[ntp:questions] ntp-keygen IFF

David Mills mills at udel.edu
Mon May 25 21:07:09 UTC 2009


Grzegorz,

I think this has been said before: Autokey does not work properly in the 
current release version.That version includes a mongrel of old and new 
files that are mutually incompatible. Autokey works only in the 
development version, at least until the release version catches up.

Dave

Grzegorz Daniluk wrote:

>Hi,
>Thank you for your answer, I know about this redirecting :) My problem
>is that ntp-keygen does not generate those public parameters as e.g.
>ntp-keygen in ntp-4.2.4p7.
>
>Best Regards,
>Grzegorz
>
>
>David Mills wrote:
>  
>
>>Grzegorz,
>>
>>You should read the -e option more carefully. Tthe client parameters are 
>>redirected to a specified file, usually using the > filename on the 
>>command line.
>>
>>Dave
>>
>>Grzegorz Daniluk wrote:
>>
>>    
>>
>>>Hello, again
>>>David, I tried using latest development version (4.2.5p179). However, 
>>>ntp-keygen there looks like ignoring -e option when I want to export a 
>>>group key for clients. What I'm doing is:
>>>% ntp-keygen -T -I -p serverpasswd -s hostname
>>>(...)
>>>% ls
>>>ntpkey_IFFkey_hostname.3452249317       
>>>ntpkey_RSAhost_hostname.3452249317      ntpkey_host_hostname
>>>ntpkey_RSA-MD5cert_hostname.3452249317  
>>>ntpkey_cert_hostname                    ntpkey_iffkey_hostname
>>>% ntp-keygen -e -q serverpasswd -p clientpasswd
>>>(...)
>>>% ls
>>>ntpkey_IFFkey_hostname.3452249317       
>>>ntpkey_RSAhost_rocket.3452249503        ntpkey_host_rocket
>>>ntpkey_RSA-MD5cert_hostname.3452249317  
>>>ntpkey_cert_hostname                    ntpkey_iffkey_hostname
>>>ntpkey_RSAhost_hostname.3452249317      ntpkey_host_hostname
>>>
>>>So it looks like the second ntp-keygen call is just creating new keys 
>>>for my machine (rocket) instead of exporting the public values for those 
>>>previously generated.
>>>
>>>Thank you in advance,
>>>Best Regards,
>>>Grzegorz Daniluk
>>>
>>>
>>>David Mills wrote:
>>> 
>>>
>>>      
>>>
>>>>Grzegorz,
>>>>
>>>>On rereading your message I learn that you are using the release 
>>>>version. That versio has an incompatible mix of old and new files that 
>>>>are unlikely to work properly. The old files when used together and the 
>>>>new files when used together do work, but not a combination. Use the 
>>>>development version and the online/development documentation.
>>>>
>>>>Dave
>>>> 
>>>>Grzegorz Daniluk wrote:
>>>>
>>>> 
>>>>   
>>>>
>>>>        
>>>>
>>>>>Hi,
>>>>>Thank you for your answer.
>>>>>I understand what you wrote, and that is exactly what I'm trying to do 
>>>>>by using ntp-keygen. However, it does not work, I receive the log 
>>>>>message as described in the first e-mail.
>>>>>
>>>>>Am I doing something wrong ? Please advise.
>>>>>
>>>>>best regards,
>>>>>Grzegorz
>>>>>
>>>>>David Mills wrote:   
>>>>>
>>>>>   
>>>>>_______________________________________________
>>>>>questions mailing list
>>>>>questions at lists.ntp.org
>>>>>https://lists.ntp.org/mailman/listinfo/questions
>>>>>
>>>>>
>>>>>   
>>>>>     
>>>>>
>>>>>          
>>>>>
>>>>_______________________________________________
>>>>questions mailing list
>>>>questions at lists.ntp.org
>>>>https://lists.ntp.org/mailman/listinfo/questions
>>>>
>>>> 
>>>>   
>>>>
>>>>        
>>>>
>>>_______________________________________________
>>>questions mailing list
>>>questions at lists.ntp.org
>>>https://lists.ntp.org/mailman/listinfo/questions
>>> 
>>>
>>>      
>>>
>>_______________________________________________
>>questions mailing list
>>questions at lists.ntp.org
>>https://lists.ntp.org/mailman/listinfo/questions
>>
>>    
>>
>
>_______________________________________________
>questions mailing list
>questions at lists.ntp.org
>https://lists.ntp.org/mailman/listinfo/questions
>  
>




More information about the questions mailing list