This document describes the symmetric key file for the NTP Project's
ntpd
program.
This document applies to version 4.2.7p335 of ntp.keys
.
The name and location of the symmetric key file for ntpd
can
be specified in a configuration file, by default /etc/ntp.keys
.
This document describes the format of an NTP symmetric key file.
For a description of the use of this type of file, see the
.Qq
Authentication
Support
section of the
ntp.conf(5)
page.
ntpd(8)
reads its keys from a file specified using the
-k
command line option or the
.Ic
keys
statement in the configuration file.
While key number 0 is fixed by the NTP standard
(as 56 zero bits)
and may not be changed,
one or more keys numbered between 1 and 65534
may be arbitrarily set in the keys file.
The key file uses the same comment conventions as the configuration file. Key entries use a fixed format of the form
.D1 Ar keyno type key
where .Ar keyno is a positive integer (between 1 and 65534), .Ar type is the message digest algorithm, and .Ar key is the key itself.
The .Ar key may be given in a format controlled by the .Ar type field. The .Ar type .Li MD5 is always supported. If .Li ntpd was built with the OpenSSL library then any digest library supported by that library may be specified. However, if compliance with FIPS 140-2 is required the .Ar type must be either .Li SHA or .Li SHA1 .
What follows are some key types, and corresponding formats:
Note that the keys used by the
ntpq(8)
and
ntpdc(8)
programs are checked against passwords
requested by the programs and entered by hand,
so it is generally appropriate to specify these keys in ASCII format.
This section was generated by AutoGen,
using the agtexi-cmd
template and the option descriptions for the ntp.keys
program.
This software is released under the NTP license, <http://ntp.org/license>.
This is the automatically generated usage text for ntp.keys.
The text printed is the same whether selected with the help
option
(--help) or the more-help
option (--more-help). more-help
will print
the usage text by passing it through a pager program.
more-help
is disabled on platforms without a working
fork(2)
function. The PAGER
environment variable is
used to select the program, defaulting to more. Both will exit
with a status code of 0.
ntp.keys is unavailable - no --help
Any option that is not marked as not presettable may be preset by
loading values from environment variables named NTP.KEYS
and NTP.KEYS_<OPTION_NAME>
. <OPTION_NAME>
must be one of
the options listed above in upper case and segmented with underscores.
The NTP.KEYS
variable will be tokenized and parsed like
the command line. The remaining variables are tested for existence and their
values are treated like option arguments.
The command line options relating to configuration and/or usage help are:
Print the program version to standard out, optionally with licensing information, then exit 0. The optional argument specifies how much licensing detail to provide. The default is to print just the version. The licensing infomation may be selected with an option argument. Only the first letter of the argument is examined:
One of the following exit values will be returned:
ntp.conf(5)
,
ntpd(1ntpdmdoc)
,
ntpdate(1ntpdatemdoc)
,
ntpdc(1ntpdcmdoc)
,
sntp(1sntpmdoc)
This document corresponds to version of NTP. This document was derived from FreeBSD.