+(4.2.7p340) 2012/12/29 Released by Harlan Stenn <stenn@ntp.org>
* mdoc2texi fixes: trailing punctuation.
(4.2.7p339) 2012/12/26 Released by Harlan Stenn <stenn@ntp.org>
* mdoc2texi fixes: parseQuote, closing of list item tables.
#
# EDIT THIS FILE WITH CAUTION (invoke-ntp.conf.texi)
#
-# It has been AutoGen-ed December 25, 2012 at 12:49:13 PM by AutoGen 5.16.2
+# It has been AutoGen-ed December 29, 2012 at 09:07:53 AM by AutoGen 5.16.2
# From the definitions ntp.conf.def
# and the template file agtexi-file.tpl
@end ignore
configuration files.
Comments begin with a
@quoteleft{}@quoteright{}#
-#
character and extend to the end of the line;
blank lines are ignored.
Configuration commands consist of an initial keyword
This string is directly concatenated to the prefix mentioned
above (no intervening
@quoteleft{}@quoteright{}/).
-/
-)
-.
This can be modified using
the file argument to the
@code{filegen} statement.
All
@code{configkeyword} keywords can be prefixed with
@quoteleft{}@quoteright{}=,
-=
-,
@quoteleft{}@quoteright{}+
-+
and
@quoteleft{}@quoteright{}-,
--
-,
where
@quoteleft{}@quoteright{}=
-=
sets the
@code{syslog(3)}
priority mask,
@quoteleft{}@quoteright{}+
-+
adds and
@quoteleft{}@quoteright{}-
--
removes
messages.
@code{syslog(3)}
#
# EDIT THIS FILE WITH CAUTION (invoke-ntp.keys.texi)
#
-# It has been AutoGen-ed December 26, 2012 at 04:09:53 AM by AutoGen 5.16.2
+# It has been AutoGen-ed December 29, 2012 at 09:28:33 AM by AutoGen 5.16.2
# From the definitions ntp.keys.def
# and the template file agtexi-file.tpl
@end ignore
#
# EDIT THIS FILE WITH CAUTION (invoke-ntpd.texi)
#
-# It has been AutoGen-ed December 26, 2012 at 04:10:31 AM by AutoGen 5.16.2
+# It has been AutoGen-ed December 29, 2012 at 09:28:40 AM by AutoGen 5.16.2
# From the definitions ntpd-opts.def
# and the template file agtexi-cmd.tpl
@end ignore
@exampleindent 0
@example
-ntpd - NTP daemon program - Ver. 4.2.7p339
+ntpd - NTP daemon program - Ver. 4.2.7p340
USAGE: ntpd [ -<flag> [<val>] | --<name>[@{=| @}<val>] ]... \
[ <server1> ... <serverN> ]
Flg Arg Option-Name Description
-.TH ntp.conf 5man "25 Dec 2012" "4.2.7p339" "File Formats"
+.TH ntp.conf 5man "29 Dec 2012" "4.2.7p340" "File Formats"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntp.man)
.\"
-.\" It has been AutoGen-ed December 25, 2012 at 12:49:00 PM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:07:40 AM by AutoGen 5.16.2
.\" From the definitions ntp.conf.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTP_CONF 5mdoc File Formats
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntp.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:10:33 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:28:42 AM by AutoGen 5.16.2
.\" From the definitions ntp.conf.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
<p>This document describes the configuration file for the NTP Project's
<code>ntpd</code> program.
- <p>This document applies to version 4.2.7p339 of <code>ntp.conf</code>.
+ <p>This document applies to version 4.2.7p340 of <code>ntp.conf</code>.
<ul class="menu">
<li><a accesskey="1" href="#ntp_002econf-Description">ntp.conf Description</a>
configuration files.
Comments begin with a
#
+#
character and extend to the end of the line;
blank lines are ignored.
Configuration commands consist of an initial keyword
[<code>minpoll</code> <code>minpoll</code> ]
[<code>maxpoll</code> <code>maxpoll</code> ]
[<code>ttl</code> <code>ttl</code> ]
+</dl>
-
<p>These five commands specify the time server name or address to
+ <p>These five commands specify the time server name or address to
be used and the mode in which to operate.
The
<code>address</code> can be
(available as part of the HTML documentation
provided in
<span class="file">/usr/share/doc/ntp</span>).
+ <dl>
<dt><span class="samp">Ic</span><dd>For type s addresses, this command mobilizes a persistent
client mode association with a number of remote servers.
In this mode the local clock can synchronized to the
providing the best time and continues as with the
<code>server</code> command.
The remaining servers are discarded as if never
-heard.
+heard.
+</dl>
+ <p>Options:
+ <dl>
<dt><span class="samp">Cm</span><dd>All packets sent to and received from the server or peer are to
include authentication fields encrypted using the autokey scheme
described in
<br><dt><span class="samp">Cm</span><dd>Specifies the version number to be used for outgoing NTP
packets.
Versions 1-4 are the choices, with version 4 the
-default.
-
-<div class="node">
+default.
+</dl>
<p><hr>
<a name="Auxiliary"></a>
<br>
<h3 class="section">Auxiliary</h3>
+<p>Auxiliary
Commands
+ <dl>
<dt><span class="samp">Ic</span><dd>This command enables reception of broadcast server messages to
any local interface (type b) address.
Upon receiving a message for
public-key authentication as described in
<a href="#Authentication">Authentication</a>Authentication
Options
-.
-
-<div class="node">
+.
+</dl>
<p><hr>
<a name="Authentication"></a>
<br>
<h3 class="section">Authentication</h3>
+<p>Authentication
Support
Authentication support allows the NTP client to verify that the
server is in fact known and trusted and not an intruder intending
can be used to verify the server has the correct private key and
key identifier.
-
<p>NTPv4 retains the NTPv3 scheme, properly described as symmetric key
+ <p>NTPv4 retains the NTPv3 scheme, properly described as symmetric key
cryptography and, in addition, provides a new Autokey scheme
based on public key cryptography.
Public key cryptography is generally considered more secure
produced by utility programs in the OpenSSL software library
or the NTPv4 distribution.
-
<p>While the algorithms for symmetric key cryptography are
+ <p>While the algorithms for symmetric key cryptography are
included in the NTPv4 distribution, public key cryptography
requires the OpenSSL software library to be installed
before building the NTP distribution.
Directions for doing that
are on the Building and Installing the Distribution page.
-
<p>Authentication is configured separately for each association
+ <p>Authentication is configured separately for each association
using the
<code>key</code> or
<code>autokey</code> subcommand on the
if other than default, which symmetric keys are trusted
and the interval between various operations, if other than default.
-
<p>Authentication is always enabled,
+ <p>Authentication is always enabled,
although ineffective if not configured as
described below.
If a NTP packet arrives
the server certificate, verify its
credentials and initialize the protocol
+ <p>The
<code>auth</code> flag controls whether new associations or
remote configuration commands require cryptographic authentication.
This flag can be set or reset by the
the flag has no effect on
the authentication process itself.
-
<p>An attractive alternative where multicast support is available
+ <p>An attractive alternative where multicast support is available
is manycast mode, in which clients periodically troll
for servers as described in the
<a href="#Automatic">Automatic</a>Automatic
and the configuration
files for all clients can be identical.
-
<p>The security model and protocol schemes for
+ <p>The security model and protocol schemes for
both symmetric key and public key
cryptography are summarized below;
further details are in the briefings, papers
<h3 class="section">Symmetric-Key</h3>
+<p>Symmetric-Key
Cryptography
The original RFC-1305 specification allows any one of possibly
65,534 keys, each distinguished by a 32-bit key identifier, to
<code>ntpdc(1ntpdcmdoc)</code>
utility programs.
+ <p>When
<code>ntpd(1ntpdmdoc)</code>
is first started, it reads the key file specified in the
<code>keys</code> configuration command and installs the keys
<h3 class="section">Public</h3>
+<p>Public
Key
Cryptography
NTPv4 supports the original NTPv3 symmetric key scheme
replay with or without modification, spoofing, masquerade
and most forms of clogging attacks.
-
<p>The Autokey protocol has several modes of operation
+ <p>The Autokey protocol has several modes of operation
corresponding to the various NTP modes supported.
Most modes use a special cookie which can be
computed independently by the client and server,
Authentication
page.
-
<p>The specific cryptographic environment used by Autokey servers
+ <p>The specific cryptographic environment used by Autokey servers
and clients is determined by a set of files
and soft links generated by the
<code>ntp-keygen(1ntpkeygenmdoc)</code>
all the schemes in the OpenSSL library, including
those based on RSA and DSA digital signatures.
-
<p>NTP secure groups can be used to define cryptographic compartments
+ <p>NTP secure groups can be used to define cryptographic compartments
and security hierarchies.
It is important that every host
in the group be able to construct a certificate trail to one
<h3 class="section">Naming</h3>
+<p>Naming
and
Addressing
It is important to note that Autokey does not use DNS to
the subject and issuer fields, so protection against
DNS compromise is essential.
-
<p>By convention, the name of an Autokey host is the name returned
+ <p>By convention, the name of an Autokey host is the name returned
by the Unix
<code>gethostname(2)</code>
system call or equivalent in other systems.
However, this is not to say that DNS aliases, different names
for each interface, etc., are constrained in any way.
-
<p>It is also important to note that Autokey verifies authenticity
+ <p>It is also important to note that Autokey verifies authenticity
using the host name, network address and public keys,
all of which are bound together by the protocol specifically
to deflect masquerade attacks.
<h3 class="section">Operation</h3>
+<p>Operation
A specific combination of authentication scheme (none,
symmetric key, public key) and identity scheme is called
a cryptotype, although not all combinations are compatible.
combinations may successfully interoperate with each other,
but may not represent good security practice.
-
<p>The cryptotype of an association is determined at the time
+ <p>The cryptotype of an association is determined at the time
of mobilization, either at configuration time or some time
later when a message of appropriate cryptotype arrives.
When mobilized by a
<code>autokey</code> subcommand is present, the association is authenticated
using Autokey.
-
<p>When multiple identity schemes are supported in the Autokey
+ <p>When multiple identity schemes are supported in the Autokey
protocol, the first message exchange determines which one is used.
The client request message contains bits corresponding
to which schemes it has available.
Both server and client match the received bits with their own
and select a common scheme.
-
<p>Following the principle that time is a public value,
+ <p>Following the principle that time is a public value,
a server responds to any client packet that matches
its cryptotype capabilities.
Thus, a server receiving
By default, unauthenticated associations will not be mobilized
unless overridden in a decidedly dangerous way.
-
<p>Some examples may help to reduce confusion.
+ <p>Some examples may help to reduce confusion.
Client Alice has no specific cryptotype selected.
Server Bob has both a symmetric key file and minimal Autokey files.
Alice's unauthenticated messages arrive at Bob, who replies with
something broke.
She can see the evidence using the ntpq program.
-
<p>Denise has rolled her own host key and certificate.
+ <p>Denise has rolled her own host key and certificate.
She also uses one of the identity schemes as Bob.
She sends the first Autokey message to Bob and they
both dance the protocol authentication and identity steps.
If all comes out okay, Denise and Bob continue as described above.
-
<p>It should be clear from the above that Bob can support
+ <p>It should be clear from the above that Bob can support
all the girls at the same time, as long as he has compatible
authentication and identity credentials.
Now, Bob can act just like the girls in his own choice of servers;
<h3 class="section">Key</h3>
+<p>Key
Management
The cryptographic values used by the Autokey protocol are
incorporated as a set of files generated by the
The remaining files are necessary only for the
Autokey protocol.
-
<p>Certificates imported from OpenSSL or public certificate
+ <p>Certificates imported from OpenSSL or public certificate
authorities have certian limitations.
The certificate should be in ASN.1 syntax, X.509 Version 3
format and encoded in PEM, which is the same format
<h3 class="section">Authentication</h3>
+<p>Authentication
Commands
+ <dl>
<dt><span class="samp">Ic</span><dd>Specifies the interval between regenerations of the session key
list used with the Autokey protocol.
Note that the size of the key
<code>keysdir</code> command or default
<span class="file">/usr/local/etc</span>.
Following are the subcommands:
+ <dl>
<dt><span class="samp">Cm</span><dd>Specifies the location of the required host public certificate file.
This overrides the link
<span class="file">ntpkey_cert_</span>NsArhostname
<span class="file">ntpkey_sign_</span>NsArhostname
in the keys directory.
If this file is
-not found, the host key is also the sign key.
-
- <p>.It
+not found, the host key is also the sign key.
+</dl>
+ .It
Ic
keys
Ar
<h3 class="section">Error</h3>
+ <p>Error
Codes
The following error codes are reported via the NTP control
and monitoring protocol trap mechanism.
+ <dl>
<dt><span class="samp">101</span><dd>(bad field format or length)
The packet has invalid version, length or format.
<br><dt><span class="samp">102</span><dd>(bad timestamp)
<br><dt><span class="samp">113</span><dd>(bad or missing certificate)
The certificate is missing, corrupted or bogus.
<br><dt><span class="samp">114</span><dd>(bad or missing identity)
-The identity key is missing, corrupt or bogus.
-
-<div class="node">
+The identity key is missing, corrupt or bogus.
+</dl>
<p><hr>
<a name="Monitoring"></a>
<br>
<h3 class="section">Monitoring</h3>
+ <p>Monitoring
Support
<code>ntpd(1ntpdmdoc)</code>
includes a comprehensive monitoring facility suitable
<h3 class="section">Monitoring</h3>
+ <p>Monitoring
Commands
+ <dl>
<dt><span class="samp">Ic</span><dd>Enables writing of statistics records.
Currently, four kinds of
<code>name</code> statistics are supported.
