From: Harlan Stenn Date: Sat, 17 Oct 2015 06:28:49 +0000 (+0000) Subject: ntp-4.2.8p4-sec-RC2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5b155ba7e8755e6b6bc05aaf1151c9c3f3fd35c5;p=thirdparty%2Fntp.git ntp-4.2.8p4-sec-RC2 bk: 5621eaa1sBf0oJ0pyDCLPBNtCVFpPQ --- diff --git a/NEWS b/NEWS index 7bafce58e..2ec4bcee2 100644 --- a/NEWS +++ b/NEWS @@ -1,14 +1,346 @@ --- NTP 4.2.8p4 -Focus: XXX +Focus: Security, Bug fies, enhancements. -Severity: MEDIUM +Severity: HIGH + +In addition to bug fixes and enhancements, this release fixes the +following 13 low-, medium-, and high-severity vulnerabilities: + +* Incomplete vallen (value length) checks in ntp_crypto.c, leading + to potential crashes or potential code injection/information leakage. + + References: Sec 2899, Sec 2671, CVE-2015- + Affects: All ntp-4 releases up to, but not including 4.2.8p4, + and 4.3.0 up to, but not including 4.3.XX + CVSS: (AV:N/AC:H/Au:M/C:N/I:N/A:C) Base Score: 4.6 + Summary: The fix for CVE-2014-9750 was incomplete in that there were + certain code paths where a packet with particular autokey operations + that contained malicious data was not always being completely + validated. Receipt of these packets can cause ntpd to crash. + Mitigation: + Don't use autokey. + Upgrade to 4.2.8p4, or later, from the NTP Project Download + Page or the NTP Public Services Project Download Page + Monitor your ntpd instances. + Credit: This weakness was discovered by Tenable Network Security. + +* Clients that receive a KoD should validate the origin timestamp field. + + References: Sec 2901 / CVE-2015- + Affects: All ntp-4 releases up to, but not including 4.2.8p4, + and 4.3.0 up to, but not including 4.3.XX + CVSS: (AV:N/AC:M/Au:N/C:N/I:N/A:P) Base Score: 4.3-5.0 at worst + Summary: An ntpd client that honors Kiss-of-Death responses will honor + KoD messages that have been forged by an attacker, causing it to + delay or stop querying its servers for time updates. Also, an + attacker can forge packets that claim to be from the target and + send them to servers often enough that a server that implements + KoD rate limiting will send the target machine a KoD response to + attempt to reduce the rate of incoming packets, or it may also + trigger a firewall block at the server for packets from the target + machine. For either of these attacks to succeed, the attacker must + know what servers the target is communicating with. An attacker + can be anywhere on the Internet and can frequently learn the + identity of the target's time source by sending the target a + time query. + Mitigation: + Implement BCP-38. + Upgrade to 4.2.8p4, or later, from the NTP Project Download Page + or the NTP Public Services Project Download Page + If you can't upgrade, restrict who can query ntpd to learn who + its servers are, and what IPs are allowed to ask your system + for the time. This mitigation is heavy-handed. + Monitor your ntpd instances. + Note: + 4.2.8p4 protects against the first attack. For the second attack, + all we can do is warn when it is happening, which we do in 4.2.8p4. + Credit: This weakness was discovered by Aanchal Malhotra, + Issac E. Cohen, and Sharon Goldberg of Boston University. + +* configuration directives to change "pidfile" and "driftfile" should + only be allowed locally. + + References: Sec 2902 / CVE-2015-5196 + Affects: All ntp-4 releases up to, but not including 4.2.8p4, + and 4.3.0 up to, but not including 4.3.XX + CVSS: (AV:N/AC:H/Au:M/C:N/I:C/A:C) Base Score: 6.2 worst case + Summary: If ntpd is configured to allow for remote configuration, + and if the (possibly spoofed) source IP address is allowed to + send remote configuration requests, and if the attacker knows + the remote configuration password, it's possible for an attacker + to use the "pidfile" or "driftfile" directives to potentially + overwrite other files. + Mitigation: + Implement BCP-38. + Upgrade to 4.2.8p4, or later, from the NTP Project Download + Page or the NTP Public Services Project Download Page + If you cannot upgrade, don't enable remote configuration. + If you must enable remote configuration and cannot upgrade, + remote configuration of NTF's ntpd requires: + - an explicitly configured trustedkey, and you should also + configure a controlkey. + - access from a permitted IP. You choose the IPs. + - authentication. Don't disable it. Practice secure key safety. + Monitor your ntpd instances. + Credit: This weakness was discovered by Miroslav Lichvar of Red Hat. + +* Slow memory leak in CRYPTO_ASSOC + + References: Sec 2909 / CVE-2015-7701 + Affects: All ntp-4 releases that use autokey up to, but not + including 4.2.8p4, and 4.3.0 up to, but not including 4.3.XX + CVSS: (AV:N/AC:H/Au:M/C:N/I:N/A:C) Base Score: 0.0 best/usual case, + 4.6 otherwise + Summary: If ntpd is configured to use autokey, then an attacker can + send packets to ntpd that will, after several days of ongoing + attack, cause it to run out of memory. + Mitigation: + Don't use autokey. + Upgrade to 4.2.8p4, or later, from the NTP Project Download + Page or the NTP Public Services Project Download Page + Monitor your ntpd instances. + Credit: This weakness was discovered by Tenable Network Security. + +* mode 7 loop counter underrun + + References: Sec 2913 / CVE-2015-7848 / TALOS-CAN-0052 + Affects: All ntp-4 releases up to, but not including 4.2.8p4, + and 4.3.0 up to, but not including 4.3.XX + CVSS: (AV:N/AC:H/Au:M/C:N/I:N/A:C) Base Score: 4.6 + Summary: If ntpd is configured to enable mode 7 packets, and if the + use of mode 7 packets is not properly protected thru the use of + the available mode 7 authentication and restriction mechanisms, + and if the (possibly spoofed) source IP address is allowed to + send mode 7 queries, then an attacker can send a crafted packet + to ntpd that will cause it to crash. + Mitigation: + Implement BCP-38. + Upgrade to 4.2.8p4, or later, from the NTP Project Download + Page or the NTP Public Services Project Download Page. + If you are unable to upgrade: + In ntp-4.2.8, mode 7 is disabled by default. Don't enable it. + If you must enable mode 7: + configure the use of a requestkey to control who can issue + mode 7 requests. + configure restrict noquery to further limit mode 7 requests + to trusted sources. + Monitor your ntpd instances. +Credit: This weakness was discovered by Aleksandar Nikolic of Cisco Talos. + +* memory corruption in password store + + References: Sec 2916 / CVE-2015-7849 / TALOS-CAN-0054 + Affects: All ntp-4 releases up to, but not including 4.2.8p4, and 4.3.0 up to, but not including 4.3.XX + CVSS: (AV:N/AC:H/Au:M/C:N/I:C/A:C) Base Score: 6.8, worst case + Summary: If ntpd is configured to allow remote configuration, and if + the (possibly spoofed) source IP address is allowed to send + remote configuration requests, and if the attacker knows the + remote configuration password or if ntpd was configured to + disable authentication, then an attacker can send a set of + packets to ntpd that may cause a crash or theoretically + perform a code injection attack. + Mitigation: + Implement BCP-38. + Upgrade to 4.2.8p4, or later, from the NTP Project Download + Page or the NTP Public Services Project Download Page. + If you are unable to upgrade, remote configuration of NTF's + ntpd requires: + an explicitly configured "trusted" key. Only configure + this if you need it. + access from a permitted IP address. You choose the IPs. + authentication. Don't disable it. Practice secure key safety. + Monitor your ntpd instances. + Credit: This weakness was discovered by Yves Younan of Cisco Talos. + +* Infinite loop if extended logging enabled and the logfile and + keyfile are the same. + + References: Sec 2917 / CVE-2015-7850 / TALOS-CAN-0055 + Affects: All ntp-4 releases up to, but not including 4.2.8p4, + and 4.3.0 up to, but not including 4.3.XX + CVSS: (AV:N/AC:H/Au:M/C:N/I:N/A:C) Base Score: 4.6, worst case + Summary: If ntpd is configured to allow remote configuration, and if + the (possibly spoofed) source IP address is allowed to send + remote configuration requests, and if the attacker knows the + remote configuration password or if ntpd was configured to + disable authentication, then an attacker can send a set of + packets to ntpd that will cause it to crash and/or create a + potentially huge log file. Specifically, the attacker could + enable extended logging, point the key file at the log file, + and cause what amounts to an infinite loop. + Mitigation: + Implement BCP-38. + Upgrade to 4.2.8p4, or later, from the NTP Project Download + Page or the NTP Public Services Project Download Page. + If you are unable to upgrade, remote configuration of NTF's ntpd + requires: + an explicitly configured "trusted" key. Only configure this + if you need it. + access from a permitted IP address. You choose the IPs. + authentication. Don't disable it. Practice secure key safety. + Monitor your ntpd instances. + Credit: This weakness was discovered by Yves Younan of Cisco Talos. + +* Potential path traversal vulnerability in the config file saving of + ntpd on VMS. + + References: Sec 2918 / CVE-2015-7851 / TALOS-CAN-0062 + Affects: All ntp-4 releases running under VMS up to, but not + including 4.2.8p4, and 4.3.0 up to, but not including 4.3.XX + CVSS: (AV:N/AC:H/Au:M/C:N/I:P/A:C) Base Score: 5.2, worst case + Summary: If ntpd is configured to allow remote configuration, and if + the (possibly spoofed) IP address is allowed to send remote + configuration requests, and if the attacker knows the remote + configuration password or if ntpd was configured to disable + authentication, then an attacker can send a set of packets to + ntpd that may cause ntpd to overwrite files. + Mitigation: + Implement BCP-38. + Upgrade to 4.2.8p4, or later, from the NTP Project Download + Page or the NTP Public Services Project Download Page. + If you are unable to upgrade, remote configuration of NTF's ntpd + requires: + an explicitly configured "trusted" key. Only configure + this if you need it. + access from permitted IP addresses. You choose the IPs. + authentication. Don't disable it. Practice key security safety. + Monitor your ntpd instances. + Credit: This weakness was discovered by Yves Younan of Cisco Talos. + +* ntpq atoascii() potential memory corruption + + References: Sec 2919 / CVE-2015-7852 / TALOS-CAN-0063 + Affects: All ntp-4 releases running up to, but not including 4.2.8p4, + and 4.3.0 up to, but not including 4.3.XX + CVSS: (AV:N/AC:H/Au:N/C:N/I:P/A:P) Base Score: 4.0, worst case + Summary: If an attacker can figure out the precise moment that ntpq + is listening for data and the port number it is listening on or + if the attacker can provide a malicious instance ntpd that + victims will connect to then an attacker can send a set of + crafted mode 6 response packets that, if received by ntpq, + can cause ntpq to crash. + Mitigation: + Implement BCP-38. + Upgrade to 4.2.8p4, or later, from the NTP Project Download + Page or the NTP Public Services Project Download Page. + If you are unable to upgrade and you run ntpq against a server + and ntpq crashes, try again using raw mode. Build or get a + patched ntpq and see if that fixes the problem. Report new + bugs in ntpq or abusive servers appropriately. + If you use ntpq in scripts, make sure ntpq does what you expect + in your scripts. + Credit: This weakness was discovered by Yves Younan and + Aleksander Nikolich of Cisco Talos. + +* Invalid length data provided by a custom refclock driver could cause + a buffer overflow. + + References: Sec 2920 / CVE-2015-7853 / TALOS-CAN-0064 + Affects: Potentially all ntp-4 releases running up to, but not + including 4.2.8p4, and 4.3.0 up to, but not including 4.3.XX + that have custom refclocks + CVSS: (AV:L/AC:H/Au:M/C:C/I:C/A:C) Base Score: 0.0 usual case, + 5.9 unusual worst case + Summary: A negative value for the datalen parameter will overflow a + data buffer. NTF's ntpd driver implementations always set this + value to 0 and are therefore not vulnerable to this weakness. + If you are running a custom refclock driver in ntpd and that + driver supplies a negative value for datalen (no custom driver + of even minimal competence would do this) then ntpd would + overflow a data buffer. It is even hypothetically possible + in this case that instead of simply crashing ntpd the attacker + could effect a code injection attack. + Mitigation: + Upgrade to 4.2.8p4, or later, from the NTP Project Download + Page or the NTP Public Services Project Download Page. + If you are unable to upgrade: + If you are running custom refclock drivers, make sure + the signed datalen value is either zero or positive. + Monitor your ntpd instances. + Credit: This weakness was discovered by Yves Younan of Cisco Talos. + +* Password Length Memory Corruption Vulnerability + + References: Sec 2921 / CVE-2015-7854 / TALOS-CAN-0065 + Affects: All ntp-4 releases up to, but not including 4.2.8p4, and + 4.3.0 up to, but not including 4.3.XX + CVSS: (AV:N/AC:H/Au:M/C:C/I:C/A:C) Base Score: 0.0 best case, + 1.7 usual case, 6.8, worst case + Summary: If ntpd is configured to allow remote configuration, and if + the (possibly spoofed) source IP address is allowed to send + remote configuration requests, and if the attacker knows the + remote configuration password or if ntpd was (foolishly) + configured to disable authentication, then an attacker can + send a set of packets to ntpd that may cause it to crash, + with the hypothetical possibility of a small code injection. + Mitigation: + Implement BCP-38. + Upgrade to 4.2.8p4, or later, from the NTP Project Download + Page or the NTP Public Services Project Download Page. + If you are unable to upgrade, remote configuration of NTF's + ntpd requires: + an explicitly configured "trusted" key. Only configure + this if you need it. + access from a permitted IP address. You choose the IPs. + authentication. Don't disable it. Practice secure key safety. + Monitor your ntpd instances. + Credit: This weakness was discovered by Yves Younan and + Aleksander Nikolich of Cisco Talos. + +* decodenetnum() will ASSERT botch instead of returning FAIL on some + bogus values. + + References: Sec 2922 / CVE-2015-7855 + Affects: All ntp-4 releases up to, but not including 4.2.8p4, and + 4.3.0 up to, but not including 4.3.XX + CVSS: (AV:N/AC:H/Au:M/C:N/I:N/A:C) Base Score: 4.6, worst case + Summary: If ntpd is fed a crafted mode 6 or mode 7 packet containing + an unusually long data value where a network address is expected, + the decodenetnum() function will abort with an assertion failure + instead of simply returning a failure condition. + Mitigation: + Implement BCP-38. + Upgrade to 4.2.8p4, or later, from the NTP Project Download + Page or the NTP Public Services Project Download Page. + If you are unable to upgrade: + mode 7 is disabled by default. Don't enable it. + Use restrict noquery to limit who can send mode 6 + and mode 7 requests. + Configure and use the controlkey and requestkey + authentication directives to limit who can + send mode 6 and mode 7 requests. + Monitor your ntpd instances. + Credit: This weakness was discovered by John D "Doug" Birdwell of IDA.org. + +* NAK to the Future: Symmetric association authentication bypass via + crypto-NAK. + + References: Sec 2941 / CVE-2015-XXX + Affects: All ntp-4 releases between 4.2.5p186 up to but not including + 4.2.8p4, and 4.3.0 up to but not including 4.3.XX + CVSS: (AV:N/AC:L/Au:N/C:N/I:P/A:P) Base Score: 6.4 + Summary: Crypto-NAK packets can be used to cause ntpd to accept time + from unauthenticated ephemeral symmetric peers by bypassing the + authentication required to mobilize peer associations. This + vulnerability appears to have been introduced in ntp-4.2.5p186 + when the code handling mobilization of new passive symmetric + associations (lines 1103-1165) was refactored. + Mitigation: + Implement BCP-38. + Upgrade to 4.2.8p4, or later, from the NTP Project Download + Page or the NTP Public Services Project Download Page. + If you are unable to upgrade: + Apply the patch to the bottom of the "authentic" check + block around line 1136 of ntp_proto.c. + Monitor your ntpd instances. + Credit: This weakness was discovered by Stephen Gray . Backward-Incompatible changes: * [Bug 2817] Default on Linux is now "rlimit memlock -1". - While the general default of 32M is still the case, under Linux - the default value has been changed to -1 (do not lock ntpd into +While the general default of 32M is still the case, under Linux +the default value has been changed to -1 (do not lock ntpd into memory). A value of 0 means "lock ntpd into memory with whatever memory it needs." If your ntp.conf file has an explicit "rlimit memlock" value in it, that value will continue to be used. diff --git a/ntpd/invoke-ntp.conf.texi b/ntpd/invoke-ntp.conf.texi index ff87deda9..b4b2210c1 100644 --- a/ntpd/invoke-ntp.conf.texi +++ b/ntpd/invoke-ntp.conf.texi @@ -6,7 +6,7 @@ # # EDIT THIS FILE WITH CAUTION (invoke-ntp.conf.texi) # -# It has been AutoGen-ed October 6, 2015 at 06:06:51 AM by AutoGen 5.18.5 +# It has been AutoGen-ed October 17, 2015 at 06:24:27 AM by AutoGen 5.18.5 # From the definitions ntp.conf.def # and the template file agtexi-file.tpl @end ignore diff --git a/ntpd/invoke-ntp.keys.texi b/ntpd/invoke-ntp.keys.texi index 8a09ac763..7dd135a91 100644 --- a/ntpd/invoke-ntp.keys.texi +++ b/ntpd/invoke-ntp.keys.texi @@ -6,7 +6,7 @@ # # EDIT THIS FILE WITH CAUTION (invoke-ntp.keys.texi) # -# It has been AutoGen-ed October 6, 2015 at 06:06:56 AM by AutoGen 5.18.5 +# It has been AutoGen-ed October 17, 2015 at 06:24:28 AM by AutoGen 5.18.5 # From the definitions ntp.keys.def # and the template file agtexi-file.tpl @end ignore diff --git a/ntpd/invoke-ntpd.texi b/ntpd/invoke-ntpd.texi index 3f5d5acd5..014e1b071 100644 --- a/ntpd/invoke-ntpd.texi +++ b/ntpd/invoke-ntpd.texi @@ -6,7 +6,7 @@ # # EDIT THIS FILE WITH CAUTION (invoke-ntpd.texi) # -# It has been AutoGen-ed October 6, 2015 at 06:07:00 AM by AutoGen 5.18.5 +# It has been AutoGen-ed October 17, 2015 at 06:24:30 AM by AutoGen 5.18.5 # From the definitions ntpd-opts.def # and the template file agtexi-cmd.tpl @end ignore @@ -142,7 +142,7 @@ with a status code of 0. @exampleindent 0 @example -ntpd - NTP daemon program - Ver. 4.2.8p4-RC1 +ntpd - NTP daemon program - Ver. 4.2.8p4-sec-RC2 Usage: ntpd [ - [] | --[@{=| @}] ]... \ [ ... ] Flg Arg Option-Name Description diff --git a/ntpd/ntp.conf.5man b/ntpd/ntp.conf.5man index c88162010..c36b56568 100644 --- a/ntpd/ntp.conf.5man +++ b/ntpd/ntp.conf.5man @@ -10,11 +10,11 @@ .ds B-Font B .ds I-Font I .ds R-Font R -.TH ntp.conf 5man "06 Oct 2015" "4.2.8p4-RC1" "File Formats" +.TH ntp.conf 5man "17 Oct 2015" "4.2.8p4-sec-RC2" "File Formats" .\" -.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-1Va40z/ag-GWaWZz) +.\" EDIT THIS FILE WITH CAUTION (in-mem file) .\" -.\" It has been AutoGen-ed October 6, 2015 at 06:06:17 AM by AutoGen 5.18.5 +.\" It has been AutoGen-ed October 17, 2015 at 06:24:31 AM by AutoGen 5.18.5 .\" From the definitions ntp.conf.def .\" and the template file agman-cmd.tpl .SH NAME diff --git a/ntpd/ntp.conf.5mdoc b/ntpd/ntp.conf.5mdoc index 0cd5294ac..3515a3d29 100644 --- a/ntpd/ntp.conf.5mdoc +++ b/ntpd/ntp.conf.5mdoc @@ -1,9 +1,9 @@ -.Dd October 6 2015 +.Dd October 17 2015 .Dt NTP_CONF 5mdoc File Formats .Os .\" EDIT THIS FILE WITH CAUTION (ntp.mdoc) .\" -.\" It has been AutoGen-ed October 6, 2015 at 06:07:05 AM by AutoGen 5.18.5 +.\" It has been AutoGen-ed October 17, 2015 at 06:24:18 AM by AutoGen 5.18.5 .\" From the definitions ntp.conf.def .\" and the template file agmdoc-cmd.tpl .Sh NAME diff --git a/ntpd/ntp.conf.html b/ntpd/ntp.conf.html index 61cb4bff9..146d0d183 100644 --- a/ntpd/ntp.conf.html +++ b/ntpd/ntp.conf.html @@ -3,7 +3,7 @@ NTP Configuration File User's Manual - + @@ -14,18 +14,20 @@ pre.smallformat { font-family:inherit; font-size:smaller } pre.smallexample { font-size:smaller } pre.smalllisp { font-size:smaller } - span.sc { font-variant:small-caps } - span.roman { font-family: serif; font-weight: normal; } + span.sc { font-variant:small-caps } + span.roman { font-family:serif; font-weight:normal; } + span.sansserif { font-family:sans-serif; font-weight:normal; } -->

NTP Configuration File User's Manual

+

-Next: , +Next: , Previous: (dir), Up: (dir) -
+

NTP's Configuration File User Manual

@@ -33,7 +35,7 @@ Up: (dir)

This document describes the configuration file for the NTP Project's ntpd program. -

This document applies to version 4.2.8p4-RC1 of ntp.conf. +

This document applies to version 4.2.8p4-sec-RC2 of ntp.conf.

