It does not break because of nat, but because of being on wheezy (maybe cf. 670662)

diff --git a/modules/ntp/templates/ntp.conf b/modules/ntp/templates/ntp.conf
index 4672a85bb728d685f7908f5d2e474059c462ed48..fdbde074c959249c2b98c9c3a4575ce811cd1407 100644 (file)
--- a/modules/ntp/templates/ntp.conf
+++ b/modules/ntp/templates/ntp.conf
@@ -6,7 +6,7 @@
 driftfile /var/lib/ntp/ntp.drift
 statsdir /var/log/ntpstats/
 
-<% if scope.lookupvar('site::nodeinfo')['misc']['natted'] -%>
+<% if %w{wheezy}.include?(scope.lookupvar('::lsbdistcodename')) -%>
 statistics loopstats peerstats clockstats
 filegen loopstats file loopstats type day enable
 filegen peerstats file peerstats type day enable