### <a name="3.17 Which TCP/IP ports and pro"></a> 3.17 Which TCP/IP ports and protocols do I need to enable in order to operate AFS through my Internet firewall?
-Assuming you have already taken care of nameserving, you may wish to use an Internet timeserver for Network Time Protocol [[[Mills89|Main/FurtherReading#Mills89]]] [[[Mills92|Main/FurtherReading#Mills92]]]:
+Assuming you have already taken care of nameserving, you may wish to use an Internet timeserver for Network Time Protocol [[[NTP|Main/FurtherReading#NTP]]] and question [[3.22|Main/WebHome#NTP]]:
ntp 123/udp
No.
-The AFS Cache Manager makes use of NTP [[[Mills89|Main/FurtherReading#Mills89]]] [[[Mills92|Main/FurtherReading#Mills92]]] to synchronise time with your cell's NTP servers.
+<a name="NTP"></a> The AFS Servers make use of NTP [[[NTP|Main/FurtherReading#NTP]]] to synchronise time each other and typically with one or more external NTP servers. By default, clients synchronize their time with one of the servers in the local cell. Thus all the machines participating in the AFS cell have an accurate view of the time.
-Typically, one of your AFS cell's servers synchronises with an external NTP server and provides accurate time to your cell.
+For further details on NTP see: <http://www.eecis.udel.edu/~ntp/>. The latest version is 4.1, dated August 2001, which is **much** more recent that the version packaged with Transarc AFS.
+
+A list of NTP servers is available via anonymous FTP from:
+
+- <http://www.eecis.udel.edu/~mills/ntp/servers.html>
+
+The default time setting behavior of the AFS client can be disabled by specifying the `-nosettime` argument to [afsd](http://www.transarc.ibm.com/Library/documentation/afs/3.5/unix/cmd/cmd53.htm). This is recommended for AFS servers which are also configured as clients (because servers normally run NTP daemons) and for clients that run NTP.
### <a name="3.23 Why should I keep /usr/vic"></a> 3.23 Why should I keep /usr/vice/etc/CellServDB current?
Darwin is the core of Apple's [[MacOSX]] product.
-The mailing list for this port is <https://lists.openafs.org/mailman/listinfo/port-darwin> and archived at <https://lists.openafs.org/pipermail/port-darwin/>.
+The mailing list for this port is <https://lists.openafs.org/mailman/listinfo/port-darwin> and archived at <http://lists.openafs.org/pipermail/port-darwin/>.
-- [[TedAnderson]] - 17 Jan 2002
<a name="34"> <a name="Stallings94"> [Stallings94] William Stallings "Kerberos Keeps the Enterprise Secure" Data Communications, October 1994, Vol 23 No 14 Page 103 </a></a>
-<a name="35"> <a name="Mills89"> [Mills89] DL Mills "Internet Time Synchronization: the Network Time Protocol" RFC 1129, October 1989 <ftp://nic.ddn.mil/rfc/rfc1129.ps> </a></a>
+<a name="35"> <a name="Mills89"> [Mills89] DL Mills "Internet Time Synchronization: the Network Time Protocol" RFC 1129, October 1989 <http://www.eecis.udel.edu/~mills/database/rfc/rfc1129/rfc1129b.ps> <http://www.eecis.udel.edu/~mills/database/rfc/rfc1129/rfc1129b.pdf> <ftp://nic.ddn.mil/rfc/rfc1129.ps> </a></a>
-<a name="36"> <a name="Mills92"> [Mills92] DL Mills "Network Time Protocol (Version 3) Specification, Implementation and Analysis" RFC 1305, March 1992 <ftp://nic.ddn.mil/rfc/rfc1305.tar.Z> <ftp://nic.ddn.mil/rfc/rfc1305.txt> </a></a>
+<a name="36"> <a name="Mills92"> [Mills92] DL Mills "Network Time Protocol (Version 3) Specification, Implementation and Analysis" RFC 1305, March 1992 <http://www.eecis.udel.edu/~mills/database/rfc/rfc1305/rfc1305b.ps> <http://www.eecis.udel.edu/~mills/database/rfc/rfc1305/rfc1305b.pdf> <ftp://nic.ddn.mil/rfc/rfc1305.tar.Z> <ftp://nic.ddn.mil/rfc/rfc1305.txt> </a></a>
+
+<a name="NTP">[NTP] Time Synchronization Server, <http://www.ntp.org>. </a>
<a name="37"> <a name="Everhart90"> [Everhart90] Craig Everhart "Conventions for Names in the Service Directory in the AFS Distributed File System" March 1990 <ftp://ftp.transarc.com/pub/afs-contrib/doc/faq/service-spec.ez.ps> <ftp://ftp.transarc.com/pub/afs-contrib/doc/faq/service-spec.ez> <file:///afs/transarc.com/public/afs-contrib/doc/faq/service-spec.ez> <file:///afs/transarc.com/public/afs-contrib/doc/faq/service-spec.ez.ps> </a></a>
After this restart, try using kinit to get Kerberos tickets for admin then (if necessary) use aklog to get an AFS token. Basically ensure that the AFS [[KeyFile]] is valid... (get a specific command to test this).
-Proceed to the [Starting File Server](http://www.openafs.org/pages/doc/QuickStartUnix/auqbg005.htm#HDRWQ60) section of the [[OpenAFS]] documentation. The rest of the documentation can be completed without any changes. (What about replacing ntp with something recent, though...?)
+Proceed to the [Starting File Server](http://www.openafs.org/pages/doc/QuickStartUnix/auqbg005.htm#HDRWQ60) section of the [[OpenAFS]] documentation. The rest of the documentation can be completed without any changes. (What about replacing NTP with something recent, though...? See FAQ [[3.22|Main/AdminFAQ#NTP]] and [[[NTP|Main/FurtherReading#NTP]]])
## <a name="Setting up Transparent Login"></a> Setting up Transparent Login
git://git.openafs.org / openafs-wiki.git / commitdiff