[SOLVED] ntpd can't allocate memory

[Fatmouse69]

Hi,

I set up a new OPNsense 18.7. Upgraded to 18.7.4 successfully and wanted to test out 2FA with a TOTP server as documented here: https://docs.opnsense.org/manual/how-tos/two_factor.html.

Unfortunately this does not work as expected. As the TOTP highly depends on time sync I checked NTP and it seems that there are some problems regarding this service. I get the following log messages while analyzing the log of ntpd:

ntpd[27311]: kernel reports TIME_ERROR: 0x2041: Clock Unsynchronized
ntpd[27311]: kernel reports TIME_ERROR: 0x2041: Clock Unsynchronized
ntpd[27311]: mlockall(): Cannot allocate memory

Can this be the cause of a nonfunctional TOTP server? How can I solve this?

Thank you very much for you help.

UPDATE:
Yesterday, I totally ignored the fact, that I had selected a token length of 8 and my OTP-Generator (FreeOTP app) is only capable of generating tokens with a length of 6 digits (douh!). After changing this to 6 digits, the 2FA functionality works. Nevertheless, does the inability of allocating memory mean any problems?

[franco]

I think this mlockall() error is normal in HardenedBSD due to memory access restrictions / exploit mitigation. No operational problems though.


Cheers,
Franco

[Fatmouse69]

Hey Franco,
thanks for taking the time to explain the reason behind those messages. 
Best regards, David