+ <dl>
<dt><span class="samp">Cm</span><dd>Enables recording of clock driver statistics information.
Each update
received from a clock driver appends a line of the following form to
49213 525.624 127.127.4.1 93 226 00:08:29.606 D
.Ed
-
<p>The first two fields show the date (Modified Julian Day) and time
+ <p>The first two fields show the date (Modified Julian Day) and time
(seconds and fraction past UTC midnight).
The next field shows the
clock address in dotted-quad notation.
49213 525.624 127.127.4.1 message
.Ed
-
<p>The first two fields show the date (Modified Julian Day) and time
+ <p>The first two fields show the date (Modified Julian Day) and time
(seconds and fraction past UTC midnight).
The next field shows the peer
address in dotted-quad notation, The final message field includes the
50935 75440.031 0.000006019 13.778190 0.000351733 0.0133806
.Ed
-
<p>The first two fields show the date (Modified Julian Day) and
+ <p>The first two fields show the date (Modified Julian Day) and
time (seconds and fraction past UTC midnight).
The next five fields
show time offset (seconds), frequency offset (parts per million -
48773 10847.650 127.127.4.1 9714 -0.001605376 0.000000000 0.001424877 0.000958674
.Ed
-
<p>The first two fields show the date (Modified Julian Day) and
+ <p>The first two fields show the date (Modified Julian Day) and
time (seconds and fraction past UTC midnight).
The next two fields
show the peer address in dotted-quad notation and status,
50928 2132.543 128.4.1.1 128.4.1.20 3102453281.584327000 3102453281.58622800031 02453332.540806000 3102453332.541458000
.Ed
-
<p>The first two fields show the date (Modified Julian Day) and
+ <p>The first two fields show the date (Modified Julian Day) and
time (seconds and fraction past UTC midnight).
The next two fields
show the remote peer or clock address followed by the local address
50928 2132.543 36000 81965 0 9546 56 71793 512 540 10 147
.Ed
-
<p>The first two fields show the date (Modified Julian Day) and time
+ <p>The first two fields show the date (Modified Julian Day) and time
(seconds and fraction past UTC midnight).
The remaining ten fields show
the statistics counter values accumulated since the last generated
line.
+ <dl>
<dt><span class="samp">Time</span><dd>Time in hours since the system was last rebooted.
<br><dt><span class="samp">Packets</span><dd>Total number of packets received.
<br><dt><span class="samp">Packets</span><dd>Number of packets received in response to previous packets sent
<br><dt><span class="samp">Access</span><dd>Number of packets denied access for any reason.
<br><dt><span class="samp">Bad</span><dd>Number of packets with invalid length, format or port number.
<br><dt><span class="samp">Bad</span><dd>Number of packets not verified as authentic.
-<br><dt><span class="samp">Rate</span><dd>Number of packets discarded due to rate limitation.
-
- <p>.It
+<br><dt><span class="samp">Rate</span><dd>Number of packets discarded due to rate limitation.
+</dl>
+ .It
Cm
statsdir
Ar
(Most important: they can be removed to free space for new data
produced.)
-
<p>Note that this command can be sent from the
+ <p>Note that this command can be sent from the
<code>ntpdc(1ntpdcmdoc)</code>
program running at a remote location.
+ <dl>
<dt><span class="samp">Cm</span><dd>This is the type of the statistics records, as shown in the
<code>statistics</code> command.
<br><dt><span class="samp">Cm</span><dd>This is the file name for the statistics records.
members are built from three concatenated elements
<code>Cm</code> <code>prefix</code>, <code>Cm</code> <code>filename</code> and
<code>Cm</code> <code>suffix</code>:
+ <dl>
<dt><span class="samp">Cm</span><dd>This is a constant filename path.
It is not subject to
modifications via the
<code>statsdir</code> option explained above.
<br><dt><span class="samp">Cm</span><dd>This string is directly concatenated to the prefix mentioned
above (no intervening
-/ ) .
+/).
+/
+)
+.
This can be modified using
the file argument to the
<code>filegen</code> statement.
parts outside the filesystem hierarchy denoted by
<code>prefix</code>. <br><dt><span class="samp">Cm</span><dd>This part is reflects individual elements of a file set.
It is
-generated according to the type of a file set.
-
- <p>.It
+generated according to the type of a file set.
+</dl>
+ .It
Cm
type
Ar
A file generation set is characterized by its type.
The following
types are supported:
+ <dl>
<dt><span class="samp">Cm</span><dd>The file set is actually a single plain file.
<br><dt><span class="samp">Cm</span><dd>One element of file set is used per incarnation of a ntpd
server.
running at the start of the corresponding 24-hour period.
Information is only written to a file generation by specifying
<code>enable</code>; output is prevented by specifying
-<code>disable</code>.
-.It
+<code>disable</code>. </dl>
+ .It
Cm
link
|
<h3 class="section">Access</h3>
+ <p>Access
Control
Support
The
provided in
<span class="file">/usr/share/doc/ntp</span>).
-
<p>The restriction facility was implemented in conformance
+ <p>The restriction facility was implemented in conformance
with the access policies for the original NSFnet backbone
time servers.
Later the facility was expanded to deflect
Source address based restrictions are easily circumvented
by a determined cracker.
-
<p>Clients can be denied service because they are explicitly
+ <p>Clients can be denied service because they are explicitly
included in the restrict list created by the restrict command
or implicitly as the result of cryptographic or rate limit
violations.
<h3 class="section">The</h3>
+ <p>The
Kiss-of-Death
Packet
Ordinarily, packets denied service are simply dropped with no
is exceeded, the code is "RATE".
Finally, if a cryptographic violation occurs, the code is "CRYP".
-
<p>A client receiving a KoD performs a set of sanity checks to
+ <p>A client receiving a KoD performs a set of sanity checks to
minimize security exposure, then updates the stratum and
reference identifier peer variables, sets the access
denied (TEST4) bit in the peer flash variable and sends
<h3 class="section">Access</h3>
+ <p>Access
Control
Commands
+ <dl>
<dt><span class="samp">Xo</span><dd>[<code>average</code> <code>avg</code> ]
[<code>minimum</code> <code>min</code> ]
[<code>monitor</code> <code>prob</code> ]
reconfiguration of the server.
One or more of the following flags
may be specified:
+ <dl>
<dt><span class="samp">Cm</span><dd>Deny packets of all kinds, including
<code>ntpq(1ntpqmdoc)</code>
and
The
<code>ntpport</code> is considered more specific and
is sorted later in the list.
-<br><dt><span class="samp">Cm</span><dd>Deny packets that do not match the current NTP version.
+<br><dt><span class="samp">Cm</span><dd>Deny packets that do not match the current NTP version.
+</dl>
-
<p>Default restriction list entries with the flags ignore, interface,
+ <p>Default restriction list entries with the flags ignore, interface,
ntpport, for each of the local host's interface addresses are
inserted into the table at startup to prevent the server
from attempting to synchronize to its own time.
<h3 class="section">Automatic</h3>
+ <p>Automatic
NTP
Configuration
Options
<h3 class="section">Manycasting</h3>
+ <p>Manycasting
Manycasting is a automatic discovery and configuration paradigm
new to NTPv4.
It is intended as a means for a multicast client
of the nearby manycast servers, yet automatically reconfigures
to sustain this number of servers should one or another fail.
-
<p>Note that the manycasting paradigm does not coincide
+ <p>Note that the manycasting paradigm does not coincide
with the anycast paradigm described in RFC-1546,
which is designed to find a single server from a clique
of servers providing the same service.
The manycast paradigm is designed to find a plurality
of redundant servers satisfying defined optimality criteria.
-
<p>Manycasting can be used with either symmetric key
+ <p>Manycasting can be used with either symmetric key
or public key cryptography.
The public key infrastructure (PKI)
offers the best protection against compromised keys
The library can also be used with other NTPv4 modes
as well and is highly recommended, especially for broadcast modes.
-
<p>A persistent manycast client association is configured
+ <p>A persistent manycast client association is configured
using the manycastclient command, which is similar to the
server command but with a multicast (IPv4 class
<code>D</code> or IPv6 prefix
as different group address, each one serving as a template
for a future ephemeral unicast client/server association.
-
<p>Manycast servers configured with the
+ <p>Manycast servers configured with the
<code>manycastserver</code> command listen on the specified group address for manycast
client messages.
Note the distinction between manycast client,
to or lower than the manycast client, it replies to the
manycast client message with an ordinary unicast server message.
-
<p>The manycast client receiving this message mobilizes
+ <p>The manycast client receiving this message mobilizes
an ephemeral client/server association according to the
matching manycast client template, but only if cryptographically
authenticated and the server stratum is less than or equal
The surviving associations then continue
in ordinary client/server mode.
-
<p>The manycast client polling strategy is designed to reduce
+ <p>The manycast client polling strategy is designed to reduce
as much as possible the volume of manycast client messages
and the effects of implosion due to near-simultaneous
arrival of manycast server messages.
number client associations have been found.
Further retransmissions use the same TTL.
-
<p>The quality and reliability of the suite of associations
+ <p>The quality and reliability of the suite of associations
discovered by the manycast client is determined by the NTP
mitigation algorithms and the
<code>minclock</code> and
<code>minsane</code> should be explicitly set to 4, assuming at least that
number of servers are available.
+ <p>If at least
<code>minclock</code> servers are found, the manycast poll interval is immediately
set to eight times
<code>maxpoll</code>. If less than
each client/server association found is operating normally
it the system poll interval.
-
<p>Administratively scoped multicast boundaries are normally
+ <p>Administratively scoped multicast boundaries are normally
specified by the network router configuration and,
in the case of IPv6, the link/site scope prefix.
By default, the increment for TTL hops is 32 starting
<code>ttl</code> configuration command can be
used to modify the values to match the scope rules.
-
<p>It is often useful to narrow the range of acceptable
+ <p>It is often useful to narrow the range of acceptable
servers which can be found by manycast client associations.
Because manycast servers respond only when the client
stratum is equal to or greater than the server stratum,
The recommended value for
<code>maxpoll</code> is 12 (4,096 s).
-
<p>It is possible and frequently useful to configure a host
+ <p>It is possible and frequently useful to configure a host
as both manycast client and manycast server.
A number of hosts configured this way and sharing a common
group address will automatically organize themselves
configuration file must include commands for the primary
reference source such as a GPS receiver.
-
<p>The remaining configuration files for all secondary
+ <p>The remaining configuration files for all secondary
servers and clients have the same contents, except for the
<code>tos</code> command, which is specific for each stratum level.
For stratum 1 and stratum 2 servers, that command is
Thus, all stratum 3 configuration files are identical,
all stratum 4 files are identical and so forth.
-
<p>Once operations have stabilized in this scenario,
+ <p>Once operations have stabilized in this scenario,
the primary servers will find the primary reference source
and each other, since they both operate at the same
stratum (1), but not with any secondary server or client,
will time out the corresponding association and
re-associate accordingly.
-
<p>Some administrators prefer to avoid running
+ <p>Some administrators prefer to avoid running
<code>ntpd(1ntpdmdoc)</code>
continuously and run either
<code>ntpdate(8)</code>
<h3 class="section">Manycast</h3>
+ <p>Manycast
Interactions
with
Autokey
It often happens that several complete signing trails
from the client to the primary servers are collected in this way.
-
<p>About once an hour or less often if the poll interval
+ <p>About once an hour or less often if the poll interval
exceeds this, the client regenerates the Autokey key list.
This is in general transparent in client/server mode.
However, about once per day the server private value
<h3 class="section">Manycast</h3>
+ <p>Manycast
Options
+ <dl>
<dt><span class="samp">Xo</span><dd>.Oo
<code>ceiling</code> <code>ceiling</code> | <code>cohort</code> <code>0</code> | <code>1</code> | <code>floor</code> <code>floor</code> | <code>minclock</code> <code>minclock</code> | <code>minsane</code> <code>minsane</code> .Oc
This command affects the clock selection and clustering
and is most useful in manycast mode.
The variables operate
as follows:
+ <dl>
<dt><span class="samp">Cm</span><dd>Peers with strata above
<code>ceiling</code> will be discarded if there are at least
<code>minclock</code> peers remaining.
However, according to principles of
Byzantine agreement,
<code>minsane</code> should be at least 4 in order to detect and discard
-a single falseticker.
-
- <p>.It
+a single falseticker.
+</dl>
+ .It
Cm
ttl
Ar
<h3 class="section">Reference</h3>
+ <p>Reference
Clock
Support
The NTP Version 4 daemon supports some three dozen different radio,
provided in
<span class="file">/usr/share/doc/ntp</span>).
-
<p>A reference clock will generally (though not always) be a radio
+ <p>A reference clock will generally (though not always) be a radio
timecode receiver which is synchronized to a source of standard
time such as the services offered by the NRC in Canada and NIST and
USNO in the US.
in a scalding remark to the system log file, but is otherwise non
hazardous.
-
<p>For the purposes of configuration,
+ <p>For the purposes of configuration,
<code>ntpd(1ntpdmdoc)</code>
treats
reference clocks in a manner analogous to normal NTP peers as much
sometimes useful to configure multiple reference clocks of the same
type, in which case the unit numbers must be unique.
+ <p>The
<code>server</code> command is used to configure a reference
clock, where the
<code>address</code> argument in that command
See the individual clock
driver document pages for additional information.
+ <p>The
<code>fudge</code> command is used to provide additional
information for individual clock drivers and normally follows
immediately after the
in the
<code>fudge</code> command as well.
-
<p>The stratum number of a reference clock is by default zero.
+ <p>The stratum number of a reference clock is by default zero.
