NTP Symmetric Key


Next: , Previous: (dir), Up: (dir)

NTP's Symmetric Key File User Manual

This document describes the symmetric key file for the NTP Project's ntpd program.

This document applies to version 4.2.7p332 of ntp.keys.

Short Contents



Description

The name and location of the symmetric key file for ntpd can be specified in a configuration file, by default /etc/ntp.keys.



Invoking ntp.keys

This document describes the format of an NTP symmetric key file. For a description of the use of this type of file, see the .Qq Authentication Support section of the ntp.conf(5) page.

ntpd(8) reads its keys from a file specified using the -k command line option or the .Ic keys statement in the configuration file. While key number 0 is fixed by the NTP standard (as 56 zero bits) and may not be changed, one or more keys numbered between 1 and 65534 may be arbitrarily set in the keys file.

The key file uses the same comment conventions as the configuration file. Key entries use a fixed format of the form

.D1 Ar keyno type key

where .Ar keyno is a positive integer (between 1 and 65534), .Ar type is the message digest algorithm, and .Ar key is the key itself.

The .Ar key may be given in a format controlled by the .Ar type field. The .Ar type .Li MD5 is always supported. If .Li ntpd was built with the OpenSSL library then any digest library supported by that library may be specified. However, if compliance with FIPS 140-2 is required the .Ar type must be either .Li SHA or .Li SHA1 .

What follows are some key types, and corresponding formats:

Li
The key is 1 to 16 printable characters terminated by an EOL, whitespace, or a .Li # (which is the "start of comment" character).
Li
Li
Li
The key is a hex-encoded ASCII string of 40 characters, which is truncated as necessary.

Note that the keys used by the ntpq(8) and ntpdc(8) programs are checked against passwords requested by the programs and entered by hand, so it is generally appropriate to specify these keys in ASCII format.

This section was generated by AutoGen, using the agtexi-cmd template and the option descriptions for the ntp.keys program. This software is released under the NTP license, <http://ntp.org/license>.

ntp.keys help/usage (--help)

This is the automatically generated usage text for ntp.keys.

The text printed is the same whether selected with the help option (--help) or the more-help option (--more-help). more-help will print the usage text by passing it through a pager program. more-help is disabled on platforms without a working fork(2) function. The PAGER environment variable is used to select the program, defaulting to more. Both will exit with a status code of 0.

     ntp.keys is unavailable - no --help

presetting/configuring ntp.keys

Any option that is not marked as not presettable may be preset by loading values from environment variables named NTP.KEYS and NTP.KEYS_<OPTION_NAME>. <OPTION_NAME> must be one of the options listed above in upper case and segmented with underscores. The NTP.KEYS variable will be tokenized and parsed like the command line. The remaining variables are tested for existence and their values are treated like option arguments.

The command line options relating to configuration and/or usage help are:

version

Print the program version to standard out, optionally with licensing information, then exit 0. The optional argument specifies how much licensing detail to provide. The default is to print just the version. The licensing infomation may be selected with an option argument. Only the first letter of the argument is examined:

version
Only print the version. This is the default.
copyright
Name the copyright usage licensing terms.
verbose
Print the full copyright usage licensing terms.

ntp.keys exit status

One of the following exit values will be returned:

0 (EXIT_SUCCESS)
Successful program execution.
1 (EXIT_FAILURE)
The operation failed or the command syntax was not valid.

ntp.keys Files

Pa
the default name of the configuration file

ntp.keys See Also

ntp.conf(5), ntpd(1ntpdmdoc), ntpdate(1ntpdatemdoc), ntpdc(1ntpdcmdoc), sntp(1sntpmdoc)

ntp.keys Notes

This document is derived from FreeBSD.