Re: [ntp:questions] ntp-keygen IFF

2009-06-15 Thread Grzegorz Daniluk
ppen ? I'm trying to force ntp-dev-4.2.5p179 to work with IFF crypto scheme. Key generation with ntp-keygen looks OK, both keys and certificates are loaded by ntp but the communication does not work. Thank you very much for your help, Best Regards, G

Re: [ntp:questions] ntp-keygen IFF

2009-06-10 Thread Grzegorz Daniluk
Hi again, ok, sorry, that was my mistake (about cooperation of -e and -q) I was reading the old documentation. Best Regards, Grzegorz Grzegorz Daniluk wrote: > Hi David, > Why -e and -q options together are confusing ? As I understand correctly > by -q we give the password to the

Re: [ntp:questions] ntp-keygen IFF

2009-06-10 Thread Grzegorz Daniluk
values we need to provide the password since the private key is encrypted with des-cbc. Shouldn't they (-e and -q) cooperate ? Best Regards, Grzegorz Daniluk David Mills wrote: > Grzegorz, > > Using -e and -q on the same command linke is very confusing. > > Dave > > D

Re: [ntp:questions] ntp-keygen IFF

2009-06-01 Thread Grzegorz Daniluk
I know that you wrote the autokey does not work correctly in release versions of ntp, but just to compare, please take a look what ntp-keygen v4.2.4p7 prints out when using with '-e' option: %ntp-keygen -e -q serverpasswd -p clientpasswd > group.key %cat group.key # ntpkey_IFFkey_NTS-MAILING.345

Re: [ntp:questions] ntp-keygen IFF

2009-06-01 Thread Grzegorz Daniluk
I have > nothing more to tell you. I am done with this mission. You should ask > for help elsewhere. > > Dave > > Grzegorz Daniluk wrote: > > >> This problem I have with ntp-4.2.5p179. >> >> best regards, >> Grzegorz >> >> Grzegorz Dan

Re: [ntp:questions] ntp-keygen IFF

2009-05-27 Thread Grzegorz Daniluk
7; option. thank you for your suggestions, best regards, Grzegorz Daniluk David Mills wrote: > Grzegorz , > > Please review your Unix documentation on how to redirect standare outpu. > I see no ">" character on your command line. Also, including both a -e > and -q option

Re: [ntp:questions] ntp-keygen IFF

2009-05-27 Thread Grzegorz Daniluk
This problem I have with ntp-4.2.5p179. best regards, Grzegorz Grzegorz Daniluk wrote: > Hi, > Thank you David for your patience and answers. I understand what you > wrote. However, maybe once again, here is the full procedure I'm using > to generate those parameters for IFF

Re: [ntp:questions] ntp-keygen IFF

2009-05-27 Thread Grzegorz Daniluk
7;-e' parameter. thank you very much for your advise, best regards, Grzegorz Daniluk David Mills wrote: > Grzegorz, > > I think this has been said before: Autokey does not work properly in the > current release version.That version includes a mongrel of old and new > files t

Re: [ntp:questions] ntp-keygen IFF

2009-05-25 Thread Grzegorz Daniluk
he client parameters are > redirected to a specified file, usually using the > filename on the > command line. > > Dave > > Grzegorz Daniluk wrote: > >> Hello, again >> David, I tried using latest development version (4.2.5p179). However, >> ntp-keygen there

Re: [ntp:questions] ntp-keygen IFF

2009-05-25 Thread Grzegorz Daniluk
ad of exporting the public values for those previously generated. Thank you in advance, Best Regards, Grzegorz Daniluk David Mills wrote: > Grzegorz, > > On rereading your message I learn that you are using the release > version. That versio has an incompatible mix of old and new

Re: [ntp:questions] ntp-keygen IFF

2009-05-20 Thread Grzegorz Daniluk
Mills wrote: > Grzegorz, > > With reference to the documentation, you act as a trusted agent (TA) to > generate cryptographic media for a trusted host (TH) whose name is > specifiied in the -s option of ntp-keygen. > > Dave > > Grzegorz Daniluk wrote: > > >>

[ntp:questions] ntp-keygen IFF

2009-05-18 Thread Grzegorz Daniluk
er A. When I've generated self-signed certificate and keys on the server A (then running ntp-keygen without '-s' option) everything works fine. Thank you in advance, Best Regards, Grzegorz Daniluk ___ questions mailing list questions@lists.ntp.org https://lists.ntp.org/mailman/listinfo/questions

[ntp:questions] strange ntpd behaviour when modyfing stratum

2008-08-22 Thread Grzegorz Daniluk
having stratum 12 number) had '*' in ntpq when ocxo and rubidium had '+' (having stratum 8 number)for all the time). During that all of the sources had very nice and nearly the same delay, offset and jitter. Has someone any idea why it behaved so strange with pps sources?

[ntp:questions] ntpd with asymetric keys

2008-08-13 Thread Grzegorz Daniluk
change any configuration of ntp or keys, it was just working for a few days continuously. Did anyone saw something like that before ? Thank you, best regards, Grzegorz Daniluk ___ questions mailing list questions@lists.ntp.org https://lists.ntp.org/mailma

Re: [ntp:questions] ntpdate with auth

2008-07-23 Thread Grzegorz Daniluk
Steve Kostecke pisze: > On 2008-07-23, Grzegorz Daniluk <[EMAIL PROTECTED]> wrote: > You're complicating matters by using ntpdc. > > Just edit the server lines in ntpd.conf and restart ntpd. If you're > using iburst on the other server lines ntpd will be ready to

Re: [ntp:questions] ntpdate with auth

2008-07-23 Thread Grzegorz Daniluk
Steve Kostecke wrote: > On 2008-07-23, Grzegorz Daniluk <[EMAIL PROTECTED]> wrote: > >> Thank you very much, that is exactly what I was looking for. >> Now I have another question. I would like to change the poll interval >> for those 'noselect' hosts so

Re: [ntp:questions] ntpdate with auth

2008-07-23 Thread Grzegorz Daniluk
onf_peer size ***Server reports a format error in the received packet (shouldn't happen) The other flags works perfect, I got these messages only with noselect. So maybe I also need to add some code to ntpd so that it would understand a message with no

Re: [ntp:questions] ntpdate with auth

2008-07-14 Thread Grzegorz Daniluk
ely audit the ntp server's time without synchronizing to it. And btw. another question, what is the maximum amount of servers that can be put into the ntp.conf so that ntpd would still work correctly. Grzegorz Daniluk ___ questions maili

Re: [ntp:questions] ntpdate with auth

2008-07-14 Thread Grzegorz Daniluk
ce between the system that I know is ntpd server and my ntp server but that remote machine is not the time server for me (I'm not synchronizing my time to that server) Grzegorz Daniluk ___ questions mailing list questions@lists.ntp.org https://lists.ntp.org/mailman/listinfo/questions

Re: [ntp:questions] ntpdate with auth

2008-07-13 Thread Grzegorz Daniluk
Steve Kostecke wrote: > ntpq -p will show the offset between your ntpd and a remote time server. Yes, I know that, but I can't have that time servers whose time difference I'm checking on my servers list in ntp.conf(i don't want ntpd to start synchronize to them). So finally I need to have some s

Re: [ntp:questions] ntpdate with auth

2008-07-13 Thread Grzegorz Daniluk
Steve Kostecke pisze: > On 2008-07-11, lin_g <[EMAIL PROTECTED]> wrote: > > >> Have anybody tried using ntpdate with iff and rsa keys on the time >> server ? There is no problem when using symmetric md5 keys (-k and >> -a options for ntpdate) but i have no idea how to force ntpdate to >> use the