[chrony-dev] [GIT] chrony/chrony.git branch master updated. 2.4-20-g577aed4

[git@xxxxxxxxxxxxx]

This is an automated email from git. It was generated because a ref
change was pushed to the "chrony/chrony.git" repository.

The branch, master has been updated
       via  577aed484207addd054441ee8be7e6e30ce36cb2 (commit)
       via  2a8ce63fc72ed155ed364c9660f467825c88f073 (commit)
       via  61dd4e0ccb83ba5d055a17e3b64f8b693c5ffa81 (commit)
       via  8220e51ae4421c0441507e6f6c71d607d3d062ab (commit)
      from  d322c8e6e5b9621ff5bbdb777449ba7a94727691 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 577aed484207addd054441ee8be7e6e30ce36cb2
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date:   Wed Jul 27 14:09:32 2016 +0200

    ntp: add support for MS-SNTP authentication in Samba
    
    Add support for authenticating MS-SNTP responses in Samba (ntp_signd).
    Supported is currently only the old MS-SNTP authenticator field. It's
    disabled by default. It can be enabled with the --enable-ntp-signd
    configure option and the ntpsigndsocket directive, which specifies the
    location of the Samba ntp_signd socket.

commit 2a8ce63fc72ed155ed364c9660f467825c88f073
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date:   Wed Jul 27 13:28:01 2016 +0200

    ntp: detect MS-SNTP packets
    
    When a received packet fails to authenticate, check if the digest
    contains zeroes and treat it as an MS-SNTP packet with authenticator or
    extended authenticator field. For now, discard these packets, i.e. don't
    respond with a crypto-NAK.

commit 61dd4e0ccb83ba5d055a17e3b64f8b693c5ffa81
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date:   Fri Jul 22 15:41:42 2016 +0200

    ntp: refactor selection of authentication mode
    
    Replace the flag that enables authentication using a symmetric key with
    an enum. Specify crypto-NAK as a special mode used for responses instead
    of relying on zero key ID. Also, rework check_packet_auth() to always
    save the mode and key ID.

commit 8220e51ae4421c0441507e6f6c71d607d3d062ab
Author: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date:   Wed Jul 20 12:47:38 2016 +0200

    ntp: check for extension fields only in NTPv4 packets

-----------------------------------------------------------------------

Summary of changes:
 conf.c                        |   14 ++
 conf.h                        |    1 +
 configure                     |   11 +-
 doc/chrony.conf.adoc          |   14 ++
 logging.h                     |    1 +
 main.c                        |    3 +
 ntp_core.c                    |  147 +++++++++++-----
 ntp_signd.c                   |  380 +++++++++++++++++++++++++++++++++++++++++
 cmdmon.h => ntp_signd.h       |   26 +--
 stubs.c                       |   27 +++
 test/compilation/001-features |    1 +
 11 files changed, 567 insertions(+), 58 deletions(-)
 create mode 100644 ntp_signd.c
 copy cmdmon.h => ntp_signd.h (62%)


hooks/post-receive
-- 
chrony/chrony.git

-- 
To unsubscribe email chrony-dev-request@xxxxxxxxxxxxxxxxxxxx with "unsubscribe" in the subject.
For help email chrony-dev-request@xxxxxxxxxxxxxxxxxxxx with "help" in the subject.
Trouble?  Email listmaster@xxxxxxxxxxxxxxxxxxxx.