19c2daa00SOllivier Robert<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> 29c2daa00SOllivier Robert<html> 39c2daa00SOllivier Robert <head> 4ea906c41SOllivier Robert <meta http-equiv="content-type" content="text/html;charset=iso-8859-1"> 59c2daa00SOllivier Robert <meta name="generator" content="HTML Tidy, see www.w3.org"> 69c2daa00SOllivier Robert <title>ntpd System Log Messages</title> 79c2daa00SOllivier Robert <link href="scripts/style.css" type="text/css" rel="stylesheet"> 89c2daa00SOllivier Robert </head> 99c2daa00SOllivier Robert <body> 109c2daa00SOllivier Robert <h3><tt>ntpd</tt> System Log Messages</h3> 119c2daa00SOllivier Robert <img src="pic/alice47.gif" alt="gif" align="left"><a href="http://www.eecis.udel.edu/~mills/pictures.html">from <i>Alice's Adventures in Wonderland</i>, Lewis Carroll</a> 129c2daa00SOllivier Robert <p>The mushroom knows all the error codes, which is more than most of us do.</p> 13ea906c41SOllivier Robert <p>Last update: <csobj format="ShortTime" h="25" locale="00000409" region="0" t="DateTime" w="61">19:24</csobj> UTC <csobj format="LongDate" h="25" locale="00000409" region="0" t="DateTime" w="284">Saturday, October 01, 2005</csobj></p> 149c2daa00SOllivier Robert <br clear="left"> 159c2daa00SOllivier Robert <h4>Related Links</h4> 16ea906c41SOllivier Robert <p><script type="text/javascript" language="javascript" src="scripts/links7.txt"></script> 179c2daa00SOllivier Robert </p> 189c2daa00SOllivier Robert <hr> 199c2daa00SOllivier Robert <p>You have come here because you found a cryptic message in the system log. This page by no means lists all messages that might be found, since new ones come and old ones go. Generally, however, the most common ones will be found here. They are listed by program module and log severity code in bold: <tt><b>LOG_ERR</b></tt>, <b><tt>LOG_NOTICE</tt></b> and <tt><b>LOG_INFO</b></tt>.</p> 209c2daa00SOllivier Robert <p>Most of the time <b><tt>LOG_ERR</tt></b> messages are fatal, but often <tt>ntpd</tt> limps onward in the hopes of discovering more errors. The <tt><b>LOG_NOTICE</b></tt> messages usually mean the time has changed or some other condition that probably should be noticed. The <tt><b>LOG_INFO</b></tt> messages usually say something about the system operations, but do not affect the time.</p> 219c2daa00SOllivier Robert <p>In the following a '?' character stands for text in the message. The meaning should be clear from context.</p> 229c2daa00SOllivier Robert <h4>Protocol Module</h4> 239c2daa00SOllivier Robert <p><tt><b>LOG_ERR</b></tt></p> 249c2daa00SOllivier Robert <dl> 25ea906c41SOllivier Robert <dt><tt>buffer overflow ? 26ea906c41SOllivier Robert </tt> 279c2daa00SOllivier Robert <dd>Fatal error. An input packet is too long for processing. 289c2daa00SOllivier Robert </dl> 299c2daa00SOllivier Robert <p><tt><b>LOG_NOTICE</b></tt></p> 309c2daa00SOllivier Robert <dl> 319c2daa00SOllivier Robert <dt><tt>no reply; clock not set</tt> 329c2daa00SOllivier Robert <dd>In <tt>ntpdate</tt> mode no servers have been found. The server(s) and/or network may be down. Standard debugging procedures apply. 339c2daa00SOllivier Robert <p><tt><b>LOG_INFO</b></tt></p> 349c2daa00SOllivier Robert <dt><tt>proto_config: illegal item ?, value ?</tt> 359c2daa00SOllivier Robert <dd>Program error. Please report to bugs@ntp.org. 369c2daa00SOllivier Robert <dt><tt>pps sync enabled</tt> 379c2daa00SOllivier Robert <dd>The PPS signal has been detected and enabled. 