Since the
<code>ntpd(1ntpdmdoc)</code>
daemon adds one to the stratum of each
<h3 class="section">Reference</h3>
+ <p>Reference
Clock
Commands
+ <dl>
<dt><span class="samp">Xo</span><dd>.Sm
off
.Li
This command can be used to configure reference clocks in
special ways.
The options are interpreted as follows:
+ <dl>
<dt><span class="samp">Cm</span><dd>Marks the reference clock as preferred.
All other things being
equal, this host will be chosen for synchronization among a set of
For modem reference clocks,
<code>minpoll</code> defaults to 10 (17.1 m) and
<code>maxpoll</code> defaults to 14 (4.5 h).
-The allowable range is 4 (16 s) to 17 (36.4 h) inclusive.
-
- <p>.It
+The allowable range is 4 (16 s) to 17 (36.4 h) inclusive.
+</dl>
+ .It
Xo
Ic
fudge
program.
The options are interpreted as
follows:
+ <dl>
<dt><span class="samp">Cm</span><dd>Specifies a constant to be added to the time offset produced by
the driver, a fixed-point decimal number in seconds.
This is used
<code>filegen</code> command can be found in
<a href="#Monitoring">Monitoring</a>Monitoring
Options
-.
+.
+</dl>
<div class="node">
<p><hr>
<h3 class="section">Miscellaneous</h3>
+ <p>Miscellaneous
Options
+ <dl>
<dt><span class="samp">Ic</span><dd>The broadcast and multicast modes require a special calibration
to determine the network delay between the local and remote
servers.
If this command is not given, the daemon will always start with an initial
frequency of zero.
-
<p>The file format consists of a single line containing a single
+ <p>The file format consists of a single line containing a single
floating point number, which records the frequency offset measured
in parts-per-million (PPM).
The file is updated by first writing
can be controlled remotely using the
<code>ntpdc(1ntpdcmdoc)</code>
utility program.
+ <dl>
+<dt><span class="samp">Cm</span><dd>Enables the server to synchronize with unconfigured peers only if the
+peer has been correctly authenticated using either public key or
+private key cryptography.
+The default for this flag is
+<code>enable</code>. <br><dt><span class="samp">Cm</span><dd>Enables the server to listen for a message from a broadcast or
+multicast server, as in the
+<code>multicastclient</code> command with default
+address.
+The default for this flag is
+<code>disable</code>. <br><dt><span class="samp">Cm</span><dd>Enables the calibrate feature for reference clocks.
+The default for
+this flag is
+<code>disable</code>. <br><dt><span class="samp">Cm</span><dd>Enables the kernel time discipline, if available.
+The default for this
+flag is
+<code>enable</code> if support is available, otherwise
+<code>disable</code>. <br><dt><span class="samp">Cm</span><dd>Enables the monitoring facility.
+See the
+<code>ntpdc(1ntpdcmdoc)</code>
+program
+and the
+<code>monlist</code> command or further information.
+The
+default for this flag is
+<code>enable</code>. <br><dt><span class="samp">Cm</span><dd>Enables time and frequency discipline.
+In effect, this switch opens and
+closes the feedback loop, which is useful for testing.
+The default for
+this flag is
+<code>enable</code>. <br><dt><span class="samp">Cm</span><dd>Enables the pulse-per-second (PPS) signal when frequency and time is
+disciplined by the precision time kernel modifications.
+See the
+"A Kernel Model for Precision Timekeeping"
+(available as part of the HTML documentation
+provided in
+<span class="file">/usr/share/doc/ntp</span>)
+page for further information.
+The default for this flag is
+<code>disable</code>. <br><dt><span class="samp">Cm</span><dd>Enables the statistics facility.
+See the
+<a href="#Monitoring">Monitoring</a>Monitoring
+Options
+section for further information.
+The default for this flag is
+<code>disable</code>. </dl>
+ .It
+Ic
+includefile
+Ar
+includefile
+This command allows additional configuration commands
+to be included from a separate file.
+Include files may
+be nested to a depth of five; upon reaching the end of any
+include file, command processing resumes in the previous
+configuration file.
+This option is useful for sites that run
+<code>ntpd(1ntpdmdoc)</code>
+on multiple hosts, with (mostly) common options (e.g., a
+restriction list).
+.It
+Ic
+logconfig
+Ar
+configkeyword
+This command controls the amount and type of output written to
+the system
+<code>syslog(3)</code>
+facility or the alternate
+<code>logfile</code> log file.
+By default, all output is turned on.
+All
+<code>configkeyword</code> keywords can be prefixed with
+=,
+=
+,
++
++
+and
+-,
+-
+,
+where
+=
+=
+sets the
+<code>syslog(3)</code>
+priority mask,
++
++
+adds and
+-
+-
+removes
+messages.
+<code>syslog(3)</code>
+messages can be controlled in four
+classes
+.Po
+<code>clock</code>, <code>peer</code>, <code>sys</code> and
+<code>sync</code> .Pc
+.
+Within these classes four types of messages can be
+controlled: informational messages
+.Po
+<code>info</code> .Pc
+,
+event messages
+.Po
+<code>events</code> .Pc
+,
+statistics messages
+.Po
+<code>statistics</code> .Pc
+and
+status messages
+.Po
+<code>status</code> .Pc
+.
+
+ <p>Configuration keywords are formed by concatenating the message class with
+the event class.
+The
+<code>all</code> prefix can be used instead of a message class.
+A
+message class may also be followed by the
+<code>all</code> keyword to enable/disable all
+messages of the respective message class.Thus, a minimal log configuration
+could look like this:
+.Bd
+-literal
+logconfig =syncstatus +sysevents
+.Ed
+
+ <p>This would just list the synchronizations state of
+<code>ntpd(1ntpdmdoc)</code>
+and the major system events.
+For a simple reference server, the
+following minimum message configuration could be useful:
+.Bd
+-literal
+logconfig =syncall +clockall
+.Ed
+
+ <p>This configuration will list all clock information and
+synchronization information.
+All other events and messages about
+peers, system events and so on is suppressed.
+.It
+Ic
+logfile
+Ar
+logfile
+This command specifies the location of an alternate log file to
+be used instead of the default system
+<code>syslog(3)</code>
+facility.
+This is the same operation as the -l command line option.
+.It
+Ic
+setvar
+Ar
+variable
+Op
+Cm
+default
+This command adds an additional system variable.
+These
+variables can be used to distribute additional information such as
+the access policy.
+If the variable of the form
+.Sm
+off
+.Va
+name
+=
+Ar
+value
+.Sm
+on
+is followed by the
+<code>default</code> keyword, the
+variable will be listed as part of the default system variables
+.Po
+<code>ntpq(1ntpqmdoc)</code>
+<code>rv</code> command
+.Pc
+)
+.
+These additional variables serve
+informational purposes only.
+They are not related to the protocol
+other that they can be listed.
+The known protocol variables will
+always override any variables defined via the
+<code>setvar</code> mechanism.
+There are three special variables that contain the names
+of all variable of the same group.
+The
+.Va
+sys_var_list
+holds
+the names of all system variables.
+The
+.Va
+peer_var_list
+holds
+the names of all peer variables and the
+.Va
+clock_var_list
+holds the names of the reference clock variables.
+.It
+Xo
+Ic
+tinker
+.Oo
+<code>allan</code> <code>allan</code> | <code>dispersion</code> <code>dispersion</code> | <code>freq</code> <code>freq</code> | <code>huffpuff</code> <code>huffpuff</code> | <code>panic</code> <code>panic</code> | <code>step</code> <code>srep</code> | <code>stepout</code> <code>stepout</code> .Oc
+This command can be used to alter several system variables in
+very exceptional circumstances.
+It should occur in the
+configuration file before any other configuration options.
+The
+default values of these variables have been carefully optimized for
+a wide range of network speeds and reliability expectations.
+In
+general, they interact in intricate ways that are hard to predict
+and some combinations can result in some very nasty behavior.
+Very
+rarely is it necessary to change the default values; but, some
+folks cannot resist twisting the knobs anyway and this command is
+for them.
+Emphasis added: twisters are on their own and can expect
+no help from the support group.
+
+ <p>The variables operate as follows:
+ <dl>
+<dt><span class="samp">Cm</span><dd>The argument becomes the new value for the minimum Allan
+intercept, which is a parameter of the PLL/FLL clock discipline
+algorithm.
+The value in log2 seconds defaults to 7 (1024 s), which is also the lower
+limit.
+<br><dt><span class="samp">Cm</span><dd>The argument becomes the new value for the dispersion increase rate,
+normally .000015 s/s.
+<br><dt><span class="samp">Cm</span><dd>The argument becomes the initial value of the frequency offset in
+parts-per-million.
+This overrides the value in the frequency file, if
+present, and avoids the initial training state if it is not.
+<br><dt><span class="samp">Cm</span><dd>The argument becomes the new value for the experimental
+huff-n'-puff filter span, which determines the most recent interval
+the algorithm will search for a minimum delay.
+The lower limit is
+900 s (15 m), but a more reasonable value is 7200 (2 hours).
+There
+is no default, since the filter is not enabled unless this command
+is given.
+<br><dt><span class="samp">Cm</span><dd>The argument is the panic threshold, normally 1000 s.
+If set to zero,
+the panic sanity check is disabled and a clock offset of any value will
+be accepted.
+<br><dt><span class="samp">Cm</span><dd>The argument is the step threshold, which by default is 0.128 s.
+It can
+be set to any positive number in seconds.
+If set to zero, step
+adjustments will never occur.
+Note: The kernel time discipline is
+disabled if the step threshold is set to zero or greater than the
+default.
+<br><dt><span class="samp">Cm</span><dd>The argument is the stepout timeout, which by default is 900 s.
+It can
+be set to any positive number in seconds.
+If set to zero, the stepout
+pulses will not be suppressed.
+</dl>
+ .It
+Xo
+Ic
+trap
+Ar
+host_address
+[<code>port</code> <code>port_number</code> ]
+[<code>interface</code> <code>interface_address</code> ]
+This command configures a trap receiver at the given host
+address and port number for sending messages with the specified
+local interface address.
+If the port number is unspecified, a value
+of 18447 is used.
+If the interface address is not specified, the
+message is sent with a source address of the local interface the
+message is sent through.
+Note that on a multihomed host the
+interface used may vary from time to time with routing changes.
+
+ <p>The trap receiver will generally log event messages and other
+information from the server in a log file.
+While such monitor
+programs may also request their own trap dynamically, configuring a
+trap receiver will ensure that no messages are lost when the server
+is started.
+.It
+Cm
+hop
+Ar
+...
+This command specifies a list of TTL values in increasing order, up to 8
+values can be specified.
+In manycast mode these values are used in turn in
+an expanding-ring search.
+The default is eight multiples of 32 starting at
+31.
+
+ <p>This section was generated by <strong>AutoGen</strong>,
+using the <code>agtexi-cmd</code> template and the option descriptions for the <code>ntp.conf</code> program.
+This software is released under the NTP license, <http://ntp.org/license>.
+
+</body></html>
+
-.TH ntp.conf 5 "25 Dec 2012" "4.2.7p339" "File Formats"
+.TH ntp.conf 5 "29 Dec 2012" "4.2.7p340" "File Formats"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntp.man)
.\"
-.\" It has been AutoGen-ed December 25, 2012 at 12:49:00 PM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:07:40 AM by AutoGen 5.16.2
.\" From the definitions ntp.conf.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTP_CONF 5 File Formats
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntp.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:10:33 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:28:42 AM by AutoGen 5.16.2
.\" From the definitions ntp.conf.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
-.TH ntp.keys 5man "25 Dec 2012" "4.2.7p339" "File Formats"
+.TH ntp.keys 5man "29 Dec 2012" "4.2.7p340" "File Formats"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntp.man)
.\"
-.\" It has been AutoGen-ed December 25, 2012 at 12:49:03 PM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:07:44 AM by AutoGen 5.16.2
.\" From the definitions ntp.keys.def
.\" and the template file agman-file.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTP_KEYS 5mdoc File Formats
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntp.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:10:35 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:28:44 AM by AutoGen 5.16.2
.\" From the definitions ntp.keys.def
.\" and the template file agmdoc-file.tpl
.Sh NAME
<p>This document describes the symmetric key file for the NTP Project's
<code>ntpd</code> program.
- <p>This document applies to version 4.2.7p339 of <code>ntp.keys</code>.
+ <p>This document applies to version 4.2.7p340 of <code>ntp.keys</code>.
-
<div class="shortcontents">
+ <div class="shortcontents">
<h2>Short Contents</h2>
<ul>
<a href="#Top">NTP's Symmetric Key File User Manual</a>
(which is the "start of comment" character).
<br><dt><span class="samp">Li</span><br><dt><span class="samp">Li</span><br><dt><span class="samp">Li</span><dd>The key is a hex-encoded ASCII string of 40 characters,
-which is truncated as necessary.
+which is truncated as necessary.
+</dl>
-
<p>Note that the keys used by the
+ <p>Note that the keys used by the
<code>ntpq(8)</code>
and
<code>ntpdc(8)</code>
requested by the programs and entered by hand,
so it is generally appropriate to specify these keys in ASCII format.
-
<p>This section was generated by <strong>AutoGen</strong>,
+ <p>This section was generated by <strong>AutoGen</strong>,
using the <code>agtexi-cmd</code> template and the option descriptions for the <code>ntp.keys</code> program.
This software is released under the NTP license, <http://ntp.org/license>.
