ntpconf.py calls ntpdate with the -U option to drop privileges unconditionally. Some ntpdate implementations, like the one shipped on Ubuntu don't have the -U option at all, so maybe the presence of -U option should be detected during configure and only used if available.
See also https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/997990/comments/20
patch that replaces ntpdate for a call to ntpd ntpconf.py.diff
the added patch is build against my freeipa client version which is ipa-client-2.1.3-9.el6.x86_64
take a look to it, as it uses ntpd it will be more portable than the actual version. it seems that ntpdate is deprecated in red hat distributions so it's interesting to change this upstream
best regards
pasqual, thanks for the patch. Note that a this issue was fixed using the same approach in ticket #2766 (patch 28144e3).
I am therefore closing this ticket as duplicate. If the solution done in #2766 does not work on other platforms, please feel free to reopen this ticket.
Metadata Update from @jhrozek: - Issue assigned to someone - Issue set to the milestone: FreeIPA Cross-distro support
Login to comment on this ticket.