| Re: SV: SV: [chrony-users] Output from chronyc sources -v |
[ Thread Index |
Date Index
| More chrony.tuxfamily.org/chrony-users Archives
]
- To: chrony-users@xxxxxxxxxxxxxxxxxxxx
- Subject: Re: SV: SV: [chrony-users] Output from chronyc sources -v
- From: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
- Date: Thu, 25 Jan 2024 14:38:06 +0100
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1706189890; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=5nwAdSuPxGe2u2E3EcrQBFJ4/BdP96SxwWR7jQD4RkE=; b=HFb9L7pTCo4rAGAH0RgtdGRj8JJje9KLS7ML4DX+P/41wSRY1NqbW0AiKqfaTljAO9T500 h/EhIRg3QrkUn58JM6fNmNmL960ezhCAJiWiNfggp5inoI9EOQx8niRs20mCEa2sjb5gRW BoSG9upGafwDGe7ahbpJQ+PWLtcXaKg=
On Thu, Jan 25, 2024 at 01:19:41PM +0000, Henning Svane wrote:
> In the configuration they communicate as servers but I have thought I would prefer to use Peer, but when I read the documentation, I am unsure if this is the best way.
Client/server is better.
> I can see the current version is 4.5 but the version coming with Ubuntu 22.04 is 4.2.2, will you suggest to upgrade to version 4.5.
Depends on your requirements. See the entries in NEWS between 4.2 and
4.5 to decide if it's worth the trouble to compile from source.
> You mention that it is not a good praxis to mixing authenticated and unauthenticated NTP sources, will it be sufficient to use a key file or do I need to upgrade to NTS. Is it possible to setup chrony to respond both to NTS and til NTP?
Plain NTP, NTP protected by symmetric keys, and NTP protected by NTS
can all be mixed in one configuration.
Symmetric keys are simple to configure:
- chronyc keygen 100 > /etc/chrony/chrony.keys
- copy the key file to the other machines
- add "key 100" to the server's specification in chrony.conf on all
machines
- restart chronyd
- done
--
Miroslav Lichvar
--
To unsubscribe email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "unsubscribe" in the subject.
For help email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "help" in the subject.
Trouble? Email listmaster@xxxxxxxxxxxxxxxxxxxx.