-.TH ntp.keys 5 "25 Dec 2012" "4.2.7p339" "File Formats"
+.TH ntp.keys 5 "29 Dec 2012" "4.2.7p340" "File Formats"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntp.man)
.\"
-.\" It has been AutoGen-ed December 25, 2012 at 12:49:03 PM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:07:44 AM by AutoGen 5.16.2
.\" From the definitions ntp.keys.def
.\" and the template file agman-file.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTP_KEYS 5 File Formats
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntp.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:10:35 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:28:44 AM by AutoGen 5.16.2
.\" From the definitions ntp.keys.def
.\" and the template file agmdoc-file.tpl
.Sh NAME
/*
* EDIT THIS FILE WITH CAUTION (ntpd-opts.c)
*
- * It has been AutoGen-ed December 25, 2012 at 12:48:11 PM by AutoGen 5.16.2
+ * It has been AutoGen-ed December 29, 2012 at 09:06:53 AM by AutoGen 5.16.2
* From the definitions ntpd-opts.def
* and the template file options
*
* ntpd option static const strings
*/
static char const ntpd_opt_strs[2987] =
-/* 0 */ "ntpd 4.2.7p339\n"
+/* 0 */ "ntpd 4.2.7p340\n"
"Copyright (C) 1970-2012 The University of Delaware, all rights reserved.\n"
"This is free software. It is licensed for use, modification and\n"
"redistribution under the terms of the NTP License, copies of which\n"
/* 2753 */ "Output version information and exit\0"
/* 2789 */ "version\0"
/* 2797 */ "NTPD\0"
-/* 2802 */ "ntpd - NTP daemon program - Ver. 4.2.7p339\n"
+/* 2802 */ "ntpd - NTP daemon program - Ver. 4.2.7p340\n"
"USAGE: %s [ -<flag> [<val>] | --<name>[{=| }<val>] ]... \\\n"
"\t\t[ <server1> ... <serverN> ]\n\0"
/* 2935 */ "http://bugs.ntp.org, bugs@ntp.org\0"
/* 2969 */ "\n\n\0"
-/* 2972 */ "ntpd 4.2.7p339";
+/* 2972 */ "ntpd 4.2.7p340";
/*
* ipv4 option description with
/*
* EDIT THIS FILE WITH CAUTION (ntpd-opts.h)
*
- * It has been AutoGen-ed December 25, 2012 at 12:48:09 PM by AutoGen 5.16.2
+ * It has been AutoGen-ed December 29, 2012 at 09:06:52 AM by AutoGen 5.16.2
* From the definitions ntpd-opts.def
* and the template file options
*
} teOptIndex;
#define OPTION_CT 37
-#define NTPD_VERSION "4.2.7p339"
-#define NTPD_FULL_VERSION "ntpd 4.2.7p339"
+#define NTPD_VERSION "4.2.7p340"
+#define NTPD_FULL_VERSION "ntpd 4.2.7p340"
/*
* Interface defines for all options. Replace "n" with the UPPER_CASED
-.TH ntpd 1ntpdman "25 Dec 2012" "4.2.7p339" "User Commands"
+.TH ntpd 1ntpdman "29 Dec 2012" "4.2.7p340" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntpd-opts.man)
.\"
-.\" It has been AutoGen-ed December 25, 2012 at 12:49:07 PM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:07:47 AM by AutoGen 5.16.2
.\" From the definitions ntpd-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTPD 1ntpdmdoc User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntpd-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:10:37 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:28:46 AM by AutoGen 5.16.2
.\" From the definitions ntpd-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
symmetric and broadcast modes, and with both symmetric-key and public-key
cryptography.
- <p>This document applies to version 4.2.7p339 of <code>ntpd</code>.
+ <p>This document applies to version 4.2.7p340 of <code>ntpd</code>.
<ul class="menu">
<li><a accesskey="1" href="#ntpd-Description">ntpd Description</a>: Description
used to select the program, defaulting to <span class="file">more</span>. Both will exit
with a status code of 0.
-<pre class="example">ntpd - NTP daemon program - Ver. 4.2.7p338
+<pre class="example">ntpd - NTP daemon program - Ver. 4.2.7p339
USAGE: ntpd [ -<flag> [<val>] | --<name>[{=| }<val>] ]... \
[ <server1> ... <serverN> ]
Flg Arg Option-Name Description
<dt><span class="samp">Pa</span><dd>the default name of the configuration file
<br><dt><span class="samp">Pa</span><dd>the default name of the drift file
<br><dt><span class="samp">Pa</span><dd>the default name of the key file
-
+</dl>
<div class="node">
<p><hr>
<a name="ntpd-See-Also"></a>Next: <a rel="next" accesskey="n" href="#ntpd-Bugs">ntpd Bugs</a>,
<h4 class="subsection">ntpd See Also</h4>
-
<p><code>ntp.conf(5)</code>,
+<p><code>ntp.conf(5)</code>,
<code>ntpdate(8)</code>,
<code>ntpdc(8)</code>,
<code>ntpq(8)</code>
-
<p>In addition to the manual pages provided,
+ <p>In addition to the manual pages provided,
comprehensive documentation is available on the world wide web
at
.Li
<h4 class="subsection">ntpd Bugs</h4>
+<p>The
<code>ntpd</code>
utility has gotten rather fat.
While not huge, it has gotten
<h4 class="subsection">ntpd Notes</h4>
-
<p>This document corresponds to version of NTP.
+<p>This document corresponds to version of NTP.
Portions of this document came from FreeBSD.
<div class="node">
<br>
</div>
- <!-- node-name, next, previous, up -->
+<!-- node-name, next, previous, up -->
<h3 class="section">Usage</h3>
-.TH ntpd @NTPD_MS@ "25 Dec 2012" "4.2.7p339" "User Commands"
+.TH ntpd @NTPD_MS@ "29 Dec 2012" "4.2.7p340" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntpd-opts.man)
.\"
-.\" It has been AutoGen-ed December 25, 2012 at 12:49:07 PM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:07:47 AM by AutoGen 5.16.2
.\" From the definitions ntpd-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTPD @NTPD_MS@ User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntpd-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:10:37 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:28:46 AM by AutoGen 5.16.2
.\" From the definitions ntpd-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
#
# EDIT THIS FILE WITH CAUTION (invoke-ntpdc.texi)
#
-# It has been AutoGen-ed December 26, 2012 at 04:11:03 AM by AutoGen 5.16.2
+# It has been AutoGen-ed December 29, 2012 at 09:29:06 AM by AutoGen 5.16.2
# From the definitions ntpdc-opts.def
# and the template file agtexi-cmd.tpl
@end ignore
@exampleindent 0
@example
-ntpdc - vendor-specific NTPD control program - Ver. 4.2.7p339
+ntpdc - vendor-specific NTPD control program - Ver. 4.2.7p340
USAGE: ntpdc [ -<flag> [<val>] | --<name>[@{=| @}<val>] ]... [ host ...]
Flg Arg Option-Name Description
-4 no ipv4 Force IPv4 DNS name resolution
command is normally sent to the standard output, but optionally the
output of individual commands may be sent to a file by appending a
@quoteleft{}\&>@quoteright{},
-,
followed by a file name, to the command line.
A number of interactive format commands are executed entirely
/*
* EDIT THIS FILE WITH CAUTION (ntpdc-opts.c)
*
- * It has been AutoGen-ed December 26, 2012 at 04:10:51 AM by AutoGen 5.16.2
+ * It has been AutoGen-ed December 29, 2012 at 09:28:56 AM by AutoGen 5.16.2
* From the definitions ntpdc-opts.def
* and the template file options
*
* ntpdc option static const strings
*/
static char const ntpdc_opt_strs[1862] =
-/* 0 */ "ntpdc 4.2.7p339\n"
+/* 0 */ "ntpdc 4.2.7p340\n"
"Copyright (C) 1970-2012 The University of Delaware, all rights reserved.\n"
"This is free software. It is licensed for use, modification and\n"
"redistribution under the terms of the NTP License, copies of which\n"
/* 1640 */ "no-load-opts\0"
/* 1653 */ "no\0"
/* 1656 */ "NTPDC\0"
-/* 1662 */ "ntpdc - vendor-specific NTPD control program - Ver. 4.2.7p339\n"
+/* 1662 */ "ntpdc - vendor-specific NTPD control program - Ver. 4.2.7p340\n"
"USAGE: %s [ -<flag> [<val>] | --<name>[{=| }<val>] ]... [ host ...]\n\0"
/* 1794 */ "$HOME\0"
/* 1800 */ ".\0"
/* 1802 */ ".ntprc\0"
/* 1809 */ "http://bugs.ntp.org, bugs@ntp.org\0"
/* 1843 */ "\n\n\0"
-/* 1846 */ "ntpdc 4.2.7p339";
+/* 1846 */ "ntpdc 4.2.7p340";
/*
* ipv4 option description with
/*
* EDIT THIS FILE WITH CAUTION (ntpdc-opts.h)
*
- * It has been AutoGen-ed December 26, 2012 at 04:10:50 AM by AutoGen 5.16.2
+ * It has been AutoGen-ed December 29, 2012 at 09:28:55 AM by AutoGen 5.16.2
* From the definitions ntpdc-opts.def
* and the template file options
*
} teOptIndex;
#define OPTION_CT 15
-#define NTPDC_VERSION "4.2.7p339"
-#define NTPDC_FULL_VERSION "ntpdc 4.2.7p339"
+#define NTPDC_VERSION "4.2.7p340"
+#define NTPDC_FULL_VERSION "ntpdc 4.2.7p340"
/*
* Interface defines for all options. Replace "n" with the UPPER_CASED
-.TH ntpdc 1ntpdcman "26 Dec 2012" "4.2.7p339" "User Commands"
+.TH ntpdc 1ntpdcman "29 Dec 2012" "4.2.7p340" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntpdc-opts.man)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:10:58 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:02 AM by AutoGen 5.16.2
.\" From the definitions ntpdc-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTPDC 1ntpdcmdoc User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntpdc-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:05 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:07 AM by AutoGen 5.16.2
.\" From the definitions ntpdc-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
clock. Run as root, it can correct the system clock to this offset as
well. It can be run as an interactive command or from a cron job.
- <p>This document applies to version 4.2.7p339 of <code>ntpdc</code>.
+ <p>This document applies to version 4.2.7p340 of <code>ntpdc</code>.
<p>The program implements the SNTP protocol as defined by RFC 5905, the NTPv4
IETF specification.
used to select the program, defaulting to <span class="file">more</span>. Both will exit
with a status code of 0.
-<pre class="example">ntpdc - vendor-specific NTPD control program - Ver. 4.2.7p339
+<pre class="example">ntpdc - vendor-specific NTPD control program - Ver. 4.2.7p340
USAGE: ntpdc [ -<flag> [<val>] | --<name>[{=| }<val>] ]... [ host ...]
Flg Arg Option-Name Description
-4 no ipv4 Force IPv4 DNS name resolution
command is normally sent to the standard output, but optionally the
output of individual commands may be sent to a file by appending a
\&>,
-,
followed by a file name, to the command line.
<p>A number of interactive format commands are executed entirely
-.TH ntpdc @NTPDC_MS@ "26 Dec 2012" "4.2.7p339" "User Commands"
+.TH ntpdc @NTPDC_MS@ "29 Dec 2012" "4.2.7p340" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntpdc-opts.man)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:10:58 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:02 AM by AutoGen 5.16.2
.\" From the definitions ntpdc-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTPDC @NTPDC_MS@ User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntpdc-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:05 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:07 AM by AutoGen 5.16.2
.\" From the definitions ntpdc-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
#
# EDIT THIS FILE WITH CAUTION (invoke-ntpq.texi)
#
-# It has been AutoGen-ed December 26, 2012 at 04:11:20 AM by AutoGen 5.16.2
+# It has been AutoGen-ed December 29, 2012 at 09:29:21 AM by AutoGen 5.16.2
# From the definitions ntpq-opts.def
# and the template file agtexi-cmd.tpl
@end ignore
The data carried by NTP mode 6 messages consists of a list of
items of the form
@quoteleft{}variable_name=value@quoteright{},
-,
where the
@quoteleft{}=value@quoteright{}
is ignored, and can be omitted,
thinks should have a decodable value but didn't are
marked with a trailing
@quoteleft{}\&?@quoteright{}.
-.
@item Xo
@code{debug} .Oo
@code{more} | @code{less} | @code{off} .Oc
@exampleindent 0
@example
-ntpq - standard NTP query program - Ver. 4.2.7p339
+ntpq - standard NTP query program - Ver. 4.2.7p340
USAGE: ntpq [ -<flag> [<val>] | --<name>[@{=| @}<val>] ]... [ host ...]
