Problems with authentication

[Hal Murray]

There are two issues in this discussion.

> But according to the "+" sign the client doesn't like the server.

No, the + means that server is working.  A - would mean that the packets are 
getting through but that the server was rejected because it doesn't agree 
close enough with the other servers.

The 377 in the reach column means that the last 8 packets got to the server 
and the answers got back.  That includes getting through any crypto.

> Even when I remove all crypto stuff the offset won't get better. 

The + means the server is working: packets are getting through and past sanity 
checks.

The lack of a * on some server means it doesn't have enough servers.

Do you have a "tos minsane" line in your ntp.conf?



-- 
These are my opinions.  I hate spam.