summaryrefslogtreecommitdiff
path: root/ntpd/ntpdbase-opts.def
blob: 110504e5c07665bc34ab7a276c48610a559089ed (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
#include autogen-version.def

include = <<- _EOF_
	#ifdef __windows
	  extern int atoi(const char *);
	#else
	# include <stdlib.h>
	#endif
	_EOF_;

flag = {
    name      = ipv4;
    value     = 4;
    flags-cant = ipv6;
    descrip   = "Force IPv4 DNS name resolution";
    doc = <<-  _EndOfDoc_
	Force DNS resolution of following host names on the command line
	to the IPv4 namespace.
	_EndOfDoc_;
};

flag = {
    name      = ipv6;
    value     = 6;
    flags-cant = ipv4;
    descrip   = "Force IPv6 DNS name resolution";
    doc = <<-  _EndOfDoc_
	Force DNS resolution of following host names on the command line
	to the IPv6 namespace.
	_EndOfDoc_;
};

flag = {
    name      = authreq;
    value     = a;
    descrip   = "Require crypto authentication";
    flags-cant = authnoreq;
    doc = <<-  _EndOfDoc_
	Require cryptographic authentication for broadcast client,
	multicast client and symmetric passive associations.
	This is the default.
	_EndOfDoc_;
};

flag = {
    name      = authnoreq;
    value     = A;
    descrip   = "Do not require crypto authentication";
    flags-cant = authreq;
    doc = <<-  _EndOfDoc_
	Do not require cryptographic authentication for broadcast client,
	multicast client and symmetric passive associations.
	This is almost never a good idea.
	_EndOfDoc_;
};

flag = {
    name      = bcastsync;
    value     = b;
    descrip   = "Allow us to sync to broadcast servers";
    doc = <<-  _EndOfDoc_
	_EndOfDoc_;
};

flag = {
    name      = configfile;
    value     = c;
    arg-type  = string;
    descrip   = "configuration file name";
    doc = <<-  _EndOfDoc_
	The name and path of the configuration file,
	@file{/etc/ntp.conf}
	by default.
	_EndOfDoc_;
};

#include debug-opt.def

flag = {
    name      = driftfile;
    value     = f;
    arg-type  = string;
    descrip   = "frequency drift file name";
    doc = <<-  _EndOfDoc_
	The name and path of the frequency file,
	@file{/etc/ntp.drift}
	by default.
	This is the same operation as the
	@code{driftfile} @kbd{driftfile}
	configuration specification in the 
	@file{/etc/ntp.conf}
	file.
	_EndOfDoc_;
};

flag = {
    name      = panicgate;
    value     = g;
    max       = NOLIMIT;
    descrip   = "Allow the first adjustment to be Big";
    doc = <<-  _EndOfDoc_
	Normally,
	@code{ntpd}
	exits with a message to the system log if the offset exceeds the panic threshold, which is 1000 s by default. This option allows the time to be set to any value without restriction; however, this can happen only once. If the threshold is exceeded after that,
	@code{ntpd}
	will exit with a message to the system log. This option can be used with the
	@code{-q}
	and
	@code{-x}
	options.
	See the
	@code{tinker}
	configuration file directive for other options.
	_EndOfDoc_;
};

flag = {
    ifdef     = HAVE_DROPROOT;
    name      = jaildir;
    value     = i;
    arg-type  = string;
    descrip   = "Jail directory";
    omitted-usage = "built without --enable-clockctl or --enable-linuxcaps or --enable-solarisprivs";
    doc = <<-  _EndOfDoc_
	Chroot the server to the directory
	@kbd{jaildir}
	.
	This option also implies that the server attempts to drop root privileges at startup.
	You may need to also specify a
	@code{-u}
	option.
	This option is only available if the OS supports adjusting the clock
	without full root privileges.
	This option is supported under NetBSD (configure with
	@code{--enable-clockctl}) or Linux (configure with
	@code{--enable-linuxcaps}) or Solaris (configure with @code{--enable-solarisprivs}).
	_EndOfDoc_;
};

flag = {
    name      = interface;
    value     = I;
    arg-type  = string;
    descrip   = "Listen on an interface name or address";
    max       = NOLIMIT;
    arg-name  = iface;
    stack-arg;
    doc = <<-  _EndOfDoc_
	Open the network address given, or all the addresses associated with the
	given interface name.  This option may appear multiple times.  This option
	also implies not opening other addresses, except wildcard and localhost.
	This option is deprecated. Please consider using the configuration file
	@code{interface} command, which is more versatile. 
	_EndOfDoc_;
};