Short Contents

@@ -48,10 +50,12 @@ Up: (dir)
+ +

-Previous: Top, +Previous: Top, Up: Top -
+
@@ -61,9 +65,11 @@ Up: Top by default ntp.conf.
-

+ -
+

+ +

Notes about ntp.conf

@@ -77,7 +83,7 @@ configuration file is read at initial startup by the daemon in order to specify the synchronization sources, modes and other related information. Usually, it is installed in the -/etc +/etc directory, but could be installed elsewhere (see the daemon's @@ -88,7 +94,7 @@ command line option). unix configuration files. Comments begin with a -# +‘#’ character and extend to the end of the line; blank lines are ignored. Configuration commands consist of an initial keyword @@ -106,7 +112,7 @@ The page (available as part of the HTML documentation provided in -/usr/share/doc/ntp) +/usr/share/doc/ntp) contains an extended discussion of these options. In addition to the discussion of general Configuration Options, @@ -133,9 +139,10 @@ or manycastclient commands.
-

-
+

+ +

Configuration Support

@@ -170,7 +177,7 @@ in addition to the default support of the IPv4 address family. In a few cases, including the reslist billboard generated by ntpdc, IPv6 addresses are automatically generated. IPv6 addresses can be identified by the presence of colons -: +“:” in the address field. IPv6 addresses can be used almost everywhere where IPv4 addresses can be used, @@ -200,7 +207,7 @@ Additional information on association behavior can be found in the page (available as part of the HTML documentation provided in -/usr/share/doc/ntp). +/usr/share/doc/ntp).
pool
For type s addresses, this command mobilizes a persistent client mode association with a number of remote servers. @@ -344,7 +351,7 @@ See the page (available as part of the HTML documentation provided in -/usr/share/doc/ntp) +/usr/share/doc/ntp) for further information.
ttl ttl
This option is used only with broadcast server and manycast client modes. @@ -418,9 +425,10 @@ The default value for is 5.
-

-
+

+ +

Authentication Support

@@ -570,7 +578,7 @@ authenticate NTP packets. Keys and related information are specified in a key file, usually called -ntp.keys, +ntp.keys, which must be distributed and stored using secure means beyond the scope of the NTP protocol itself. Besides the keys used @@ -867,35 +875,35 @@ location of a file is relative to the keys directory specified in the keysdir command or default -/usr/local/etc. +/usr/local/etc. Following are the subcommands:
cert file
Specifies the location of the required host public certificate file. This overrides the link -ntpkey_cert_hostname +ntpkey_cert_hostname in the keys directory.
gqpar file
Specifies the location of the optional GQ parameters file. This overrides the link -ntpkey_gq_hostname +ntpkey_gq_hostname in the keys directory.
host file
Specifies the location of the required host key file. This overrides the link -ntpkey_key_hostname +ntpkey_key_hostname in the keys directory.
iffpar file
Specifies the location of the optional IFF parameters file.This overrides the link -ntpkey_iff_hostname +ntpkey_iff_hostname in the keys directory.
leap file
Specifies the location of the optional leapsecond file. This overrides the link -ntpkey_leap +ntpkey_leap in the keys directory.
mvpar file
Specifies the location of the optional MV parameters file. This overrides the link -ntpkey_mv_hostname +ntpkey_mv_hostname in the keys directory.
pw password
Specifies the password to decrypt files containing private keys and identity parameters. @@ -907,7 +915,7 @@ The defaults are described in the main text above.
sign file
Specifies the location of the optional sign key file. This overrides the link -ntpkey_sign_hostname +ntpkey_sign_hostname in the keys directory. If this file is not found, the host key is also the sign key. @@ -925,7 +933,7 @@ command line option.
keysdir path
This command specifies the default directory path for cryptographic keys, parameters and certificates. The default is -/usr/local/etc/. +/usr/local/etc/.
requestkey key
Specifies the key identifier to use with the ntpdc(1ntpdcmdoc) utility program, which uses a @@ -1003,9 +1011,10 @@ The certificate is missing, corrupted or bogus. The identity key is missing, corrupt or bogus.
-

-
+

+ +

Monitoring Support

@@ -1021,7 +1030,7 @@ for a listing and example of each type of statistics currently supported. Statistic files are managed using file generation sets and scripts in the -./scripts +./scripts directory of this distribution. Using these facilities and @@ -1043,8 +1052,7 @@ Each update received from a clock driver appends a line of the following form to the file generation set named clockstats: -
          
-          49213 525.624 127.127.4.1 93 226 00:08:29.606 D
+
          49213 525.624 127.127.4.1 93 226 00:08:29.606 D
      

 
           
The first two fields show the date (Modified Julian Day) and time
@@ -1064,8 +1072,7 @@ enables recording of cryptographic public key protocol information.
 Each message received by the protocol module appends a line of the
 following form to the file generation set named
 cryptostats:
-
          
-          49213 525.624 127.127.4.1 message
+
          49213 525.624 127.127.4.1 message
      

 
           
The first two fields show the date (Modified Julian Day) and time
@@ -1081,8 +1088,7 @@ Each
 update of the local clock outputs a line of the following form to
 the file generation set named
 loopstats:
-
          
-          50935 75440.031 0.000006019 13.778190 0.000351733 0.0133806
+
          50935 75440.031 0.000006019 13.778190 0.000351733 0.0133806
      

 
           
The first two fields show the date (Modified Julian Day) and
@@ -1099,8 +1105,7 @@ Each valid update appends a
 line of the following form to the current element of a file
 generation set named
 peerstats:
-
          
-          48773 10847.650 127.127.4.1 9714 -0.001605376 0.000000000 0.001424877 0.000958674
+
          48773 10847.650 127.127.4.1 9714 -0.001605376 0.000000000 0.001424877 0.000958674
      

 
           
The first two fields show the date (Modified Julian Day) and
@@ -1120,8 +1125,7 @@ Each NTP message
 received from a peer or clock driver appends a line of the
 following form to the file generation set named
 rawstats:
-
          
-          50928 2132.543 128.4.1.1 128.4.1.20 3102453281.584327000 3102453281.58622800031 02453332.540806000 3102453332.541458000
+
          50928 2132.543 128.4.1.1 128.4.1.20 3102453281.584327000 3102453281.58622800031 02453332.540806000 3102453332.541458000
      

 
           
The first two fields show the date (Modified Julian Day) and
@@ -1139,8 +1143,7 @@ Each
 hour a line of the following form is appended to the file generation
 set named
 sysstats:
-
          
-          50928 2132.543 36000 81965 0 9546 56 71793 512 540 10 147
+
          50928 2132.543 36000 81965 0 9546 56 71793 512 540 10 147
      

 
           
The first two fields show the date (Modified Julian Day) and time
@@ -1218,13 +1221,13 @@ generation can be configured using the
 option explained above. 
 
filename
This string is directly concatenated to the prefix mentioned
 above (no intervening
-/). 
+‘/’). 
 This can be modified using
 the file argument to the
 filegen
 statement. 
 No
-..
+..
 elements are
 allowed in this component to prevent filenames referring to
 parts outside the filesystem hierarchy denoted by
@@ -1246,7 +1249,7 @@ separating files belonging to different
 ntpd(1ntpdmdoc)
 server incarnations. 
 The set member filename is built by appending a
-. 
+‘.’
 to concatenated
 prefix
 and
@@ -1260,7 +1263,7 @@ A day is
 defined as the period between 00:00 and 24:00 UTC. 
 The file set
 member suffix consists of a
-. 
+‘.’
 and a day specification in
 the form
 YYYYMMdd. 
@@ -1330,9 +1333,10 @@ allows the current file to be accessed by a constant name.
           
      
 

-

 
-

+

+
+
 

 
 
Access Control Support

@@ -1354,7 +1358,7 @@ Additional information and examples can be found in the
 page
 (available as part of the HTML documentation
 provided in
-/usr/share/doc/ntp).
+/usr/share/doc/ntp).
 
   
The restriction facility was implemented in conformance
 with the access policies for the original NSFnet backbone
@@ -1574,9 +1578,10 @@ with the default entry (i.e., everything besides your own
 NTP server is unrestricted). 
 
 

-

 
-

+

+
+
 

 
 
Automatic NTP Configuration Options

@@ -1950,9 +1955,10 @@ The default is eight
 multiples of 32 starting at 31. 
 
 

-

 
-

+

+
+
 

 
 
Reference Clock Support

@@ -1966,7 +1972,7 @@ be found in the
 page
 (available as part of the HTML documentation
 provided in
-/usr/share/doc/ntp). 
+/usr/share/doc/ntp). 
 Additional information can be found in the pages linked
 there, including the
 "Debugging Hints for Reference Clock Drivers"
@@ -1975,14 +1981,14 @@ and
 pages
 (available as part of the HTML documentation
 provided in
-/usr/share/doc/ntp). 
+/usr/share/doc/ntp). 
 In addition, support for a PPS
 signal is available as described in the
 "Pulse-per-second (PPS) Signal Interfacing"
 page
 (available as part of the HTML documentation
 provided in
-/usr/share/doc/ntp). 
+/usr/share/doc/ntp). 
 Many
 drivers support special line discipline/streams modules which can
 significantly improve the accuracy using the driver. 
@@ -1992,7 +1998,7 @@ described in the
 page
 (available as part of the HTML documentation
 provided in
-/usr/share/doc/ntp).
+/usr/share/doc/ntp).
 
   
A reference clock will generally (though not always) be a radio
 timecode receiver which is synchronized to a source of standard
@@ -2058,7 +2064,7 @@ information on this option can be found in the
 "Mitigation Rules and the prefer Keyword"
 (available as part of the HTML documentation
 provided in
-/usr/share/doc/ntp)
+/usr/share/doc/ntp)
 page. 
 The
 minpoll
@@ -2128,7 +2134,7 @@ See the
 page
 (available as part of the HTML documentation
 provided in
-/usr/share/doc/ntp)
+/usr/share/doc/ntp)
 for further information. 
 
mode int
Specifies a mode number which is interpreted in a
 device-specific fashion. 
@@ -2190,7 +2196,7 @@ page and operates as described in the
 page
 (available as part of the HTML documentation
 provided in
-/usr/share/doc/ntp). 
+/usr/share/doc/ntp). 
 
time2 secs
Specifies a fixed-point decimal number in seconds, which is
 interpreted in a driver-dependent way. 
 See the descriptions of
@@ -2199,7 +2205,7 @@ specific drivers in the
 page
 (available as part of the HTML documentation
 provided in
-/usr/share/doc/ntp). 
+/usr/share/doc/ntp). 
 
stratum int
Specifies the stratum number assigned to the driver, an integer
 between 0 and 15. 
 This number overrides the default stratum number
@@ -2235,9 +2241,10 @@ command can be found in
 
      
 

-

 
-

+

+
+
 

 
 
Miscellaneous Options

@@ -2384,18 +2391,18 @@ By default, all output is turned on.
 All
 configkeyword
 keywords can be prefixed with
-=,
-+
+‘=’,
+‘+’
 and
--,
+‘-’,
 where
-=
+‘=’
 sets the
 syslog(3)
 priority mask,
-+
+‘+’
 adds and
--
+‘-’
 removes
 messages. 
 syslog(3)
@@ -2424,8 +2431,7 @@ message class may also be followed by the
 keyword to enable/disable all
 messages of the respective message class.Thus, a minimal log configuration
 could look like this:
-
     
-     logconfig =syncstatus +sysevents
+
     logconfig =syncstatus +sysevents
 

 
      
This would just list the synchronizations state of
@@ -2433,8 +2439,7 @@ could look like this:
 and the major system events. 
 For a simple reference server, the
 following minimum message configuration could be useful:
-
     
-     logconfig =syncall +clockall
+
     logconfig =syncall +clockall
 

 
      
This configuration will list all clock information and
@@ -2598,24 +2603,28 @@ This software is released under the NTP license, <http://ntp.org/license>.
 
 
 

-

+
 
-

+

+
+
 

 
 
ntp.conf Files

 
      

-
/etc/ntp.conf
the default name of the configuration file
-
ntp.keys
private MD5 keys
-
ntpkey
RSA private key
-
ntpkey_host
RSA public key
-
ntp_dh
Diffie-Hellman agreement parameters
+
/etc/ntp.conf
the default name of the configuration file
+
ntp.keys
private MD5 keys
+
ntpkey
RSA private key
+
ntpkey_host
RSA public key
+
ntp_dh
Diffie-Hellman agreement parameters
 

 

-

+
 
-

+

+
+
 

 
 
ntp.conf See Also

@@ -2629,15 +2638,17 @@ comprehensive documentation is available on the world wide web
 at
 http://www.ntp.org/. 
 A snapshot of this documentation is available in HTML format in
-/usr/share/doc/ntp. 
+/usr/share/doc/ntp. 
 

 
   


 David L. Mills, Network Time Protocol (Version 4), RFC5905
 

-

+
 
-

+

+
+
 

 
 
ntp.conf Bugs

@@ -2647,15 +2658,17 @@ ridiculous and even hilarious options and modes may not be
 detected.
 
   
The
-ntpkey_host
+ntpkey_host
 files are really digital
 certificates. 
 These should be obtained via secure directory
 services when they become universally available. 
 

-

+
 
-

+

+
+
 

 
 
ntp.conf Notes

diff --git a/ntpd/ntp.conf.man.in b/ntpd/ntp.conf.man.in
index c1a0d8fe8..dca7cbad4 100644
--- a/ntpd/ntp.conf.man.in
+++ b/ntpd/ntp.conf.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntp.conf 5 "06 Oct 2015" "4.2.8p4-RC1" "File Formats"
+.TH ntp.conf 5 "17 Oct 2015" "4.2.8p4-sec-RC2" "File Formats"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-1Va40z/ag-GWaWZz)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 06:06:17 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:24:31 AM by AutoGen 5.18.5
 .\" From the definitions ntp.conf.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/ntpd/ntp.conf.mdoc.in b/ntpd/ntp.conf.mdoc.in
index 35042a555..9159c87e8 100644
--- a/ntpd/ntp.conf.mdoc.in
+++ b/ntpd/ntp.conf.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTP_CONF 5 File Formats
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntp.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:07:05 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:24:18 AM by AutoGen 5.18.5
 .\"  From the definitions    ntp.conf.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/ntpd/ntp.keys.5man b/ntpd/ntp.keys.5man
index fca3df456..2ea6cfd2c 100644
--- a/ntpd/ntp.keys.5man
+++ b/ntpd/ntp.keys.5man
@@ -1,8 +1,8 @@
-.TH ntp.keys 5man "06 Oct 2015" "4.2.8p4-RC1" "File Formats"
+.TH ntp.keys 5man "17 Oct 2015" "4.2.8p4-sec-RC2" "File Formats"
 .\"
 .\"  EDIT THIS FILE WITH CAUTION  (ntp.man)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:06:26 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:24:33 AM by AutoGen 5.18.5
 .\"  From the definitions    ntp.keys.def
 .\"  and the template file   agman-file.tpl
 .Sh NAME
diff --git a/ntpd/ntp.keys.5mdoc b/ntpd/ntp.keys.5mdoc
index a88f4d469..bbea79446 100644
--- a/ntpd/ntp.keys.5mdoc
+++ b/ntpd/ntp.keys.5mdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTP_KEYS 5mdoc File Formats
-.Os SunOS 5.10
+.Os Linux 3.2.0-4-686-pae
 .\"  EDIT THIS FILE WITH CAUTION  (ntp.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:07:10 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:24:22 AM by AutoGen 5.18.5
 .\"  From the definitions    ntp.keys.def
 .\"  and the template file   agmdoc-file.tpl
 .Sh NAME
diff --git a/ntpd/ntp.keys.html b/ntpd/ntp.keys.html
index 97e910716..a1b7d83d8 100644
--- a/ntpd/ntp.keys.html
+++ b/ntpd/ntp.keys.html
@@ -3,7 +3,7 @@
 NTP Symmetric Key
 
 
-
+
 
 
 
@@ -14,18 +14,20 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
 
NTP Symmetric Key

 

+
 

-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-

+
 

 
 
NTP's Symmetric Key File User Manual

@@ -33,7 +35,7 @@ Up: (dir)
 
This document describes the symmetric key file for the NTP Project's
 ntpd program.
 
-  
This document applies to version 4.2.8p4-RC1 of ntp.keys.
+  
This document applies to version 4.2.8p4-sec-RC2 of ntp.keys.
 
   

 
Short Contents

@@ -48,10 +50,12 @@ Up: (dir)
 
 
 

+
+
 

-Previous: Top,
+Previous: Top,
 Up: Top
-

+
 

 
 
@@ -61,9 +65,11 @@ Up: Top
 be specified in a configuration file, by default /etc/ntp.keys.
 
 

-

+
 
-

+

+
+
 

 
 
Notes about ntp.keys

@@ -159,23 +165,27 @@ This software is released under the NTP license, <http://ntp.org/license>.
 
 
 

+
+
 

-Next: ,
+Next: ,
 Up: ntp.keys Notes
-

+
 

 
 
ntp.keys Files

 
      

-
/etc/ntp.keys
the default name of the configuration file
+
/etc/ntp.keys
the default name of the configuration file
 

 

+
+
 

-Next: ,
+Next: ,
 Previous: ntp.keys Files,
 Up: ntp.keys Notes
-

+
 

 
 
ntp.keys See Also

@@ -186,10 +196,12 @@ Up: ntp.keys Notes
 ntpdc(1ntpdcmdoc),
 sntp(1sntpmdoc)
 

+
+
 

-Previous: ntp.keys See Also,
+Previous: ntp.keys See Also,
 Up: ntp.keys Notes
-

+
 

 
 
ntp.keys Notes

diff --git a/ntpd/ntp.keys.man.in b/ntpd/ntp.keys.man.in
index b234e18dc..f8c123a91 100644
--- a/ntpd/ntp.keys.man.in
+++ b/ntpd/ntp.keys.man.in
@@ -1,8 +1,8 @@
-.TH ntp.keys 5 "06 Oct 2015" "4.2.8p4-RC1" "File Formats"
+.TH ntp.keys 5 "17 Oct 2015" "4.2.8p4-sec-RC2" "File Formats"
 .\"
 .\"  EDIT THIS FILE WITH CAUTION  (ntp.man)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:06:26 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:24:33 AM by AutoGen 5.18.5
 .\"  From the definitions    ntp.keys.def
 .\"  and the template file   agman-file.tpl
 .Sh NAME
diff --git a/ntpd/ntp.keys.mdoc.in b/ntpd/ntp.keys.mdoc.in
index 77cbb2f3d..9cf4e67fd 100644
--- a/ntpd/ntp.keys.mdoc.in
+++ b/ntpd/ntp.keys.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTP_KEYS 5 File Formats
-.Os SunOS 5.10
+.Os Linux 3.2.0-4-686-pae
 .\"  EDIT THIS FILE WITH CAUTION  (ntp.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:07:10 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:24:22 AM by AutoGen 5.18.5
 .\"  From the definitions    ntp.keys.def
 .\"  and the template file   agmdoc-file.tpl
 .Sh NAME
diff --git a/ntpd/ntpd-opts.c b/ntpd/ntpd-opts.c
index 0bfacd4a0..91421eea3 100644
--- a/ntpd/ntpd-opts.c
+++ b/ntpd/ntpd-opts.c
@@ -1,7 +1,7 @@
 /*
  *  EDIT THIS FILE WITH CAUTION  (ntpd-opts.c)
  *
- *  It has been AutoGen-ed  October  6, 2015 at 06:02:27 AM by AutoGen 5.18.5
+ *  It has been AutoGen-ed  October 17, 2015 at 06:22:57 AM by AutoGen 5.18.5
  *  From the definitions    ntpd-opts.def
  *  and the template file   options
  *
@@ -50,7 +50,7 @@ extern "C" {
 #endif
 extern FILE * option_usage_fp;
 #define zCopyright      (ntpd_opt_strs+0)
-#define zLicenseDescrip (ntpd_opt_strs+344)
+#define zLicenseDescrip (ntpd_opt_strs+348)
 
