NTP error in RSA SecurID: Crtical event notification NTP out of sync
2 years ago
Originally Published: 2019-09-09
Article Number
000041506
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.4.0
 
Issue
-Critical even notification of NTP server going out of sync at random times while the NTP server is already in sync

Getting Critical Event Notification: 

Attention! The following critical system event occurred: Not able to sync time. Either the NTP service is not running or unable to sync time from the NTP server(s) {IP of NTP} 
Cause
The AM is checking the NTP sync using the command below, which is disabled by default on the AM version and should be enabled in the ntp.conf file 
ntpdc
Resolution
  1. Login to the server that is reporting the NTP sync issue on
  2. Run the command 
    > ntpdc -c kerninfo
    
  3. If the output of the command above is:
    localhost: timed out, nothing received 
    ***Request timed out
  4. Go into text editor on the ntp.conf file 
    vi /etc/ntp.conf
  5. Under #local users may interrogate the ntp server, add the line below.
    # Allow ntpdc to stay backwards compatible with SLE-11 before SP4. 
    enable mode7
  6. Restart the ntpd services
    service ntpd restart
Notes
mode7 
Enables processing of NTP mode 7 implementation-specific requests which are used by the deprecated ntpdc program. The default for this flag is disabled. This flag is excluded from runtime configuration using ntpq. The ntpq program provides the same capabilities as ntpdc using standard mode 6 requests