passive associations.
This is almost never a good idea.
_EndOfDoc_;
};
flag = {
name = bcastsync;
value = b;
descrip = "Allow us to sync to broadcast servers";
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
#ifdef SIM
flag = {
name = simbroadcastdelay;
value = B;
arg-type = string;
descrip = "Simulator broadcast delay";
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
#endif
flag = {
name = configfile;
value = c;
arg-type = string;
descrip = "configuration file name";
doc = <<- _EndOfDoc_
The name and path of the configuration file,
/etc/ntp.conf
by default.
_EndOfDoc_;
};
#ifdef SIM
flag = {
name = phasenoise;
value = C;
arg-type = string;
descrip = "Phase noise level";
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
#endif
#include debug-opt.def
flag = {
name = driftfile;
value = f;
arg-type = string;
descrip = "frequency drift file name";
doc = <<- _EndOfDoc_
The name and path of the frequency file,
/etc/ntp.drift
by default.
This is the same operation as the
driftfile driftfile
configuration specification in the
/etc/ntp.conf
file.
_EndOfDoc_;
};
flag = {
name = panicgate;
value = g;
descrip = "Allow the first adjustment to be Big";
doc = <<- _EndOfDoc_
Normally,
ntpd
exits with a message to the system log if the offset exceeds the panic threshold, which is 1000 s by default. This option allows the time to be set to any value without restriction; however, this can happen only once. If the threshold is exceeded after that,
ntpd
will exit with a message to the system log. This option can be used with the
-q
and
-x
options.
See the
tinker
configuration file directive for other options.
_EndOfDoc_;
};
#ifdef SIM
flag = {
name = simslew;
value = H;
arg-type = string;
descrip = "Simuator slew";
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
#endif
flag = {
name = jaildir;
value = i;
arg-type = string;
descrip = "Jail directory";
doc = <<- _EndOfDoc_
Chroot the server to the directory
jaildir
.
This option also implies that the server attempts to drop root privileges at startup (otherwise, chroot gives very little additional security), and it is only available if the OS supports to run the server without full root privileges.
You may need to also specify a
-u
option.
_EndOfDoc_;
};
flag = {
name = interface;
value = I;
arg-type = string;
descrip = "Listen on interface";
max = NOLIMIT;
arg-name = iface;
stack-arg;
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
flag = {
name = keyfile;
value = k;
arg-type = string;
descrip = "path to symmetric keys";
doc = <<- _EndOfDoc_
Specify the name and path of the symmetric key file.
/etc/ntp.keys
is the default.
This is the same operation as the
keys keyfile
configuration file directive.
_EndOfDoc_;
};
flag = {
name = logfile;
value = l;
arg-type = string;
descrip = "path to the log file";
doc = <<- _EndOfDoc_
Specify the name and path of the log file.
The default is the system log file.
This is the same operation as the
logfile logfile
configuration file directive.
_EndOfDoc_;
};
flag = {
name = novirtualips;
value = L;
descrip = "Do not listen to virtual IPs";
doc = <<- _EndOfDoc_
Do not listen to virtual IPs. The default is to listen.
_EndOfDoc_;
};
flag = {
ifdef = SYS_WINNT;
name = modifymmtimer;
value = M;
descrip = "Modify Multimedia Timer (Windows only)";
doc = <<- _EndOfDoc_
Set the Windows Multimedia Timer to highest resolution.
_EndOfDoc_;
};
flag = {
name = nofork;
value = n;
descrip = "Do not fork";
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
flag = {
name = nice;
value = N;
descrip = "Run at high priority";
doc = <<- _EndOfDoc_
To the extent permitted by the operating system, run
ntpd
at the highest priority.
_EndOfDoc_;
};
#ifdef SIM
flag = {
name = servertime;
value = O;
arg-type = string;
descrip = "Server time";
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
#endif
flag = {
name = pidfile;
value = p;
arg-type = string;
descrip = "path to the PID file";
doc = <<- _EndOfDoc_
Specify the name and path of the file used to record
ntpd's
process ID.
This is the same operation as the
pidfile pidfile
configuration file directive.