 /*
  *  global included definitions
@@ -74,15 +74,15 @@ extern FILE * option_usage_fp;
 /**
  *  static const strings for ntpd options
  */
-static char const ntpd_opt_strs[3141] =
-/*     0 */ "ntpd 4.2.8p4-RC1\n"
+static char const ntpd_opt_strs[3153] =
+/*     0 */ "ntpd 4.2.8p4-sec-RC2\n"
             "Copyright (C) 1992-2015 The University of Delaware and Network Time Foundation, all rights reserved.\n"
             "This is free software. It is licensed for use, modification and\n"
             "redistribution under the terms of the NTP License, copies of which\n"
             "can be seen at:\n"
             "  \n"
             "  \n\0"
-/*   344 */ "Permission to use, copy, modify, and distribute this software and its\n"
+/*   348 */ "Permission to use, copy, modify, and distribute this software and its\n"
             "documentation for any purpose with or without fee is hereby granted,\n"
             "provided that the above copyright notice appears in all copies and that\n"
             "both the copyright notice and this permission notice appear in supporting\n"
@@ -92,136 +92,136 @@ static char const ntpd_opt_strs[3141] =
             "Time Foundation makes no representations about the suitability this\n"
             "software for any purpose.  It is provided \"as is\" without express or\n"
             "implied warranty.\n\0"
-/*  1012 */ "Force IPv4 DNS name resolution\0"
-/*  1043 */ "IPV4\0"
-/*  1048 */ "ipv4\0"
-/*  1053 */ "Force IPv6 DNS name resolution\0"
-/*  1084 */ "IPV6\0"
-/*  1089 */ "ipv6\0"
-/*  1094 */ "Require crypto authentication\0"
-/*  1124 */ "AUTHREQ\0"
-/*  1132 */ "authreq\0"
-/*  1140 */ "Do not require crypto authentication\0"
-/*  1177 */ "AUTHNOREQ\0"
-/*  1187 */ "authnoreq\0"
-/*  1197 */ "Allow us to sync to broadcast servers\0"
-/*  1235 */ "BCASTSYNC\0"
-/*  1245 */ "bcastsync\0"
-/*  1255 */ "configuration file name\0"
-/*  1279 */ "CONFIGFILE\0"
-/*  1290 */ "configfile\0"
-/*  1301 */ "Increase debug verbosity level\0"
-/*  1332 */ "DEBUG_LEVEL\0"
-/*  1344 */ "debug-level\0"
-/*  1356 */ "Set the debug verbosity level\0"
-/*  1386 */ "SET_DEBUG_LEVEL\0"
-/*  1402 */ "set-debug-level\0"
-/*  1418 */ "frequency drift file name\0"
-/*  1444 */ "DRIFTFILE\0"
-/*  1454 */ "driftfile\0"
-/*  1464 */ "Allow the first adjustment to be Big\0"
-/*  1501 */ "PANICGATE\0"
-/*  1511 */ "panicgate\0"
-/*  1521 */ "Step any initial offset correction.\0"
-/*  1557 */ "FORCE_STEP_ONCE\0"
-/*  1573 */ "force-step-once\0"
-/*  1589 */ "Jail directory\0"
-/*  1604 */ "JAILDIR\0"
-/*  1612 */ "jaildir\0"
-/*  1620 */ "built without --enable-clockctl or --enable-linuxcaps or --enable-solarisprivs\0"
-/*  1699 */ "Listen on an interface name or address\0"
-/*  1738 */ "INTERFACE\0"
-/*  1748 */ "interface\0"
-/*  1758 */ "path to symmetric keys\0"
-/*  1781 */ "KEYFILE\0"
-/*  1789 */ "keyfile\0"
-/*  1797 */ "path to the log file\0"
-/*  1818 */ "LOGFILE\0"
-/*  1826 */ "logfile\0"
-/*  1834 */ "Do not listen to virtual interfaces\0"
-/*  1870 */ "NOVIRTUALIPS\0"
-/*  1883 */ "novirtualips\0"
-/*  1896 */ "Modify Multimedia Timer (Windows only)\0"
-/*  1935 */ "MODIFYMMTIMER\0"
-/*  1949 */ "modifymmtimer\0"
-/*  1963 */ "Do not fork\0"
-/*  1975 */ "NOFORK\0"
-/*  1982 */ "nofork\0"
-/*  1989 */ "Run at high priority\0"
-/*  2010 */ "NICE\0"
-/*  2015 */ "nice\0"
-/*  2020 */ "path to the PID file\0"
-/*  2041 */ "PIDFILE\0"
-/*  2049 */ "pidfile\0"
-/*  2057 */ "Process priority\0"
-/*  2074 */ "PRIORITY\0"
-/*  2083 */ "priority\0"
-/*  2092 */ "Set the time and quit\0"
-/*  2114 */ "QUIT\0"
-/*  2119 */ "quit\0"
-/*  2124 */ "Broadcast/propagation delay\0"
-/*  2152 */ "PROPAGATIONDELAY\0"
-/*  2169 */ "propagationdelay\0"
-/*  2186 */ "Save parsed configuration and quit\0"
-/*  2221 */ "SAVECONFIGQUIT\0"
-/*  2236 */ "saveconfigquit\0"
-/*  2251 */ "Statistics file location\0"
-/*  2276 */ "STATSDIR\0"
-/*  2285 */ "statsdir\0"
-/*  2294 */ "Trusted key number\0"
-/*  2313 */ "TRUSTEDKEY\0"
-/*  2324 */ "trustedkey\0"
-/*  2335 */ "Run as userid (or userid:groupid)\0"
-/*  2369 */ "USER\0"
-/*  2374 */ "user\0"
-/*  2379 */ "interval in seconds between scans for new or dropped interfaces\0"
-/*  2443 */ "UPDATEINTERVAL\0"
-/*  2458 */ "updateinterval\0"
-/*  2473 */ "make ARG an ntp variable (RW)\0"
-/*  2503 */ "VAR\0"
-/*  2507 */ "var\0"
-/*  2511 */ "make ARG an ntp variable (RW|DEF)\0"
-/*  2545 */ "DVAR\0"
-/*  2550 */ "dvar\0"
-/*  2555 */ "Seconds to wait for first clock sync\0"
-/*  2592 */ "WAIT_SYNC\0"
-/*  2602 */ "wait-sync\0"
-/*  2612 */ "Slew up to 600 seconds\0"
-/*  2635 */ "SLEW\0"
-/*  2640 */ "slew\0"
-/*  2645 */ "Use CPU cycle counter (Windows only)\0"
-/*  2682 */ "USEPCC\0"
-/*  2689 */ "usepcc\0"
-/*  2696 */ "Force CPU cycle counter use (Windows only)\0"
-/*  2739 */ "PCCFREQ\0"
-/*  2747 */ "pccfreq\0"
-/*  2755 */ "Register with mDNS as a NTP server\0"
-/*  2790 */ "MDNS\0"
-/*  2795 */ "mdns\0"
-/*  2800 */ "display extended usage information and exit\0"
-/*  2844 */ "help\0"
-/*  2849 */ "extended usage information passed thru pager\0"
-/*  2894 */ "more-help\0"
-/*  2904 */ "output version information and exit\0"
-/*  2940 */ "version\0"
-/*  2948 */ "NTPD\0"
-/*  2953 */ "ntpd - NTP daemon program - Ver. 4.2.8p4-RC1\n"
+/*  1016 */ "Force IPv4 DNS name resolution\0"
+/*  1047 */ "IPV4\0"
+/*  1052 */ "ipv4\0"
+/*  1057 */ "Force IPv6 DNS name resolution\0"
+/*  1088 */ "IPV6\0"
+/*  1093 */ "ipv6\0"
+/*  1098 */ "Require crypto authentication\0"
+/*  1128 */ "AUTHREQ\0"
+/*  1136 */ "authreq\0"
+/*  1144 */ "Do not require crypto authentication\0"
+/*  1181 */ "AUTHNOREQ\0"
+/*  1191 */ "authnoreq\0"
+/*  1201 */ "Allow us to sync to broadcast servers\0"
+/*  1239 */ "BCASTSYNC\0"
+/*  1249 */ "bcastsync\0"
+/*  1259 */ "configuration file name\0"
+/*  1283 */ "CONFIGFILE\0"
+/*  1294 */ "configfile\0"
+/*  1305 */ "Increase debug verbosity level\0"
+/*  1336 */ "DEBUG_LEVEL\0"
+/*  1348 */ "debug-level\0"
+/*  1360 */ "Set the debug verbosity level\0"
+/*  1390 */ "SET_DEBUG_LEVEL\0"
+/*  1406 */ "set-debug-level\0"
+/*  1422 */ "frequency drift file name\0"
+/*  1448 */ "DRIFTFILE\0"
+/*  1458 */ "driftfile\0"
+/*  1468 */ "Allow the first adjustment to be Big\0"
+/*  1505 */ "PANICGATE\0"
+/*  1515 */ "panicgate\0"
+/*  1525 */ "Step any initial offset correction.\0"
+/*  1561 */ "FORCE_STEP_ONCE\0"
+/*  1577 */ "force-step-once\0"
+/*  1593 */ "Jail directory\0"
+/*  1608 */ "JAILDIR\0"
+/*  1616 */ "jaildir\0"
+/*  1624 */ "built without --enable-clockctl or --enable-linuxcaps or --enable-solarisprivs\0"
+/*  1703 */ "Listen on an interface name or address\0"
+/*  1742 */ "INTERFACE\0"
+/*  1752 */ "interface\0"
+/*  1762 */ "path to symmetric keys\0"
+/*  1785 */ "KEYFILE\0"
+/*  1793 */ "keyfile\0"
+/*  1801 */ "path to the log file\0"
+/*  1822 */ "LOGFILE\0"
+/*  1830 */ "logfile\0"
+/*  1838 */ "Do not listen to virtual interfaces\0"
+/*  1874 */ "NOVIRTUALIPS\0"
+/*  1887 */ "novirtualips\0"
+/*  1900 */ "Modify Multimedia Timer (Windows only)\0"
+/*  1939 */ "MODIFYMMTIMER\0"
+/*  1953 */ "modifymmtimer\0"
+/*  1967 */ "Do not fork\0"
+/*  1979 */ "NOFORK\0"
+/*  1986 */ "nofork\0"
+/*  1993 */ "Run at high priority\0"
+/*  2014 */ "NICE\0"
+/*  2019 */ "nice\0"
+/*  2024 */ "path to the PID file\0"
+/*  2045 */ "PIDFILE\0"
+/*  2053 */ "pidfile\0"
+/*  2061 */ "Process priority\0"
+/*  2078 */ "PRIORITY\0"
+/*  2087 */ "priority\0"
+/*  2096 */ "Set the time and quit\0"
+/*  2118 */ "QUIT\0"
+/*  2123 */ "quit\0"
+/*  2128 */ "Broadcast/propagation delay\0"
+/*  2156 */ "PROPAGATIONDELAY\0"
+/*  2173 */ "propagationdelay\0"
+/*  2190 */ "Save parsed configuration and quit\0"
+/*  2225 */ "SAVECONFIGQUIT\0"
+/*  2240 */ "saveconfigquit\0"
+/*  2255 */ "Statistics file location\0"
+/*  2280 */ "STATSDIR\0"
+/*  2289 */ "statsdir\0"
+/*  2298 */ "Trusted key number\0"
+/*  2317 */ "TRUSTEDKEY\0"
+/*  2328 */ "trustedkey\0"
+/*  2339 */ "Run as userid (or userid:groupid)\0"
+/*  2373 */ "USER\0"
+/*  2378 */ "user\0"
+/*  2383 */ "interval in seconds between scans for new or dropped interfaces\0"
+/*  2447 */ "UPDATEINTERVAL\0"
+/*  2462 */ "updateinterval\0"
+/*  2477 */ "make ARG an ntp variable (RW)\0"
+/*  2507 */ "VAR\0"
+/*  2511 */ "var\0"
+/*  2515 */ "make ARG an ntp variable (RW|DEF)\0"
+/*  2549 */ "DVAR\0"
+/*  2554 */ "dvar\0"
+/*  2559 */ "Seconds to wait for first clock sync\0"
+/*  2596 */ "WAIT_SYNC\0"
+/*  2606 */ "wait-sync\0"
+/*  2616 */ "Slew up to 600 seconds\0"
+/*  2639 */ "SLEW\0"
+/*  2644 */ "slew\0"
+/*  2649 */ "Use CPU cycle counter (Windows only)\0"
+/*  2686 */ "USEPCC\0"
+/*  2693 */ "usepcc\0"
+/*  2700 */ "Force CPU cycle counter use (Windows only)\0"
+/*  2743 */ "PCCFREQ\0"
+/*  2751 */ "pccfreq\0"
+/*  2759 */ "Register with mDNS as a NTP server\0"
+/*  2794 */ "MDNS\0"
+/*  2799 */ "mdns\0"
+/*  2804 */ "display extended usage information and exit\0"
+/*  2848 */ "help\0"
+/*  2853 */ "extended usage information passed thru pager\0"
+/*  2898 */ "more-help\0"
+/*  2908 */ "output version information and exit\0"
+/*  2944 */ "version\0"
+/*  2952 */ "NTPD\0"
+/*  2957 */ "ntpd - NTP daemon program - Ver. 4.2.8p4-sec-RC2\n"
             "Usage:  %s [ - [] | --[{=| }] ]... \\\n"
             "\t\t[  ...  ]\n\0"
-/*  3088 */ "http://bugs.ntp.org, bugs@ntp.org\0"
-/*  3122 */ "\n\0"
-/*  3124 */ "ntpd 4.2.8p4-RC1";
+/*  3096 */ "http://bugs.ntp.org, bugs@ntp.org\0"
+/*  3130 */ "\n\0"
+/*  3132 */ "ntpd 4.2.8p4-sec-RC2";
 
 /**
  *  ipv4 option description with
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the ipv4 option */
-#define IPV4_DESC      (ntpd_opt_strs+1012)
+#define IPV4_DESC      (ntpd_opt_strs+1016)
 /** Upper-cased name for the ipv4 option */
-#define IPV4_NAME      (ntpd_opt_strs+1043)
+#define IPV4_NAME      (ntpd_opt_strs+1047)
 /** Name string for the ipv4 option */
-#define IPV4_name      (ntpd_opt_strs+1048)
+#define IPV4_name      (ntpd_opt_strs+1052)
 /** Other options that appear in conjunction with the ipv4 option */
 static int const aIpv4CantList[] = {
     INDEX_OPT_IPV6, NO_EQUIVALENT };
@@ -233,11 +233,11 @@ static int const aIpv4CantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the ipv6 option */
-#define IPV6_DESC      (ntpd_opt_strs+1053)
+#define IPV6_DESC      (ntpd_opt_strs+1057)
 /** Upper-cased name for the ipv6 option */
-#define IPV6_NAME      (ntpd_opt_strs+1084)
+#define IPV6_NAME      (ntpd_opt_strs+1088)
 /** Name string for the ipv6 option */
-#define IPV6_name      (ntpd_opt_strs+1089)
+#define IPV6_name      (ntpd_opt_strs+1093)
 /** Other options that appear in conjunction with the ipv6 option */
 static int const aIpv6CantList[] = {
     INDEX_OPT_IPV4, NO_EQUIVALENT };
@@ -249,11 +249,11 @@ static int const aIpv6CantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the authreq option */
-#define AUTHREQ_DESC      (ntpd_opt_strs+1094)
+#define AUTHREQ_DESC      (ntpd_opt_strs+1098)
 /** Upper-cased name for the authreq option */
-#define AUTHREQ_NAME      (ntpd_opt_strs+1124)
+#define AUTHREQ_NAME      (ntpd_opt_strs+1128)
 /** Name string for the authreq option */
-#define AUTHREQ_name      (ntpd_opt_strs+1132)
+#define AUTHREQ_name      (ntpd_opt_strs+1136)
 /** Other options that appear in conjunction with the authreq option */
 static int const aAuthreqCantList[] = {
     INDEX_OPT_AUTHNOREQ, NO_EQUIVALENT };
@@ -265,11 +265,11 @@ static int const aAuthreqCantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the authnoreq option */
-#define AUTHNOREQ_DESC      (ntpd_opt_strs+1140)
+#define AUTHNOREQ_DESC      (ntpd_opt_strs+1144)
 /** Upper-cased name for the authnoreq option */
-#define AUTHNOREQ_NAME      (ntpd_opt_strs+1177)
+#define AUTHNOREQ_NAME      (ntpd_opt_strs+1181)
 /** Name string for the authnoreq option */
-#define AUTHNOREQ_name      (ntpd_opt_strs+1187)
+#define AUTHNOREQ_name      (ntpd_opt_strs+1191)
 /** Other options that appear in conjunction with the authnoreq option */
 static int const aAuthnoreqCantList[] = {
     INDEX_OPT_AUTHREQ, NO_EQUIVALENT };
@@ -280,11 +280,11 @@ static int const aAuthnoreqCantList[] = {
  *  bcastsync option description:
  */
 /** Descriptive text for the bcastsync option */
-#define BCASTSYNC_DESC      (ntpd_opt_strs+1197)
+#define BCASTSYNC_DESC      (ntpd_opt_strs+1201)
 /** Upper-cased name for the bcastsync option */
-#define BCASTSYNC_NAME      (ntpd_opt_strs+1235)
+#define BCASTSYNC_NAME      (ntpd_opt_strs+1239)
 /** Name string for the bcastsync option */
-#define BCASTSYNC_name      (ntpd_opt_strs+1245)
+#define BCASTSYNC_name      (ntpd_opt_strs+1249)
 /** Compiled in flag settings for the bcastsync option */
 #define BCASTSYNC_FLAGS     (OPTST_DISABLED)
 
@@ -292,11 +292,11 @@ static int const aAuthnoreqCantList[] = {
  *  configfile option description:
  */
 /** Descriptive text for the configfile option */
-#define CONFIGFILE_DESC      (ntpd_opt_strs+1255)
+#define CONFIGFILE_DESC      (ntpd_opt_strs+1259)
 /** Upper-cased name for the configfile option */
-#define CONFIGFILE_NAME      (ntpd_opt_strs+1279)
+#define CONFIGFILE_NAME      (ntpd_opt_strs+1283)
 /** Name string for the configfile option */
-#define CONFIGFILE_name      (ntpd_opt_strs+1290)
+#define CONFIGFILE_name      (ntpd_opt_strs+1294)
 /** Compiled in flag settings for the configfile option */
 #define CONFIGFILE_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -305,11 +305,11 @@ static int const aAuthnoreqCantList[] = {
  *  debug-level option description:
  */
 /** Descriptive text for the debug-level option */
-#define DEBUG_LEVEL_DESC      (ntpd_opt_strs+1301)
+#define DEBUG_LEVEL_DESC      (ntpd_opt_strs+1305)
 /** Upper-cased name for the debug-level option */
-#define DEBUG_LEVEL_NAME      (ntpd_opt_strs+1332)
+#define DEBUG_LEVEL_NAME      (ntpd_opt_strs+1336)
 /** Name string for the debug-level option */
-#define DEBUG_LEVEL_name      (ntpd_opt_strs+1344)
+#define DEBUG_LEVEL_name      (ntpd_opt_strs+1348)
 /** Compiled in flag settings for the debug-level option */
 #define DEBUG_LEVEL_FLAGS     (OPTST_DISABLED)
 
@@ -317,11 +317,11 @@ static int const aAuthnoreqCantList[] = {
  *  set-debug-level option description:
  */
 /** Descriptive text for the set-debug-level option */
-#define SET_DEBUG_LEVEL_DESC      (ntpd_opt_strs+1356)
+#define SET_DEBUG_LEVEL_DESC      (ntpd_opt_strs+1360)
 /** Upper-cased name for the set-debug-level option */
-#define SET_DEBUG_LEVEL_NAME      (ntpd_opt_strs+1386)
+#define SET_DEBUG_LEVEL_NAME      (ntpd_opt_strs+1390)
 /** Name string for the set-debug-level option */
-#define SET_DEBUG_LEVEL_name      (ntpd_opt_strs+1402)
+#define SET_DEBUG_LEVEL_name      (ntpd_opt_strs+1406)
 /** Compiled in flag settings for the set-debug-level option */
 #define SET_DEBUG_LEVEL_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -330,11 +330,11 @@ static int const aAuthnoreqCantList[] = {
  *  driftfile option description:
  */
 /** Descriptive text for the driftfile option */
-#define DRIFTFILE_DESC      (ntpd_opt_strs+1418)
+#define DRIFTFILE_DESC      (ntpd_opt_strs+1422)
 /** Upper-cased name for the driftfile option */
-#define DRIFTFILE_NAME      (ntpd_opt_strs+1444)
+#define DRIFTFILE_NAME      (ntpd_opt_strs+1448)
 /** Name string for the driftfile option */
-#define DRIFTFILE_name      (ntpd_opt_strs+1454)
+#define DRIFTFILE_name      (ntpd_opt_strs+1458)
 /** Compiled in flag settings for the driftfile option */
 #define DRIFTFILE_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -343,11 +343,11 @@ static int const aAuthnoreqCantList[] = {
  *  panicgate option description:
  */
 /** Descriptive text for the panicgate option */
-#define PANICGATE_DESC      (ntpd_opt_strs+1464)
+#define PANICGATE_DESC      (ntpd_opt_strs+1468)
 /** Upper-cased name for the panicgate option */
-#define PANICGATE_NAME      (ntpd_opt_strs+1501)
+#define PANICGATE_NAME      (ntpd_opt_strs+1505)
 /** Name string for the panicgate option */
-#define PANICGATE_name      (ntpd_opt_strs+1511)
+#define PANICGATE_name      (ntpd_opt_strs+1515)
 /** Compiled in flag settings for the panicgate option */
 #define PANICGATE_FLAGS     (OPTST_DISABLED)
 
