Bugzilla Bug 65099

When running a stratum 2 server, ntpd is unable to locate keys for peering as
well as broadcast.

Reproducible: Always
Steps to Reproduce:
1. emerge ntp

2. create keys file on server:
/usr/local/etc/ntpd.keys
--------------------------
1 M key1
2 M key2
3 M key3
--------------------

3. edit /etc/ntp.conf
-----------------------------------------------------------------
# Local "EMC Professional" DCF77 clock
# (http://www.gude.info/frame-emc-professional.htm)
server  127.127.8.0     prefer          mode 12

# Primary servers
server  192.38.7.240              # stratum 1 GPS.dix.dk
server  212.242.86.186            # stratum 1 GPS.FreeBSD.dk

# Peer with old servers until they're dead and buried
peer    130.225.96.3    # stratum 2  inet.diku.dk
peer    130.225.96.4    # stratum 2  info.diku.dk

peer    130.225.96.9    key 2    # stratum 2 ntp2.diku.dk (uses main gateway)
peer    130.225.96.10   key 3    # stratum 2 ntp3.diku.dk (uses backup gateway)

# path information
driftfile       /var/lib/ntp/ntp.drift
keys            /usr/local/etc/ntp/ntp.keys

# Broadcast to local network
broadcast       130.225.97.255  key 1

# Multicast too (for routed network)
broadcast       224.0.1.1       key 1

-------------------------------------------------

4. /etc/init.d/ntpd restart
Actual Results:  
Sep 23 16:13:27 pc-071 ntpd[1995]: ntpd 4.2.0@1.1161-r Thu Sep 23 16:02:58 CEST
2004 (1)
Sep 23 16:13:27 pc-071 ntpd[1995]: signal_no_reset: signal 13 had flags 4000000
Sep 23 16:13:27 pc-071 ntpd[1995]: precision = 1.000 usec
Sep 23 16:13:27 pc-071 ntpd[1995]: no IPv6 interfaces found
Sep 23 16:13:27 pc-071 ntpd[1995]: kernel time sync status 0040
Sep 23 16:13:27 pc-071 ntpd[1995]: refclock_newpeer: clock type 8 invalid
Sep 23 16:13:27 pc-071 ntpd[1995]: configuration of 127.127.8.0 failed
Sep 23 16:13:27 pc-071 ntpd[1995]: Frequency format error in
/var/lib/ntp/ntp.drift
Sep 23 16:13:29 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:13:30 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is
unreachable
Sep 23 16:13:33 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:13:34 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:14:33 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:14:34 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is
unreachable
Sep 23 16:14:36 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:14:39 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:15:36 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:15:37 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is
unreachable
Sep 23 16:15:41 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:15:45 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:16:41 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:16:42 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is
unreachable
Sep 23 16:16:46 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:16:48 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:17:46 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:17:46 pc-071 ntpd[1995]: synchronized to 130.225.96.3, stratum=2
Sep 23 16:25:48 pc-071 ntpd[1995]: time reset +482.494787 s
Sep 23 16:25:49 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:25:50 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:25:50 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is
unreachable
Sep 23 16:25:54 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:26:53 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is
unreachable
Sep 23 16:26:54 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:26:55 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:26:57 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:27:56 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is
unreachable
Sep 23 16:27:59 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:28:01 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:28:01 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:29:01 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is
unreachable
Sep 23 16:29:02 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:29:04 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:29:07 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:30:04 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is
unreachable
Sep 23 16:30:06 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:30:07 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:30:13 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:31:09 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is
unreachable
Sep 23 16:31:09 pc-071 ntpd[1995]: synchronized to 130.225.96.3, stratum=2
Sep 23 16:31:12 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:31:12 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:31:15 pc-071 ntpd[1995]: transmit: encryption key 1 not found


Expected Results:  
Well... finding the keys in the keys file would be nice.
I need it to prevent servers from listening to rogue ntp-servers broadcasting
on
our network.

The "Network is unreachable" lines in the log is caused by the firewalls not
allowing traffic to the new ntp-servers yet.
And I haven't fixed support for the local dcf77 either, thus the "configuration
of 127.127.8.0 failed"

pc-071 root # emerge info
Portage 2.0.50-r10 (default-x86-DIKU, gcc-3.3.3, glibc-2.3.3.20040420-r0,
2.4.26-gentoo-r8)
=================================================================
System uname: 2.4.26-gentoo-r8 i686 Intel(R) Pentium(R) 4 CPU 2.40GHz
Gentoo Base System version 1.4.16
Autoconf: sys-devel/autoconf-2.59-r4
Automake: sys-devel/automake-1.8.3
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-march=i386 -O3 -pipe -fomit-frame-pointer"
CHOST="i386-pc-linux-gnu"
COMPILER="gcc3"
CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb /usr/kde/2/share/config
/usr/kde/3.2/share/config /usr/kde/3/share/config
/usr/lib/mozilla/defaults/pref
/usr/share/config /usr/share/texmf/dvipdfm/config/
/usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/
/usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/ /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=i386 -O3 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs ccache fixpackages sandbox"
GENTOO_MIRRORS="ftp://ftp.gentoo.diku.dk/
http://212.219.247.21/sites/www.ibiblio.org/gentoo/
ftp://gentoo.linux.no/pub/gentoo/ http://gentoo.linux.no/"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.diku.dk/gentoo-portage/"
USE="X Xaw3d alsa apm arts avi berkdb crypt doc emacs encode esd foomaticdb
gdbm
gif gnome gpm gtk gtk2 imap imlib java jpeg kde ldap libg++ libwww mad maildir
mbox mikmod motif mozilla mpeg nas ncurses nls oggvorbis opengl pam pdflib perl
png python qt quicktime readline sasl sdl slang spell ssl svga tcltk tcpd tetex
tiff truetype x86 xgetdefault xml2 xmms xv zlib"

Oops, typo in the reproduce, step 2.
The keys _are_ actually in the file referenced from /etc/ntp.conf  

in step 2 you say:
/usr/local/etc/ntpd.keys

in your config file you say:
keys            /usr/local/etc/ntp/ntp.keys

whats up with that ?

That was what i commented on.
The keys are in /usr/local/etc/ntp/ntp.keys, as written in ntp.conf.
I just made a typo in the bugreport.

please try 4.2.0.20040617