xntpdc authentication

Article View: comp.protocols.time.ntp

Article #744

Back to comp.protocols.time.ntp Previous Next

#744

From: debbieg
Date: Thu, 18 Apr 1991 20:10

34 lines
1453 bytes

I am testing authentication in xntpd and found that if a
peer is configured and without a key (making it not authenable)
then it is always trustable even if the local host has 
authentication set and the peer is not sending macs.

See the following code in ntp_proto.c:
	/*
	 * Determine if this guy is basically trustable.
	 */
	if (restrict & RES_DONTTRUST)
		trustable = 0;
	else
		trustable = 1;
	
	if (sys_authenticate && trustable) {
		if (!(peer->flags & FLAG_CONFIG)
		    || (peer->flags & FLAG_AUTHENABLE))
			trustable = 0;

		if (has_mac) {
			"code omitted for brevity"	
		}
	}

This seems to contradict the documentation which says that if
authenticate = yes on the local server, then only peers which
include an authentication field encrypted with one of our trusted
keys will be considered for synchronizing to.

Which one is correct?  Thanks!!!

Debbie.Galeazzi@SanDiego.NCR.COM
NCR E&M - San Diego, California

Technical Details

Message-ID: <9104220749.ag09636@ncrcom.DaytonOH.NCR.COM>

Path:

arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!usc!ucsd!ucbvax!smokey.sandiego.NCR.COM!debbieg

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!usc!ucsd!ucbvax!smokey.sandiego.NCR.COM!debbieg
From: debbieg@smokey.sandiego.NCR.COM
Newsgroups: comp.protocols.time.ntp
Subject: xntpdc authentication
Message-ID: <9104220749.ag09636@ncrcom.DaytonOH.NCR.COM>
Date: 18 Apr 91 20:10:10 GMT
Sender: daemon@ucbvax.BERKELEY.EDU
Reply-To: Debbie Galeazzi <debbie.galeazzi@SanDiego.NCR.COM>
Distribution: inet
Organization: NCR E&M-San Diego, CA
Lines: 34