Problems with authentication

[Stephan Seitz]

On Do, Nov 01, 2018 at 10:03:48 -0700, Hal Murray wrote:
>I meant what is the output of "ntpq -p"?
>"show" was not part of the command.

Ah, sorry, the peers list. ;-)

     remote           refid      st t when poll reach   delay   offset   jitter
===============================================================================
+osgiliath.gondo 80.151.151.109   2 u   58   64  377   0.1754 683.3089   0.0350

But according to the „+” sign the client doesn’t like the server. Even 
when I remove all crypto stuff the offset won’t get better.

If I activate the debian pool lines in ntp.conf the offset gets down 
immediately:

     remote           refid      st t when poll reach   delay   offset   jitter
===============================================================================
 0.debian.pool.n .POOL.          16 p    -  256    0   0.0000   0.0000   0.0001
 1.debian.pool.n .POOL.          16 p    -  256    0   0.0000   0.0000   0.0001
 2.debian.pool.n .POOL.          16 p    -  256    0   0.0000   0.0000   0.0001
 3.debian.pool.n .POOL.          16 p    -   64    0   0.0000   0.0000   0.0001
-osgiliath.gondo 131.188.3.221    2 u   55  128  377   0.3008  -0.6863   0.1613
-janetzki.eu     131.188.3.221    2 u   26  256  377  13.6267  -0.6315   0.2143
-tirpitz.netzkon 213.172.96.14    2 u   27  128  377   9.8214  -0.0407   0.3710
+stratum2-3.ntp. 129.70.130.71    2 u   31  128  377  16.5838   0.4225   0.2174
-ntp2.m-online.n 212.18.1.106     2 u   19  128  377  16.3195  -1.0985   0.5404
-www.mcr42.de    195.13.1.153     3 u   83  128  377  13.1015  -0.3983   0.9085
*ntp0.rrze.ipv6. .GPS.            1 u   84  128  377  18.2682  -3.0858   0.3610
-2001:a60::123:2 212.18.1.106     2 u   85  128  377  16.7926  -0.7973   0.3495
+stratum2-3.ntp. 129.70.130.71    2 u   79  128  377  17.9730  -0.1780   0.1294
+mail.ecki-netz. 131.188.3.223    2 u   21  128  377  14.4219   4.3344   0.0829

ind assid status  conf reach auth condition  last_event cnt
===========================================================
  1 44369  8811   yes  none  none    reject    mobilize  1
  2 44370  8811   yes  none  none    reject    mobilize  1
  3 44371  8811   yes  none  none    reject    mobilize  1
  4 44372  8811   yes  none  none    reject    mobilize  1
  5 44373  d324   yes   yes   bad   outlier   reachable  2
  6 44374  1324    no   yes  none   outlier   reachable  2
  7 44375  1314    no   yes  none   outlier   reachable  1
  8 44377  141a    no   yes  none candidate    sys_peer  1
  9 44379  1324    no   yes  none   outlier   reachable  2
 10 44381  1324    no   yes  none   outlier   reachable  2
 11 44382  161a    no   yes  none  sys.peer    sys_peer  1
 12 44383  1324    no   yes  none   outlier   reachable  2
 13 44388  1424    no   yes  none candidate   reachable  2
 14 44389  1424    no   yes  none candidate   reachable  2

As soon as I only use osgiliath.gondor as server again the offset is 
getting higher:

     remote           refid      st t when poll reach   delay   offset   jitter
===============================================================================
+osgiliath.gondo 131.188.3.221    2 u   16   64    3   0.4156  -1.0638   0.0197


If I have time I’ll test if everything works if I change ntpsec back to 
ntp on the client.

>I fixed it last night.  If you are using git head, it should work 
>correctly now.

Well, no, I’m using ntpsec from the Debian distribution (testing).

Shade and sweet water!

	Stephan

-- 
| Public Keys: http://fsing.rootsland.net/~stse/keys.html |
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3545 bytes
Desc: not available
URL: <https://lists.ntpsec.org/pipermail/users/attachments/20181105/f8c4b941/attachment.bin>