@@ -355,11 +355,11 @@ static int const aAuthnoreqCantList[] = {
  *  force_step_once option description:
  */
 /** Descriptive text for the force_step_once option */
-#define FORCE_STEP_ONCE_DESC      (ntpd_opt_strs+1521)
+#define FORCE_STEP_ONCE_DESC      (ntpd_opt_strs+1525)
 /** Upper-cased name for the force_step_once option */
-#define FORCE_STEP_ONCE_NAME      (ntpd_opt_strs+1557)
+#define FORCE_STEP_ONCE_NAME      (ntpd_opt_strs+1561)
 /** Name string for the force_step_once option */
-#define FORCE_STEP_ONCE_name      (ntpd_opt_strs+1573)
+#define FORCE_STEP_ONCE_name      (ntpd_opt_strs+1577)
 /** Compiled in flag settings for the force_step_once option */
 #define FORCE_STEP_ONCE_FLAGS     (OPTST_DISABLED)
 
@@ -368,11 +368,11 @@ static int const aAuthnoreqCantList[] = {
  */
 #ifdef HAVE_DROPROOT
 /** Descriptive text for the jaildir option */
-#define JAILDIR_DESC      (ntpd_opt_strs+1589)
+#define JAILDIR_DESC      (ntpd_opt_strs+1593)
 /** Upper-cased name for the jaildir option */
-#define JAILDIR_NAME      (ntpd_opt_strs+1604)
+#define JAILDIR_NAME      (ntpd_opt_strs+1608)
 /** Name string for the jaildir option */
-#define JAILDIR_name      (ntpd_opt_strs+1612)
+#define JAILDIR_name      (ntpd_opt_strs+1616)
 /** Compiled in flag settings for the jaildir option */
 #define JAILDIR_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -381,19 +381,19 @@ static int const aAuthnoreqCantList[] = {
 #define JAILDIR_FLAGS     (OPTST_OMITTED | OPTST_NO_INIT)
 #define JAILDIR_NAME      NULL
 /** Descriptive text for the jaildir option */
-#define JAILDIR_DESC      (ntpd_opt_strs+1620)
-#define JAILDIR_name      (ntpd_opt_strs+1612)
+#define JAILDIR_DESC      (ntpd_opt_strs+1624)
+#define JAILDIR_name      (ntpd_opt_strs+1616)
 #endif  /* HAVE_DROPROOT */
 
 /**
  *  interface option description:
  */
 /** Descriptive text for the interface option */
-#define INTERFACE_DESC      (ntpd_opt_strs+1699)
+#define INTERFACE_DESC      (ntpd_opt_strs+1703)
 /** Upper-cased name for the interface option */
-#define INTERFACE_NAME      (ntpd_opt_strs+1738)
+#define INTERFACE_NAME      (ntpd_opt_strs+1742)
 /** Name string for the interface option */
-#define INTERFACE_name      (ntpd_opt_strs+1748)
+#define INTERFACE_name      (ntpd_opt_strs+1752)
 /** Compiled in flag settings for the interface option */
 #define INTERFACE_FLAGS     (OPTST_DISABLED | OPTST_STACKED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -402,11 +402,11 @@ static int const aAuthnoreqCantList[] = {
  *  keyfile option description:
  */
 /** Descriptive text for the keyfile option */
-#define KEYFILE_DESC      (ntpd_opt_strs+1758)
+#define KEYFILE_DESC      (ntpd_opt_strs+1762)
 /** Upper-cased name for the keyfile option */
-#define KEYFILE_NAME      (ntpd_opt_strs+1781)
+#define KEYFILE_NAME      (ntpd_opt_strs+1785)
 /** Name string for the keyfile option */
-#define KEYFILE_name      (ntpd_opt_strs+1789)
+#define KEYFILE_name      (ntpd_opt_strs+1793)
 /** Compiled in flag settings for the keyfile option */
 #define KEYFILE_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -415,11 +415,11 @@ static int const aAuthnoreqCantList[] = {
  *  logfile option description:
  */
 /** Descriptive text for the logfile option */
-#define LOGFILE_DESC      (ntpd_opt_strs+1797)
+#define LOGFILE_DESC      (ntpd_opt_strs+1801)
 /** Upper-cased name for the logfile option */
-#define LOGFILE_NAME      (ntpd_opt_strs+1818)
+#define LOGFILE_NAME      (ntpd_opt_strs+1822)
 /** Name string for the logfile option */
-#define LOGFILE_name      (ntpd_opt_strs+1826)
+#define LOGFILE_name      (ntpd_opt_strs+1830)
 /** Compiled in flag settings for the logfile option */
 #define LOGFILE_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -428,11 +428,11 @@ static int const aAuthnoreqCantList[] = {
  *  novirtualips option description:
  */
 /** Descriptive text for the novirtualips option */
-#define NOVIRTUALIPS_DESC      (ntpd_opt_strs+1834)
+#define NOVIRTUALIPS_DESC      (ntpd_opt_strs+1838)
 /** Upper-cased name for the novirtualips option */
-#define NOVIRTUALIPS_NAME      (ntpd_opt_strs+1870)
+#define NOVIRTUALIPS_NAME      (ntpd_opt_strs+1874)
 /** Name string for the novirtualips option */
-#define NOVIRTUALIPS_name      (ntpd_opt_strs+1883)
+#define NOVIRTUALIPS_name      (ntpd_opt_strs+1887)
 /** Compiled in flag settings for the novirtualips option */
 #define NOVIRTUALIPS_FLAGS     (OPTST_DISABLED)
 
@@ -441,11 +441,11 @@ static int const aAuthnoreqCantList[] = {
  */
 #ifdef SYS_WINNT
 /** Descriptive text for the modifymmtimer option */
-#define MODIFYMMTIMER_DESC      (ntpd_opt_strs+1896)
+#define MODIFYMMTIMER_DESC      (ntpd_opt_strs+1900)
 /** Upper-cased name for the modifymmtimer option */
-#define MODIFYMMTIMER_NAME      (ntpd_opt_strs+1935)
+#define MODIFYMMTIMER_NAME      (ntpd_opt_strs+1939)
 /** Name string for the modifymmtimer option */
-#define MODIFYMMTIMER_name      (ntpd_opt_strs+1949)
+#define MODIFYMMTIMER_name      (ntpd_opt_strs+1953)
 /** Compiled in flag settings for the modifymmtimer option */
 #define MODIFYMMTIMER_FLAGS     (OPTST_DISABLED)
 
@@ -461,11 +461,11 @@ static int const aAuthnoreqCantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the nofork option */
-#define NOFORK_DESC      (ntpd_opt_strs+1963)
+#define NOFORK_DESC      (ntpd_opt_strs+1967)
 /** Upper-cased name for the nofork option */
-#define NOFORK_NAME      (ntpd_opt_strs+1975)
+#define NOFORK_NAME      (ntpd_opt_strs+1979)
 /** Name string for the nofork option */
-#define NOFORK_name      (ntpd_opt_strs+1982)
+#define NOFORK_name      (ntpd_opt_strs+1986)
 /** Other options that appear in conjunction with the nofork option */
 static int const aNoforkCantList[] = {
     INDEX_OPT_WAIT_SYNC, NO_EQUIVALENT };
@@ -476,11 +476,11 @@ static int const aNoforkCantList[] = {
  *  nice option description:
  */
 /** Descriptive text for the nice option */
-#define NICE_DESC      (ntpd_opt_strs+1989)
+#define NICE_DESC      (ntpd_opt_strs+1993)
 /** Upper-cased name for the nice option */
-#define NICE_NAME      (ntpd_opt_strs+2010)
+#define NICE_NAME      (ntpd_opt_strs+2014)
 /** Name string for the nice option */
-#define NICE_name      (ntpd_opt_strs+2015)
+#define NICE_name      (ntpd_opt_strs+2019)
 /** Compiled in flag settings for the nice option */
 #define NICE_FLAGS     (OPTST_DISABLED)
 
@@ -488,11 +488,11 @@ static int const aNoforkCantList[] = {
  *  pidfile option description:
  */
 /** Descriptive text for the pidfile option */
-#define PIDFILE_DESC      (ntpd_opt_strs+2020)
+#define PIDFILE_DESC      (ntpd_opt_strs+2024)
 /** Upper-cased name for the pidfile option */
-#define PIDFILE_NAME      (ntpd_opt_strs+2041)
+#define PIDFILE_NAME      (ntpd_opt_strs+2045)
 /** Name string for the pidfile option */
-#define PIDFILE_name      (ntpd_opt_strs+2049)
+#define PIDFILE_name      (ntpd_opt_strs+2053)
 /** Compiled in flag settings for the pidfile option */
 #define PIDFILE_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -501,11 +501,11 @@ static int const aNoforkCantList[] = {
  *  priority option description:
  */
 /** Descriptive text for the priority option */
-#define PRIORITY_DESC      (ntpd_opt_strs+2057)
+#define PRIORITY_DESC      (ntpd_opt_strs+2061)
 /** Upper-cased name for the priority option */
-#define PRIORITY_NAME      (ntpd_opt_strs+2074)
+#define PRIORITY_NAME      (ntpd_opt_strs+2078)
 /** Name string for the priority option */
-#define PRIORITY_name      (ntpd_opt_strs+2083)
+#define PRIORITY_name      (ntpd_opt_strs+2087)
 /** Compiled in flag settings for the priority option */
 #define PRIORITY_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -515,11 +515,11 @@ static int const aNoforkCantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the quit option */
-#define QUIT_DESC      (ntpd_opt_strs+2092)
+#define QUIT_DESC      (ntpd_opt_strs+2096)
 /** Upper-cased name for the quit option */
-#define QUIT_NAME      (ntpd_opt_strs+2114)
+#define QUIT_NAME      (ntpd_opt_strs+2118)
 /** Name string for the quit option */
-#define QUIT_name      (ntpd_opt_strs+2119)
+#define QUIT_name      (ntpd_opt_strs+2123)
 /** Other options that appear in conjunction with the quit option */
 static int const aQuitCantList[] = {
     INDEX_OPT_SAVECONFIGQUIT,
@@ -531,11 +531,11 @@ static int const aQuitCantList[] = {
  *  propagationdelay option description:
  */
 /** Descriptive text for the propagationdelay option */
-#define PROPAGATIONDELAY_DESC      (ntpd_opt_strs+2124)
+#define PROPAGATIONDELAY_DESC      (ntpd_opt_strs+2128)
 /** Upper-cased name for the propagationdelay option */
-#define PROPAGATIONDELAY_NAME      (ntpd_opt_strs+2152)
+#define PROPAGATIONDELAY_NAME      (ntpd_opt_strs+2156)
 /** Name string for the propagationdelay option */
-#define PROPAGATIONDELAY_name      (ntpd_opt_strs+2169)
+#define PROPAGATIONDELAY_name      (ntpd_opt_strs+2173)
 /** Compiled in flag settings for the propagationdelay option */
 #define PROPAGATIONDELAY_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -546,11 +546,11 @@ static int const aQuitCantList[] = {
  */
 #ifdef SAVECONFIG
 /** Descriptive text for the saveconfigquit option */
-#define SAVECONFIGQUIT_DESC      (ntpd_opt_strs+2186)
+#define SAVECONFIGQUIT_DESC      (ntpd_opt_strs+2190)
 /** Upper-cased name for the saveconfigquit option */
-#define SAVECONFIGQUIT_NAME      (ntpd_opt_strs+2221)
+#define SAVECONFIGQUIT_NAME      (ntpd_opt_strs+2225)
 /** Name string for the saveconfigquit option */
-#define SAVECONFIGQUIT_name      (ntpd_opt_strs+2236)
+#define SAVECONFIGQUIT_name      (ntpd_opt_strs+2240)
 /** Other options that appear in conjunction with the saveconfigquit option */
 static int const aSaveconfigquitCantList[] = {
     INDEX_OPT_QUIT,
@@ -571,11 +571,11 @@ static int const aSaveconfigquitCantList[] = {
  *  statsdir option description:
  */
 /** Descriptive text for the statsdir option */
-#define STATSDIR_DESC      (ntpd_opt_strs+2251)
+#define STATSDIR_DESC      (ntpd_opt_strs+2255)
 /** Upper-cased name for the statsdir option */
-#define STATSDIR_NAME      (ntpd_opt_strs+2276)
+#define STATSDIR_NAME      (ntpd_opt_strs+2280)
 /** Name string for the statsdir option */
-#define STATSDIR_name      (ntpd_opt_strs+2285)
+#define STATSDIR_name      (ntpd_opt_strs+2289)
 /** Compiled in flag settings for the statsdir option */
 #define STATSDIR_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -584,11 +584,11 @@ static int const aSaveconfigquitCantList[] = {
  *  trustedkey option description:
  */
 /** Descriptive text for the trustedkey option */
-#define TRUSTEDKEY_DESC      (ntpd_opt_strs+2294)
+#define TRUSTEDKEY_DESC      (ntpd_opt_strs+2298)
 /** Upper-cased name for the trustedkey option */
-#define TRUSTEDKEY_NAME      (ntpd_opt_strs+2313)
+#define TRUSTEDKEY_NAME      (ntpd_opt_strs+2317)
 /** Name string for the trustedkey option */
-#define TRUSTEDKEY_name      (ntpd_opt_strs+2324)
+#define TRUSTEDKEY_name      (ntpd_opt_strs+2328)
 /** Compiled in flag settings for the trustedkey option */
 #define TRUSTEDKEY_FLAGS     (OPTST_DISABLED | OPTST_STACKED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -598,11 +598,11 @@ static int const aSaveconfigquitCantList[] = {
  */
 #ifdef HAVE_DROPROOT
 /** Descriptive text for the user option */
-#define USER_DESC      (ntpd_opt_strs+2335)
+#define USER_DESC      (ntpd_opt_strs+2339)
 /** Upper-cased name for the user option */
-#define USER_NAME      (ntpd_opt_strs+2369)
+#define USER_NAME      (ntpd_opt_strs+2373)
 /** Name string for the user option */
-#define USER_name      (ntpd_opt_strs+2374)
+#define USER_name      (ntpd_opt_strs+2378)
 /** Compiled in flag settings for the user option */
 #define USER_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -611,19 +611,19 @@ static int const aSaveconfigquitCantList[] = {
 #define USER_FLAGS     (OPTST_OMITTED | OPTST_NO_INIT)
 #define USER_NAME      NULL
 /** Descriptive text for the user option */
-#define USER_DESC      (ntpd_opt_strs+1620)
-#define USER_name      (ntpd_opt_strs+2374)
+#define USER_DESC      (ntpd_opt_strs+1624)
+#define USER_name      (ntpd_opt_strs+2378)
 #endif  /* HAVE_DROPROOT */
 
 /**
  *  updateinterval option description:
  */
 /** Descriptive text for the updateinterval option */
-#define UPDATEINTERVAL_DESC      (ntpd_opt_strs+2379)
+#define UPDATEINTERVAL_DESC      (ntpd_opt_strs+2383)
 /** Upper-cased name for the updateinterval option */
-#define UPDATEINTERVAL_NAME      (ntpd_opt_strs+2443)
+#define UPDATEINTERVAL_NAME      (ntpd_opt_strs+2447)
 /** Name string for the updateinterval option */
-#define UPDATEINTERVAL_name      (ntpd_opt_strs+2458)
+#define UPDATEINTERVAL_name      (ntpd_opt_strs+2462)
 /** Compiled in flag settings for the updateinterval option */
 #define UPDATEINTERVAL_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -632,11 +632,11 @@ static int const aSaveconfigquitCantList[] = {
  *  var option description:
  */
 /** Descriptive text for the var option */
-#define VAR_DESC      (ntpd_opt_strs+2473)
+#define VAR_DESC      (ntpd_opt_strs+2477)
 /** Upper-cased name for the var option */
-#define VAR_NAME      (ntpd_opt_strs+2503)
+#define VAR_NAME      (ntpd_opt_strs+2507)
 /** Name string for the var option */
-#define VAR_name      (ntpd_opt_strs+2507)
+#define VAR_name      (ntpd_opt_strs+2511)
 /** Compiled in flag settings for the var option */
 #define VAR_FLAGS     (OPTST_DISABLED | OPTST_STACKED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -645,11 +645,11 @@ static int const aSaveconfigquitCantList[] = {
  *  dvar option description:
  */
 /** Descriptive text for the dvar option */
-#define DVAR_DESC      (ntpd_opt_strs+2511)
+#define DVAR_DESC      (ntpd_opt_strs+2515)
 /** Upper-cased name for the dvar option */
-#define DVAR_NAME      (ntpd_opt_strs+2545)
+#define DVAR_NAME      (ntpd_opt_strs+2549)
 /** Name string for the dvar option */
-#define DVAR_name      (ntpd_opt_strs+2550)
+#define DVAR_name      (ntpd_opt_strs+2554)
 /** Compiled in flag settings for the dvar option */
 #define DVAR_FLAGS     (OPTST_DISABLED | OPTST_STACKED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -660,11 +660,11 @@ static int const aSaveconfigquitCantList[] = {
  */
 #ifdef HAVE_WORKING_FORK
 /** Descriptive text for the wait-sync option */
-#define WAIT_SYNC_DESC      (ntpd_opt_strs+2555)
+#define WAIT_SYNC_DESC      (ntpd_opt_strs+2559)
 /** Upper-cased name for the wait-sync option */
-#define WAIT_SYNC_NAME      (ntpd_opt_strs+2592)
+#define WAIT_SYNC_NAME      (ntpd_opt_strs+2596)
 /** Name string for the wait-sync option */
-#define WAIT_SYNC_name      (ntpd_opt_strs+2602)
+#define WAIT_SYNC_name      (ntpd_opt_strs+2606)
 /** Other options that appear in conjunction with the wait-sync option */
 static int const aWait_SyncCantList[] = {
     INDEX_OPT_NOFORK,
@@ -686,11 +686,11 @@ static int const aWait_SyncCantList[] = {
  *  slew option description:
  */
 /** Descriptive text for the slew option */
-#define SLEW_DESC      (ntpd_opt_strs+2612)
+#define SLEW_DESC      (ntpd_opt_strs+2616)
 /** Upper-cased name for the slew option */
-#define SLEW_NAME      (ntpd_opt_strs+2635)
+#define SLEW_NAME      (ntpd_opt_strs+2639)
 /** Name string for the slew option */
-#define SLEW_name      (ntpd_opt_strs+2640)
+#define SLEW_name      (ntpd_opt_strs+2644)
 /** Compiled in flag settings for the slew option */
 #define SLEW_FLAGS     (OPTST_DISABLED)
 
@@ -699,11 +699,11 @@ static int const aWait_SyncCantList[] = {
  */
 #ifdef SYS_WINNT
 /** Descriptive text for the usepcc option */
-#define USEPCC_DESC      (ntpd_opt_strs+2645)
+#define USEPCC_DESC      (ntpd_opt_strs+2649)
 /** Upper-cased name for the usepcc option */
-#define USEPCC_NAME      (ntpd_opt_strs+2682)
+#define USEPCC_NAME      (ntpd_opt_strs+2686)
 /** Name string for the usepcc option */
-#define USEPCC_name      (ntpd_opt_strs+2689)
+#define USEPCC_name      (ntpd_opt_strs+2693)
 /** Compiled in flag settings for the usepcc option */
 #define USEPCC_FLAGS     (OPTST_DISABLED)
 
@@ -719,11 +719,11 @@ static int const aWait_SyncCantList[] = {
  */
 #ifdef SYS_WINNT
 /** Descriptive text for the pccfreq option */
-#define PCCFREQ_DESC      (ntpd_opt_strs+2696)
+#define PCCFREQ_DESC      (ntpd_opt_strs+2700)
 /** Upper-cased name for the pccfreq option */
-#define PCCFREQ_NAME      (ntpd_opt_strs+2739)
+#define PCCFREQ_NAME      (ntpd_opt_strs+2743)
 /** Name string for the pccfreq option */
-#define PCCFREQ_name      (ntpd_opt_strs+2747)
+#define PCCFREQ_name      (ntpd_opt_strs+2751)
 /** Compiled in flag settings for the pccfreq option */
 #define PCCFREQ_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -740,11 +740,11 @@ static int const aWait_SyncCantList[] = {
  */
 #ifdef HAVE_DNSREGISTRATION
 /** Descriptive text for the mdns option */
-#define MDNS_DESC      (ntpd_opt_strs+2755)
+#define MDNS_DESC      (ntpd_opt_strs+2759)
 /** Upper-cased name for the mdns option */
-#define MDNS_NAME      (ntpd_opt_strs+2790)
+#define MDNS_NAME      (ntpd_opt_strs+2794)
 /** Name string for the mdns option */
-#define MDNS_name      (ntpd_opt_strs+2795)
+#define MDNS_name      (ntpd_opt_strs+2799)
 /** Compiled in flag settings for the mdns option */
 #define MDNS_FLAGS     (OPTST_DISABLED)
 
