NTP Authentication Problem
Dear All
I'm solaris user . I need to setup NTP authentication for my office server but I have some question for ntp setting up. I need to know if i set authen NTP the client that doesn't set for authen key can sync time from authen ntp server or not ? when i setup the authen at ntp server why the simple ntp can sync my authen time server ? Below is my config file
ntpserver
(ntp.conf)
server 127.127.1.0 prefer key 4
#fudge 127.127.XType.0 stratum 0
#broadcast 224.0.1.1 key 4 ttl 4
enable auth monitor
driftfile /var/ntp/ntp.drift
statsdir /var/ntp/ntpstats/
filegen peerstats file peerstats type day enable
filegen loopstats file loopstats type day enable
filegen clockstats file clockstats type day enable
keys /etc/inet/ntp.keys
trustedkey 4
#requestkey 0
#controlkey 0
(ntp.keys)
4 M DonTTelL
6 M hElloWorld
22 M ImASecret
ntpclient
(ntp.conf)
#driftfile /var/ntp/drift
server 192.168.109.11 prefer key 4
#multicastclient 224.0.1.1 key 4
keys /etc/inet/ntp.keys
trustedkey 4
(ntp.keys)
4 M DonTTelL
6 M hElloWorld
22 M ImASecret
more information below
this ntpq output of ntp client that set authen key
root@sol9_e250 # ntpq
ntpq> pe
remote refid st t when poll reach delay offset disp
==============================================================================
*sol9_11 LOCAL(0) 4 u 18 64 377 0.81 -8.976 2.09
ntpq> as
ind assID status conf reach auth condition last_event cnt
===========================================================
1 20676 f614 yes yes ok sys.peer reachable 1
And this is ntpq output from ntp client that's not set key authen
sol9_55(root):[/etc/init.d] # ntpq
ntpq> pe
remote refid st t when poll reach delay offset disp
==============================================================================
sol9_11 0.0.0.0 16 - - 64 0 0.00 0.000 16000.0
ntpq> as
ind assID status conf reach auth condition last_event cnt
===========================================================
1 16100 c000 yes no
But all of ntp client can sync time . I don't know why . My opinion it should be sync only ntp client that set key authen , isn't it ?
who has information or recommend please help me .
Thank
Sontas J.
(sorry about my english )
