On 2007-05-09, Vladimir Smotlacha <[EMAIL PROTECTED]> wrote: > Having still problem to setup IFF on client site, I discovered > unexpected (and undocumented) behavior: the client of IFF group needs > any IFF parameter file with name "ntpkey_iff_<hostname>" although that > parameters are never used (assuming right "ntpkey_iff_<server>" is > present for each server). The only role of "ntpkey_iff_<hostname>" is to > set the CRYPTO_FLAG_IFF in crypto_flags variable, otherwise the IFF > authentication process does not start.
The IFF identity scheme will not be used if that sym-link does not point to a file, or is not a file, containing the valid IFFkey (aka "group" key) for that server. Check the association flags. -- Steve Kostecke <[EMAIL PROTECTED]> NTP Public Services Project - http://ntp.isc.org/ _______________________________________________ questions mailing list [email protected] https://lists.ntp.isc.org/mailman/listinfo/questions
