Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 65099

Summary: ntp-4.2.0-r2 ntpd server unable to find MD5 keys
Product: Gentoo Linux Reporter: Rune Fog Hansen <hustler>
Component: [OLD] ServerAssignee: SpanKY <vapier>
Status: RESOLVED TEST-REQUEST    
Severity: major    
Priority: High    
Version: unspecified   
Hardware: x86   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Rune Fog Hansen 2004-09-23 08:07:14 UTC 
When running a stratum 2 server, ntpd is unable to locate keys for peering as well as broadcast.

Reproducible: Always
Steps to Reproduce:
1. emerge ntp

2. create keys file on server:
/usr/local/etc/ntpd.keys
--------------------------
1 M key1
2 M key2
3 M key3
--------------------

3. edit /etc/ntp.conf
-----------------------------------------------------------------
# Local "EMC Professional" DCF77 clock
# (http://www.gude.info/frame-emc-professional.htm)
server  127.127.8.0     prefer          mode 12

# Primary servers
server  192.38.7.240              # stratum 1 GPS.dix.dk
server  212.242.86.186            # stratum 1 GPS.FreeBSD.dk

# Peer with old servers until they're dead and buried
peer    130.225.96.3    # stratum 2  inet.diku.dk
peer    130.225.96.4    # stratum 2  info.diku.dk

peer    130.225.96.9    key 2    # stratum 2 ntp2.diku.dk (uses main gateway)
peer    130.225.96.10   key 3    # stratum 2 ntp3.diku.dk (uses backup gateway)

# path information
driftfile       /var/lib/ntp/ntp.drift
keys            /usr/local/etc/ntp/ntp.keys

# Broadcast to local network
broadcast       130.225.97.255  key 1

# Multicast too (for routed network)
broadcast       224.0.1.1       key 1

-------------------------------------------------

4. /etc/init.d/ntpd restart
Actual Results:  
Sep 23 16:13:27 pc-071 ntpd[1995]: ntpd 4.2.0@1.1161-r Thu Sep 23 16:02:58 CEST
2004 (1)
Sep 23 16:13:27 pc-071 ntpd[1995]: signal_no_reset: signal 13 had flags 4000000
Sep 23 16:13:27 pc-071 ntpd[1995]: precision = 1.000 usec
Sep 23 16:13:27 pc-071 ntpd[1995]: no IPv6 interfaces found
Sep 23 16:13:27 pc-071 ntpd[1995]: kernel time sync status 0040
Sep 23 16:13:27 pc-071 ntpd[1995]: refclock_newpeer: clock type 8 invalid
Sep 23 16:13:27 pc-071 ntpd[1995]: configuration of 127.127.8.0 failed
Sep 23 16:13:27 pc-071 ntpd[1995]: Frequency format error in /var/lib/ntp/ntp.drift
Sep 23 16:13:29 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:13:30 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable
Sep 23 16:13:33 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:13:34 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:14:33 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:14:34 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable
Sep 23 16:14:36 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:14:39 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:15:36 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:15:37 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable
Sep 23 16:15:41 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:15:45 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:16:41 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:16:42 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable
Sep 23 16:16:46 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:16:48 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:17:46 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:17:46 pc-071 ntpd[1995]: synchronized to 130.225.96.3, stratum=2
Sep 23 16:25:48 pc-071 ntpd[1995]: time reset +482.494787 s
Sep 23 16:25:49 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:25:50 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:25:50 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable
Sep 23 16:25:54 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:26:53 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable
Sep 23 16:26:54 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:26:55 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:26:57 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:27:56 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable
Sep 23 16:27:59 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:28:01 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:28:01 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:29:01 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable
Sep 23 16:29:02 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:29:04 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:29:07 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:30:04 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable
Sep 23 16:30:06 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:30:07 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:30:13 pc-071 ntpd[1995]: transmit: encryption key 2 not found
Sep 23 16:31:09 pc-071 ntpd[1995]: sendto(212.242.86.186): Network is unreachable
Sep 23 16:31:09 pc-071 ntpd[1995]: synchronized to 130.225.96.3, stratum=2
Sep 23 16:31:12 pc-071 ntpd[1995]: transmit: encryption key 3 not found
Sep 23 16:31:12 pc-071 ntpd[1995]: sendto(192.38.7.240): Network is unreachable
Sep 23 16:31:15 pc-071 ntpd[1995]: transmit: encryption key 1 not found


Expected Results:  
Well... finding the keys in the keys file would be nice.
I need it to prevent servers from listening to rogue ntp-servers broadcasting on
our network.

The "Network is unreachable" lines in the log is caused by the firewalls not
allowing traffic to the new ntp-servers yet.
And I haven't fixed support for the local dcf77 either, thus the "configuration
of 127.127.8.0 failed"

pc-071 root # emerge info
Portage 2.0.50-r10 (default-x86-DIKU, gcc-3.3.3, glibc-2.3.3.20040420-r0,
2.4.26-gentoo-r8)
=================================================================
System uname: 2.4.26-gentoo-r8 i686 Intel(R) Pentium(R) 4 CPU 2.40GHz
Gentoo Base System version 1.4.16
Autoconf: sys-devel/autoconf-2.59-r4
Automake: sys-devel/automake-1.8.3
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-march=i386 -O3 -pipe -fomit-frame-pointer"
CHOST="i386-pc-linux-gnu"
COMPILER="gcc3"
CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb /usr/kde/2/share/config
/usr/kde/3.2/share/config /usr/kde/3/share/config /usr/lib/mozilla/defaults/pref
/usr/share/config /usr/share/texmf/dvipdfm/config/
/usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/
/usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/ /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=i386 -O3 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs ccache fixpackages sandbox"
GENTOO_MIRRORS="ftp://ftp.gentoo.diku.dk/
http://212.219.247.21/sites/www.ibiblio.org/gentoo/
ftp://gentoo.linux.no/pub/gentoo/ http://gentoo.linux.no/"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.diku.dk/gentoo-portage/"
USE="X Xaw3d alsa apm arts avi berkdb crypt doc emacs encode esd foomaticdb gdbm
gif gnome gpm gtk gtk2 imap imlib java jpeg kde ldap libg++ libwww mad maildir
mbox mikmod motif mozilla mpeg nas ncurses nls oggvorbis opengl pam pdflib perl
png python qt quicktime readline sasl sdl slang spell ssl svga tcltk tcpd tetex
tiff truetype x86 xgetdefault xml2 xmms xv zlib"
Comment 1 Rune Fog Hansen 2004-09-23 08:13:39 UTC 
Oops, typo in the reproduce, step 2.
The keys _are_ actually in the file referenced from /etc/ntp.conf
Comment 2 SpanKY gentoo-dev 2004-09-23 17:50:32 UTC 
in step 2 you say:
/usr/local/etc/ntpd.keys

in your config file you say:
keys            /usr/local/etc/ntp/ntp.keys

whats up with that ?
Comment 3 Rune Fog Hansen 2004-09-24 01:04:38 UTC 
That was what i commented on.
The keys are in /usr/local/etc/ntp/ntp.keys, as written in ntp.conf.
I just made a typo in the bugreport.
Comment 4 SpanKY gentoo-dev 2004-11-09 07:44:40 UTC 
please try 4.2.0.20040617