389c2daa00SOllivier Robert <dt><tt>transmit: encryption key ? not found</tt> 39ea906c41SOllivier Robert <dd>The encryption key is not defined or not trusted. 409c2daa00SOllivier Robert <dt><tt>precision = ? usec </tt> 419c2daa00SOllivier Robert <dd>This reports the precision measured for this machine. 429c2daa00SOllivier Robert <dt><tt>using 10ms tick adjustments</tt> 439c2daa00SOllivier Robert <dd>Gotcha for some machines with dirty rotten clock hardware. 449c2daa00SOllivier Robert <dt><tt>no servers reachable</tt> 459c2daa00SOllivier Robert <dd>The system clock is running on internal batteries. The server(s) and/or network may be down. 469c2daa00SOllivier Robert </dl> 479c2daa00SOllivier Robert <h4>Clock Discipline Module</h4> 489c2daa00SOllivier Robert <p><tt><b>LOG_ERR</b></tt></p> 499c2daa00SOllivier Robert <dl> 509c2daa00SOllivier Robert <dt><tt>time correction of ? seconds exceeds sanity limit (?); set clock manually to the correct UTC time</tt>. 519c2daa00SOllivier Robert <dd>Fatal error. Better do what it says, then restart the daemon. Be advised NTP and Unix know nothing about local time zones. The clock must be set to Coordinated Universal Time (UTC). Believe it; by international agreement abbreviations are in French and descriptions are in English. 52ea906c41SOllivier Robert <dt><tt>sigaction() fails to save SIGSYS trap: ?<br> 53ea906c41SOllivier Robert </tt><tt>sigaction() fails to restore SIGSYS trap: ?</tt> 54ea906c41SOllivier Robert <dt>Program error. Please report to bugs@ntp.org. 559c2daa00SOllivier Robert </dl> 569c2daa00SOllivier Robert <p><tt><b>LOG_NOTICE</b></tt></p> 579c2daa00SOllivier Robert <dl> 589c2daa00SOllivier Robert <dt><tt>frequency error ? exceeds tolerance 500 PPM</tt> 59ea906c41SOllivier Robert <dd>The hardware clock frequency error exceeds the rate the kernel can correct. This could be a hardware or a kernel problem. 60ea906c41SOllivier Robert <dt><tt>time slew ? s</tt> 619c2daa00SOllivier Robert <dd>The time error exceeds the step threshold and is being slewed to the correct time. You may have to wait a very long time. 629c2daa00SOllivier Robert <dt><tt>time reset ? s</tt> 639c2daa00SOllivier Robert <dd>The time error exceeds the step threshold and has been reset to the correct time. Computer scientists don't like this, but they can set the <tt>ntpd -x</tt> option and wait forever. 649c2daa00SOllivier Robert <dt><tt>kernel time sync disabled ?</tt> 659c2daa00SOllivier Robert <dd>The kernel reports an error. See the codes in the <tt>timex.h</tt> file. 669c2daa00SOllivier Robert <dt><tt>pps sync disabled</tt> 679c2daa00SOllivier Robert <dd>The PPS signal has died, probably due to a dead radio, broken wire or loose connector. 689c2daa00SOllivier Robert </dl> 699c2daa00SOllivier Robert <p><tt><b>LOG_INFO</b></tt></p> 709c2daa00SOllivier Robert <dl> 71ea906c41SOllivier Robert <dt><tt>kernel time sync status ? </tt> 729c2daa00SOllivier Robert <dd>For information only. See the codes in the <tt>timex.h</tt> file. 739c2daa00SOllivier Robert </dl> 749c2daa00SOllivier Robert <h4>Cryptographic Module</h4> 759c2daa00SOllivier Robert <p><tt><b>LOG_ERR</b></tt></p> 769c2daa00SOllivier Robert <dl> 77ea906c41SOllivier Robert <dt><tt>cert_parse ?<br> 78ea906c41SOllivier Robert </tt><tt>cert_sign ?<br> 79ea906c41SOllivier Robert </tt><tt>crypto_cert ?<br> 80ea906c41SOllivier Robert </tt><tt>crypto_encrypt ?<br> 81ea906c41SOllivier Robert </tt><tt>crypto_gq ?<br> 82ea906c41SOllivier Robert </tt><tt>crypto_iff ?