@@ -758,11 +758,11 @@ static int const aWait_SyncCantList[] = {
 /*
  *  Help/More_Help/Version option descriptions:
  */
-#define HELP_DESC       (ntpd_opt_strs+2800)
-#define HELP_name       (ntpd_opt_strs+2844)
+#define HELP_DESC       (ntpd_opt_strs+2804)
+#define HELP_name       (ntpd_opt_strs+2848)
 #ifdef HAVE_WORKING_FORK
-#define MORE_HELP_DESC  (ntpd_opt_strs+2849)
-#define MORE_HELP_name  (ntpd_opt_strs+2894)
+#define MORE_HELP_DESC  (ntpd_opt_strs+2853)
+#define MORE_HELP_name  (ntpd_opt_strs+2898)
 #define MORE_HELP_FLAGS (OPTST_IMM | OPTST_NO_INIT)
 #else
 #define MORE_HELP_DESC  HELP_DESC
@@ -775,8 +775,8 @@ static int const aWait_SyncCantList[] = {
 #  define VER_FLAGS     (OPTST_SET_ARGTYPE(OPARG_TYPE_STRING) | \
                          OPTST_ARG_OPTIONAL | OPTST_IMM | OPTST_NO_INIT)
 #endif
-#define VER_DESC        (ntpd_opt_strs+2904)
-#define VER_name        (ntpd_opt_strs+2940)
+#define VER_DESC        (ntpd_opt_strs+2908)
+#define VER_name        (ntpd_opt_strs+2944)
 /**
  *  Declare option callback procedures
  */
@@ -1258,21 +1258,21 @@ static tOptDesc optDesc[OPTION_CT] = {
 
 /* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
 /** Reference to the upper cased version of ntpd. */
-#define zPROGNAME       (ntpd_opt_strs+2948)
+#define zPROGNAME       (ntpd_opt_strs+2952)
 /** Reference to the title line for ntpd usage. */
-#define zUsageTitle     (ntpd_opt_strs+2953)
+#define zUsageTitle     (ntpd_opt_strs+2957)
 /** There is no ntpd configuration file. */
 #define zRcName         NULL
 /** There are no directories to search for ntpd config files. */
 #define apzHomeList     NULL
 /** The ntpd program bug email address. */
-#define zBugsAddr       (ntpd_opt_strs+3088)
+#define zBugsAddr       (ntpd_opt_strs+3096)
 /** Clarification/explanation of what ntpd does. */
-#define zExplain        (ntpd_opt_strs+3122)
+#define zExplain        (ntpd_opt_strs+3130)
 /** Extra detail explaining what ntpd does. */
 #define zDetail         (NULL)
 /** The full version string for ntpd. */
-#define zFullVersion    (ntpd_opt_strs+3124)
+#define zFullVersion    (ntpd_opt_strs+3132)
 /* extracted from optcode.tlib near line 364 */
 
 #if defined(ENABLE_NLS)
@@ -1529,7 +1529,7 @@ static void bogus_function(void) {
      translate option names.
    */
   /* referenced via ntpdOptions.pzCopyright */
-  puts(_("ntpd 4.2.8p4-RC1\n\
+  puts(_("ntpd 4.2.8p4-sec-RC2\n\
 Copyright (C) 1992-2015 The University of Delaware and Network Time Foundation, all rights reserved.\n\
 This is free software. It is licensed for use, modification and\n\
 redistribution under the terms of the NTP License, copies of which\n\
@@ -1670,7 +1670,7 @@ implied warranty.\n"));
   puts(_("output version information and exit"));
 
   /* referenced via ntpdOptions.pzUsageTitle */
-  puts(_("ntpd - NTP daemon program - Ver. 4.2.8p4-RC1\n\
+  puts(_("ntpd - NTP daemon program - Ver. 4.2.8p4-sec-RC2\n\
 Usage:  %s [ - [] | --[{=| }] ]... \\\n\
 \t\t[  ...  ]\n"));
 
@@ -1678,7 +1678,7 @@ Usage:  %s [ - [] | --[{=| }] ]... \\\n\
   puts(_("\n"));
 
   /* referenced via ntpdOptions.pzFullVersion */
-  puts(_("ntpd 4.2.8p4-RC1"));
+  puts(_("ntpd 4.2.8p4-sec-RC2"));
 
   /* referenced via ntpdOptions.pzFullUsage */
   puts(_("<<>>"));
diff --git a/ntpd/ntpd-opts.h b/ntpd/ntpd-opts.h
index 46422497d..593f5ec51 100644
--- a/ntpd/ntpd-opts.h
+++ b/ntpd/ntpd-opts.h
@@ -1,7 +1,7 @@
 /*
  *  EDIT THIS FILE WITH CAUTION  (ntpd-opts.h)
  *
- *  It has been AutoGen-ed  October  6, 2015 at 06:02:26 AM by AutoGen 5.18.5
+ *  It has been AutoGen-ed  October 17, 2015 at 06:22:57 AM by AutoGen 5.18.5
  *  From the definitions    ntpd-opts.def
  *  and the template file   options
  *
@@ -106,9 +106,9 @@ typedef enum {
 /** count of all options for ntpd */
 #define OPTION_CT    38
 /** ntpd version */
-#define NTPD_VERSION       "4.2.8p4-RC1"
+#define NTPD_VERSION       "4.2.8p4-sec-RC2"
 /** Full ntpd version text */
-#define NTPD_FULL_VERSION  "ntpd 4.2.8p4-RC1"
+#define NTPD_FULL_VERSION  "ntpd 4.2.8p4-sec-RC2"
 
 /**
  *  Interface defines for all options.  Replace "n" with the UPPER_CASED
diff --git a/ntpd/ntpd.1ntpdman b/ntpd/ntpd.1ntpdman
index 4a1393e43..ed7907085 100644
--- a/ntpd/ntpd.1ntpdman
+++ b/ntpd/ntpd.1ntpdman
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntpd 1ntpdman "06 Oct 2015" "4.2.8p4-RC1" "User Commands"
+.TH ntpd 1ntpdman "17 Oct 2015" "4.2.8p4-sec-RC2" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-XGaqiB/ag-sHaihB)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 06:06:33 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:24:35 AM by AutoGen 5.18.5
 .\" From the definitions ntpd-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/ntpd/ntpd.1ntpdmdoc b/ntpd/ntpd.1ntpdmdoc
index 1a85795cd..5f58d8bba 100644
--- a/ntpd/ntpd.1ntpdmdoc
+++ b/ntpd/ntpd.1ntpdmdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTPD 1ntpdmdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntpd-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:07:13 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:24:24 AM by AutoGen 5.18.5
 .\"  From the definitions    ntpd-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/ntpd/ntpd.html b/ntpd/ntpd.html
index 000ba4dae..d3b757b24 100644
--- a/ntpd/ntpd.html
+++ b/ntpd/ntpd.html
@@ -3,7 +3,7 @@
 ntpd: Network Time Protocol (NTP) Daemon User's Manual
 
 
-
+
 
 
 
@@ -14,18 +14,20 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
 
ntpd: Network Time Protocol (NTP) Daemon User's Manual

 

+
 

-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-

+
 

 
 
ntpd: Network Time Protocol (NTP) Daemon User Manual

@@ -39,7 +41,7 @@ The program can operate in any of several modes, including client/server,
 symmetric and broadcast modes, and with both symmetric-key and public-key
 cryptography.
 
-  
This document applies to version 4.2.8p4-RC1 of ntpd.
+  
This document applies to version 4.2.8p4-sec-RC2 of ntpd.
 
 

 
 

-

 
-

+

+
+
 

 
 
@@ -78,9 +81,10 @@ If nothing is heard after a few minutes' time,
 the daemon times out and exits without setting the clock.
 
 

-

 
-

+

+
+
 

 
 
Invoking ntpd

@@ -161,7 +165,7 @@ using the agtexi-cmd template and the option descriptions for the <
 This software is released under the NTP license, <http://ntp.org/license>.
 
 
    
-
  • ntpd usage:                   ntpd help/usage (--help)
+
  • ntpd usage:                   ntpd help/usage (--help)
 
  • ntpd ipv4:                    ipv4 option (-4)
 
  • ntpd ipv6:                    ipv6 option (-6)
 
  • ntpd authreq:                 authreq option (-a)
@@ -201,26 +205,27 @@ This software is released under the NTP license, <http://ntp.org/license>.
 

 
 

+
 

-Next: ,
+Next: ,
 Up: ntpd Invocation
-

+
 

 
-
ntpd help/usage (--help)

+
ntpd help/usage (--help)

 
 

 This is the automatically generated usage text for ntpd.
 
   
The text printed is the same whether selected with the help option
-(--help) or the more-help option (--more-help).  more-help will print
+(--help) or the more-help option (--more-help).  more-help will print
 the usage text by passing it through a pager program. 
 more-help is disabled on platforms without a working
 fork(2) function.  The PAGER environment variable is
-used to select the program, defaulting to more.  Both will exit
+used to select the program, defaulting to more.  Both will exit
 with a status code of 0.
 
-
ntpd - NTP daemon program - Ver. 4.2.8p3
+
ntpd - NTP daemon program - Ver. 4.2.8p4-RC1
 Usage:  ntpd [ -<flag> [<val>] | --<name>[{=| }<val>] ]... \
                 [ <server1> ... <serverN> ]
   Flg Arg Option-Name    Description
@@ -291,11 +296,12 @@ The following option preset mechanisms are supported:
 Please send bug reports to:  <http://bugs.ntp.org, bugs@ntp.org>
 

   

+
 

-Next: ,
+Next: ,
 Previous: ntpd usage,
 Up: ntpd Invocation
-

+
 

 
 
ipv4 option (-4)

@@ -312,11 +318,12 @@ ipv6.
   
Force DNS resolution of following host names on the command line
 to the IPv4 namespace. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpd ipv4,
 Up: ntpd Invocation
-

+
 

 
 
ipv6 option (-6)

@@ -333,11 +340,12 @@ ipv4.
   
Force DNS resolution of following host names on the command line
 to the IPv6 namespace. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpd ipv6,
 Up: ntpd Invocation
-

+
 

 
 
authreq option (-a)

@@ -355,11 +363,12 @@ authnoreq.
 multicast client and symmetric passive associations. 
 This is the default. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpd authreq,
 Up: ntpd Invocation
-

+
 

 
 
authnoreq option (-A)

@@ -377,11 +386,12 @@ authreq.
 multicast client and symmetric passive associations. 
 This is almost never a good idea. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpd authnoreq,
 Up: ntpd Invocation
-

+
 

 
 
configfile option (-c)

@@ -390,14 +400,15 @@ Up: ntpd Invocation
 This is the “configuration file name” option. 
 This option takes a string argument. 
 The name and path of the configuration file,
-/etc/ntp.conf
+/etc/ntp.conf
 by default. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpd configfile,
 Up: ntpd Invocation
-

+
 

 
 
driftfile option (-f)

@@ -406,19 +417,20 @@ Up: ntpd Invocation
 This is the “frequency drift file name” option. 
 This option takes a string argument. 
 The name and path of the frequency file,
-/etc/ntp.drift
+/etc/ntp.drift
 by default. 
 This is the same operation as the
 driftfile driftfile
 configuration specification in the
-/etc/ntp.conf
+/etc/ntp.conf
 file. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpd driftfile,
 Up: ntpd Invocation
-

+
 

 
 
panicgate option (-g)

@@ -444,11 +456,13 @@ See the
 tinker
 configuration file directive for other options. 
 

+
+
 

-Next: ,
+Next: ,
 Previous: ntpd panicgate,
 Up: ntpd Invocation
-

+
 

 
 
force-step-once option (-G)

@@ -466,11 +480,12 @@ so this option must not be used if
 applications requiring monotonic time are running. 
 See the tinker configuration file directive for other options. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpd force-step-once,
 Up: ntpd Invocation
-

+
 

 
 
jaildir option (-i)

@@ -497,18 +512,19 @@ This option is supported under NetBSD (configure with
 --enable-clockctl) or Linux (configure with
 --enable-linuxcaps) or Solaris (configure with --enable-solarisprivs). 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpd jaildir,
 Up: ntpd Invocation
-

+
 

 
 
interface option (-I)

 
 

 This is the “listen on an interface name or address” option. 
-This option takes a string argument iface.
+This option takes a string argument iface.
 
 
This option has some usage constraints.  It:
      
    
@@ -521,11 +537,12 @@ also implies not opening other addresses, except wildcard and localhost.
 This option is deprecated. Please consider using the configuration file
 interface command, which is more versatile. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpd interface,
 Up: ntpd Invocation
-
    
+
 
    
 
 
    keyfile option (-k)
    
@@ -534,17 +551,18 @@ Up: ntpd Invocation
 This is the “path to symmetric keys” option. 
 This option takes a string argument. 
 Specify the name and path of the symmetric key file. 
-/etc/ntp.keys
+/etc/ntp.keys
 is the default. 
 This is the same operation as the
 keys keyfile
 configuration file directive. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpd keyfile,
 Up: ntpd Invocation
-
    
+
 
    
 
 
    logfile option (-l)
    
@@ -558,11 +576,12 @@ This is the same operation as the
 logfile logfile
 configuration file directive. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpd logfile,
 Up: ntpd Invocation
-
    
+
 
    
 
 
    novirtualips option (-L)
    
@@ -574,11 +593,12 @@ names containing a colon.  This option is deprecated.  Please
 consider using the configuration file interface command, which
 is more versatile. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpd novirtualips,
 Up: ntpd Invocation
-
    
+
 
    
 
 
    modifymmtimer option (-M)
    
@@ -595,11 +615,12 @@ This is the “modify multimedia timer (windows only)” option.
 ensures the resolution does not change while ntpd is running,
 avoiding timekeeping glitches associated with changes. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpd modifymmtimer,
 Up: ntpd Invocation
-
    
+
 
    
 
 
    nice option (-N)
    
@@ -610,11 +631,12 @@ To the extent permitted by the operating system, run
 ntpd
 at the highest priority. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpd nice,
 Up: ntpd Invocation
-
    
+
 
    
 
 
    pidfile option (-p)
    
@@ -629,11 +651,12 @@ This is the same operation as the
 pidfile pidfile
 configuration file directive. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpd pidfile,
 Up: ntpd Invocation
-
    
+
 
    
 
 
    priority option (-P)
    
@@ -647,11 +670,12 @@ at the specified
 sched_setscheduler(SCHED_FIFO)
 priority. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpd priority,
 Up: ntpd Invocation
-
    
+
 
    
 
 
    quit option (-q)
    
@@ -677,11 +701,12 @@ and
 options can be used with this option. 
 Note: The kernel time discipline is disabled with this option. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpd quit,
 Up: ntpd Invocation
-
    
+
 
    
 
 
    propagationdelay option (-r)
    
@@ -691,11 +716,12 @@ This is the “broadcast/propagation delay” option.
 This option takes a string argument. 
 Specify the default propagation delay from the broadcast/multicast server to this client. This is necessary only if the delay cannot be computed automatically by the protocol. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpd propagationdelay,
 Up: ntpd Invocation
-
    
+
 
    
 
 
    saveconfigquit option
    
@@ -715,11 +741,12 @@ quit, wait-sync.
 equivalent to the given filename and exit.  This option was
 designed for automated testing. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpd saveconfigquit,
 Up: ntpd Invocation
-
    
+
 
    
 
 
    statsdir option (-s)
    
@@ -732,18 +759,19 @@ This is the same operation as the
 statsdir statsdir
 configuration file directive. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpd statsdir,
 Up: ntpd Invocation
-
    
+
 
    
 
 
    trustedkey option (-t)
    
 
 
    
 This is the “trusted key number” option. 
-This option takes a string argument tkey.
+This option takes a string argument tkey.
 
 
    This option has some usage constraints.  It:
      
      
@@ -752,11 +780,12 @@ This option takes a string argument tkey.
 
   
      Add the specified key number to the trusted key list. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpd trustedkey,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      user option (-u)
      
@@ -777,11 +806,12 @@ This option is supported under NetBSD (configure with
 --enable-clockctl) or Linux (configure with
 --enable-linuxcaps) or Solaris (configure with --enable-solarisprivs). 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpd user,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      updateinterval option (-U)
      
@@ -794,11 +824,13 @@ For systems with routing socket support the scans will be performed shortly afte
 has been detected by the system. 
 Use 0 to disable scanning. 60 seconds is the minimum time between scans. 
 
      
+
+
 
      
-Next: ,
+Next: ,
 Previous: ntpd updateinterval,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      wait-sync option (-w)
      
@@ -823,11 +855,12 @@ otherwise it is ETIMEDOUT.
 This provides the option for a script starting ntpd to easily
 wait for the first set of the clock before proceeding. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpd wait-sync,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      slew option (-x)
      
@@ -848,11 +881,12 @@ See the
 configuration file directive for other options. 
 Note: The kernel time discipline is disabled with this option. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpd slew,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      usepcc option
      
@@ -870,11 +904,12 @@ The CPU counter and QueryPerformanceCounter are compared, and if
 they have the same frequency, the CPU counter (RDTSC on x86) is
 used directly, saving the overhead of a system call. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpd usepcc,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      pccfreq option
      
@@ -892,11 +927,12 @@ This option takes a string argument.
 The CPU counter (RDTSC on x86) is used unconditionally with the
 given frequency (in Hz). 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpd pccfreq,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      mdns option (-m)
      
@@ -913,11 +949,12 @@ This is the “register with mdns as a ntp server” option.
 the server to be discovered via mDNS client lookup.
 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpd mdns,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      presetting/configuring ntpd
      
@@ -939,79 +976,86 @@ detail to provide.  The default is to print just the version.  The licensing inf
 Only the first letter of the argument is examined:
 
      
      
-
      version
      Only print the version.  This is the default. 
-
      copyright
      Name the copyright usage licensing terms. 
-
      verbose
      Print the full copyright usage licensing terms. 
+
      ‘version’
      Only print the version.  This is the default. 
+
      ‘copyright’
      Name the copyright usage licensing terms. 
+
      ‘verbose’
      Print the full copyright usage licensing terms. 
 
      
 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpd config,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      ntpd exit status
      
 
 
      One of the following exit values will be returned:
      
      
-
      0 (EXIT_SUCCESS)
      Successful program execution. 
-
      1 (EXIT_FAILURE)
      The operation failed or the command syntax was not valid. 
+
      ‘0 (EXIT_SUCCESS)’
      Successful program execution. 
+
      ‘1 (EXIT_FAILURE)’
      The operation failed or the command syntax was not valid. 
 
      
   
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpd exit status,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      ntpd Usage
      
 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpd Usage,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      ntpd Files
      
 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpd Files,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      ntpd See Also
      
 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpd See Also,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      ntpd Bugs
      
 
 
      
+
 
      
-Previous: ntpd Bugs,
+Previous: ntpd Bugs,
 Up: ntpd Invocation
-
      
+
 
      
 
 
      ntpd Notes
      
 
 
      
-
      
 
-
      
+
      
+
+
 
      
 
 
diff --git a/ntpd/ntpd.man.in b/ntpd/ntpd.man.in
index 5b758e4cf..9a9053dbf 100644
--- a/ntpd/ntpd.man.in
+++ b/ntpd/ntpd.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntpd @NTPD_MS@ "06 Oct 2015" "4.2.8p4-RC1" "User Commands"
+.TH ntpd @NTPD_MS@ "17 Oct 2015" "4.2.8p4-sec-RC2" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-XGaqiB/ag-sHaihB)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 06:06:33 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:24:35 AM by AutoGen 5.18.5
 .\" From the definitions ntpd-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/ntpd/ntpd.mdoc.in b/ntpd/ntpd.mdoc.in
index 62a27b59c..72e74bed2 100644
--- a/ntpd/ntpd.mdoc.in
+++ b/ntpd/ntpd.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTPD @NTPD_MS@ User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntpd-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:07:13 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:24:24 AM by AutoGen 5.18.5
 .\"  From the definitions    ntpd-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/ntpdc/invoke-ntpdc.texi b/ntpdc/invoke-ntpdc.texi
index bea6f44fe..b050be927 100644
--- a/ntpdc/invoke-ntpdc.texi
+++ b/ntpdc/invoke-ntpdc.texi
@@ -6,7 +6,7 @@
 #
 # EDIT THIS FILE WITH CAUTION  (invoke-ntpdc.texi)
 #
-# It has been AutoGen-ed  October  6, 2015 at 06:07:53 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:24:54 AM by AutoGen 5.18.5
 # From the definitions    ntpdc-opts.def
 # and the template file   agtexi-cmd.tpl
 @end ignore
@@ -76,7 +76,7 @@ with a status code of 0.
 