_EndOfDoc_;
};
flag = {
name = priority;
value = P;
arg-type = number;
descrip = "Process priority";
doc = <<- _EndOfDoc_
To the extent permitted by the operating system, run
ntpd
at the specified
sched_setscheduler(SCHED_FIFO)
priority.
_EndOfDoc_;
};
flag = {
name = quit;
value = q;
descrip = "Set the time and quit";
doc = <<- _EndOfDoc_
ntpd
will exit just after the first time the clock is set. This behavior mimics that of the
ntpdate
program, which is to be retired.
The
-g
and
-x
options can be used with this option.
Note: The kernel time discipline is disabled with this option.
_EndOfDoc_;
};
flag = {
name = propagationdelay;
value = r;
arg-type = string;
descrip = "Broadcast/propagation delay";
doc = <<- _EndOfDoc_
Specify the default propagation delay from the broadcast/multicast server to this client. This is necessary only if the delay cannot be computed automatically by the protocol.
_EndOfDoc_;
};
flag = {
name = updateinterval;
value = U;
arg-type = number;
descrip = "interval in seconds between scans for new or dropped interfaces";
doc = <<- _EndOfDoc_
Give the time in seconds between two scans for new or dropped interfaces.
For systems with routing socket support the scans will be performed shortly after the interface change
has been detected by the system.
Use 0 to disable scanning.
_EndOfDoc_;
};
flag = {
name = statsdir;
value = s;
arg-type = string;
descrip = "Statistics file location";
doc = <<- _EndOfDoc_
Specify the directory path for files created by the statistics facility.
This is the same operation as the
statsdir statsdir
configuration file directive.
_EndOfDoc_;
};
#ifdef SIM
flag = {
name = endsimtime;
value = S;
arg-type = string;
descrip = "Simulation end time";
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
#endif
flag = {
name = trustedkey;
value = t;
arg-type = string;
descrip = "Trusted key number";
max = NOLIMIT;
arg-name = tkey;
stack-arg;
doc = <<- _EndOfDoc_
Add a key number to the trusted key list.
_EndOfDoc_;
};
#ifdef SIM
flag = {
name = freqerr;
value = T;
arg-type = string;
descrip = "Simulation frequency error";
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
#endif
#ifdef SIM
flag = {
name = walknoise;
value = W;
arg-type = string;
descrip = "Simulation random walk noise";
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
#endif
flag = {
name = user;
value = u;
arg-type = string;
descrip = "Run as userid (or userid:groupid)";
doc = <<- _EndOfDoc_
Specify a user, and optionally a group, to switch to.
This option is only available if the OS supports to run the server without full root privileges.
Currently, this option is supported under NetBSD (configure with
--enable-clockctl
) and Linux (configure with
--enable-linuxcaps
).
_EndOfDoc_;
};
flag = {
name = var;
value = v;
arg-type = string;
descrip = "make ARG an ntp variable (RW)";
max = NOLIMIT;
arg-name = nvar;
stack-arg;
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
flag = {
name = dvar;
value = V;
arg-type = string;
descrip = "make ARG an ntp variable (RW|DEF)";
max = NOLIMIT;
arg-name = ndvar;
stack-arg;
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
flag = {
name = slew;
value = x;
descrip = "Slew up to 600 seconds";
doc = <<- _EndOfDoc_
Normally, the time is slewed if the offset is less than the step threshold, which is 128 ms by default, and stepped if above the threshold.
This option sets the threshold to 600 s, which is well within the accuracy window to set the clock manually.
Note: Since the slew rate of typical Unix kernels is limited to 0.5 ms/s, each second of adjustment requires an amortization interval of 2000 s.
Thus, an adjustment as much as 600 s will take almost 14 days to complete.
This option can be used with the
-g
and
-q
options.
See the
tinker
configuration file directive for other options.
Note: The kernel time discipline is disabled with this option.
_EndOfDoc_;
};
#ifdef SIM
flag = {
name = ndelay;
value = Y;
arg-type = string;
descrip = "Simulation network delay";
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
#endif
#ifdef SIM
flag = {
name = pdelay;
value = Z;
arg-type = string;
descrip = "Simulation processing delay";
doc = <<- _EndOfDoc_
_EndOfDoc_;
};
#endif
|