[ntp:questions] ntp-keygen IFF
David Mills
mills at udel.edu
Mon May 25 21:07:09 UTC 2009
Grzegorz,
I think this has been said before: Autokey does not work properly in the
current release version.That version includes a mongrel of old and new
files that are mutually incompatible. Autokey works only in the
development version, at least until the release version catches up.
Dave
Grzegorz Daniluk wrote:
>Hi,
>Thank you for your answer, I know about this redirecting :) My problem
>is that ntp-keygen does not generate those public parameters as e.g.
>ntp-keygen in ntp-4.2.4p7.
>
>Best Regards,
>Grzegorz
>
>
>David Mills wrote:
>
>
>>Grzegorz,
>>
>>You should read the -e option more carefully. Tthe client parameters are
>>redirected to a specified file, usually using the > filename on the
>>command line.
>>
>>Dave
>>
>>Grzegorz Daniluk wrote:
>>
>>
>>
>>>Hello, again
>>>David, I tried using latest development version (4.2.5p179). However,
>>>ntp-keygen there looks like ignoring -e option when I want to export a
>>>group key for clients. What I'm doing is:
>>>% ntp-keygen -T -I -p serverpasswd -s hostname
>>>(...)
>>>% ls
>>>ntpkey_IFFkey_hostname.3452249317
>>>ntpkey_RSAhost_hostname.3452249317 ntpkey_host_hostname
>>>ntpkey_RSA-MD5cert_hostname.3452249317
>>>ntpkey_cert_hostname ntpkey_iffkey_hostname
>>>% ntp-keygen -e -q serverpasswd -p clientpasswd
>>>(...)
>>>% ls
>>>ntpkey_IFFkey_hostname.3452249317
>>>ntpkey_RSAhost_rocket.3452249503 ntpkey_host_rocket
>>>ntpkey_RSA-MD5cert_hostname.3452249317
>>>ntpkey_cert_hostname ntpkey_iffkey_hostname
>>>ntpkey_RSAhost_hostname.3452249317 ntpkey_host_hostname
>>>
>>>So it looks like the second ntp-keygen call is just creating new keys
>>>for my machine (rocket) instead of exporting the public values for those
>>>previously generated.
>>>
>>>Thank you in advance,
>>>Best Regards,
>>>Grzegorz Daniluk
>>>
>>>
>>>David Mills wrote:
>>>
>>>
>>>
>>>
>>>>Grzegorz,
>>>>
>>>>On rereading your message I learn that you are using the release
>>>>version. That versio has an incompatible mix of old and new files that
>>>>are unlikely to work properly. The old files when used together and the
>>>>new files when used together do work, but not a combination. Use the
>>>>development version and the online/development documentation.
>>>>
>>>>Dave
>>>>
>>>>Grzegorz Daniluk wrote:
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>>Hi,
>>>>>Thank you for your answer.
>>>>>I understand what you wrote, and that is exactly what I'm trying to do
>>>>>by using ntp-keygen. However, it does not work, I receive the log
>>>>>message as described in the first e-mail.
>>>>>
>>>>>Am I doing something wrong ? Please advise.
>>>>>
>>>>>best regards,
>>>>>Grzegorz
>>>>>
>>>>>David Mills wrote:
>>>>>
>>>>>
>>>>>_______________________________________________
>>>>>questions mailing list
>>>>>questions at lists.ntp.org
>>>>>https://lists.ntp.org/mailman/listinfo/questions
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>_______________________________________________
>>>>questions mailing list
>>>>questions at lists.ntp.org
>>>>https://lists.ntp.org/mailman/listinfo/questions
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>_______________________________________________
>>>questions mailing list
>>>questions at lists.ntp.org
>>>https://lists.ntp.org/mailman/listinfo/questions
>>>
>>>
>>>
>>>
>>_______________________________________________
>>questions mailing list
>>questions at lists.ntp.org
>>https://lists.ntp.org/mailman/listinfo/questions
>>
>>
>>
>
>_______________________________________________
>questions mailing list
>questions at lists.ntp.org
>https://lists.ntp.org/mailman/listinfo/questions
>
>
More information about the questions
mailing list