flag = {
    name      = keyfile;
    value     = k;
    arg-type  = string;
    descrip   = "path to symmetric keys";
    doc = <<-  _EndOfDoc_
	Specify the name and path of the symmetric key file.
	@file{/etc/ntp.keys}
	is the default.
	This is the same operation as the
	@code{keys} @kbd{keyfile}
	configuration file directive.
	_EndOfDoc_;
};

flag = {
    name      = logfile;
    value     = l;
    arg-type  = string;
    descrip   = "path to the log file";
    doc = <<-  _EndOfDoc_
	Specify the name and path of the log file.
	The default is the system log file.
	This is the same operation as the
	@code{logfile} @kbd{logfile}
	configuration file directive.
	_EndOfDoc_;
};

flag = {
    name      = novirtualips;
    value     = L;
    descrip   = "Do not listen to virtual interfaces";
    doc = <<-  _EndOfDoc_
	Do not listen to virtual interfaces, defined as those with
	names containing a colon.  This option is deprecated.  Please
	consider using the configuration file @code{interface} command, which
	is more versatile.
	_EndOfDoc_;
};

flag = {
    ifdef     = SYS_WINNT;
    name      = modifymmtimer;
    value     = M;
    descrip   = "Modify Multimedia Timer (Windows only)";
    doc = <<-  _EndOfDoc_
	Set the Windows Multimedia Timer to highest resolution.  This
	ensures the resolution does not change while ntpd is running,
	avoiding timekeeping glitches associated with changes.
	_EndOfDoc_;
};

flag = {
    name      = nofork;
    value     = n;
    flags-cant = wait-sync;
    descrip   = "Do not fork";
    doc = <<-  _EndOfDoc_
	_EndOfDoc_;
};

flag = {
    name      = nice;
    value     = N;
    descrip   = "Run at high priority";
    doc = <<-  _EndOfDoc_
	To the extent permitted by the operating system, run
	@code{ntpd}
	at the highest priority.
	_EndOfDoc_;
};

flag = {
    name      = pidfile;
    value     = p;
    arg-type  = string;
    descrip   = "path to the PID file";
    doc = <<-  _EndOfDoc_
	Specify the name and path of the file used to record
	@code{ntpd}'s
	process ID.
	This is the same operation as the
	@code{pidfile} @kbd{pidfile}
	configuration file directive.
	_EndOfDoc_;
};

flag = {
    name      = priority;
    value     = P;
    arg-type  = number;
    descrip   = "Process priority";
    doc = <<-  _EndOfDoc_
	To the extent permitted by the operating system, run
	@code{ntpd}
	at the specified
	@code{sched_setscheduler(SCHED_FIFO)}
	priority.
	_EndOfDoc_;
};

flag = {
    name      = quit;
    value     = q;
    flags-cant = saveconfigquit;
    flags-cant = wait-sync;
    descrip   = "Set the time and quit";
    doc = <<-  _EndOfDoc_
	@code{ntpd}
	will not daemonize and will exit after the clock is first
	synchronized.  This behavior mimics that of the
	@code{ntpdate}
	program, which will soon be replaced with a shell script.
	The
	@code{-g}
	and
	@code{-x}
	options can be used with this option.
	Note: The kernel time discipline is disabled with this option.
	_EndOfDoc_;
};

flag = {
    name      = propagationdelay;
    value     = r;
    arg-type  = string;
    descrip   = "Broadcast/propagation delay";
    doc = <<-  _EndOfDoc_
	Specify the default propagation delay from the broadcast/multicast server to this client. This is necessary only if the delay cannot be computed automatically by the protocol.
	_EndOfDoc_;
};

flag = {
    ifdef     = SAVECONFIG;
    name      = saveconfigquit;
    arg-type  = string;
    flags-cant = quit;
    flags-cant = wait-sync;
    descrip   = "Save parsed configuration and quit";
    doc = <<-  _EndOfDoc_
	Cause @code{ntpd} to parse its startup configuration file and save an
	equivalent to the given filename and exit.  This option was
	designed for automated testing.
	_EndOfDoc_;
};

flag = {
    name      = statsdir;
    value     = s;
    arg-type  = string;
    descrip   = "Statistics file location";
    doc = <<-  _EndOfDoc_
	Specify the directory path for files created by the statistics facility.
	This is the same operation as the
	@code{statsdir} @kbd{statsdir}
	configuration file directive.
	_EndOfDoc_;
};

flag = {
    name      = trustedkey;
    value     = t;
    arg-type  = string;
    descrip   = "Trusted key number";
    max       = NOLIMIT;
    arg-name  = tkey;
    stack-arg;
    doc = <<-  _EndOfDoc_
	Add the specified key number to the trusted key list.
	_EndOfDoc_;
};

