# /etc/ntp.conf

# hodiny v síti
broadcast 172.16.1.255

# lokální hodiny
server 172.16.1.150
# zfalšování strata, jinak se Windows nesynchronizují
fudge 172.16.1.150 stratum 3

server 0.pool.ntp.org     iburst prefer
server 1.pool.ntp.org     iburst prefer
server 2.pool.ntp.org     iburst prefer

driftfile       /var/lib/ntp/ntp.drift
logfile         /var/log/ntp
# podepisování
ntpsigndsocket	/usr/local/samba/var/lib/ntp_signd

restrict -4 default kod nomodify notrap nopeer mssntp
restrict 127.0.0.1

# pouze pro DC
restrict 0.pool.ntp.org   mask 255.255.255.255    nomodify notrap nopeer noquery
restrict 1.pool.ntp.org   mask 255.255.255.255    nomodify notrap nopeer noquery
restrict 2.pool.ntp.org   mask 255.255.255.255    nomodify notrap nopeer noquery