Flg Arg Option-Name Description
-4 no ipv4 Force IPv4 DNS name resolution
/*
* EDIT THIS FILE WITH CAUTION (ntpq-opts.c)
*
- * It has been AutoGen-ed December 26, 2012 at 04:11:08 AM by AutoGen 5.16.2
+ * It has been AutoGen-ed December 29, 2012 at 09:29:11 AM by AutoGen 5.16.2
* From the definitions ntpq-opts.def
* and the template file options
*
* ntpq option static const strings
*/
static char const ntpq_opt_strs[1833] =
-/* 0 */ "ntpq 4.2.7p339\n"
+/* 0 */ "ntpq 4.2.7p340\n"
"Copyright (C) 1970-2012 The University of Delaware, all rights reserved.\n"
"This is free software. It is licensed for use, modification and\n"
"redistribution under the terms of the NTP License, copies of which\n"
/* 1627 */ "no-load-opts\0"
/* 1640 */ "no\0"
/* 1643 */ "NTPQ\0"
-/* 1648 */ "ntpq - standard NTP query program - Ver. 4.2.7p339\n"
+/* 1648 */ "ntpq - standard NTP query program - Ver. 4.2.7p340\n"
"USAGE: %s [ -<flag> [<val>] | --<name>[{=| }<val>] ]... [ host ...]\n\0"
/* 1769 */ "$HOME\0"
/* 1775 */ ".\0"
/* 1777 */ ".ntprc\0"
/* 1784 */ "http://bugs.ntp.org, bugs@ntp.org\0"
-/* 1818 */ "ntpq 4.2.7p339";
+/* 1818 */ "ntpq 4.2.7p340";
/*
* ipv4 option description with
/*
* EDIT THIS FILE WITH CAUTION (ntpq-opts.h)
*
- * It has been AutoGen-ed December 26, 2012 at 04:11:08 AM by AutoGen 5.16.2
+ * It has been AutoGen-ed December 29, 2012 at 09:29:10 AM by AutoGen 5.16.2
* From the definitions ntpq-opts.def
* and the template file options
*
} teOptIndex;
#define OPTION_CT 14
-#define NTPQ_VERSION "4.2.7p339"
-#define NTPQ_FULL_VERSION "ntpq 4.2.7p339"
+#define NTPQ_VERSION "4.2.7p340"
+#define NTPQ_FULL_VERSION "ntpq 4.2.7p340"
/*
* Interface defines for all options. Replace "n" with the UPPER_CASED
-.TH ntpq 1ntpqman "26 Dec 2012" "4.2.7p339" "User Commands"
+.TH ntpq 1ntpqman "29 Dec 2012" "4.2.7p340" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntpq-opts.man)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:16 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:17 AM by AutoGen 5.16.2
.\" From the definitions ntpq-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTPQ 1ntpqmdoc User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntpq-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:21 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:23 AM by AutoGen 5.16.2
.\" From the definitions ntpq-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
and determine the performance of
<code>ntpd</code>, the NTP daemon.
- <p>This document applies to version 4.2.7p339 of <code>ntpq</code>.
+ <p>This document applies to version 4.2.7p340 of <code>ntpq</code>.
<ul class="menu">
<li><a accesskey="1" href="#ntpq-Description">ntpq Description</a>
page.
<br><dt><span class="samp">Ic</span><dd><code>...</code> <br><dt><span class="samp">Ic</span><br><dt><span class="samp">Ic</span><dd>The data carried by NTP mode 6 messages consists of a list of
items of the form
-variable_name=value ,
+variable_name=value,
+,
where the
=value
is ignored, and can be omitted,
<code>ntpq</code>
thinks should have a decodable value but didn't are
marked with a trailing
-\&? .
+\&?.
+.
<br><dt><span class="samp">Xo</span><dd><code>debug</code> .Oo
<code>more</code> | <code>less</code> | <code>off</code> .Oc
With no argument, displays the current debug level.
used to select the program, defaulting to <span class="file">more</span>. Both will exit
with a status code of 0.
-<pre class="example">ntpq - standard NTP query program - Ver. 4.2.7p338
+<pre class="example">ntpq - standard NTP query program - Ver. 4.2.7p339
USAGE: ntpq [ -<flag> [<val>] | --<name>[{=| }<val>] ]... [ host ...]
Flg Arg Option-Name Description
-4 no ipv4 Force IPv4 DNS name resolution
-.TH ntpq @NTPQ_MS@ "26 Dec 2012" "4.2.7p339" "User Commands"
+.TH ntpq @NTPQ_MS@ "29 Dec 2012" "4.2.7p340" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntpq-opts.man)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:16 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:17 AM by AutoGen 5.16.2
.\" From the definitions ntpq-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTPQ @NTPQ_MS@ User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntpq-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:21 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:23 AM by AutoGen 5.16.2
.\" From the definitions ntpq-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
#
# EDIT THIS FILE WITH CAUTION (invoke-ntpsnmpd.texi)
#
-# It has been AutoGen-ed December 26, 2012 at 04:11:35 AM by AutoGen 5.16.2
+# It has been AutoGen-ed December 29, 2012 at 09:29:36 AM by AutoGen 5.16.2
# From the definitions ntpsnmpd-opts.def
# and the template file agtexi-cmd.tpl
@end ignore
@exampleindent 0
@example
-ntpsnmpd - NTP SNMP MIB agent - Ver. 4.2.7p339
+ntpsnmpd - NTP SNMP MIB agent - Ver. 4.2.7p340
USAGE: ntpsnmpd [ -<flag> [<val>] | --<name>[@{=| @}<val>] ]...
Flg Arg Option-Name Description
-n no nofork Do not fork
@code{ntpsnmpd}
currently uses a private MIB OID,
@quoteleft{}enterprises.5597@quoteright{},
-,
which is the Meinberg top level OEM OID, and
@quoteleft{}99@quoteright{}
is the temporary working space for this project.
/*
* EDIT THIS FILE WITH CAUTION (ntpsnmpd-opts.c)
*
- * It has been AutoGen-ed December 26, 2012 at 04:11:24 AM by AutoGen 5.16.2
+ * It has been AutoGen-ed December 29, 2012 at 09:29:26 AM by AutoGen 5.16.2
* From the definitions ntpsnmpd-opts.def
* and the template file options
*
* ntpsnmpd option static const strings
*/
static char const ntpsnmpd_opt_strs[1561] =
-/* 0 */ "ntpsnmpd 4.2.7p339\n"
+/* 0 */ "ntpsnmpd 4.2.7p340\n"
"Copyright (C) 1970-2012 The University of Delaware, all rights reserved.\n"
"This is free software. It is licensed for use, modification and\n"
"redistribution under the terms of the NTP License, copies of which\n"
/* 1360 */ "no-load-opts\0"
/* 1373 */ "no\0"
/* 1376 */ "NTPSNMPD\0"
-/* 1385 */ "ntpsnmpd - NTP SNMP MIB agent - Ver. 4.2.7p339\n"
+/* 1385 */ "ntpsnmpd - NTP SNMP MIB agent - Ver. 4.2.7p340\n"
"USAGE: %s [ -<flag> [<val>] | --<name>[{=| }<val>] ]...\n\0"
/* 1490 */ "$HOME\0"
/* 1496 */ ".\0"
/* 1498 */ ".ntprc\0"
/* 1505 */ "http://bugs.ntp.org, bugs@ntp.org\0"
/* 1539 */ "\n\n\0"
-/* 1542 */ "ntpsnmpd 4.2.7p339";
+/* 1542 */ "ntpsnmpd 4.2.7p340";
/*
* nofork option description:
/*
* EDIT THIS FILE WITH CAUTION (ntpsnmpd-opts.h)
*
- * It has been AutoGen-ed December 26, 2012 at 04:11:24 AM by AutoGen 5.16.2
+ * It has been AutoGen-ed December 29, 2012 at 09:29:25 AM by AutoGen 5.16.2
* From the definitions ntpsnmpd-opts.def
* and the template file options
*
} teOptIndex;
#define OPTION_CT 8
-#define NTPSNMPD_VERSION "4.2.7p339"
-#define NTPSNMPD_FULL_VERSION "ntpsnmpd 4.2.7p339"
+#define NTPSNMPD_VERSION "4.2.7p340"
+#define NTPSNMPD_FULL_VERSION "ntpsnmpd 4.2.7p340"
/*
* Interface defines for all options. Replace "n" with the UPPER_CASED
-.TH ntpsnmpd 1ntpsnmpdman "26 Dec 2012" "4.2.7p339" "User Commands"
+.TH ntpsnmpd 1ntpsnmpdman "29 Dec 2012" "4.2.7p340" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntpsnmpd-opts.man)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:32 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:32 AM by AutoGen 5.16.2
.\" From the definitions ntpsnmpd-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTPSNMPD 1ntpsnmpdmdoc User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntpsnmpd-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:37 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:38 AM by AutoGen 5.16.2
.\" From the definitions ntpsnmpd-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
<p>The <code>ntpsnmpd</code> utility program is used to monitor NTP daemon <code>ntpd</code>
operations and determine performance. It uses the standard NTP mode 6 control
- <p>This document applies to version 4.2.7p339 of <code>ntpsnmpd</code>.
+ <p>This document applies to version 4.2.7p340 of <code>ntpsnmpd</code>.
<ul class="menu">
<li><a accesskey="1" href="#ntpsnmpd-Description">ntpsnmpd Description</a>: Description
-.TH ntpsnmpd @NTPSNMPD_MS@ "26 Dec 2012" "4.2.7p339" "User Commands"
+.TH ntpsnmpd @NTPSNMPD_MS@ "29 Dec 2012" "4.2.7p340" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntpsnmpd-opts.man)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:32 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:32 AM by AutoGen 5.16.2
.\" From the definitions ntpsnmpd-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTPSNMPD @NTPSNMPD_MS@ User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntpsnmpd-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:37 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:38 AM by AutoGen 5.16.2
.\" From the definitions ntpsnmpd-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
# - Numeric values increment
# - empty 'increments' to 1
# - NEW 'increments' to empty
-point=339
+point=340
### betapoint is normally modified by script.
# ntp-stable Beta number (betapoint)
#
# EDIT THIS FILE WITH CAUTION (invoke-ntp-wait.texi)
#
-# It has been AutoGen-ed December 25, 2012 at 12:47:19 PM by AutoGen 5.16.2
+# It has been AutoGen-ed December 29, 2012 at 09:05:52 AM by AutoGen 5.16.2
# From the definitions ntp-wait-opts.def
# and the template file agtexi-cmd.tpl
@end ignore
-.TH ntp-wait 1ntp-waitman "25 Dec 2012" "ntp (4.2.7p339)" "User Commands"
+.TH ntp-wait 1ntp-waitman "29 Dec 2012" "ntp (4.2.7p340)" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntp-wait-opts.man)
.\"
-.\" It has been AutoGen-ed December 25, 2012 at 12:47:15 PM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:05:49 AM by AutoGen 5.16.2
.\" From the definitions ntp-wait-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 25 2012
+.Dd December 29 2012
.Dt NTP_WAIT 1ntp-waitmdoc User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntp-wait-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 25, 2012 at 12:47:21 PM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:05:54 AM by AutoGen 5.16.2
.\" From the definitions ntp-wait-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
and only then start any applicaitons (like database servers) that require
accurate and stable time.
- <p>This document applies to version 4.2.7p339 of <code>ntp-wait</code>.
+ <p>This document applies to version 4.2.7p340 of <code>ntp-wait</code>.
<div class="shortcontents">
<h2>Short Contents</h2>
-.TH ntp-wait @NTP_WAIT_MS@ "25 Dec 2012" "ntp (4.2.7p339)" "User Commands"
+.TH ntp-wait @NTP_WAIT_MS@ "29 Dec 2012" "ntp (4.2.7p340)" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntp-wait-opts.man)
.\"
-.\" It has been AutoGen-ed December 25, 2012 at 12:47:15 PM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:05:49 AM by AutoGen 5.16.2
.\" From the definitions ntp-wait-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 25 2012
+.Dd December 29 2012
.Dt NTP_WAIT @NTP_WAIT_MS@ User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntp-wait-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 25, 2012 at 12:47:21 PM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:05:54 AM by AutoGen 5.16.2
.\" From the definitions ntp-wait-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
#
# EDIT THIS FILE WITH CAUTION (invoke-sntp.texi)
#
-# It has been AutoGen-ed December 26, 2012 at 04:12:19 AM by AutoGen 5.16.2
+# It has been AutoGen-ed December 29, 2012 at 09:30:23 AM by AutoGen 5.16.2
# From the definitions sntp-opts.def
# and the template file agtexi-cmd.tpl
@end ignore
@code{'+/- ?'}. If the
@emph{host}
is different from the
-@emph{IP,}
+@emph{IP},
both will be displayed.
Otherwise, only the
@emph{IP}
@exampleindent 0
@example
-sntp - standard Simple Network Time Protocol client program - Ver. 4.2.7p339
+sntp - standard Simple Network Time Protocol client program - Ver. 4.2.7p340
USAGE: sntp [ -<flag> [<val>] | --<name>[@{=| @}<val>] ]... \
[ hostname-or-IP ...]
Flg Arg Option-Name Description
/*
* EDIT THIS FILE WITH CAUTION (sntp-opts.c)
*
- * It has been AutoGen-ed December 25, 2012 at 12:44:42 PM by AutoGen 5.16.2
+ * It has been AutoGen-ed December 29, 2012 at 09:03:15 AM by AutoGen 5.16.2
* From the definitions sntp-opts.def
* and the template file options
*
* sntp option static const strings
*/
static char const sntp_opt_strs[2500] =
-/* 0 */ "sntp 4.2.7p339\n"
+/* 0 */ "sntp 4.2.7p340\n"
"Copyright (C) 1970-2012 The University of Delaware, all rights reserved.\n"
"This is free software. It is licensed for use, modification and\n"
"redistribution under the terms of the NTP License, copies of which\n"
/* 2244 */ "LOAD_OPTS\0"
/* 2254 */ "no-load-opts\0"
/* 2267 */ "SNTP\0"
-/* 2272 */ "sntp - standard Simple Network Time Protocol client program - Ver. 4.2.7p339\n"
+/* 2272 */ "sntp - standard Simple Network Time Protocol client program - Ver. 4.2.7p340\n"
"USAGE: %s [ -<flag> [<val>] | --<name>[{=| }<val>] ]... \\\n"
"\t\t[ hostname-or-IP ...]\n\0"
/* 2433 */ "$HOME\0"
/* 2441 */ ".ntprc\0"
/* 2448 */ "http://bugs.ntp.org, bugs@ntp.org\0"
/* 2482 */ "\n\n\0"
-/* 2485 */ "sntp 4.2.7p339";
+/* 2485 */ "sntp 4.2.7p340";
/*
* ipv4 option description with
/*
* EDIT THIS FILE WITH CAUTION (sntp-opts.h)
*
- * It has been AutoGen-ed December 25, 2012 at 12:44:42 PM by AutoGen 5.16.2
+ * It has been AutoGen-ed December 29, 2012 at 09:03:14 AM by AutoGen 5.16.2
* From the definitions sntp-opts.def
* and the template file options
*
} teOptIndex;
#define OPTION_CT 23
-#define SNTP_VERSION "4.2.7p339"
-#define SNTP_FULL_VERSION "sntp 4.2.7p339"
+#define SNTP_VERSION "4.2.7p340"
+#define SNTP_FULL_VERSION "sntp 4.2.7p340"
/*
* Interface defines for all options. Replace "n" with the UPPER_CASED
-.TH sntp 1sntpman "26 Dec 2012" "4.2.7p339" "User Commands"
+.TH sntp 1sntpman "29 Dec 2012" "4.2.7p340" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (sntp-opts.man)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:12:14 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:30:19 AM by AutoGen 5.16.2
.\" From the definitions sntp-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt SNTP 1sntpmdoc User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (sntp-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:12:21 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:30:25 AM by AutoGen 5.16.2
.\" From the definitions sntp-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
clock. Run as root, it can correct the system clock to this offset as
well. It can be run as an interactive command or from a cron job.