flag = {
    ifdef     = HAVE_DROPROOT;
    name      = user;
    value     = u;
    arg-type  = string;
    descrip   = "Run as userid (or userid:groupid)";
    omitted-usage = "built without --enable-clockctl or --enable-linuxcaps or --enable-solarisprivs";
    doc = <<-  _EndOfDoc_
	Specify a user, and optionally a group, to switch to.
	This option is only available if the OS supports adjusting the clock
	without full root privileges.
	This option is supported under NetBSD (configure with
	@code{--enable-clockctl}) or Linux (configure with
	@code{--enable-linuxcaps}) or Solaris (configure with @code{--enable-solarisprivs}).
	_EndOfDoc_;
};

flag = {
    name      = updateinterval;
    value     = U;
    arg-type  = number;
    descrip   = "interval in seconds between scans for new or dropped interfaces";
    doc = <<-  _EndOfDoc_
	Give the time in seconds between two scans for new or dropped interfaces.
	For systems with routing socket support the scans will be performed shortly after the interface change
	has been detected by the system.
	Use 0 to disable scanning. 60 seconds is the minimum time between scans.
	_EndOfDoc_;
};

flag = {
    name      = var;
/*    value     = v;	Bug 817 */
    arg-type  = string;
    descrip   = "make ARG an ntp variable (RW)";
    max       = NOLIMIT;
    arg-name  = nvar;
    stack-arg;
    doc = <<-  _EndOfDoc_
	_EndOfDoc_;
};

flag = {
    name      = dvar;
/*    value     = V;	Bug 817 */
    arg-type  = string;
    descrip   = "make ARG an ntp variable (RW|DEF)";
    max       = NOLIMIT;
    arg-name  = ndvar;
    stack-arg;
    doc = <<-  _EndOfDoc_
	_EndOfDoc_;
};

flag = {
    ifdef     = HAVE_WORKING_FORK;
    name      = wait-sync;
    value     = w;
    arg-type  = number;
    flags-cant = nofork;
    flags-cant = quit;
    flags-cant = saveconfigquit;
    descrip   = "Seconds to wait for first clock sync";
    doc = <<-  _EndOfDoc_
	If greater than zero, alters @code{ntpd}'s behavior when forking to
	daemonize.  Instead of exiting with status 0 immediately after
	the fork, the parent waits up to the specified number of
	seconds for the child to first synchronize the clock.  The exit
	status is zero (success) if the clock was synchronized,
	otherwise it is @code{ETIMEDOUT}.
	This provides the option for a script starting @code{ntpd} to easily
	wait for the first set of the clock before proceeding.
	_EndOfDoc_;
/*
** XXX: is it "first set" or is it more?  If it's only "first set" then
** that's not the same as SYNC.
*/
};

flag = {
    name      = slew;
    value     = x;
    descrip   = "Slew up to 600 seconds";
    doc = <<-  _EndOfDoc_
	Normally, the time is slewed if the offset is less than the step threshold, which is 128 ms by default, and stepped if above the threshold.
	This option sets the threshold to 600 s, which is well within the accuracy window to set the clock manually.
	Note: Since the slew rate of typical Unix kernels is limited to 0.5 ms/s, each second of adjustment requires an amortization interval of 2000 s.
	Thus, an adjustment as much as 600 s will take almost 14 days to complete.
	This option can be used with the
	@code{-g}
	and
	@code{-q}
	options.
	See the
	@code{tinker}
	configuration file directive for other options.
	Note: The kernel time discipline is disabled with this option.
	_EndOfDoc_;
};

flag = {
    ifdef     = SYS_WINNT;
    name      = usepcc;
    descrip   = "Use CPU cycle counter (Windows only)";
    doc = <<-  _EndOfDoc_
	Attempt to substitute the CPU counter for @code{QueryPerformanceCounter}.
	The CPU counter and @code{QueryPerformanceCounter} are compared, and if
	they have the same frequency, the CPU counter (RDTSC on x86) is
	used directly, saving the overhead of a system call.
	_EndOfDoc_;
};

flag = {
    ifdef     = SYS_WINNT;
    name      = pccfreq;
    arg-type  = string;
    descrip   = "Force CPU cycle counter use (Windows only)";
    doc = <<-  _EndOfDoc_
	Force substitution the CPU counter for @code{QueryPerformanceCounter}.
	The CPU counter (RDTSC on x86) is used unconditionally with the
	given frequency (in Hz).
	_EndOfDoc_;
};

flag = {
    ifdef     = HAVE_DNSREGISTRATION;
    name      = mdns;
    value     = m;
    descrip   = "Register with mDNS as a NTP server";
    doc = <<-  _EndOfDoc_
	Registers as an NTP server with the local mDNS server which allows
	the server to be discovered via mDNS client lookup.
	_EndOfDoc_;
};