<br> 83ea906c41SOllivier Robert </tt><tt>crypto_key ?<br> 84ea906c41SOllivier Robert </tt><tt>crypto_mv ?<br> 85ea906c41SOllivier Robert </tt><tt>crypto_setup ?<br> 86ea906c41SOllivier Robert </tt><tt>make_keys ?</tt> 879c2daa00SOllivier Robert <dd>Usually fatal errors. These messages display error codes returned from the OpenSSL library. See the OpenSSL documentation for explanation. 88ea906c41SOllivier Robert <dt><tt>crypto_setup: certificate ? is trusted, but not self signed.<br> 89ea906c41SOllivier Robert </tt><tt>crypto_setup: certificate ? not for this host<br> 90ea906c41SOllivier Robert </tt><tt>crypto_setup: certificate file ? not found or corrupt<br> 91ea906c41SOllivier Robert </tt><tt>crypto_setup: host key file ? not found or corrupt<br> 92ea906c41SOllivier Robert </tt><tt>crypto_setup: host key is not RSA key type<br> 93ea906c41SOllivier Robert </tt><tt>crypto_setup: random seed file ? not found<br> 94ea906c41SOllivier Robert </tt><tt>rypto_setup: random seed file not specified</tt> 959c2daa00SOllivier Robert <dd>Fatal errors. These messages show problems during the initialization procedure. 969c2daa00SOllivier Robert </dl> 979c2daa00SOllivier Robert <p><tt><b>LOG_INFO</b></tt></p> 989c2daa00SOllivier Robert <dl> 99ea906c41SOllivier Robert <dt><tt>cert_parse: expired ?<br> 100ea906c41SOllivier Robert </tt><tt>cert_parse: invalid issuer ?<br> 101ea906c41SOllivier Robert </tt><tt>cert_parse: invalid signature ?<br> 102ea906c41SOllivier Robert </tt><tt>cert_parse: invalid subject ?</tt> 1039c2daa00SOllivier Robert <dd>There is a problem with a certificate. Operation cannot proceed untill the problem is fixed. If the certificate is local, it can be regenerated using the <tt>ntp-keygen</tt> program. If it is held somewhere else, it must be fixed by the holder. 104ea906c41SOllivier Robert <dt><tt>crypto_?: defective key<br> 105ea906c41SOllivier Robert </tt><tt>crypto_?: invalid filestamp<br> 106ea906c41SOllivier Robert </tt><tt>crypto_?: missing challenge<br> 107ea906c41SOllivier Robert </tt><tt>crypto_?: scheme unavailable</tt> 1089c2daa00SOllivier Robert <dd>There is a problem with the identity scheme. Operation cannot proceed untill the problem is fixed. Usually errors are due to misconfiguration or an orphan association. If the latter, <tt>ntpd</tt> will usually time out and recover by itself. 1099c2daa00SOllivier Robert <dt><tt>crypto_cert: wrong PEM type ?</tt> 1109c2daa00SOllivier Robert <dd>The certificate does not have MIME type <tt>CERTIFICATE</tt>. You are probably using the wrong type from OpenSSL or an external certificate authority. 1119c2daa00SOllivier Robert <dt><tt>crypto_ident: no compatible identity scheme found</tt> 1129c2daa00SOllivier Robert <dd>Configuration error. The server and client identity schemes are incompatible. 1139c2daa00SOllivier Robert <dt><tt>crypto_tai: kernel TAI update failed</tt> 1149c2daa00SOllivier Robert <dd>The kernel does not support this function. You may need a new kernel or patch. 1159c2daa00SOllivier Robert <dt><tt>crypto_tai: leapseconds file ? error ?</tt> 1169c2daa00SOllivier Robert <dd>The leapseconds file is corrupt. Obtain the latest file from <tt>time.nist.gov</tt>. 1179c2daa00SOllivier Robert </dl> 1189c2daa00SOllivier Robert <hr> 1199c2daa00SOllivier Robert <script type="text/javascript" language="javascript" src="scripts/footer.txt"></script> 1209c2daa00SOllivier Robert </body> 1219c2daa00SOllivier Robert 1229c2daa00SOllivier Robert</html>