- <p>This document applies to version 4.2.7p339 of <code>sntp</code>.
+ <p>This document applies to version 4.2.7p340 of <code>sntp</code>.
<p>The program implements the SNTP protocol as defined by RFC 5905, the NTPv4
IETF specification.
<code>'+/- ?'</code>. If the
<em>host</em>
is different from the
-<em>IP,</em>
+<em>IP</em>,
both will be displayed.
Otherwise, only the
<em>IP</em>
used to select the program, defaulting to <span class="file">more</span>. Both will exit
with a status code of 0.
-<pre class="example">sntp - standard Simple Network Time Protocol client program - Ver. 4.2.7p339
+<pre class="example">sntp - standard Simple Network Time Protocol client program - Ver. 4.2.7p340
USAGE: sntp [ -<flag> [<val>] | --<name>[{=| }<val>] ]... \
[ hostname-or-IP ...]
Flg Arg Option-Name Description
-.TH sntp @SNTP_MS@ "26 Dec 2012" "4.2.7p339" "User Commands"
+.TH sntp @SNTP_MS@ "29 Dec 2012" "4.2.7p340" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (sntp-opts.man)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:12:14 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:30:19 AM by AutoGen 5.16.2
.\" From the definitions sntp-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt SNTP @SNTP_MS@ User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (sntp-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:12:21 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:30:25 AM by AutoGen 5.16.2
.\" From the definitions sntp-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
#
# EDIT THIS FILE WITH CAUTION (invoke-ntp-keygen.texi)
#
-# It has been AutoGen-ed December 26, 2012 at 04:11:56 AM by AutoGen 5.16.2
+# It has been AutoGen-ed December 29, 2012 at 09:29:56 AM by AutoGen 5.16.2
# From the definitions ntp-keygen-opts.def
# and the template file agtexi-cmd.tpl
@end ignore
Each character is chosen from the 93 printable characters
in the range 0x21 through 0x7f excluding space and the
@quoteleft{}@quoteright{}#
-#
character.
Note that the keys used by the
@exampleindent 0
@example
-ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.7p339
+ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.7p340
USAGE: ntp-keygen [ -<flag> [<val>] | --<name>[@{=| @}<val>] ]...
Flg Arg Option-Name Description
-b Num imbits identity modulus bits
/*
* EDIT THIS FILE WITH CAUTION (ntp-keygen-opts.c)
*
- * It has been AutoGen-ed December 26, 2012 at 04:11:42 AM by AutoGen 5.16.2
+ * It has been AutoGen-ed December 29, 2012 at 09:29:44 AM by AutoGen 5.16.2
* From the definitions ntp-keygen-opts.def
* and the template file options
*
* ntp-keygen option static const strings
*/
static char const ntp_keygen_opt_strs[2358] =
-/* 0 */ "ntp-keygen (ntp) 4.2.7p339\n"
+/* 0 */ "ntp-keygen (ntp) 4.2.7p340\n"
"Copyright (C) 1970-2012 The University of Delaware, all rights reserved.\n"
"This is free software. It is licensed for use, modification and\n"
"redistribution under the terms of the NTP License, copies of which\n"
/* 2136 */ "no-load-opts\0"
/* 2149 */ "no\0"
/* 2152 */ "NTP_KEYGEN\0"
-/* 2163 */ "ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.7p339\n"
+/* 2163 */ "ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.7p340\n"
"USAGE: %s [ -<flag> [<val>] | --<name>[{=| }<val>] ]...\n\0"
/* 2279 */ "$HOME\0"
/* 2285 */ ".\0"
/* 2287 */ ".ntprc\0"
/* 2294 */ "http://bugs.ntp.org, bugs@ntp.org\0"
/* 2328 */ "\n\n\0"
-/* 2331 */ "ntp-keygen (ntp) 4.2.7p339";
+/* 2331 */ "ntp-keygen (ntp) 4.2.7p340";
/*
* imbits option description:
/*
* EDIT THIS FILE WITH CAUTION (ntp-keygen-opts.h)
*
- * It has been AutoGen-ed December 26, 2012 at 04:11:41 AM by AutoGen 5.16.2
+ * It has been AutoGen-ed December 29, 2012 at 09:29:43 AM by AutoGen 5.16.2
* From the definitions ntp-keygen-opts.def
* and the template file options
*
} teOptIndex;
#define OPTION_CT 26
-#define NTP_KEYGEN_VERSION "4.2.7p339"
-#define NTP_KEYGEN_FULL_VERSION "ntp-keygen (ntp) 4.2.7p339"
+#define NTP_KEYGEN_VERSION "4.2.7p340"
+#define NTP_KEYGEN_FULL_VERSION "ntp-keygen (ntp) 4.2.7p340"
/*
* Interface defines for all options. Replace "n" with the UPPER_CASED
-.TH ntp-keygen 1ntp-keygenman "26 Dec 2012" "ntp (4.2.7p339)" "User Commands"
+.TH ntp-keygen 1ntp-keygenman "29 Dec 2012" "ntp (4.2.7p340)" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntp-keygen-opts.man)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:51 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:52 AM by AutoGen 5.16.2
.\" From the definitions ntp-keygen-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTP_KEYGEN 1ntp-keygenmdoc User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntp-keygen-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:58 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:58 AM by AutoGen 5.16.2
.\" From the definitions ntp-keygen-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
</head>
<body>
<h1 class="settitle">Ntp-keygen User's Manual</h1>
-
<div class="shortcontents">
+ <div class="shortcontents">
<h2>Short Contents</h2>
<ul>
<a href="#Top">Top</a>
printable ASCII format so they can be embedded as MIME attachments in
mail to other sites.
- <p>This document applies to version 4.2.7p339 of <code>ntp-keygen</code>.
+ <p>This document applies to version 4.2.7p340 of <code>ntp-keygen</code>.
<div class="node">
<p><hr>
and in the file name for identity files.
<br><dt><span class="samp">Fl</span><dd>Generate a trusted certificate.
By default, the program generates a non-trusted certificate.
-<br><dt><span class="samp">Fl</span><dd>Generate parameters and keys for the Mu-Varadharajan (MV) identification scheme.
-
-<div class="node">
+<br><dt><span class="samp">Fl</span><dd>Generate parameters and keys for the Mu-Varadharajan (MV) identification scheme.
+</dl>
<p><hr>
<a name="Random"></a>
<br>
<h3 class="section">Random</h3>
+<p>Random
Seed
File
All cryptographically sound key generation schemes must have means
If a site supports OpenSSL or its companion OpenSSH,
it is very likely that means to do this are already available.
-
<p>It is important to understand that entropy must be evolved
+ <p>It is important to understand that entropy must be evolved
for each generation, for otherwise the random number sequence
would be predictable.
Various means dependent on external events, such as keystroke intervals,
Suitable means are described in the OpenSSL software documentation,
but are outside the scope of this page.
-
<p>The entropy seed used by the OpenSSL library is contained in a file,
+ <p>The entropy seed used by the OpenSSL library is contained in a file,
usually called
<code>.rnd</code>, which must be available when starting the NTP daemon
or the
<h3 class="section">Cryptographic</h3>
+<p>Cryptographic
Data
Files
All other file formats begin with two lines.
then encrypted if necessary, and finally written PEM-encoded
printable ASCII format preceded and followed by MIME content identifier lines.
-
<p>The format of the symmetric keys file is somewhat different
+ <p>The format of the symmetric keys file is somewhat different
than the other files in the interest of backward compatibility.
Since DES-CBC is deprecated in NTPv4, the only key format of interest
is MD5 alphanumeric strings.
Each character is chosen from the 93 printable characters
in the range 0x21 through 0x7f excluding space and the
#
+#
character.
-
<p>Note that the keys used by the
+ <p>Note that the keys used by the
<code>ntpq(1ntpqmdoc)</code>
and
<code>ntpdc(1ntpdcmdoc)</code>
and entered by hand, so it is generally appropriate to specify these keys
in human readable ASCII format.
+ <p>The
<code>ntp-keygen</code>
program generates a MD5 symmetric keys file
<span class="file">ntpkey_MD5key_</span>NsArhostname.filestamp.
<code>ntpdc(1ntpdcmdoc)</code>
utilities.
-
<p>This section was generated by <strong>AutoGen</strong>,
+ <p>This section was generated by <strong>AutoGen</strong>,
using the <code>agtexi-cmd</code> template and the option descriptions for the <code>ntp-keygen</code> program.
This software is released under the NTP license, <http://ntp.org/license>.
+<ul class="menu">
<li><a accesskey="1" href="#ntp_002dkeygen-usage">ntp-keygen usage</a>: ntp-keygen help/usage (<span class="option">--help</span>)
<li><a accesskey="2" href="#ntp_002dkeygen-imbits">ntp-keygen imbits</a>: imbits option (-b)
<li><a accesskey="3" href="#ntp_002dkeygen-certificate">ntp-keygen certificate</a>: certificate option (-c)
<h4 class="subsection">ntp-keygen help/usage (<span class="option">--help</span>)</h4>
-
<p><a name="index-ntp_002dkeygen-help-3"></a>
+<p><a name="index-ntp_002dkeygen-help-3"></a>
This is the automatically generated usage text for ntp-keygen.
-
<p>The text printed is the same whether selected with the <code>help</code> option
+ <p>The text printed is the same whether selected with the <code>help</code> option
(<span class="option">--help</span>) or the <code>more-help</code> option (<span class="option">--more-help</span>). <code>more-help</code> will print
the usage text by passing it through a pager program.
<code>more-help</code> is disabled on platforms without a working
used to select the program, defaulting to <span class="file">more</span>. Both will exit
with a status code of 0.
- <pre class="example"> ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.7p338
- USAGE: ntp-keygen [ -<flag> [<val>] | --<name>[{=| }<val>] ]...
- Flg Arg Option-Name Description
- -b Num imbits identity modulus bits
- - It must be in the range:
- 256 to 2048
- -c Str certificate certificate scheme
- -C Str cipher privatekey cipher
- -d no debug-level Increase debug verbosity level
- - may appear multiple times
- -D Num set-debug-level Set the debug verbosity level
- - may appear multiple times
- -e no id-key Write IFF or GQ identity keys
- -G no gq-params Generate GQ parameters and keys
- -H no host-key generate RSA host key
- -I no iffkey generate IFF parameters
- -i Str ident set Autokey group name
- -l Num lifetime set certificate lifetime
- -M no md5key generate MD5 keys
- -m Num modulus modulus
- - It must be in the range:
- 256 to 2048
- -P no pvt-cert generate PC private certificate
- -p Str pvt-passwd output private password
- -q Str get-pvt-passwd input private password
- -S Str sign-key generate sign key (RSA or DSA)
- -s Str subject-name set host and optionally group name
- -T no trusted-cert trusted certificate (TC scheme)
- -V Num mv-params generate <num> MV parameters
- -v Num mv-keys update <num> MV keys
- opt version Output version information and exit
- -? no help Display extended usage information and exit
- -! no more-help Extended usage information passed thru pager
- -> opt save-opts Save the option state to a config file
- -< Str load-opts Load options from a config file
- - disabled as --no-load-opts
- - may appear multiple times
-
- Options are specified by doubled hyphens and their name or by a single
- hyphen and the flag character.
-
-
-
- The following option preset mechanisms are supported:
- - reading file $HOME/.ntprc
- - reading file ./.ntprc
- - examining environment variables named NTP_KEYGEN_*
-
- please send bug reports to: http://bugs.ntp.org, bugs@ntp.org
+<pre class="example">ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.7p339
+USAGE: ntp-keygen [ -<flag> [<val>] | --<name>[{=| }<val>] ]...
+ Flg Arg Option-Name Description
+ -b Num imbits identity modulus bits
+ - It must be in the range:
+ 256 to 2048
+ -c Str certificate certificate scheme
+ -C Str cipher privatekey cipher
+ -d no debug-level Increase debug verbosity level
+ - may appear multiple times
+ -D Num set-debug-level Set the debug verbosity level
+ - may appear multiple times
+ -e no id-key Write IFF or GQ identity keys
+ -G no gq-params Generate GQ parameters and keys
+ -H no host-key generate RSA host key
+ -I no iffkey generate IFF parameters
+ -i Str ident set Autokey group name
+ -l Num lifetime set certificate lifetime
+ -M no md5key generate MD5 keys
+ -m Num modulus modulus
+ - It must be in the range:
+ 256 to 2048
+ -P no pvt-cert generate PC private certificate
+ -p Str pvt-passwd output private password
+ -q Str get-pvt-passwd input private password
+ -S Str sign-key generate sign key (RSA or DSA)
+ -s Str subject-name set host and optionally group name
+ -T no trusted-cert trusted certificate (TC scheme)
+ -V Num mv-params generate <num> MV parameters
+ -v Num mv-keys update <num> MV keys
+ opt version Output version information and exit
+ -? no help Display extended usage information and exit
+ -! no more-help Extended usage information passed thru pager
+ -> opt save-opts Save the option state to a config file
+ -< Str load-opts Load options from a config file
+ - disabled as --no-load-opts
+ - may appear multiple times
+
+Options are specified by doubled hyphens and their name or by a single
+hyphen and the flag character.