 @exampleindent 0
 @example
-ntpdc - vendor-specific NTPD control program - Ver. 4.2.8p4-RC1
+ntpdc - vendor-specific NTPD control program - Ver. 4.2.8p4-sec-RC2
 Usage:  ntpdc [ - [] | --[@{=| @}] ]... [ host ...]
   Flg Arg Option-Name    Description
    -4 no  ipv4           Force IPv4 DNS name resolution
diff --git a/ntpdc/ntpdc-opts.c b/ntpdc/ntpdc-opts.c
index b219e79b9..ec1435647 100644
--- a/ntpdc/ntpdc-opts.c
+++ b/ntpdc/ntpdc-opts.c
@@ -1,7 +1,7 @@
 /*
  *  EDIT THIS FILE WITH CAUTION  (ntpdc-opts.c)
  *
- *  It has been AutoGen-ed  October  6, 2015 at 06:07:31 AM by AutoGen 5.18.5
+ *  It has been AutoGen-ed  October 17, 2015 at 06:24:41 AM by AutoGen 5.18.5
  *  From the definitions    ntpdc-opts.def
  *  and the template file   options
  *
@@ -50,7 +50,7 @@ extern "C" {
 #endif
 extern FILE * option_usage_fp;
 #define zCopyright      (ntpdc_opt_strs+0)
-#define zLicenseDescrip (ntpdc_opt_strs+345)
+#define zLicenseDescrip (ntpdc_opt_strs+349)
 
 /*
  *  global included definitions
@@ -68,15 +68,15 @@ extern FILE * option_usage_fp;
 /**
  *  static const strings for ntpdc options
  */
-static char const ntpdc_opt_strs[1923] =
-/*     0 */ "ntpdc 4.2.8p4-RC1\n"
+static char const ntpdc_opt_strs[1935] =
+/*     0 */ "ntpdc 4.2.8p4-sec-RC2\n"
             "Copyright (C) 1992-2015 The University of Delaware and Network Time Foundation, all rights reserved.\n"
             "This is free software. It is licensed for use, modification and\n"
             "redistribution under the terms of the NTP License, copies of which\n"
             "can be seen at:\n"
             "  \n"
             "  \n\0"
-/*   345 */ "Permission to use, copy, modify, and distribute this software and its\n"
+/*   349 */ "Permission to use, copy, modify, and distribute this software and its\n"
             "documentation for any purpose with or without fee is hereby granted,\n"
             "provided that the above copyright notice appears in all copies and that\n"
             "both the copyright notice and this permission notice appear in supporting\n"
@@ -86,67 +86,67 @@ static char const ntpdc_opt_strs[1923] =
             "Time Foundation makes no representations about the suitability this\n"
             "software for any purpose.  It is provided \"as is\" without express or\n"
             "implied warranty.\n\0"
-/*  1013 */ "Force IPv4 DNS name resolution\0"
-/*  1044 */ "IPV4\0"
-/*  1049 */ "ipv4\0"
-/*  1054 */ "Force IPv6 DNS name resolution\0"
-/*  1085 */ "IPV6\0"
-/*  1090 */ "ipv6\0"
-/*  1095 */ "run a command and exit\0"
-/*  1118 */ "COMMAND\0"
-/*  1126 */ "command\0"
-/*  1134 */ "Increase debug verbosity level\0"
-/*  1165 */ "DEBUG_LEVEL\0"
-/*  1177 */ "debug-level\0"
-/*  1189 */ "Set the debug verbosity level\0"
-/*  1219 */ "SET_DEBUG_LEVEL\0"
-/*  1235 */ "set-debug-level\0"
-/*  1251 */ "Force ntpq to operate in interactive mode\0"
-/*  1293 */ "INTERACTIVE\0"
-/*  1305 */ "interactive\0"
-/*  1317 */ "Print a list of the peers\0"
-/*  1343 */ "LISTPEERS\0"
-/*  1353 */ "listpeers\0"
-/*  1363 */ "numeric host addresses\0"
-/*  1386 */ "NUMERIC\0"
-/*  1394 */ "numeric\0"
-/*  1402 */ "PEERS\0"
-/*  1408 */ "peers\0"
-/*  1414 */ "Show a list of the peers\0"
-/*  1439 */ "SHOWPEERS\0"
-/*  1449 */ "showpeers\0"
-/*  1459 */ "display extended usage information and exit\0"
-/*  1503 */ "help\0"
-/*  1508 */ "extended usage information passed thru pager\0"
-/*  1553 */ "more-help\0"
-/*  1563 */ "output version information and exit\0"
-/*  1599 */ "version\0"
-/*  1607 */ "save the option state to a config file\0"
-/*  1646 */ "save-opts\0"
-/*  1656 */ "load options from a config file\0"
-/*  1688 */ "LOAD_OPTS\0"
-/*  1698 */ "no-load-opts\0"
-/*  1711 */ "no\0"
-/*  1714 */ "NTPDC\0"
-/*  1720 */ "ntpdc - vendor-specific NTPD control program - Ver. 4.2.8p4-RC1\n"
+/*  1017 */ "Force IPv4 DNS name resolution\0"
+/*  1048 */ "IPV4\0"
+/*  1053 */ "ipv4\0"
+/*  1058 */ "Force IPv6 DNS name resolution\0"
+/*  1089 */ "IPV6\0"
+/*  1094 */ "ipv6\0"
+/*  1099 */ "run a command and exit\0"
+/*  1122 */ "COMMAND\0"
+/*  1130 */ "command\0"
+/*  1138 */ "Increase debug verbosity level\0"
+/*  1169 */ "DEBUG_LEVEL\0"
+/*  1181 */ "debug-level\0"
+/*  1193 */ "Set the debug verbosity level\0"
+/*  1223 */ "SET_DEBUG_LEVEL\0"
+/*  1239 */ "set-debug-level\0"
+/*  1255 */ "Force ntpq to operate in interactive mode\0"
+/*  1297 */ "INTERACTIVE\0"
+/*  1309 */ "interactive\0"
+/*  1321 */ "Print a list of the peers\0"
+/*  1347 */ "LISTPEERS\0"
+/*  1357 */ "listpeers\0"
+/*  1367 */ "numeric host addresses\0"
+/*  1390 */ "NUMERIC\0"
+/*  1398 */ "numeric\0"
+/*  1406 */ "PEERS\0"
+/*  1412 */ "peers\0"
+/*  1418 */ "Show a list of the peers\0"
+/*  1443 */ "SHOWPEERS\0"
+/*  1453 */ "showpeers\0"
+/*  1463 */ "display extended usage information and exit\0"
+/*  1507 */ "help\0"
+/*  1512 */ "extended usage information passed thru pager\0"
+/*  1557 */ "more-help\0"
+/*  1567 */ "output version information and exit\0"
+/*  1603 */ "version\0"
+/*  1611 */ "save the option state to a config file\0"
+/*  1650 */ "save-opts\0"
+/*  1660 */ "load options from a config file\0"
+/*  1692 */ "LOAD_OPTS\0"
+/*  1702 */ "no-load-opts\0"
+/*  1715 */ "no\0"
+/*  1718 */ "NTPDC\0"
+/*  1724 */ "ntpdc - vendor-specific NTPD control program - Ver. 4.2.8p4-sec-RC2\n"
             "Usage:  %s [ - [] | --[{=| }] ]... [ host ...]\n\0"
-/*  1854 */ "$HOME\0"
-/*  1860 */ ".\0"
-/*  1862 */ ".ntprc\0"
-/*  1869 */ "http://bugs.ntp.org, bugs@ntp.org\0"
-/*  1903 */ "\n\0"
-/*  1905 */ "ntpdc 4.2.8p4-RC1";
+/*  1862 */ "$HOME\0"
+/*  1868 */ ".\0"
+/*  1870 */ ".ntprc\0"
+/*  1877 */ "http://bugs.ntp.org, bugs@ntp.org\0"
+/*  1911 */ "\n\0"
+/*  1913 */ "ntpdc 4.2.8p4-sec-RC2";
 
 /**
  *  ipv4 option description with
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the ipv4 option */
-#define IPV4_DESC      (ntpdc_opt_strs+1013)
+#define IPV4_DESC      (ntpdc_opt_strs+1017)
 /** Upper-cased name for the ipv4 option */
-#define IPV4_NAME      (ntpdc_opt_strs+1044)
+#define IPV4_NAME      (ntpdc_opt_strs+1048)
 /** Name string for the ipv4 option */
-#define IPV4_name      (ntpdc_opt_strs+1049)
+#define IPV4_name      (ntpdc_opt_strs+1053)
 /** Other options that appear in conjunction with the ipv4 option */
 static int const aIpv4CantList[] = {
     INDEX_OPT_IPV6, NO_EQUIVALENT };
@@ -158,11 +158,11 @@ static int const aIpv4CantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the ipv6 option */
-#define IPV6_DESC      (ntpdc_opt_strs+1054)
+#define IPV6_DESC      (ntpdc_opt_strs+1058)
 /** Upper-cased name for the ipv6 option */
-#define IPV6_NAME      (ntpdc_opt_strs+1085)
+#define IPV6_NAME      (ntpdc_opt_strs+1089)
 /** Name string for the ipv6 option */
-#define IPV6_name      (ntpdc_opt_strs+1090)
+#define IPV6_name      (ntpdc_opt_strs+1094)
 /** Other options that appear in conjunction with the ipv6 option */
 static int const aIpv6CantList[] = {
     INDEX_OPT_IPV4, NO_EQUIVALENT };
@@ -173,11 +173,11 @@ static int const aIpv6CantList[] = {
  *  command option description:
  */
 /** Descriptive text for the command option */
-#define COMMAND_DESC      (ntpdc_opt_strs+1095)
+#define COMMAND_DESC      (ntpdc_opt_strs+1099)
 /** Upper-cased name for the command option */
-#define COMMAND_NAME      (ntpdc_opt_strs+1118)
+#define COMMAND_NAME      (ntpdc_opt_strs+1122)
 /** Name string for the command option */
-#define COMMAND_name      (ntpdc_opt_strs+1126)
+#define COMMAND_name      (ntpdc_opt_strs+1130)
 /** Compiled in flag settings for the command option */
 #define COMMAND_FLAGS     (OPTST_DISABLED | OPTST_STACKED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -186,11 +186,11 @@ static int const aIpv6CantList[] = {
  *  debug-level option description:
  */
 /** Descriptive text for the debug-level option */
-#define DEBUG_LEVEL_DESC      (ntpdc_opt_strs+1134)
+#define DEBUG_LEVEL_DESC      (ntpdc_opt_strs+1138)
 /** Upper-cased name for the debug-level option */
-#define DEBUG_LEVEL_NAME      (ntpdc_opt_strs+1165)
+#define DEBUG_LEVEL_NAME      (ntpdc_opt_strs+1169)
 /** Name string for the debug-level option */
-#define DEBUG_LEVEL_name      (ntpdc_opt_strs+1177)
+#define DEBUG_LEVEL_name      (ntpdc_opt_strs+1181)
 /** Compiled in flag settings for the debug-level option */
 #define DEBUG_LEVEL_FLAGS     (OPTST_DISABLED)
 
@@ -198,11 +198,11 @@ static int const aIpv6CantList[] = {
  *  set-debug-level option description:
  */
 /** Descriptive text for the set-debug-level option */
-#define SET_DEBUG_LEVEL_DESC      (ntpdc_opt_strs+1189)
+#define SET_DEBUG_LEVEL_DESC      (ntpdc_opt_strs+1193)
 /** Upper-cased name for the set-debug-level option */
-#define SET_DEBUG_LEVEL_NAME      (ntpdc_opt_strs+1219)
+#define SET_DEBUG_LEVEL_NAME      (ntpdc_opt_strs+1223)
 /** Name string for the set-debug-level option */
-#define SET_DEBUG_LEVEL_name      (ntpdc_opt_strs+1235)
+#define SET_DEBUG_LEVEL_name      (ntpdc_opt_strs+1239)
 /** Compiled in flag settings for the set-debug-level option */
 #define SET_DEBUG_LEVEL_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -212,11 +212,11 @@ static int const aIpv6CantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the interactive option */
-#define INTERACTIVE_DESC      (ntpdc_opt_strs+1251)
+#define INTERACTIVE_DESC      (ntpdc_opt_strs+1255)
 /** Upper-cased name for the interactive option */
-#define INTERACTIVE_NAME      (ntpdc_opt_strs+1293)
+#define INTERACTIVE_NAME      (ntpdc_opt_strs+1297)
 /** Name string for the interactive option */
-#define INTERACTIVE_name      (ntpdc_opt_strs+1305)
+#define INTERACTIVE_name      (ntpdc_opt_strs+1309)
 /** Other options that appear in conjunction with the interactive option */
 static int const aInteractiveCantList[] = {
     INDEX_OPT_COMMAND,
@@ -231,11 +231,11 @@ static int const aInteractiveCantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the listpeers option */
-#define LISTPEERS_DESC      (ntpdc_opt_strs+1317)
+#define LISTPEERS_DESC      (ntpdc_opt_strs+1321)
 /** Upper-cased name for the listpeers option */
-#define LISTPEERS_NAME      (ntpdc_opt_strs+1343)
+#define LISTPEERS_NAME      (ntpdc_opt_strs+1347)
 /** Name string for the listpeers option */
-#define LISTPEERS_name      (ntpdc_opt_strs+1353)
+#define LISTPEERS_name      (ntpdc_opt_strs+1357)
 /** Other options that appear in conjunction with the listpeers option */
 static int const aListpeersCantList[] = {
     INDEX_OPT_COMMAND, NO_EQUIVALENT };
@@ -246,11 +246,11 @@ static int const aListpeersCantList[] = {
  *  numeric option description:
  */
 /** Descriptive text for the numeric option */
-#define NUMERIC_DESC      (ntpdc_opt_strs+1363)
+#define NUMERIC_DESC      (ntpdc_opt_strs+1367)
 /** Upper-cased name for the numeric option */
-#define NUMERIC_NAME      (ntpdc_opt_strs+1386)
+#define NUMERIC_NAME      (ntpdc_opt_strs+1390)
 /** Name string for the numeric option */
-#define NUMERIC_name      (ntpdc_opt_strs+1394)
+#define NUMERIC_name      (ntpdc_opt_strs+1398)
 /** Compiled in flag settings for the numeric option */
 #define NUMERIC_FLAGS     (OPTST_DISABLED)
 
@@ -259,11 +259,11 @@ static int const aListpeersCantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the peers option */
-#define PEERS_DESC      (ntpdc_opt_strs+1317)
+#define PEERS_DESC      (ntpdc_opt_strs+1321)
 /** Upper-cased name for the peers option */
-#define PEERS_NAME      (ntpdc_opt_strs+1402)
+#define PEERS_NAME      (ntpdc_opt_strs+1406)
 /** Name string for the peers option */
-#define PEERS_name      (ntpdc_opt_strs+1408)
+#define PEERS_name      (ntpdc_opt_strs+1412)
 /** Other options that appear in conjunction with the peers option */
 static int const aPeersCantList[] = {
     INDEX_OPT_COMMAND, NO_EQUIVALENT };
@@ -275,11 +275,11 @@ static int const aPeersCantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the showpeers option */
-#define SHOWPEERS_DESC      (ntpdc_opt_strs+1414)
+#define SHOWPEERS_DESC      (ntpdc_opt_strs+1418)
 /** Upper-cased name for the showpeers option */
-#define SHOWPEERS_NAME      (ntpdc_opt_strs+1439)
+#define SHOWPEERS_NAME      (ntpdc_opt_strs+1443)
 /** Name string for the showpeers option */
-#define SHOWPEERS_name      (ntpdc_opt_strs+1449)
+#define SHOWPEERS_name      (ntpdc_opt_strs+1453)
 /** Other options that appear in conjunction with the showpeers option */
 static int const aShowpeersCantList[] = {
     INDEX_OPT_COMMAND, NO_EQUIVALENT };
@@ -289,11 +289,11 @@ static int const aShowpeersCantList[] = {
 /*
  *  Help/More_Help/Version option descriptions:
  */
-#define HELP_DESC       (ntpdc_opt_strs+1459)
-#define HELP_name       (ntpdc_opt_strs+1503)
+#define HELP_DESC       (ntpdc_opt_strs+1463)
+#define HELP_name       (ntpdc_opt_strs+1507)
 #ifdef HAVE_WORKING_FORK
-#define MORE_HELP_DESC  (ntpdc_opt_strs+1508)
-#define MORE_HELP_name  (ntpdc_opt_strs+1553)
+#define MORE_HELP_DESC  (ntpdc_opt_strs+1512)
+#define MORE_HELP_name  (ntpdc_opt_strs+1557)
 #define MORE_HELP_FLAGS (OPTST_IMM | OPTST_NO_INIT)
 #else
 #define MORE_HELP_DESC  HELP_DESC
@@ -306,14 +306,14 @@ static int const aShowpeersCantList[] = {
 #  define VER_FLAGS     (OPTST_SET_ARGTYPE(OPARG_TYPE_STRING) | \
                          OPTST_ARG_OPTIONAL | OPTST_IMM | OPTST_NO_INIT)
 #endif
-#define VER_DESC        (ntpdc_opt_strs+1563)
-#define VER_name        (ntpdc_opt_strs+1599)
-#define SAVE_OPTS_DESC  (ntpdc_opt_strs+1607)
-#define SAVE_OPTS_name  (ntpdc_opt_strs+1646)
-#define LOAD_OPTS_DESC     (ntpdc_opt_strs+1656)
-#define LOAD_OPTS_NAME     (ntpdc_opt_strs+1688)
-#define NO_LOAD_OPTS_name  (ntpdc_opt_strs+1698)
-#define LOAD_OPTS_pfx      (ntpdc_opt_strs+1711)
+#define VER_DESC        (ntpdc_opt_strs+1567)
+#define VER_name        (ntpdc_opt_strs+1603)
+#define SAVE_OPTS_DESC  (ntpdc_opt_strs+1611)
+#define SAVE_OPTS_name  (ntpdc_opt_strs+1650)
+#define LOAD_OPTS_DESC     (ntpdc_opt_strs+1660)
+#define LOAD_OPTS_NAME     (ntpdc_opt_strs+1692)
+#define NO_LOAD_OPTS_name  (ntpdc_opt_strs+1702)
+#define LOAD_OPTS_pfx      (ntpdc_opt_strs+1715)
 #define LOAD_OPTS_name     (NO_LOAD_OPTS_name + 3)
 /**
  *  Declare option callback procedures
@@ -522,24 +522,24 @@ static tOptDesc optDesc[OPTION_CT] = {
 
 /* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
 /** Reference to the upper cased version of ntpdc. */
-#define zPROGNAME       (ntpdc_opt_strs+1714)
+#define zPROGNAME       (ntpdc_opt_strs+1718)
 /** Reference to the title line for ntpdc usage. */
-#define zUsageTitle     (ntpdc_opt_strs+1720)
+#define zUsageTitle     (ntpdc_opt_strs+1724)
 /** ntpdc configuration file name. */
-#define zRcName         (ntpdc_opt_strs+1862)
+#define zRcName         (ntpdc_opt_strs+1870)
 /** Directories to search for ntpdc config files. */
 static char const * const apzHomeList[3] = {
-    ntpdc_opt_strs+1854,
-    ntpdc_opt_strs+1860,
+    ntpdc_opt_strs+1862,
+    ntpdc_opt_strs+1868,
     NULL };
 /** The ntpdc program bug email address. */
-#define zBugsAddr       (ntpdc_opt_strs+1869)
+#define zBugsAddr       (ntpdc_opt_strs+1877)
 /** Clarification/explanation of what ntpdc does. */
-#define zExplain        (ntpdc_opt_strs+1903)
+#define zExplain        (ntpdc_opt_strs+1911)
 /** Extra detail explaining what ntpdc does. */
 #define zDetail         (NULL)
 /** The full version string for ntpdc. */
-#define zFullVersion    (ntpdc_opt_strs+1905)
+#define zFullVersion    (ntpdc_opt_strs+1913)
 /* extracted from optcode.tlib near line 364 */
 
 #if defined(ENABLE_NLS)
@@ -796,7 +796,7 @@ static void bogus_function(void) {
      translate option names.
    */
   /* referenced via ntpdcOptions.pzCopyright */
-  puts(_("ntpdc 4.2.8p4-RC1\n\
+  puts(_("ntpdc 4.2.8p4-sec-RC2\n\
 Copyright (C) 1992-2015 The University of Delaware and Network Time Foundation, all rights reserved.\n\
 This is free software. It is licensed for use, modification and\n\
 redistribution under the terms of the NTP License, copies of which\n\
@@ -862,14 +862,14 @@ implied warranty.\n"));
   puts(_("load options from a config file"));
 
   /* referenced via ntpdcOptions.pzUsageTitle */
-  puts(_("ntpdc - vendor-specific NTPD control program - Ver. 4.2.8p4-RC1\n\
+  puts(_("ntpdc - vendor-specific NTPD control program - Ver. 4.2.8p4-sec-RC2\n\
 Usage:  %s [ - [] | --[{=| }] ]... [ host ...]\n"));
 
