[ntp:questions] Re: Crypto iffpar

Steve Kostecke kostecke at ntp.isc.org
Sat Dec 17 04:57:54 UTC 2005

On 2005-12-16, Serge Bets <serge.bets at NOSPAM.laposte.invalid> wrote:

> A leaf client, not serving anyone, and hostnamed "Client". It gets time
> in unicast client/server mode from a trusted server called "Server". The
> issuer of server's trusted self-signed certificate is "Server". Client
> has a ntpkey_iff_Server link to ntpkey_IFFkey_Server.3340702253. It is
> configured just as what Steve quoted from ConfiguringAutokey.

Those configuration steps, as quoted, have worked for me on a good
number of Linux and FreeBSD systems.

> What else is needed on Client to make use of IFF scheme? A link named
> ntpkey_iff_Client, a "crypto ident iff" statement, something else?

In my experience, nothing.

Steve Kostecke <kostecke at ntp.isc.org>
NTP Public Services Project - http://ntp.isc.org/

More information about the questions mailing list