When running a stratum 2 server, ntpd is unable to locate keys for peering as well as broadcast. Reproducible: Always Steps to Reproduce: 1. emerge ntp 2. create keys file on server: /usr/local/etc/ntpd.keys -------------------------- 1 M key1 2 M key2 3 M key3 -------------------- 3. edit /etc/ntp.conf ----------------------------------------------------------------- # Local "EMC Professional" DCF77 clock # (http://www.gude.info/frame-emc-professional.htm) server 127.127.8.0 prefer mode 12 # Primary servers server 192.38.7.240 # stratum 1 GPS.dix.dk server 212.242.86.186 # stratum 1 GPS.FreeBSD.dk # Peer with old servers until they're dead and buried peer 130.225.96.3 # stratum 2 inet.diku.dk peer 130.225.96.4 # stratum 2 info.diku.dk peer 130.225.96.9 key 2 # stratum 2 ntp2.diku.dk (uses main gateway) peer 130.225.96.10 key 3 # stratum 2 ntp3.diku.dk (uses backup gateway) # path information driftfile /var/lib/ntp/ntp.drift keys /usr/local/etc/ntp/ntp.keys # Broadcast to local network broadcast 130.225.97.255 key 1 # Multicast too (for routed network) broadcast 224.0.1.1 key 1 ------------------------------------------------- 4. /etc/init.d/ntpd restart Actual Results: Sep 23 16:13:27 pc-071 ntpd[1995]: ntpd 4.2.0@1.1161-r Thu Sep 23 16:02:58 CEST 2004 (1) Sep 23 16:13:27 pc-071 ntpd[1995]: signal_no_reset: signal 13 had flags 4000000 Sep 23 16:13:27 pc-071 ntpd[1995]: precision = 1.000 usec Sep 23 16:13:27 pc-071 ntpd[1995]: no IPv6 interfaces found Sep 23 16:13:27 pc-071 ntpd[1995]: kernel time sync status 0040 Sep 23 16:13:27 pc-071 ntpd[1995]: refclock_newpeer: clock type 8 invalid Sep 23 16:13:27 pc-071 ntpd[1995]: configuration of 127.127.8.0 failed Sep 23 16:13:27 pc-071 ntpd[1995]: Frequency format error in /var/lib/ntp/ntp.drift Sep 23 16:13:29 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable Sep 23 16:13:30 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable Sep 23 16:13:33 pc-071 ntpd[1995]: transmit: encryption key 2 not found Sep 23 16:13:34 pc-071 ntpd[1995]: transmit: encryption key 3 not found Sep 23 16:14:33 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable Sep 23 16:14:34 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable Sep 23 16:14:36 pc-071 ntpd[1995]: transmit: encryption key 2 not found Sep 23 16:14:39 pc-071 ntpd[1995]: transmit: encryption key 3 not found Sep 23 16:15:36 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable Sep 23 16:15:37 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable Sep 23 16:15:41 pc-071 ntpd[1995]: transmit: encryption key 2 not found Sep 23 16:15:45 pc-071 ntpd[1995]: transmit: encryption key 3 not found Sep 23 16:16:41 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable Sep 23 16:16:42 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable Sep 23 16:16:46 pc-071 ntpd[1995]: transmit: encryption key 2 not found Sep 23 16:16:48 pc-071 ntpd[1995]: transmit: encryption key 3 not found Sep 23 16:17:46 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable Sep 23 16:17:46 pc-071 ntpd[1995]: synchronized to 130.225.96.3, stratum=2 Sep 23 16:25:48 pc-071 ntpd[1995]: time reset +482.494787 s Sep 23 16:25:49 pc-071 ntpd[1995]: transmit: encryption key 3 not found Sep 23 16:25:50 pc-071 ntpd[1995]: transmit: encryption key 2 not found Sep 23 16:25:50 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable Sep 23 16:25:54 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable Sep 23 16:26:53 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable Sep 23 16:26:54 pc-071 ntpd[1995]: transmit: encryption key 3 not found Sep 23 16:26:55 pc-071 ntpd[1995]: transmit: encryption