[chrony-users] 答复: about nts-cookies

[chengyechun <chengyechun1@xxxxxxxxxx>]

I did not read the code carefully. Cookies were saved only when the chronyc dump and chronyc shutdown commands were executed. I recommend the man manual to set the minimum value of ntsrefresh. If the value is too small, the NTS function of the client is unavailable.

 

发件人: chengyechun
发送时间: 2022年11月11日 17:24
收件人: 'chrony-users@xxxxxxxxxxxxxxxxxxxx' <chrony-users@xxxxxxxxxxxxxxxxxxxx>
主题: 答复: about nts-cookies

 

Log:

2022-11-11T09:37:03Z main.c:560:(main) chronyd version 4.1 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASYNCDNS +NTS +SECHASH +IPV6 +DEBUG)

2022-11-11T09:37:03Z util.c:1272:(UTI_OpenFile) Opened /etc/chrony.conf fd=5 mode=R

2022-11-11T09:37:03Z util.c:1272:(UTI_OpenFile) Opened /var/run/chrony/chronyd.pid fd=5 mode=r

2022-11-11T09:37:03Z util.c:1256:(UTI_OpenFile) Removed /var/run/chrony/chronyd.pid

2022-11-11T09:37:03Z util.c:1272:(UTI_OpenFile) Opened /var/run/chrony/chronyd.pid fd=5 mode=W

2022-11-11T09:37:03Z local.c:171:(LCL_Initialise) Clock precision 0.000000035 (-25)

2022-11-11T09:37:03Z sys_linux.c:308:(get_version_specific_details) Linux kernel major=5 minor=10 patch=0

2022-11-11T09:37:03Z sys_linux.c:334:(get_version_specific_details) hz=100 nominal_tick=10000 max_tick_bias=1000 tick_update_hz=100000

2022-11-11T09:37:03Z local.c:663:(lcl_RegisterSystemDrivers) Local freq=0.518ppm

2022-11-11T09:37:03Z socket.c:478:(open_ip_socket) Opened UDPv4 socket fd=5 local=127.0.0.1:323

2022-11-11T09:37:03Z socket.c:478:(open_ip_socket) Opened UDPv6 socket fd=6 local=[::1]:323

2022-11-11T09:37:03Z util.c:1351:(UTI_DropRoot) Dropped root privileges: UID 948 GID 947

2022-11-11T09:37:03Z util.c:1272:(UTI_OpenFile) Opened /var/lib/chrony/drift fd=7 mode=r

2022-11-11T09:37:03Z reference.c:223:(REF_Initialise) Frequency 0.057 +/- 0.177 ppm read from /var/lib/chrony/drift

2022-11-11T09:37:03Z sys_generic.c:249:(update_slew) slew offset=0.000000e+00 corr_rate=0.000000e+00 base_freq=0.057421 total_freq=0.057419 slew_freq=-2.176758e-12 duration=10000.000000 slew_error=2.394434e-17

2022-11-11T09:37:03Z clientlog.c:364:(CLG_Initialise) Max records 4096

2022-11-11T09:37:03Z socket.c:570:(open_unix_socket) Opened Unix socket fd=7 local=/var/run/chrony/chronyd.sock

2022-11-11T09:37:03Z util.c:1259:(UTI_OpenFile) Could not open /var/lib/chrony/10.137.16.177.nts : No such file or directory

 

发件人: chengyechun
发送时间: 2022年11月11日 17:08
收件人: 'chrony-users@xxxxxxxxxxxxxxxxxxxx' <chrony-users@xxxxxxxxxxxxxxxxxxxx>
主题: about nts-cookies

 

HI all

Yes, this test requires a description document. In addition, during the test, I find that if the interval of the ntsrefresh parameter is set to a small value, the NTS function of the client will be abnormal. Therefore, I suggest that the minimum value be limited in the man manual.

Another problem is that after ntsdumpdir is configured on the client, cookie files are not generated sometimes. Why?