Re: NTP Issues Today

[Sid Rao <srao () ctigroup com>]

We had multiple servers synchronized with Windows/MS time change their clock to the year 2000 today.  It broke many 
things, including AD authentication. 

These servers had been properly synchronized for years. 

They were synchronized with Microsoft and NIST NTP servers. 

This may not be isolated. 

Sid Rao | CTI Group | +1 (317) 262-4677

On Nov 19, 2012, at 10:29 PM, "George Herbert" <george.herbert () gmail com> wrote:

> crossreplying to outages list.
>
> Is anyone ELSE seeing GPS issues?  This could well have been an
> unrelated issue on that particular PBX.
>
> If this was real, then the mother of all infrastructure attacks might
> be underway...
>
> One glitch on tick and tock and one malfunctioning PBX is not
> sufficient evidence of pattern - much less hostile activity - to
> induce panic, but it would perhaps be a wise time to check
> time-related logs?
>
>
> -george
>
> On Mon, Nov 19, 2012 at 6:08 PM, Wallace Keith
> <kwallace () pcconnection com> wrote:
> > Just got paged with a pbx alarm that had 1970 as the year. By the time I logged in , it was showing 2012.  Using GPS 
> > for time and date.
> >
> > -----Original Message-----
> > From: Mark Andrews [mailto:marka () isc org]
> > Sent: Monday, November 19, 2012 8:42 PM
> > To: Van Wolfe
> > Cc: nanog () nanog org
> > Subject: Re: NTP Issues Today
> >
> >
> > In message <CAMeggd4cDQwhxQE_JbvpNR-PKKe9LXqA+KzJ97anHFonjwZhdQ () mail gmail com>
> > , Van Wolfe writes:
> > > Hello,
> > >
> > > Did anyone else experience issues with NTP today?  We had our server
> > > times update to the year 2000 at around 3:30 MT, then revert back to 2012.
> > >
> > > Thanks,
> > > Van
> >
> > NTP should be immune from this sort of behaviour unless you did a ntpdate at the wrong moment.  The clocks should 
> > have been marked as insane.
> >
> > Mark
> > --
> > Mark Andrews, ISC
> > 1 Seymour St., Dundas Valley, NSW 2117, Australia
> > PHONE: +61 2 9871 4742                 INTERNET: marka () isc org
>
>
>
> -- 
> -george william herbert
> george.herbert () gmail com