[OmniOS-discuss] NTP server needs restarting to be usable

[Volker A. Brandt]

Hi Dan!


Thanks for all of your efforts.  OmniOS is a solid part of our
IT infrastucture here.

You wrote (to Michael Mounteney):
> Did you "pkg update" to the very latest NTP server?  There's a
> security vulnerability attached to it, you know.

As an aside, I just updated from 10 to 12 and am now running:

# cat /etc/release
  OmniOS v11 r151012
  Copyright 2014 OmniTI Computer Consulting, Inc. All rights reserved.
  Use is subject to license terms.
# uname -a
SunOS nfs2 5.11 omnios-10b9c79 i86pc i386 i86pc

Update was straightforward and worked just fine.  But I noticed a strange
path in the /usr/share/doc/ntp4 subdirectory:

  # pkg list -Hv ntp at latest
  pkg://omnios/service/network/ntp@4.2.8,5.11-0.151012:20141219T194032Z        i--

  # pkg contents -H pkg://omnios/service/network/ntp@4.2.8,5.11-0.151012:20141219T194032Z
  etc/inet
  etc/inet/ntp.client
  [...]
  usr/share/doc/ntp4/ntpsweep.html
  usr/share/doc/ntp4/ntptrace.html
  usr/share/doc/ntp4/{}
  usr/share/doc/ntp4/{}/9400n.jpg
  usr/share/doc/ntp4/{}/a-ux
  usr/share/doc/ntp4/{}/access.html
  usr/share/doc/ntp4/{}/accopt.html
  usr/share/doc/ntp4/{}/accopt.txt
  usr/share/doc/ntp4/{}/aix
  usr/share/doc/ntp4/{}/alice11.gif
  usr/share/doc/ntp4/{}/alice13.gif
  usr/share/doc/ntp4/{}/alice15.gif
  usr/share/doc/ntp4/{}/alice23.gif
  usr/share/doc/ntp4/{}/alice31.gif
  usr/share/doc/ntp4/{}/alice32.gif
  usr/share/doc/ntp4/{}/alice35.gif
  usr/share/doc/ntp4/{}/alice38.gif
  usr/share/doc/ntp4/{}/alice44.gif
  usr/share/doc/ntp4/{}/alice47.gif
  usr/share/doc/ntp4/{}/alice51.gif
  usr/share/doc/ntp4/{}/alice61.gif
  usr/share/doc/ntp4/{}/assoc.html
  usr/share/doc/ntp4/{}/audio.html
  usr/share/doc/ntp4/{}/audio.txt
  [...]

I guess these braces come from a failed variable expansion... :-)

> And you must "svcadm restart ntp" after the update.

Couldn't this be automated by tacking a restart_fmri attribute on to
some file that is guaranteed to be different, such as the ntpd binary?
(It needs to be different from the existing binary for the 
 restart_fmri to fire.)

E.g.

  file 8b55f1839681e3b537177922f31821a19d5f5ba4 path=usr/lib/inet/ntpd \
    owner=root group=bin mode=0555 \
    chash=4da9e4ef17575df37441057da515a15e57ab4938 elfarch=i386 elfbits=32 \
    elfhash=991e353f618ea696ebe95403e70519d71cb3d0b2 pkg.csize=403734 \
    pkg.size=1013996 restart_fmri=svc:/network/ntp:default


Regards -- Volker
-- 
------------------------------------------------------------------------
Volker A. Brandt               Consulting and Support for Oracle Solaris
Brandt & Brandt Computer GmbH                   WWW: http://www.bb-c.de/
Am Wiesenpfad 6, 53340 Meckenheim, GERMANY            Email: vab at bb-c.de
Handelsregister: Amtsgericht Bonn, HRB 10513              Schuhgröße: 46
Geschäftsführer: Rainer J.H. Brandt und Volker A. Brandt

"When logic and proportion have fallen sloppy dead"