ntp package missing logcheck exceptions file /etc/logcheck/ignore.d.server/ntp
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
NTP |
New
|
Unknown
|
|||
ntp (Ubuntu) |
Won't Fix
|
Low
|
Unassigned | ||
Xenial |
Won't Fix
|
Low
|
Unassigned |
Bug Description
Hello,
in Lucid, Package: ntp (1:4.2.
However:
In Natty, this file is not present in the ntp package
In Oneric, this file is not present in the ntp package
In Precise, this file is not present in the ntp package
When logcheck is installed, all ntp syslog messages are raised as alerts by logcheck because the ntp configuration file is not present.
It would be helpful to have /etc/logcheck/
Here are sample contents based on the Lucid version with the addition of "status change" tot he time sync line.
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: time reset [+-]*[0-
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronisation lost$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: no servers reachable$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to ([0-9.]
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronized to LOCAL\([0-9]+\), stratum [0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: kernel time sync (disabled|
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: precision = [0-9]+\.[0-9]+ usec$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: peer ([.0-9]
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: adjusting local clock by -?[.0-9]+s$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: adjust time server -?[.0-9]+ offset$
Regards,
Tim Miller Dyck
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: ntp 1:4.2.6.
ProcVersionSign
Uname: Linux 3.2.0-29-generic x86_64
ApportVersion: 2.0.1-0ubuntu12
Architecture: amd64
Date: Wed Sep 5 10:09:31 2012
InstallationMedia: Ubuntu-Server 11.04 "Natty Narwhal" - Release amd64 (20110426)
KernLog: Sep 5 06:34:04 cmpsVMHost01 kernel: [271957.578288] SGI XFS with ACLs, security attributes, realtime, large block/inode numbers, no debug enabled
ProcEnviron:
LANGUAGE=en_CA:en
TERM=linux
LANG=en_CA.UTF-8
SHELL=/bin/bash
SourcePackage: ntp
UpgradeStatus: Upgraded to precise on 2012-08-25 (10 days ago)
Changed in ntp (Ubuntu): | |
importance: | Undecided → Medium |
Changed in ntp: | |
status: | Unknown → New |
Changed in ntp (Ubuntu): | |
status: | Confirmed → Triaged |
Changed in ntp (Ubuntu): | |
importance: | Medium → Low |
Changed in ntp (Ubuntu): | |
assignee: | nobody → ChristianEhrhardt (paelzer) |
Changed in ntp (Ubuntu): | |
assignee: | ChristianEhrhardt (paelzer) → nobody |
Changed in ntp (Ubuntu): | |
status: | Triaged → Won't Fix |
Changed in ntp (Ubuntu Xenial): | |
status: | Triaged → Won't Fix |
importance: | Undecided → Low |
The change appears to have been made by Debian in 1:4.2.6+dfsg-1. The corresponding Debian bug is http:// bugs.debian. org/cgi- bin/bugreport. cgi?bug= 498992
Looking at the bug and at the changelog entry ("Remove ntp.logcheck. ignore. server, none of those messages are send to syslog now."), I get the impression that the intention was that this file was presumed not needed because ntpd isn't supposed to log messages to syslog any more.
Is there something on Ubuntu that makes ntpd behave differently? Is this due to our use of rsyslog? Or does this bug also affect Debian now due to some change in logging in Debian since then?