[ntp:questions] Re: Crypto iffpar

Steve Kostecke kostecke at ntp.isc.org
Mon Dec 5 14:25:37 UTC 2005


On 2005-12-04, Serge Bets <serge.bets at NOSPAM.laposte.invalid> wrote:

>  On Sunday, December 4, 2005 at 3:01:17 +0000, Danny Mayer wrote:
>
>> Serge Bets wrote:
>>
>>> "crypto iffpar some_filename" seems to work for the host's own
>>> IFFpar, which will be read and used. But not for another host's
>>> IFFpar
>>
>> Have you read this documentation:
>> http://ntp.isc.org/bin/view/Support/ConfiguringAutokey
>
> Well yes, very good and easy manual, but why do you suggest it here?
> ConfiguringAutokey doesn't talk about "crypto iffpar" command.

I've never had to use 'crypto iffpar' when ConfiguringAutokey.

> If it was about the IFF activation bit, I am under the impression that
> there lacks on Client side in section "6.6.2.4.1. IFF Group Keys"
> either one of:
>
>| ln -s ntpkey_IFFkey_server.3301264563 ntpkey_iff_Client

No. The correct sym-link for client members of an NTP Trust Group is

ln -s ntpkey_IFFkey_server.XXXXXXXXXX ntpkey_iff_server

This has worked on every NTP Trust Group client member that I've ever
set up.

-- 
Steve Kostecke <kostecke at ntp.isc.org>
NTP Public Services Project - http://ntp.isc.org/




More information about the questions mailing list