   /* referenced via ntpdcOptions.pzExplain */
   puts(_("\n"));
 
   /* referenced via ntpdcOptions.pzFullVersion */
-  puts(_("ntpdc 4.2.8p4-RC1"));
+  puts(_("ntpdc 4.2.8p4-sec-RC2"));
 
   /* referenced via ntpdcOptions.pzFullUsage */
   puts(_("<<>>"));
diff --git a/ntpdc/ntpdc-opts.h b/ntpdc/ntpdc-opts.h
index 91d36ce68..2ca476c25 100644
--- a/ntpdc/ntpdc-opts.h
+++ b/ntpdc/ntpdc-opts.h
@@ -1,7 +1,7 @@
 /*
  *  EDIT THIS FILE WITH CAUTION  (ntpdc-opts.h)
  *
- *  It has been AutoGen-ed  October  6, 2015 at 06:07:30 AM by AutoGen 5.18.5
+ *  It has been AutoGen-ed  October 17, 2015 at 06:24:41 AM by AutoGen 5.18.5
  *  From the definitions    ntpdc-opts.def
  *  and the template file   options
  *
@@ -83,9 +83,9 @@ typedef enum {
 /** count of all options for ntpdc */
 #define OPTION_CT    15
 /** ntpdc version */
-#define NTPDC_VERSION       "4.2.8p4-RC1"
+#define NTPDC_VERSION       "4.2.8p4-sec-RC2"
 /** Full ntpdc version text */
-#define NTPDC_FULL_VERSION  "ntpdc 4.2.8p4-RC1"
+#define NTPDC_FULL_VERSION  "ntpdc 4.2.8p4-sec-RC2"
 
 /**
  *  Interface defines for all options.  Replace "n" with the UPPER_CASED
diff --git a/ntpdc/ntpdc.1ntpdcman b/ntpdc/ntpdc.1ntpdcman
index 6ff96f0c5..b15c7af66 100644
--- a/ntpdc/ntpdc.1ntpdcman
+++ b/ntpdc/ntpdc.1ntpdcman
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntpdc 1ntpdcman "06 Oct 2015" "4.2.8p4-RC1" "User Commands"
+.TH ntpdc 1ntpdcman "17 Oct 2015" "4.2.8p4-sec-RC2" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-aTai.C/ag-qTaa9C)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 06:07:47 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:24:55 AM by AutoGen 5.18.5
 .\" From the definitions ntpdc-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/ntpdc/ntpdc.1ntpdcmdoc b/ntpdc/ntpdc.1ntpdcmdoc
index 0f89565f1..40e7ff6fe 100644
--- a/ntpdc/ntpdc.1ntpdcmdoc
+++ b/ntpdc/ntpdc.1ntpdcmdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTPDC 1ntpdcmdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntpdc-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:07:57 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:24:51 AM by AutoGen 5.18.5
 .\"  From the definitions    ntpdc-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/ntpdc/ntpdc.html b/ntpdc/ntpdc.html
index 6bc000c42..d7957f364 100644
--- a/ntpdc/ntpdc.html
+++ b/ntpdc/ntpdc.html
@@ -3,7 +3,7 @@
 ntpdc: NTPD Control User's Manual
 
 
-
+
 
 
 
@@ -14,18 +14,20 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
 
      ntpdc: NTPD Control User's Manual
      
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-
      
+
 
      
 
 
      ntpdc: NTPD Control User Manual
      
@@ -36,7 +38,7 @@ display the time offset of the system clock relative to the server
 clock.  Run as root, it can correct the system clock to this offset as
 well.  It can be run as an interactive command or from a cron job.
 
-  
      This document applies to version 4.2.8p4-RC1 of ntpdc.
+  
      This document applies to version 4.2.8p4-sec-RC2 of ntpdc.
 
   
      The program implements the SNTP protocol as defined by RFC 5905, the NTPv4
 IETF specification.
@@ -55,9 +57,10 @@ IETF specification.
 
    
 
 
    
-
    
 
-
    
+
    
+
+
 
    
 
 
@@ -76,9 +79,10 @@ the +4.567 +/- 0.089 secs indicates the time offset and
 error bound of the system clock relative to the server clock.
 
 
    
-
    
 
-
    
+
    
+
+
 
    
 
 
    Invoking ntpdc
    
@@ -115,7 +119,7 @@ using the agtexi-cmd template and the option descriptions for the <
 This software is released under the NTP license, <http://ntp.org/license>.
 
 
 
 
    
+
 
    
-Next: ,
+Next: ,
 Up: ntpdc Invocation
-
    
+
 
    
 
-
    ntpdc help/usage (--help)
    
+
    ntpdc help/usage (--help)
    
 
 
    
 This is the automatically generated usage text for ntpdc.
 
   
    The text printed is the same whether selected with the help option
-(--help) or the more-help option (--more-help).  more-help will print
+(--help) or the more-help option (--more-help).  more-help will print
 the usage text by passing it through a pager program. 
 more-help is disabled on platforms without a working
 fork(2) function.  The PAGER environment variable is
-used to select the program, defaulting to more.  Both will exit
+used to select the program, defaulting to more.  Both will exit
 with a status code of 0.
 
-
    ntpdc - vendor-specific NTPD control program - Ver. 4.2.8p4-RC1
+
    ntpdc - vendor-specific NTPD control program - Ver. 4.2.8p4-sec-RC2
 Usage:  ntpdc [ -<flag> [<val>] | --<name>[{=| }<val>] ]... [ host ...]
   Flg Arg Option-Name    Description
    -4 no  ipv4           Force IPv4 DNS name resolution
@@ -198,11 +203,12 @@ The following option preset mechanisms are supported:
 Please send bug reports to:  <http://bugs.ntp.org, bugs@ntp.org>
 
    
   
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpdc usage,
 Up: ntpdc Invocation
-
    
+
 
    
 
 
    ipv4 option (-4)
    
@@ -219,11 +225,12 @@ ipv6.
   
    Force DNS resolution of following host names on the command line
 to the IPv4 namespace. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpdc ipv4,
 Up: ntpdc Invocation
-
    
+
 
    
 
 
    ipv6 option (-6)
    
@@ -240,18 +247,19 @@ ipv4.
   
    Force DNS resolution of following host names on the command line
 to the IPv6 namespace. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpdc ipv6,
 Up: ntpdc Invocation
-
    
+
 
    
 
 
    command option (-c)
    
 
 
    
 This is the “run a command and exit” option. 
-This option takes a string argument cmd.
+This option takes a string argument cmd.
 
 
    This option has some usage constraints.  It:
      
      
@@ -262,11 +270,12 @@ This option takes a string argument cmd.
 and is added to the list of commands to be executed on the specified
 host(s). 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpdc command,
 Up: ntpdc Invocation
-
      
+
 
      
 
 
      interactive option (-i)
      
@@ -283,11 +292,12 @@ command, listpeers, peers, showpeers.
   
      Force ntpq to operate in interactive mode.  Prompts will be written
 to the standard output and commands read from the standard input. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpdc interactive,
 Up: ntpdc Invocation
-
      
+
 
      
 
 
      listpeers option (-l)
      
@@ -304,11 +314,12 @@ command.
   
      Print a list of the peers known to the server as well as a summary of
 their state. This is equivalent to the 'listpeers' interactive command. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpdc listpeers,
 Up: ntpdc Invocation
-
      
+
 
      
 
 
      numeric option (-n)
      
@@ -318,11 +329,12 @@ This is the “numeric host addresses” option.
 Output all host addresses in dotted-quad numeric format rather than
 converting to the canonical host names. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpdc numeric,
 Up: ntpdc Invocation
-
      
+
 
      
 
 
      peers option (-p)
      
@@ -339,11 +351,12 @@ command.
   
      Print a list of the peers known to the server as well as a summary
 of their state. This is equivalent to the 'peers' interactive command. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpdc peers,
 Up: ntpdc Invocation
-
      
+
 
      
 
 
      showpeers option (-s)
      
@@ -361,11 +374,12 @@ command.
 of their state. This is equivalent to the 'dmpeers' interactive command.
 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: ntpdc showpeers,
 Up: ntpdc Invocation
-
      
+
 
      
 
 
      presetting/configuring ntpdc
      
@@ -383,9 +397,9 @@ values are treated like option arguments.
 
    • $PWD
 
    
   The environment variables HOME, and PWD
-are expanded and replaced when ntpdc runs. 
+are expanded and replaced when ntpdc runs. 
 For any of these that are plain files, they are simply processed. 
-For any that are directories, then a file named .ntprc is searched for
+For any that are directories, then a file named .ntprc is searched for
 within that directory and processed.
 
   
    Configuration files may be in a wide variety of formats. 
@@ -427,72 +441,78 @@ detail to provide.  The default is to print just the version.  The licensing inf
 Only the first letter of the argument is examined:
 
      
    
-
    version
    Only print the version.  This is the default. 
-
    copyright
    Name the copyright usage licensing terms. 
-
    verbose
    Print the full copyright usage licensing terms. 
+
    ‘version’
    Only print the version.  This is the default. 
+
    ‘copyright’
    Name the copyright usage licensing terms. 
+
    ‘verbose’
    Print the full copyright usage licensing terms. 
 
    
 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpdc config,
 Up: ntpdc Invocation
-
    
+
 
    
 
 
    ntpdc exit status
    
 
 
    One of the following exit values will be returned:
      
    
-
    0 (EXIT_SUCCESS)
    Successful program execution. 
-
    1 (EXIT_FAILURE)
    The operation failed or the command syntax was not valid. 
-
    66 (EX_NOINPUT)
    A specified configuration file could not be loaded. 
-
    70 (EX_SOFTWARE)
    libopts had an internal operational error.  Please report
+
    ‘0 (EXIT_SUCCESS)’
    Successful program execution. 
+
    ‘1 (EXIT_FAILURE)’
    The operation failed or the command syntax was not valid. 
+
    ‘66 (EX_NOINPUT)’
    A specified configuration file could not be loaded. 
+
    ‘70 (EX_SOFTWARE)’
    libopts had an internal operational error.  Please report
 it to autogen-users@lists.sourceforge.net.  Thank you. 
 
    
   
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpdc exit status,
 Up: ntpdc Invocation
-
    
+
 
    
 
 
    ntpdc Usage
    
 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpdc Usage,
 Up: ntpdc Invocation
-
    
+
 
    
 
 
    ntpdc See Also
    
 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpdc See Also,
 Up: ntpdc Invocation
-
    
+
 
    
 
 
    ntpdc Authors
    
 
 
    
+
 
    
-Previous: ntpdc Authors,
+Previous: ntpdc Authors,
 Up: ntpdc Invocation
-
    
+
 
    
 
 
    ntpdc Bugs
    
 
 
    
-
    
 
-
    
+
    
+
+
 
    
 
 
diff --git a/ntpdc/ntpdc.man.in b/ntpdc/ntpdc.man.in
index 70006512a..e7adbe2b0 100644
--- a/ntpdc/ntpdc.man.in
+++ b/ntpdc/ntpdc.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntpdc @NTPDC_MS@ "06 Oct 2015" "4.2.8p4-RC1" "User Commands"
+.TH ntpdc @NTPDC_MS@ "17 Oct 2015" "4.2.8p4-sec-RC2" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-aTai.C/ag-qTaa9C)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 06:07:47 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:24:55 AM by AutoGen 5.18.5
 .\" From the definitions ntpdc-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/ntpdc/ntpdc.mdoc.in b/ntpdc/ntpdc.mdoc.in
index 30c602f7c..2bc8a432c 100644
--- a/ntpdc/ntpdc.mdoc.in
+++ b/ntpdc/ntpdc.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTPDC @NTPDC_MS@ User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntpdc-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:07:57 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:24:51 AM by AutoGen 5.18.5
 .\"  From the definitions    ntpdc-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/ntpq/invoke-ntpq.texi b/ntpq/invoke-ntpq.texi
index 5a1ce448e..29af6fbab 100644
--- a/ntpq/invoke-ntpq.texi
+++ b/ntpq/invoke-ntpq.texi
@@ -6,7 +6,7 @@
 #
 # EDIT THIS FILE WITH CAUTION  (invoke-ntpq.texi)
 #
-# It has been AutoGen-ed  October  6, 2015 at 06:10:26 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:25:38 AM by AutoGen 5.18.5
 # From the definitions    ntpq-opts.def
 # and the template file   agtexi-cmd.tpl
 @end ignore
@@ -847,7 +847,7 @@ with a status code of 0.
 
 @exampleindent 0
 @example
-ntpq - standard NTP query program - Ver. 4.2.8p4-RC1
+ntpq - standard NTP query program - Ver. 4.2.8p4-sec-RC2
 Usage:  ntpq [ - [] | --[@{=| @}] ]... [ host ...]
   Flg Arg Option-Name    Description
    -4 no  ipv4           Force IPv4 DNS name resolution
diff --git a/ntpq/ntpq-opts.c b/ntpq/ntpq-opts.c
index 9497628d0..9841c4b2c 100644
--- a/ntpq/ntpq-opts.c
+++ b/ntpq/ntpq-opts.c
@@ -1,7 +1,7 @@
 /*
  *  EDIT THIS FILE WITH CAUTION  (ntpq-opts.c)
  *
- *  It has been AutoGen-ed  October  6, 2015 at 06:08:04 AM by AutoGen 5.18.5
+ *  It has been AutoGen-ed  October 17, 2015 at 06:24:57 AM by AutoGen 5.18.5
  *  From the definitions    ntpq-opts.def
  *  and the template file   options
  *
@@ -50,7 +50,7 @@ extern "C" {
 #endif
 extern FILE * option_usage_fp;
 #define zCopyright      (ntpq_opt_strs+0)
-#define zLicenseDescrip (ntpq_opt_strs+344)
+#define zLicenseDescrip (ntpq_opt_strs+348)
 
 /*
  *  global included definitions
@@ -68,15 +68,15 @@ extern FILE * option_usage_fp;
 /**
  *  static const strings for ntpq options
  */
-static char const ntpq_opt_strs[1937] =
-/*     0 */ "ntpq 4.2.8p4-RC1\n"
+static char const ntpq_opt_strs[1949] =
+/*     0 */ "ntpq 4.2.8p4-sec-RC2\n"
             "Copyright (C) 1992-2015 The University of Delaware and Network Time Foundation, all rights reserved.\n"
             "This is free software. It is licensed for use, modification and\n"
             "redistribution under the terms of the NTP License, copies of which\n"
             "can be seen at:\n"
             "  \n"
             "  \n\0"
-/*   344 */ "Permission to use, copy, modify, and distribute this software and its\n"
+/*   348 */ "Permission to use, copy, modify, and distribute this software and its\n"
             "documentation for any purpose with or without fee is hereby granted,\n"
             "provided that the above copyright notice appears in all copies and that\n"
             "both the copyright notice and this permission notice appear in supporting\n"
@@ -86,67 +86,67 @@ static char const ntpq_opt_strs[1937] =
             "Time Foundation makes no representations about the suitability this\n"
             "software for any purpose.  It is provided \"as is\" without express or\n"
             "implied warranty.\n\0"
-/*  1012 */ "Force IPv4 DNS name resolution\0"
-/*  1043 */ "IPV4\0"
-/*  1048 */ "ipv4\0"
-/*  1053 */ "Force IPv6 DNS name resolution\0"
-/*  1084 */ "IPV6\0"
-/*  1089 */ "ipv6\0"
-/*  1094 */ "run a command and exit\0"
-/*  1117 */ "COMMAND\0"
-/*  1125 */ "command\0"
-/*  1133 */ "Increase debug verbosity level\0"
-/*  1164 */ "DEBUG_LEVEL\0"
-/*  1176 */ "debug-level\0"
-/*  1188 */ "Set the debug verbosity level\0"
-/*  1218 */ "SET_DEBUG_LEVEL\0"
-/*  1234 */ "set-debug-level\0"
-/*  1250 */ "Force ntpq to operate in interactive mode\0"
-/*  1292 */ "INTERACTIVE\0"
-/*  1304 */ "interactive\0"
-/*  1316 */ "numeric host addresses\0"
-/*  1339 */ "NUMERIC\0"
-/*  1347 */ "numeric\0"
-/*  1355 */ "Always output status line with readvar\0"
-/*  1394 */ "OLD_RV\0"
-/*  1401 */ "old-rv\0"
-/*  1408 */ "Print a list of the peers\0"
-/*  1434 */ "PEERS\0"
-/*  1440 */ "peers\0"
-/*  1446 */ "Display the full 'remote' value\0"
-/*  1478 */ "WIDE\0"
-/*  1483 */ "wide\0"
-/*  1488 */ "display extended usage information and exit\0"
-/*  1532 */ "help\0"
-/*  1537 */ "extended usage information passed thru pager\0"
-/*  1582 */ "more-help\0"
-/*  1592 */ "output version information and exit\0"
-/*  1628 */ "version\0"
-/*  1636 */ "save the option state to a config file\0"
-/*  1675 */ "save-opts\0"
-/*  1685 */ "load options from a config file\0"
-/*  1717 */ "LOAD_OPTS\0"
-/*  1727 */ "no-load-opts\0"
-/*  1740 */ "no\0"
-/*  1743 */ "NTPQ\0"
-/*  1748 */ "ntpq - standard NTP query program - Ver. 4.2.8p4-RC1\n"
+/*  1016 */ "Force IPv4 DNS name resolution\0"
+/*  1047 */ "IPV4\0"
+/*  1052 */ "ipv4\0"
+/*  1057 */ "Force IPv6 DNS name resolution\0"
+/*  1088 */ "IPV6\0"
+/*  1093 */ "ipv6\0"
+/*  1098 */ "run a command and exit\0"
+/*  1121 */ "COMMAND\0"
+/*  1129 */ "command\0"
+/*  1137 */ "Increase debug verbosity level\0"
+/*  1168 */ "DEBUG_LEVEL\0"
+/*  1180 */ "debug-level\0"
+/*  1192 */ "Set the debug verbosity level\0"
+/*  1222 */ "SET_DEBUG_LEVEL\0"
+/*  1238 */ "set-debug-level\0"
+/*  1254 */ "Force ntpq to operate in interactive mode\0"
+/*  1296 */ "INTERACTIVE\0"
+/*  1308 */ "interactive\0"
+/*  1320 */ "numeric host addresses\0"
+/*  1343 */ "NUMERIC\0"
+/*  1351 */ "numeric\0"
+/*  1359 */ "Always output status line with readvar\0"
+/*  1398 */ "OLD_RV\0"
+/*  1405 */ "old-rv\0"
+/*  1412 */ "Print a list of the peers\0"
+/*  1438 */ "PEERS\0"
+/*  1444 */ "peers\0"
+/*  1450 */ "Display the full 'remote' value\0"
+/*  1482 */ "WIDE\0"
+/*  1487 */ "wide\0"
+/*  1492 */ "display extended usage information and exit\0"
+/*  1536 */ "help\0"
+/*  1541 */ "extended usage information passed thru pager\0"
+/*  1586 */ "more-help\0"
+/*  1596 */ "output version information and exit\0"
+/*  1632 */ "version\0"
+/*  1640 */ "save the option state to a config file\0"
+/*  1679 */ "save-opts\0"
+/*  1689 */ "load options from a config file\0"
+/*  1721 */ "LOAD_OPTS\0"
+/*  1731 */ "no-load-opts\0"
+/*  1744 */ "no\0"
+/*  1747 */ "NTPQ\0"
+/*  1752 */ "ntpq - standard NTP query program - Ver. 4.2.8p4-sec-RC2\n"
             "Usage:  %s [ - [] | --[{=| }] ]... [ host ...]\n\0"
-/*  1871 */ "$HOME\0"
-/*  1877 */ ".\0"
-/*  1879 */ ".ntprc\0"
-/*  1886 */ "http://bugs.ntp.org, bugs@ntp.org\0"
-/*  1920 */ "ntpq 4.2.8p4-RC1";
+/*  1879 */ "$HOME\0"
+/*  1885 */ ".\0"
+/*  1887 */ ".ntprc\0"
+/*  1894 */ "http://bugs.ntp.org, bugs@ntp.org\0"
+/*  1928 */ "ntpq 4.2.8p4-sec-RC2";
 