+
+
+
+The following option preset mechanisms are supported:
+ - reading file $HOME/.ntprc
+ - reading file ./.ntprc
+ - examining environment variables named NTP_KEYGEN_*
+
+please send bug reports to: http://bugs.ntp.org, bugs@ntp.org
</pre>
+ <div class="node">
<p><hr>
<a name="ntp_002dkeygen-imbits"></a>Next: <a rel="next" accesskey="n" href="#ntp_002dkeygen-certificate">ntp-keygen certificate</a>,
Previous: <a rel="previous" accesskey="p" href="#ntp_002dkeygen-usage">ntp-keygen usage</a>,
<h4 class="subsection">imbits option (-b)</h4>
-
<p><a name="index-ntp_002dkeygen_002dimbits-4"></a>
+<p><a name="index-ntp_002dkeygen_002dimbits-4"></a>
This is the “identity modulus bits” option.
This option takes an argument number <span class="file">imbits</span>.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>The number of bits in the identity modulus. The default is 256.
+ <p>The number of bits in the identity modulus. The default is 256.
<div class="node">
<p><hr>
<a name="ntp_002dkeygen-certificate"></a>Next: <a rel="next" accesskey="n" href="#ntp_002dkeygen-cipher">ntp-keygen cipher</a>,
<h4 class="subsection">certificate option (-c)</h4>
-
<p><a name="index-ntp_002dkeygen_002dcertificate-5"></a>
+<p><a name="index-ntp_002dkeygen_002dcertificate-5"></a>
This is the “certificate scheme” option.
This option takes an argument string <span class="file">scheme</span>.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
+ <p>scheme is one of
RSA-MD2, RSA-MD5, RSA-SHA, RSA-SHA1, RSA-MDC2, RSA-RIPEMD160,
DSA-SHA, or DSA-SHA1.
-
<p>Select the certificate message digest/signature encryption scheme.
+ <p>Select the certificate message digest/signature encryption scheme.
Note that RSA schemes must be used with a RSA sign key and DSA
schemes must be used with a DSA sign key. The default without
this option is RSA-MD5.
<h4 class="subsection">cipher option (-C)</h4>
-
<p><a name="index-ntp_002dkeygen_002dcipher-6"></a>
+<p><a name="index-ntp_002dkeygen_002dcipher-6"></a>
This is the “privatekey cipher” option.
This option takes an argument string <span class="file">cipher</span>.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Select the cipher which is used to encrypt the files containing
+ <p>Select the cipher which is used to encrypt the files containing
private keys. The default is three-key triple DES in CBC mode,
equivalent to "<code>-C des-ede3-cbc". The openssl tool lists ciphers
available in "openssl -h" output.
<h4 class="subsection">id-key option (-e)</h4>
-
<p><a name="index-ntp_002dkeygen_002did_002dkey-7"></a>
+<p><a name="index-ntp_002dkeygen_002did_002dkey-7"></a>
This is the “write iff or gq identity keys” option.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Write the IFF or GQ client keys to the standard output. This is
+ <p>Write the IFF or GQ client keys to the standard output. This is
intended for automatic key distribution by mail.
<div class="node">
<p><hr>
<h4 class="subsection">gq-params option (-G)</h4>
-
<p><a name="index-ntp_002dkeygen_002dgq_002dparams-8"></a>
+<p><a name="index-ntp_002dkeygen_002dgq_002dparams-8"></a>
This is the “generate gq parameters and keys” option.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Generate parameters and keys for the GQ identification scheme,
+ <p>Generate parameters and keys for the GQ identification scheme,
obsoleting any that may exist.
<div class="node">
<p><hr>
<h4 class="subsection">host-key option (-H)</h4>
-
<p><a name="index-ntp_002dkeygen_002dhost_002dkey-9"></a>
+<p><a name="index-ntp_002dkeygen_002dhost_002dkey-9"></a>
This is the “generate rsa host key” option.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Generate new host keys, obsoleting any that may exist.
+ <p>Generate new host keys, obsoleting any that may exist.
<div class="node">
<p><hr>
<a name="ntp_002dkeygen-iffkey"></a>Next: <a rel="next" accesskey="n" href="#ntp_002dkeygen-ident">ntp-keygen ident</a>,
<h4 class="subsection">iffkey option (-I)</h4>
-
<p><a name="index-ntp_002dkeygen_002diffkey-10"></a>
+<p><a name="index-ntp_002dkeygen_002diffkey-10"></a>
This is the “generate iff parameters” option.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Generate parameters for the IFF identification scheme, obsoleting
+ <p>Generate parameters for the IFF identification scheme, obsoleting
any that may exist.
<div class="node">
<p><hr>
<h4 class="subsection">ident option (-i)</h4>
-
<p><a name="index-ntp_002dkeygen_002dident-11"></a>
+<p><a name="index-ntp_002dkeygen_002dident-11"></a>
This is the “set autokey group name” option.
This option takes an argument string <span class="file">group</span>.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Set the optional Autokey group name to name. This is used in
+ <p>Set the optional Autokey group name to name. This is used in
the file name of IFF, GQ, and MV client parameters files. In
that role, the default is the host name if this option is not
provided. The group name, if specified using <code>-i/--ident</code> or
using <code>-s/--subject-name</code> following an '<code>}' character,
is also a part of the self-signed host certificate's subject and
issuer names in the form host
-
<p>'crypto ident' or 'server ident' configuration in
+ <p>'crypto ident' or 'server ident' configuration in
ntpd's configuration file.
</code><div class="node">
<p><hr>
<h4 class="subsection">lifetime option (-l)</h4>
-
<p><a name="index-ntp_002dkeygen_002dlifetime-12"></a>
+<p><a name="index-ntp_002dkeygen_002dlifetime-12"></a>
This is the ``set certificate lifetime'' option.
This option takes an argument number <span class="file">lifetime</span>.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Set the certificate expiration to lifetime days from now.
+ <p>Set the certificate expiration to lifetime days from now.
<div class="node">
<p><hr>
<a name="ntp_002dkeygen-md5key"></a>Next: <a rel="next" accesskey="n" href="#ntp_002dkeygen-modulus">ntp-keygen modulus</a>,
<h4 class="subsection">md5key option (-M)</h4>
-
<p><a name="index-ntp_002dkeygen_002dmd5key-13"></a>
+<p><a name="index-ntp_002dkeygen_002dmd5key-13"></a>
This is the ``generate md5 keys'' option.
Generate MD5 keys, obsoleting any that may exist.
<div class="node">
<h4 class="subsection">modulus option (-m)</h4>
-
<p><a name="index-ntp_002dkeygen_002dmodulus-14"></a>
+<p><a name="index-ntp_002dkeygen_002dmodulus-14"></a>
This is the ``modulus'' option.
This option takes an argument number <span class="file">modulus</span>.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>The number of bits in the prime modulus. The default is 512.
+ <p>The number of bits in the prime modulus. The default is 512.
<div class="node">
<p><hr>
<a name="ntp_002dkeygen-pvt_002dcert"></a>Next: <a rel="next" accesskey="n" href="#ntp_002dkeygen-pvt_002dpasswd">ntp-keygen pvt-passwd</a>,
<h4 class="subsection">pvt-cert option (-P)</h4>
-
<p><a name="index-ntp_002dkeygen_002dpvt_002dcert-15"></a>
+<p><a name="index-ntp_002dkeygen_002dpvt_002dcert-15"></a>
This is the ``generate pc private certificate'' option.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Generate a private certificate. By default, the program generates
+ <p>Generate a private certificate. By default, the program generates
public certificates.
<div class="node">
<p><hr>
<h4 class="subsection">pvt-passwd option (-p)</h4>
-
<p><a name="index-ntp_002dkeygen_002dpvt_002dpasswd-16"></a>
+<p><a name="index-ntp_002dkeygen_002dpvt_002dpasswd-16"></a>
This is the ``output private password'' option.
This option takes an argument string <span class="file">passwd</span>.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Encrypt generated files containing private data with the specified
+ <p>Encrypt generated files containing private data with the specified
password and the cipher selected with <code>-C/--cipher</code>.
<div class="node">
<p><hr>
<h4 class="subsection">get-pvt-passwd option (-q)</h4>
-
<p><a name="index-ntp_002dkeygen_002dget_002dpvt_002dpasswd-17"></a>
+<p><a name="index-ntp_002dkeygen_002dget_002dpvt_002dpasswd-17"></a>
This is the ``input private password'' option.
This option takes an argument string <span class="file">passwd</span>.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Set the password for reading files to the specified password.
+ <p>Set the password for reading files to the specified password.
<div class="node">
<p><hr>
<a name="ntp_002dkeygen-sign_002dkey"></a>Next: <a rel="next" accesskey="n" href="#ntp_002dkeygen-subject_002dname">ntp-keygen subject-name</a>,
<h4 class="subsection">sign-key option (-S)</h4>
-
<p><a name="index-ntp_002dkeygen_002dsign_002dkey-18"></a>
+<p><a name="index-ntp_002dkeygen_002dsign_002dkey-18"></a>
This is the ``generate sign key (rsa or dsa)'' option.
This option takes an argument string <span class="file">sign</span>.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Generate a new sign key of the designated type, obsoleting any
+ <p>Generate a new sign key of the designated type, obsoleting any
that may exist. By default, the program uses the host key as the
sign key.
<div class="node">
<h4 class="subsection">subject-name option (-s)</h4>
-
<p><a name="index-ntp_002dkeygen_002dsubject_002dname-19"></a>
+<p><a name="index-ntp_002dkeygen_002dsubject_002dname-19"></a>
This is the ``set host and optionally group name'' option.
This option takes an argument string <span class="file">host@group</span>.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Set the Autokey host name, and optionally, group name specified
+ <p>Set the Autokey host name, and optionally, group name specified
following an '<code>}' character. The host name is used in the file
name of generated host and signing certificates, without the
group name. The host name, and if provided, group name are used
in host
-
<p>fields. Specifying '-s
-
<p>leaving the host name unchanged while appending
-
<p>subject and issuer fields, as with -i group. The group name, or
+ <p>fields. Specifying '-s
+ <p>leaving the host name unchanged while appending
+ <p>subject and issuer fields, as with -i group. The group name, or
if not provided, the host name are also used in the file names
of IFF, GQ, and MV client parameter files.
</code><div class="node">
<h4 class="subsection">trusted-cert option (-T)</h4>
-
<p><a name="index-ntp_002dkeygen_002dtrusted_002dcert-20"></a>
+<p><a name="index-ntp_002dkeygen_002dtrusted_002dcert-20"></a>
This is the ``trusted certificate (tc scheme)'' option.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Generate a trusted certificate. By default, the program generates
+ <p>Generate a trusted certificate. By default, the program generates
a non-trusted certificate.
<div class="node">
<p><hr>
<h4 class="subsection">mv-params option (-V)</h4>
-
<p><a name="index-ntp_002dkeygen_002dmv_002dparams-21"></a>
+<p><a name="index-ntp_002dkeygen_002dmv_002dparams-21"></a>
This is the ``generate <num> mv parameters'' option.
This option takes an argument number <span class="file">num</span>.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>Generate parameters and keys for the Mu-Varadharajan (MV)
+ <p>Generate parameters and keys for the Mu-Varadharajan (MV)
identification scheme.
<div class="node">
<p><hr>
<h4 class="subsection">mv-keys option (-v)</h4>
-
<p><a name="index-ntp_002dkeygen_002dmv_002dkeys-22"></a>
+<p><a name="index-ntp_002dkeygen_002dmv_002dkeys-22"></a>
This is the ``update <num> mv keys'' option.
This option takes an argument number <span class="file">num</span>.
-
<p class="noindent">This option has some usage constraints. It:
+<p class="noindent">This option has some usage constraints. It:
+ <ul>
<li>must be compiled in by defining <code>AUTOKEY</code> during the compilation.
</ul>
-
<p>This option has no <span class="samp">doc</span> documentation.
+ <p>This option has no <span class="samp">doc</span> documentation.
<div class="node">
<p><hr>
<h4 class="subsection">presetting/configuring ntp-keygen</h4>
-
<p>Any option that is not marked as <i>not presettable</i> may be preset by
+<p>Any option that is not marked as <i>not presettable</i> may be preset by
loading values from configuration ("rc" or "ini") files, and values from environment variables named <code>NTP-KEYGEN</code> and <code>NTP-KEYGEN_<OPTION_NAME></code>. <code><OPTION_NAME></code> must be one of
the options listed above in upper case and segmented with underscores.
The <code>NTP-KEYGEN</code> variable will be tokenized and parsed like
the command line. The remaining variables are tested for existence and their
values are treated like option arguments.
-
<p class="noindent"><code>libopts</code> will search in 2 places for configuration files:
+<p class="noindent"><code>libopts</code> will search in 2 places for configuration files:
+ <ul>
<li>$HOME
<li>$PWD
</ul>
- The environment variables <code>HOME</code>, and <code>PWD</code>
+ The environment variables <code>HOME</code>, and <code>PWD</code>
are expanded and replaced when <span class="file">ntp-keygen</span> runs.
For any of these that are plain files, they are simply processed.
For any that are directories, then a file named <span class="file">.ntprc</span> is searched for
within that directory and processed.
-
<p>Configuration files may be in a wide variety of formats.
