AIX

 View Only
  • 1.  Using NTS on AIX 7.2+ ?

    Posted Mon March 25, 2024 04:13 PM

    Hello!

    I wanted to know if it is possible to achieve the same described here for GNU/Linux in AIX 7.2+, namely to configure secure network time protocol --> Secure NTP with NTS

    Ictbanking remove preview
    Secure NTP with NTS
    Secure NTP with NTS
    View this on Ictbanking >

    ?

    I´ve tried to search with all possible "three letter acronyms" combinations but can´t seem to find whether AIX 7.2+ is capable of using NTS as decribed above.

    Anybody got a pointer into the right direction or a straight no to this :) ?

    Thanks,

    With kind regards,

    Stephan Dietl



    ------------------------------
    Stephan Dietl
    ------------------------------


  • 2.  RE: Using NTS on AIX 7.2+ ?

    IBM Champion
    Posted Tue March 26, 2024 05:33 AM

    Hello Stephan,

    AIX uses ntp.org's implementation of NTP. You can find the full documentation on ntp.org site - http://ntp.org/. But I didn't find any reference to NTS on the site. 



    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------



  • 3.  RE: Using NTS on AIX 7.2+ ?

    Posted Tue March 26, 2024 08:06 AM

    Hello @Andrey Klyachkin!

    Thanks for the pointer but yes, nothing of substance for AIX to find there.

    Are there plans to port chrony ;) ?

    Thanks,

    With kind regards,

    Steve



    ------------------------------
    Stephan Dietl
    ------------------------------



  • 4.  RE: Using NTS on AIX 7.2+ ?

    IBM Champion
    Posted Tue March 26, 2024 08:35 AM

    I don't think IBM would do it, because chrony is GPL. As for me - it requires too much time



    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------



  • 5.  RE: Using NTS on AIX 7.2+ ?

    Posted Tue March 26, 2024 08:43 AM

    > I don't think IBM would do it, because chrony is GPL.

    Yes, my question was in the direction of the AIX Toolbox.


    > As for me - it requires too much time

    Yep, agreed, would think so too. Was just in the mood to increase our security since we have just given a NTS solution to another of our applications and I had the "yeah, please, here too!" feeling!

    Thanks,

    Ciao,

    Steve



    ------------------------------
    Stephan Dietl
    ------------------------------



  • 6.  RE: Using NTS on AIX 7.2+ ?

    IBM Champion
    Posted Wed March 27, 2024 05:44 AM

    While I'd like to see the full suite of FOSS added to AIX, given AIX toolbox short list (*) of resources, I think we have to break stuff down into categories.

    • Essential tools & scaffolding - i.e. binutils/bash/gawk/perl/python/other tools that are used everywhere in the FOSS world. - without this it's virtually impossible to bring other packages into AIX
    • Very common tools, for which there is no AIX-side equivalent/substitution
    • Things that while worthy aren't foundational bricks, and can be replaced in function by AIX functions (FOSS NTP/NTS/chrony)

    (*) - While they're a short list, they're doing some good work.



    ------------------------------
    José Pina Coelho
    IT Specialist at Kyndryl
    ------------------------------



  • 7.  RE: Using NTS on AIX 7.2+ ?

    Posted Wed March 27, 2024 10:44 AM

    Hello @José Pina Coelho!

    > While I'd like to see the full suite of FOSS added to AIX, given AIX toolbox short list (*) of resources, I think we have to break stuff down into categories.

    I agree with you on the breaking stuff into categories and their lineout, but:

    • > Things that while worthy aren't foundational bricks, and can be replaced in function by AIX functions (FOSS NTP/NTS/chrony)

      How would I replace NTS with AIX functions, please? I don´t need chrony to be ported just for the sake of itself, I just know that NTS is working with that software and I just need a pointer  where to look in AIX :) .

    > (*) - While they're a short list, they're doing some good work.

    Also fully agree on this one :) !

    Thanks,

    With kind regards,

    Steve



    ------------------------------
    Stephan Dietl
    ------------------------------



  • 8.  RE: Using NTS on AIX 7.2+ ?

    Posted Thu March 28, 2024 12:56 PM

    Hello,

    "full suite of FOSS" is hard to define. There are different levels of support and development for various projects. You can throw a lot of effort into using a package only to see it become abandonware, or deprecated as time progresses. The Linux Toolbox is a fairly decent way of identifying gaps in the base AIX OS and applications and then filling those gaps with a focus on making sure they are solid in the AIX environment. (ie, I have seen a lot of boxes that had downrev lsof versions because the toolbox has not always kept up with the OS releases. I am actually impressed by how well it is maintained now).

    Then, there is the question of critical mass. How many people need to use the FOSS application that might be identified as a candidate?  Libreoffice is FOSS. Not sure there would be any reasonable argument to include this in a toolbox. (I am still annoyed at the 40 floppy drives that WordPerfect for Unix required for their Unix install as that effort was for 1 person in all of the company I worked for at the time).  

    Then, there are questions over which should be included in native AIX vs an add-on. Are things like OpenTelemetry something that needs to be included in the OS or as an added package? Or can existing packages be modified to interoperate with OpenTelemetry. 

    (Actually, I would argue that integration into the new monitoring and observability platforms would be something that should be OS-integrated and also something that should be near the forefront of development. AIX is such a niche now compared to Linux that most tools don't support AIX as it isn't Cloud-Native or as ubiquitous as Linux. Having a single pane observability across a heterogeneous environment would be useful). 



    ------------------------------
    Charles Buckley
    ------------------------------