NTP Glitch Reverts Clocks Back To 2000
An anonymous reader writes "It seems a glitch of some sort wreaked havoc on some NTP servers yesterday, causing many machines to revert to the year 2000. It seems the Y2K bug that never happened is finally catching up with us in 2012."
Oh sorry. My clock's off.
It was a problem with the USNO servers (I.e. tick.usno.navy.mil, tock.usno.navy.mil etc.) being rebooted and starting to hand out the wrong time. Very few downstream startum 2 NTP servers should have accepted such a large skew, although they may have lost accuracy.
Amusingly I happen to work with an ex. USNO NTP admin, so I'll be sure to take the piss for the rest of the week.
Why do people keep pretending that it wasn't? It was a real issue, that required real work to fix. If none of that work had happened, it would've hit and it would've hit hard. Celebrate success on occasion, sheesh.
Party's over,
Whoops! Out of time!
"Flyin' in just a sweet place,
Never been known to fail..."
NTP -- at least, the formal Unix client -- already has checks in place to reject huge clock skews like this.
The failure, of course, was dipshit Windows clients talking directly to low-strata servers. And then blindly accepting such a massive skew. Good jorb there, Microsoft, as always.
For those of you who didn't read the article; US Naval Observatory rebooted one of their NTP servers (tock.usno.navy.mil I believe, though not sure), and the server's time reverted to 2000.. This time change got pushed out, and thus people freaked out claiming that NTP was broken.
A lesson can be learned from this: change your BIOS battery when it's dead (alternatively, never reboot your servers).
Generally xntpd and its ilk will not step the time more than a small amount, but will rather give up and quit instead. One machine such as (say) the RPi with no RTC that use ntpdate to *set* rather than *adjust* the clock, this is harder to avoid, but servers should not be automatically running ntpdate when configured properly.
So there may be *two* bugs here to get the problem: one in an NTP implementation and one in use of ntpdate for anything other than manual updates on servers. But I haven't read TFA yet.
(On the little bit of work I put into the ARCRON driver I inserted extra code to look out for year rolls, etc, on top of whatever xntpd would do. In part because ARCRON only sends 2-year dates IIRC.)
Rgds
Damon
http://m.earth.org.uk/
did happen. The Y2K disaster did not thanks to a lot of money and a lot of people working to fix the bug.
The Kruger Dunning explains most post on
If you saw this problem, your NTP time sources were not properly configured and diverse.
Consider using the NTP pool and not relying on so few sources to properly sync your time. Read 5.3.3 and 5.3.4 from http://support.ntp.org/bin/view/Support/SelectingOffsiteNTPServers for help to correct your NTP setup.
Poor Elián González! At least I was able to get ILOVEYOU off of my Gateway. Have you checked out Dora the Explorer?
pool.ntp.org is our one and only external resource that we need .
Avoid your fears , or wonder at the past
Or the computer just traveled near the speed of light.
Last night AD went to year 2000. Linux clients joined to AD freaked out right away with scary security warnings. A reboot fixed them right away after AD time was set right. Or setting time manually.
Windows had authentication trouble so Shares, Printers, etc stop working for clients. For some reason I had to rebooting them many times fixed them, no idea why one wasn't enough. Had trouble reported all today even though it was only off for 2 hours last night.
Hard to believe Windows doesn't do sanity checking on this stuff.
Why didn't you warn us about this time-based bug, John Titor?!
Our NTP sync came from a remote site and they were doing Y2K testing. Clocks jumped forward to March 2000 and screwed up the timestamps on our binaries. In the end we had to touch backwards to get our build system working again.
http://michaelsmith.id.au
and the 2038 bug as well as the Year 2042 bug are still to come.
Also maybe a Day 32,768 and 65,536 bug as well.
Was not the bug. Nor was it The Fix(ing/es/etc).
It was THE MONEY.
A large part of "LALALALA I CAN'T HEAR YOU" came from arguments which essentially boil down to "but if that's actually true, then fixing it would cost LOTS OF MONEY".
Whoever said HISTORY NEVER REPEATS is a complete moron.
These days s/Y2K bug/Global Warming/ and the situation is EXACTLY THE SAME.
Lots of industries pushing for FLAT OUT DENIAL mainly because of attitudes which amount to not much more than "but if that's actually true, then fixing it would cost LOTS OF MONEY".
Insert here well documented evidence that THE TOBACCO INDUSTRY knew, many many may ears ago that smoking tobacco was (a) bad for you and (b) addictive.
Big Business KNOWS perfectly well that we're pretty much up Fitz Creek without a paddle (or even a canoe) but THEY DON'T CARE as long as they make lots of money TODAY.
Show me one CEO where their bonuses/etc are indexed against ANYTHING more than the next 1-5 years of profit.
An environmental (and therefore economic) CATASTROPHE that will occur no sooner than 10 years from now is akin to the heat-death-of-the-universe, we ALL know it's coming - but NOBODY CARES.
Visit CryptoGnome in his home.
A large part of NTP's sophistication lies in its ability to identify falsetickers/truechimers among multiple candidate sources. NTP is built to survive failures like this, but Microsoft apparently doesn't bother telling its Active Directory customers -- it actually instructs them to single-source their clocks.
As always, all IMO. Insert "I think" everywhere grammatically possible.
Yes, this is all Microsoft's fault because with UNIX apps, you're expected to deal with this sort of bullshit.
You SHOULD expect this kind of bullshit. Because in real life, shit happens. Servers do reboot. Servers do see their clocks reset. Yes, even time servers.
In general, YOU are responsible for your own system. You may query other servers to check their time, but in the end, it's your program that sets your computer's time, so it's its own responsibility to do the right thing.
A check against something obviously wrong is just common sense.
Write boring code, not shiny code!