+ <p>Configuration files may be in a wide variety of formats.
The basic format is an option name followed by a value (argument) on the
same line. Values may be separated from the option name with a colon,
equal sign or simply white space. Values may be continued across multiple
lines by escaping the newline with a backslash.
-
<p>Multiple programs may also share the same initialization file.
+ <p>Multiple programs may also share the same initialization file.
Common options are collected at the top, followed by program specific
segments. The segments are separated by lines like:
- <pre class="example"> [NTP-KEYGEN]
- </pre>
-
<p class="noindent">or by
- <pre class="example"> <?program ntp-keygen>
- </pre>
-
<p class="noindent">Do not mix these styles within one configuration file.
-
-
<p>Compound values and carefully constructed string values may also be
+<pre class="example"> [NTP-KEYGEN]
+</pre>
+ <p class="noindent">or by
+<pre class="example"> <?program ntp-keygen>
+</pre>
+ <p class="noindent">Do not mix these styles within one configuration file.
+
+ <p>Compound values and carefully constructed string values may also be
specified using XML syntax:
- <pre class="example"> <option-name>
- <sub-opt>...&lt;...&gt;...</sub-opt>
- </option-name>
- </pre>
-
<p class="noindent">yielding an <code>option-name.sub-opt</code> string value of
- <pre class="example"> "...<...>..."
- </pre>
-
<p><code>AutoOpts</code> does not track suboptions. You simply note that it is a
+<pre class="example"> <option-name>
+ <sub-opt>...&lt;...&gt;...</sub-opt>
+ </option-name>
+</pre>
+ <p class="noindent">yielding an <code>option-name.sub-opt</code> string value of
+<pre class="example"> "...<...>..."
+</pre>
+ <p><code>AutoOpts</code> does not track suboptions. You simply note that it is a
hierarchicly valued option. <code>AutoOpts</code> does provide a means for searching
the associated name/value pair list (see: optionFindValue).
-
<p>The command line options relating to configuration and/or usage help are:
+ <p>The command line options relating to configuration and/or usage help are:
<h5 class="subsubheading">version (-)</h5>
-
<p>Print the program version to standard out, optionally with licensing
+<p>Print the program version to standard out, optionally with licensing
information, then exit 0. The optional argument specifies how much licensing
detail to provide. The default is to print just the version. The licensing infomation may be selected with an option argument. Only the
first letter of the argument is examined:
+ <dl>
<dt><span class="samp">version</span><dd>Only print the version. This is the default.
<br><dt><span class="samp">copyright</span><dd>Name the copyright usage licensing terms.
<br><dt><span class="samp">verbose</span><dd>Print the full copyright usage licensing terms.
<h4 class="subsection">ntp-keygen exit status</h4>
-
<p>One of the following exit values will be returned:
+<p>One of the following exit values will be returned:
+ <dl>
<dt><span class="samp">0 (EXIT_SUCCESS)</span><dd>Successful program execution.
<br><dt><span class="samp">1 (EXIT_FAILURE)</span><dd>The operation failed or the command syntax was not valid.
<br><dt><span class="samp">66 (EX_NOINPUT)</span><dd>A specified configuration file could not be loaded.
<br><dt><span class="samp">70 (EX_SOFTWARE)</span><dd>libopts had an internal operational error. Please report
it to autogen-users@lists.sourceforge.net. Thank you.
</dl>
+ <div class="node">
<p><hr>
<a name="ntp_002dkeygen-Usage"></a>Next: <a rel="next" accesskey="n" href="#ntp_002dkeygen-Notes">ntp-keygen Notes</a>,
Previous: <a rel="previous" accesskey="p" href="#ntp_002dkeygen-exit-status">ntp-keygen exit status</a>,
<h4 class="subsection">ntp-keygen Usage</h4>
+<p>The
<code>-p</code> <code>-password</code> option specifies the write password and
<code>-q</code> <code>-password</code> option the read password for previously encrypted files.
The
<h4 class="subsection">ntp-keygen Notes</h4>
-
<p>This document corresponds to version of NTP.
+<p>This document corresponds to version of NTP.
Portions of this document came from FreeBSD.
<div class="node">
<p><hr>
<h4 class="subsection">ntp-keygen Bugs</h4>
-
<p>It can take quite a while to generate some cryptographic values,
+<p>It can take quite a while to generate some cryptographic values,
from one to several minutes with modern architectures
such as UltraSPARC and up to tens of minutes to an hour
with older architectures such as SPARC IPC.
-
<p>Please report bugs to http://bugs.ntp.org .
+ <p>Please report bugs to http://bugs.ntp.org .
<div class="node">
<p><hr>
<br>
</div>
- <!-- node-name, next, previous, up -->
+<!-- node-name, next, previous, up -->
<h3 class="section">Random Seed File</h3>
-
<p>All cryptographically sound key generation schemes must have means to
+<p>All cryptographically sound key generation schemes must have means to
randomize the entropy seed used to initialize the internal
pseudo-random number generator used by the OpenSSL library routines.
If a site supports ssh, it is very likely that means to do this are
usually called <code>.rnd</code>, which must be available when
starting the <code>ntp-keygen</code> program or <code>ntpd</code> daemon.
-
<p>The OpenSSL library looks for the file using the path specified by the
+ <p>The OpenSSL library looks for the file using the path specified by the
<code>RANDFILE</code> environment variable in the user home directory, whether root
or some other user.
If the <code>RANDFILE</code> environment variable is not
<br>
</div>
- <!-- node-name, next, previous, up -->
+<!-- node-name, next, previous, up -->
<h3 class="section">Cryptographic Data Files</h3>
-
<p>File and link names are in the <code>form ntpkey_key_name.fstamp</code>,
+<p>File and link names are in the <code>form ntpkey_key_name.fstamp</code>,
where <code>key</code> is the key or parameter type,
<code>name</code> is the host or group name and
<code>fstamp</code> is the filestamp (NTP seconds) when the file was created).
only lower case characters. The filestamp is not used in generated link
names.
-
<p>The key name is a string defining the cryptographic key type.
+ <p>The key name is a string defining the cryptographic key type.
Key types include public/private keys host and sign, certificate cert
and several challenge/response key types.
By convention, client files used for
server files for responses have a key subtype, as in the GQ response
GQkey.
-
<p>All files begin with two nonencrypted lines. The first line contains
+ <p>All files begin with two nonencrypted lines. The first line contains
the file name in the format <code>ntpkey_key_host.fstamp</code>.
The second line contains the datestamp in conventional Unix date format.
Lines beginning with <code>#</code> are ignored.
-
<p>The remainder of the file contains cryptographic data encoded first
+ <p>The remainder of the file contains cryptographic data encoded first
using ASN.1 rules, then encrypted using the DES-CBC algorithm with
given password and finally written in PEM-encoded printable ASCII text
preceded and followed by MIME content identifier lines.
-
<p>The format of the symmetric keys file, ordinarily named <code>ntp.keys</code>,
+ <p>The format of the symmetric keys file, ordinarily named <code>ntp.keys</code>,
is somewhat different than the other files in the interest of backward
compatibility.
Ordinarily, the file is generated by this program, but
it can be constructed and edited using an ordinary text editor.
- <pre class="example"> # ntpkey_MD5key_hms.local.3564038757
- # Sun Dec 9 02:45:57 2012
-
- 1 MD5 "]!ghT%O;3)WJ,/Nc:>I # MD5 key
- 2 MD5 lu+H^tF46BKR-6~pV_5 # MD5 key
- 3 MD5 :lnoVsE%Yz*avh%EtNC # MD5 key
- 4 MD5 |fdZrf0sF~^V # MD5 key
- 5 MD5 IyAG>O"y"LmCRS!*bHC # MD5 key
- 6 MD5 ">e\A # MD5 key
- 7 MD5 c9x=M'CfLxax9v)PV-si # MD5 key
- 8 MD5 E|=jvFVov?Bn|Ev=&aK\ # MD5 key
- 9 MD5 T!c4UT&`(m$+m+B6,`Q0 # MD5 key
- 10 MD5 JVF/1=)=IFbHbJQz..Cd # MD5 key
- 11 SHA1 6dea311109529e436c2b4fccae9bc753c16d1b48 # SHA1 key
- 12 SHA1 7076f373d86c4848c59ff8046e49cb7d614ec394 # SHA1 key
- 13 SHA1 5f48b1b60591eb01b7cf1d33b7774f08d20262d3 # SHA1 key
- 14 SHA1 eed5ab9d9497319ec60cf3781d52607e76720178 # SHA1 key
- 15 SHA1 f283562611a04c964da8126296f5f8e58c3f85de # SHA1 key
- 16 SHA1 1930da171297dd63549af50b29449de17dcf341f # SHA1 key
- 17 SHA1 fee892110358cd4382322b889869e750db8e8a8f # SHA1 key
- 18 SHA1 b5520c9fadd7ad3fd8bfa061c8821b65d029bb37 # SHA1 key
- 19 SHA1 8c74fb440ec80f453ec6aaa62b9baed0ab723b92 # SHA1 key
- 20 SHA1 6bc05f734306a189326000970c19b3910f403795 # SHA1 key
- </pre>
-
<p>Figure 1. Typical Symmetric Key File
-
-
<p>Figure 1 shows a typical symmetric keys file used by the reference
+<pre class="example"> # ntpkey_MD5key_hms.local.3564038757
+ # Sun Dec 9 02:45:57 2012
+
+ 1 MD5 "]!ghT%O;3)WJ,/Nc:>I # MD5 key
+ 2 MD5 lu+H^tF46BKR-6~pV_5 # MD5 key
+ 3 MD5 :lnoVsE%Yz*avh%EtNC # MD5 key
+ 4 MD5 |fdZrf0sF~^V # MD5 key
+ 5 MD5 IyAG>O"y"LmCRS!*bHC # MD5 key
+ 6 MD5 ">e\A # MD5 key
+ 7 MD5 c9x=M'CfLxax9v)PV-si # MD5 key
+ 8 MD5 E|=jvFVov?Bn|Ev=&aK\ # MD5 key
+ 9 MD5 T!c4UT&`(m$+m+B6,`Q0 # MD5 key
+ 10 MD5 JVF/1=)=IFbHbJQz..Cd # MD5 key
+ 11 SHA1 6dea311109529e436c2b4fccae9bc753c16d1b48 # SHA1 key
+ 12 SHA1 7076f373d86c4848c59ff8046e49cb7d614ec394 # SHA1 key
+ 13 SHA1 5f48b1b60591eb01b7cf1d33b7774f08d20262d3 # SHA1 key
+ 14 SHA1 eed5ab9d9497319ec60cf3781d52607e76720178 # SHA1 key
+ 15 SHA1 f283562611a04c964da8126296f5f8e58c3f85de # SHA1 key
+ 16 SHA1 1930da171297dd63549af50b29449de17dcf341f # SHA1 key
+ 17 SHA1 fee892110358cd4382322b889869e750db8e8a8f # SHA1 key
+ 18 SHA1 b5520c9fadd7ad3fd8bfa061c8821b65d029bb37 # SHA1 key
+ 19 SHA1 8c74fb440ec80f453ec6aaa62b9baed0ab723b92 # SHA1 key
+ 20 SHA1 6bc05f734306a189326000970c19b3910f403795 # SHA1 key
+</pre>
+ <p>Figure 1. Typical Symmetric Key File
+
+ <p>Figure 1 shows a typical symmetric keys file used by the reference
implementation.
Each line of the file contains three fields, first an
integer between 1 and 65534, inclusive, representing the key identifier
SHA or SHA1.
The key type can be changed using an ASCII text editor.
-
<p>An MD5 key consists of a printable ASCII string less than or equal to
+ <p>An MD5 key consists of a printable ASCII string less than or equal to
16 characters and terminated by whitespace or a # character.
An OpenSSL
key consists of a hex-encoded ASCII string of 40 characters, which is
truncated as necessary.
-
<p>Note that the keys used by the <code>ntpq</code> and <code>ntpdc</code> programs are
+ <p>Note that the keys used by the <code>ntpq</code> and <code>ntpdc</code> programs are
checked against passwords requested by the programs and entered by hand,
so it
is generally appropriate to specify these keys in human readable ASCII
format.
-
<p>The <code>ntp-keygen</code> program generates a MD5 symmetric keys file
+ <p>The <code>ntp-keygen</code> program generates a MD5 symmetric keys file
<code>ntpkey_MD5key_hostname.filestamp</code>.
Since the file contains private
shared keys, it should be visible only to root and distributed by
-.TH ntp-keygen @NTP_KEYGEN_MS@ "26 Dec 2012" "ntp (4.2.7p339)" "User Commands"
+.TH ntp-keygen @NTP_KEYGEN_MS@ "29 Dec 2012" "ntp (4.2.7p340)" "User Commands"
.\"
.\" EDIT THIS FILE WITH CAUTION (ntp-keygen-opts.man)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:51 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:52 AM by AutoGen 5.16.2
.\" From the definitions ntp-keygen-opts.def
.\" and the template file agman-cmd.tpl
.\"
-.Dd December 26 2012
+.Dd December 29 2012
.Dt NTP_KEYGEN @NTP_KEYGEN_MS@ User Commands
.Os SunOS 5.10
.\" EDIT THIS FILE WITH CAUTION (ntp-keygen-opts.mdoc)
.\"
-.\" It has been AutoGen-ed December 26, 2012 at 04:11:58 AM by AutoGen 5.16.2
+.\" It has been AutoGen-ed December 29, 2012 at 09:29:58 AM by AutoGen 5.16.2
.\" From the definitions ntp-keygen-opts.def
.\" and the template file agmdoc-cmd.tpl
.Sh NAME
projects / thirdparty / ntp.git / commitdiff
