Hello,

I have configured my NTP server and client to use Autokey with IFF Identity
scheme and it's working, client synchronizes to my servers.
It synchronizes with and without copying the IFF parameter to the client.
So I'm wondering if IFF identity scheme is actually being used; How can I
verify that?

I have done these steps

On Server
--------
>ntp-keygen -T -I -p serverpwd -c RSA-SHA1 -S RSA -m 2048
#Extract IFF public parameters
>ntp-keygen -e -p serverpwd > iffParam
Renamed  iffParam to the first line of the file
(ntpkey_iffpar_MY_NTP_SERVER.TIMESTAMP) and copied it to my client machine

On client
--------
>ntp-keygen -H clientpwd
Created a symbolink link for the IFF paramert file received from the server
ntpkey_iff_server -> ntpkey_iffpar_MY_NTP_SERVER.TIMESTAMP

Added these lines to the /etc/ntp.conf

crypto pw clientpwd
server MY_NTP_SERVER autokey burst iburst
# used burst and iburst just for quick testing my private server.

Is there anything missing in the IFF configuration/key generation?


I'd appreciate your comments.

Joe
_______________________________________________
questions mailing list
questions@lists.ntp.org
http://lists.ntp.org/listinfo/questions
  • [ntp:questions... Joe Smithian
    • Re: [ntp:... Steve Kostecke
      • Re: [... Joe Smithian
        • R... Joe Smithian
          • ... Steve Kostecke
            • ... Joe Smithian
              • ... E-Mail Sent to this address will be added to the BlackLists
              • ... Steve Kostecke

Reply via email to