key 2 not found Sep 23 16:26:57 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable Sep 23 16:27:56 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable Sep 23 16:27:59 pc-071 ntpd[1995]: transmit: encryption key 3 not found Sep 23 16:28:01 pc-071 ntpd[1995]: transmit: encryption key 2 not found Sep 23 16:28:01 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable Sep 23 16:29:01 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable Sep 23 16:29:02 pc-071 ntpd[1995]: transmit: encryption key 3 not found Sep 23 16:29:04 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable Sep 23 16:29:07 pc-071 ntpd[1995]: transmit: encryption key 2 not found Sep 23 16:30:04 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable Sep 23 16:30:06 pc-071 ntpd[1995]: transmit: encryption key 3 not found Sep 23 16:30:07 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable Sep 23 16:30:13 pc-071 ntpd[1995]: transmit: encryption key 2 not found Sep 23 16:31:09 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable Sep 23 16:31:09 pc-071 ntpd[1995]: synchronized to 130.225.96.3, stratum=2 Sep 23 16:31:12 pc-071 ntpd[1995]: transmit: encryption key 3 not found Sep 23 16:31:12 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable Sep 23 16:31:15 pc-071 ntpd[1995]: transmit: encryption key 1 not found Expected Results: Well... finding the keys in the keys file would be nice. I need it to prevent servers from listening to rogue ntp-servers broadcasting on our network. The "Network is unreachable" lines in the log is caused by the firewalls not allowing traffic to the new ntp-servers yet. And I haven't fixed support for the local dcf77 either, thus the "configuration of 127.127.8.0 failed" pc-071 root # emerge info Portage 2.0.50-r10 (default-x86-DIKU, gcc-3.3.3, glibc-2.3.3.20040420-r0, 2.4.26-gentoo-r8) ================================================================= System uname: 2.4.26-gentoo-r8 i686 Intel(R) Pentium(R) 4 CPU 2.40GHz Gentoo Base System version 1.4.16 Autoconf: sys-devel/autoconf-2.59-r4 Automake: sys-devel/automake-1.8.3 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CFLAGS="-march=i386 -O3 -pipe -fomit-frame-pointer" CHOST="i386-pc-linux-gnu" COMPILER="gcc3" CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb /usr/kde/2/share/config /usr/kde/3.2/share/config /usr/kde/3/share/config /usr/lib/mozilla/defaults/pref /usr/share/config /usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/ /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-march=i386 -O3 -pipe -fomit-frame-pointer" DISTDIR="/usr/portage/distfiles" FEATURES="autoaddcvs ccache fixpackages sandbox" GENTOO_MIRRORS="ftp://ftp.gentoo.diku.dk/ http://212.219.247.21/sites/www.ibiblio.org/gentoo/ ftp://gentoo.linux.no/pub/gentoo/ http://gentoo.linux.no/" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.diku.dk/gentoo-portage/" USE="X Xaw3d alsa apm arts avi berkdb crypt doc emacs encode esd foomaticdb gdbm gif gnome gpm gtk gtk2 imap imlib java jpeg kde ldap libg++ libwww mad maildir mbox mikmod motif mozilla mpeg nas ncurses nls oggvorbis opengl pam pdflib perl png python qt quicktime readline sasl sdl slang spell ssl svga tcltk tcpd tetex tiff truetype x86 xgetdefault xml2 xmms xv zlib"
Oops, typo in the reproduce, step 2. The keys _are_ actually in the file referenced from /etc/ntp.conf
in step 2 you say: /usr/local/etc/ntpd.keys in your config file you say: keys /usr/local/etc/ntp/ntp.keys whats up with that ?
That was what i commented on. The keys are in /usr/local/etc/ntp/ntp.keys, as written in ntp.conf. I just made a typo in the bugreport.
please try 4.2.0.20040617