 /**
  *  ipv4 option description with
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the ipv4 option */
-#define IPV4_DESC      (ntpq_opt_strs+1012)
+#define IPV4_DESC      (ntpq_opt_strs+1016)
 /** Upper-cased name for the ipv4 option */
-#define IPV4_NAME      (ntpq_opt_strs+1043)
+#define IPV4_NAME      (ntpq_opt_strs+1047)
 /** Name string for the ipv4 option */
-#define IPV4_name      (ntpq_opt_strs+1048)
+#define IPV4_name      (ntpq_opt_strs+1052)
 /** Other options that appear in conjunction with the ipv4 option */
 static int const aIpv4CantList[] = {
     INDEX_OPT_IPV6, NO_EQUIVALENT };
@@ -158,11 +158,11 @@ static int const aIpv4CantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the ipv6 option */
-#define IPV6_DESC      (ntpq_opt_strs+1053)
+#define IPV6_DESC      (ntpq_opt_strs+1057)
 /** Upper-cased name for the ipv6 option */
-#define IPV6_NAME      (ntpq_opt_strs+1084)
+#define IPV6_NAME      (ntpq_opt_strs+1088)
 /** Name string for the ipv6 option */
-#define IPV6_name      (ntpq_opt_strs+1089)
+#define IPV6_name      (ntpq_opt_strs+1093)
 /** Other options that appear in conjunction with the ipv6 option */
 static int const aIpv6CantList[] = {
     INDEX_OPT_IPV4, NO_EQUIVALENT };
@@ -173,11 +173,11 @@ static int const aIpv6CantList[] = {
  *  command option description:
  */
 /** Descriptive text for the command option */
-#define COMMAND_DESC      (ntpq_opt_strs+1094)
+#define COMMAND_DESC      (ntpq_opt_strs+1098)
 /** Upper-cased name for the command option */
-#define COMMAND_NAME      (ntpq_opt_strs+1117)
+#define COMMAND_NAME      (ntpq_opt_strs+1121)
 /** Name string for the command option */
-#define COMMAND_name      (ntpq_opt_strs+1125)
+#define COMMAND_name      (ntpq_opt_strs+1129)
 /** Compiled in flag settings for the command option */
 #define COMMAND_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -186,11 +186,11 @@ static int const aIpv6CantList[] = {
  *  debug-level option description:
  */
 /** Descriptive text for the debug-level option */
-#define DEBUG_LEVEL_DESC      (ntpq_opt_strs+1133)
+#define DEBUG_LEVEL_DESC      (ntpq_opt_strs+1137)
 /** Upper-cased name for the debug-level option */
-#define DEBUG_LEVEL_NAME      (ntpq_opt_strs+1164)
+#define DEBUG_LEVEL_NAME      (ntpq_opt_strs+1168)
 /** Name string for the debug-level option */
-#define DEBUG_LEVEL_name      (ntpq_opt_strs+1176)
+#define DEBUG_LEVEL_name      (ntpq_opt_strs+1180)
 /** Compiled in flag settings for the debug-level option */
 #define DEBUG_LEVEL_FLAGS     (OPTST_DISABLED)
 
@@ -198,11 +198,11 @@ static int const aIpv6CantList[] = {
  *  set-debug-level option description:
  */
 /** Descriptive text for the set-debug-level option */
-#define SET_DEBUG_LEVEL_DESC      (ntpq_opt_strs+1188)
+#define SET_DEBUG_LEVEL_DESC      (ntpq_opt_strs+1192)
 /** Upper-cased name for the set-debug-level option */
-#define SET_DEBUG_LEVEL_NAME      (ntpq_opt_strs+1218)
+#define SET_DEBUG_LEVEL_NAME      (ntpq_opt_strs+1222)
 /** Name string for the set-debug-level option */
-#define SET_DEBUG_LEVEL_name      (ntpq_opt_strs+1234)
+#define SET_DEBUG_LEVEL_name      (ntpq_opt_strs+1238)
 /** Compiled in flag settings for the set-debug-level option */
 #define SET_DEBUG_LEVEL_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -212,11 +212,11 @@ static int const aIpv6CantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the interactive option */
-#define INTERACTIVE_DESC      (ntpq_opt_strs+1250)
+#define INTERACTIVE_DESC      (ntpq_opt_strs+1254)
 /** Upper-cased name for the interactive option */
-#define INTERACTIVE_NAME      (ntpq_opt_strs+1292)
+#define INTERACTIVE_NAME      (ntpq_opt_strs+1296)
 /** Name string for the interactive option */
-#define INTERACTIVE_name      (ntpq_opt_strs+1304)
+#define INTERACTIVE_name      (ntpq_opt_strs+1308)
 /** Other options that appear in conjunction with the interactive option */
 static int const aInteractiveCantList[] = {
     INDEX_OPT_COMMAND,
@@ -228,11 +228,11 @@ static int const aInteractiveCantList[] = {
  *  numeric option description:
  */
 /** Descriptive text for the numeric option */
-#define NUMERIC_DESC      (ntpq_opt_strs+1316)
+#define NUMERIC_DESC      (ntpq_opt_strs+1320)
 /** Upper-cased name for the numeric option */
-#define NUMERIC_NAME      (ntpq_opt_strs+1339)
+#define NUMERIC_NAME      (ntpq_opt_strs+1343)
 /** Name string for the numeric option */
-#define NUMERIC_name      (ntpq_opt_strs+1347)
+#define NUMERIC_name      (ntpq_opt_strs+1351)
 /** Compiled in flag settings for the numeric option */
 #define NUMERIC_FLAGS     (OPTST_DISABLED)
 
@@ -240,11 +240,11 @@ static int const aInteractiveCantList[] = {
  *  old-rv option description:
  */
 /** Descriptive text for the old-rv option */
-#define OLD_RV_DESC      (ntpq_opt_strs+1355)
+#define OLD_RV_DESC      (ntpq_opt_strs+1359)
 /** Upper-cased name for the old-rv option */
-#define OLD_RV_NAME      (ntpq_opt_strs+1394)
+#define OLD_RV_NAME      (ntpq_opt_strs+1398)
 /** Name string for the old-rv option */
-#define OLD_RV_name      (ntpq_opt_strs+1401)
+#define OLD_RV_name      (ntpq_opt_strs+1405)
 /** Compiled in flag settings for the old-rv option */
 #define OLD_RV_FLAGS     (OPTST_DISABLED)
 
@@ -253,11 +253,11 @@ static int const aInteractiveCantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the peers option */
-#define PEERS_DESC      (ntpq_opt_strs+1408)
+#define PEERS_DESC      (ntpq_opt_strs+1412)
 /** Upper-cased name for the peers option */
-#define PEERS_NAME      (ntpq_opt_strs+1434)
+#define PEERS_NAME      (ntpq_opt_strs+1438)
 /** Name string for the peers option */
-#define PEERS_name      (ntpq_opt_strs+1440)
+#define PEERS_name      (ntpq_opt_strs+1444)
 /** Other options that appear in conjunction with the peers option */
 static int const aPeersCantList[] = {
     INDEX_OPT_INTERACTIVE, NO_EQUIVALENT };
@@ -268,22 +268,22 @@ static int const aPeersCantList[] = {
  *  wide option description:
  */
 /** Descriptive text for the wide option */
-#define WIDE_DESC      (ntpq_opt_strs+1446)
+#define WIDE_DESC      (ntpq_opt_strs+1450)
 /** Upper-cased name for the wide option */
-#define WIDE_NAME      (ntpq_opt_strs+1478)
+#define WIDE_NAME      (ntpq_opt_strs+1482)
 /** Name string for the wide option */
-#define WIDE_name      (ntpq_opt_strs+1483)
+#define WIDE_name      (ntpq_opt_strs+1487)
 /** Compiled in flag settings for the wide option */
 #define WIDE_FLAGS     (OPTST_DISABLED)
 
 /*
  *  Help/More_Help/Version option descriptions:
  */
-#define HELP_DESC       (ntpq_opt_strs+1488)
-#define HELP_name       (ntpq_opt_strs+1532)
+#define HELP_DESC       (ntpq_opt_strs+1492)
+#define HELP_name       (ntpq_opt_strs+1536)
 #ifdef HAVE_WORKING_FORK
-#define MORE_HELP_DESC  (ntpq_opt_strs+1537)
-#define MORE_HELP_name  (ntpq_opt_strs+1582)
+#define MORE_HELP_DESC  (ntpq_opt_strs+1541)
+#define MORE_HELP_name  (ntpq_opt_strs+1586)
 #define MORE_HELP_FLAGS (OPTST_IMM | OPTST_NO_INIT)
 #else
 #define MORE_HELP_DESC  HELP_DESC
@@ -296,14 +296,14 @@ static int const aPeersCantList[] = {
 #  define VER_FLAGS     (OPTST_SET_ARGTYPE(OPARG_TYPE_STRING) | \
                          OPTST_ARG_OPTIONAL | OPTST_IMM | OPTST_NO_INIT)
 #endif
-#define VER_DESC        (ntpq_opt_strs+1592)
-#define VER_name        (ntpq_opt_strs+1628)
-#define SAVE_OPTS_DESC  (ntpq_opt_strs+1636)
-#define SAVE_OPTS_name  (ntpq_opt_strs+1675)
-#define LOAD_OPTS_DESC     (ntpq_opt_strs+1685)
-#define LOAD_OPTS_NAME     (ntpq_opt_strs+1717)
-#define NO_LOAD_OPTS_name  (ntpq_opt_strs+1727)
-#define LOAD_OPTS_pfx      (ntpq_opt_strs+1740)
+#define VER_DESC        (ntpq_opt_strs+1596)
+#define VER_name        (ntpq_opt_strs+1632)
+#define SAVE_OPTS_DESC  (ntpq_opt_strs+1640)
+#define SAVE_OPTS_name  (ntpq_opt_strs+1679)
+#define LOAD_OPTS_DESC     (ntpq_opt_strs+1689)
+#define LOAD_OPTS_NAME     (ntpq_opt_strs+1721)
+#define NO_LOAD_OPTS_name  (ntpq_opt_strs+1731)
+#define LOAD_OPTS_pfx      (ntpq_opt_strs+1744)
 #define LOAD_OPTS_name     (NO_LOAD_OPTS_name + 3)
 /**
  *  Declare option callback procedures
@@ -512,24 +512,24 @@ static tOptDesc optDesc[OPTION_CT] = {
 
 /* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
 /** Reference to the upper cased version of ntpq. */
-#define zPROGNAME       (ntpq_opt_strs+1743)
+#define zPROGNAME       (ntpq_opt_strs+1747)
 /** Reference to the title line for ntpq usage. */
-#define zUsageTitle     (ntpq_opt_strs+1748)
+#define zUsageTitle     (ntpq_opt_strs+1752)
 /** ntpq configuration file name. */
-#define zRcName         (ntpq_opt_strs+1879)
+#define zRcName         (ntpq_opt_strs+1887)
 /** Directories to search for ntpq config files. */
 static char const * const apzHomeList[3] = {
-    ntpq_opt_strs+1871,
-    ntpq_opt_strs+1877,
+    ntpq_opt_strs+1879,
+    ntpq_opt_strs+1885,
     NULL };
 /** The ntpq program bug email address. */
-#define zBugsAddr       (ntpq_opt_strs+1886)
+#define zBugsAddr       (ntpq_opt_strs+1894)
 /** Clarification/explanation of what ntpq does. */
 #define zExplain        (NULL)
 /** Extra detail explaining what ntpq does. */
 #define zDetail         (NULL)
 /** The full version string for ntpq. */
-#define zFullVersion    (ntpq_opt_strs+1920)
+#define zFullVersion    (ntpq_opt_strs+1928)
 /* extracted from optcode.tlib near line 364 */
 
 #if defined(ENABLE_NLS)
@@ -786,7 +786,7 @@ static void bogus_function(void) {
      translate option names.
    */
   /* referenced via ntpqOptions.pzCopyright */
-  puts(_("ntpq 4.2.8p4-RC1\n\
+  puts(_("ntpq 4.2.8p4-sec-RC2\n\
 Copyright (C) 1992-2015 The University of Delaware and Network Time Foundation, all rights reserved.\n\
 This is free software. It is licensed for use, modification and\n\
 redistribution under the terms of the NTP License, copies of which\n\
@@ -852,11 +852,11 @@ implied warranty.\n"));
   puts(_("load options from a config file"));
 
   /* referenced via ntpqOptions.pzUsageTitle */
-  puts(_("ntpq - standard NTP query program - Ver. 4.2.8p4-RC1\n\
+  puts(_("ntpq - standard NTP query program - Ver. 4.2.8p4-sec-RC2\n\
 Usage:  %s [ - [] | --[{=| }] ]... [ host ...]\n"));
 
   /* referenced via ntpqOptions.pzFullVersion */
-  puts(_("ntpq 4.2.8p4-RC1"));
+  puts(_("ntpq 4.2.8p4-sec-RC2"));
 
   /* referenced via ntpqOptions.pzFullUsage */
   puts(_("<<>>"));
diff --git a/ntpq/ntpq-opts.h b/ntpq/ntpq-opts.h
index e7df0e1aa..e19139770 100644
--- a/ntpq/ntpq-opts.h
+++ b/ntpq/ntpq-opts.h
@@ -1,7 +1,7 @@
 /*
  *  EDIT THIS FILE WITH CAUTION  (ntpq-opts.h)
  *
- *  It has been AutoGen-ed  October  6, 2015 at 06:08:03 AM by AutoGen 5.18.5
+ *  It has been AutoGen-ed  October 17, 2015 at 06:24:57 AM by AutoGen 5.18.5
  *  From the definitions    ntpq-opts.def
  *  and the template file   options
  *
@@ -83,9 +83,9 @@ typedef enum {
 /** count of all options for ntpq */
 #define OPTION_CT    15
 /** ntpq version */
-#define NTPQ_VERSION       "4.2.8p4-RC1"
+#define NTPQ_VERSION       "4.2.8p4-sec-RC2"
 /** Full ntpq version text */
-#define NTPQ_FULL_VERSION  "ntpq 4.2.8p4-RC1"
+#define NTPQ_FULL_VERSION  "ntpq 4.2.8p4-sec-RC2"
 
 /**
  *  Interface defines for all options.  Replace "n" with the UPPER_CASED
diff --git a/ntpq/ntpq.1ntpqman b/ntpq/ntpq.1ntpqman
index 3003ed75c..054e918dc 100644
--- a/ntpq/ntpq.1ntpqman
+++ b/ntpq/ntpq.1ntpqman
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntpq 1ntpqman "06 Oct 2015" "4.2.8p4-RC1" "User Commands"
+.TH ntpq 1ntpqman "17 Oct 2015" "4.2.8p4-sec-RC2" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-1da4iE/ag-ceaWhE)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 06:09:39 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:25:40 AM by AutoGen 5.18.5
 .\" From the definitions ntpq-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/ntpq/ntpq.1ntpqmdoc b/ntpq/ntpq.1ntpqmdoc
index 559952ce7..ce111a6f4 100644
--- a/ntpq/ntpq.1ntpqmdoc
+++ b/ntpq/ntpq.1ntpqmdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTPQ 1ntpqmdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntpq-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:10:30 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:25:33 AM by AutoGen 5.18.5
 .\"  From the definitions    ntpq-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/ntpq/ntpq.html b/ntpq/ntpq.html
index e71a6c35c..8face6da5 100644
--- a/ntpq/ntpq.html
+++ b/ntpq/ntpq.html
@@ -3,7 +3,7 @@
 ntpq: Network Time Protocol Query User's Manual
 
 
-
+
 
 
 
@@ -14,8 +14,9 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
@@ -30,11 +31,12 @@
 
 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-
    
+
 
    
 
 
    ntpq: Network Time Protocol Query User Manual
    
@@ -44,7 +46,7 @@ monitor the operational status
 and determine the performance of
 ntpd, the NTP daemon.
 
-  
    This document applies to version 4.2.8p4-RC1 of ntpq.
+  
    This document applies to version 4.2.8p4-sec-RC2 of ntpq.
 
 
    
 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: Top,
 Up: Top
-
    
+
 
    
 
 
@@ -86,9 +89,10 @@ The description on this page is for the NTPv4 variables.
   
    For examples and usage, see the NTP Debugging Techniques page.
 
 
    
-
    
 
-
    
+
    
+
+
 
    
 
 
    Invoking ntpq
    
@@ -176,12 +180,12 @@ requests being sent to a server.
 These are described following.
      
    
 
    ? [command_keyword]
    help [command_keyword]
    A
-? 
+‘?’
 by itself will print a list of all the command
 keywords known to this incarnation of
 ntpq
 A
-? 
+‘?’
 followed by a command keyword will print function and usage
 information about the command. 
 This command is probably a better
@@ -191,9 +195,9 @@ than this manual
 page. 
 
    addvars variable_name[=value] ...
    rmvars variable_name ...
    clearvars
    showvars
    The data carried by NTP mode 6 messages consists of a list of
 items of the form
-variable_name=value,
+‘variable_name=value’,
 where the
-=value
+‘=value’
 is ignored, and can be omitted,
 in requests to the server to read variables. 
 The
@@ -225,7 +229,7 @@ command displays the current list of optional variables.
 does not authenticate requests unless
 they are write requests. 
 The command
-authenticate yes
+‘authenticate yes’
 causes
 ntpq
 to send authentication with all requests it
@@ -236,7 +240,7 @@ fuzzballs if you turn authentication on before doing a
 peer
 display. 
 The command
-authenticate
+‘authenticate’
 causes
 ntpq
 to display whether or not
@@ -251,7 +255,7 @@ Variables which
 ntpq
 thinks should have a decodable value but didn't are
 marked with a trailing
-?. 
+‘?’. 
 
    debug [more | less | off]
    With no argument, displays the current debug level. 
 Otherwise, the debug level is changed to the indicated level. 
 
    delay milliseconds
    Specify a time interval to be added to timestamps included in
@@ -352,7 +356,7 @@ commands, which iterate over a range of associations.
      
    
 
    associations
    Display a list of mobilized associations in the form:
      
              ind assid status conf reach auth condition last_event cnt
-     
    
+
    
           
    
 
    Sy String Ta Sy Description
    ind Ta index on this list
    assid Ta association ID
    status Ta peer status word
    conf Ta yes: persistent, no: ephemeral
    reach Ta yes: reachable, no: unreachable
    auth Ta ok, yes, bad and none
    condition Ta selection status (see the select field of the peer status word)
    last_event Ta event report (see the event field of the peer status word)
    cnt Ta event count (see the count field of the peer status word)
    
      
    authinfo
    Display the authentication statistics. 
@@ -449,7 +453,7 @@ command,
 except that it uses previously stored data rather than making a new query. 
 
    peers
    Display a list of peers in the form:
      
              [tally]remote refid st t when pool reach delay offset jitter
-     
    
+

           

 
Variable
Description
 
[tally]
single-character code indicating current value of the
@@ -488,7 +492,7 @@ multicast server
 

      
apeers
Display a list of peers in the form:
      
          [tally]remote refid assid st t when pool reach delay offset jitter
-     

+

      
where the output is just like the
 peers
 command except that the
@@ -736,7 +740,7 @@ using the agtexi-cmd template and the option descriptions for the <
 This software is released under the NTP license, <http://ntp.org/license>.
 
 
    
-
  • ntpq usage:                   ntpq help/usage (--help)
+
  • ntpq usage:                   ntpq help/usage (--help)
 
  • ntpq ipv4:                    ipv4 option (-4)
 
  • ntpq ipv6:                    ipv6 option (-6)
 
  • ntpq command:                 command option (-c)
@@ -750,26 +754,27 @@ This software is released under the NTP license, <http://ntp.org/license>.
 

 
 

+
 

-Next: ,
+Next: ,
 Up: ntpq Invocation
-

+
 

 
-
ntpq help/usage (--help)

+
ntpq help/usage (--help)

 
 

 This is the automatically generated usage text for ntpq.
 
   
The text printed is the same whether selected with the help option
-(--help) or the more-help option (--more-help).  more-help will print
+(--help) or the more-help option (--more-help).  more-help will print
 the usage text by passing it through a pager program. 
 more-help is disabled on platforms without a working
 fork(2) function.  The PAGER environment variable is
-used to select the program, defaulting to more.  Both will exit
+used to select the program, defaulting to more.  Both will exit
 with a status code of 0.
 
-
ntpq - standard NTP query program - Ver. 4.2.8p3
+
ntpq - standard NTP query program - Ver. 4.2.8p4-RC1
 Usage:  ntpq [ -<flag> [<val>] | --<name>[{=| }<val>] ]... [ host ...]
   Flg Arg Option-Name    Description
    -4 no  ipv4           Force IPv4 DNS name resolution
@@ -810,11 +815,12 @@ The following option preset mechanisms are supported:
 Please send bug reports to:  <http://bugs.ntp.org, bugs@ntp.org>
 

   

+
 

-Next: ,
+Next: ,
 Previous: ntpq usage,
 Up: ntpq Invocation
-

+
 

 
 
ipv4 option (-4)

@@ -831,11 +837,12 @@ ipv6.
   
Force DNS resolution of following host names on the command line
 to the IPv4 namespace. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpq ipv4,
 Up: ntpq Invocation
-

+
 

 
 
ipv6 option (-6)

@@ -852,18 +859,19 @@ ipv4.
   
Force DNS resolution of following host names on the command line
 to the IPv6 namespace. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpq ipv6,
 Up: ntpq Invocation
-

+
 

 
 
command option (-c)

 
 

 This is the “run a command and exit” option. 
-This option takes a string argument cmd.
+This option takes a string argument cmd.
 
 
This option has some usage constraints.  It:
      
    
@@ -874,11 +882,12 @@ This option takes a string argument cmd.
 and is added to the list of commands to be executed on the specified
 host(s). 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpq command,
 Up: ntpq Invocation
-
    
+
 
    
 
 
    interactive option (-i)
    
@@ -896,11 +905,12 @@ command, peers.
 Prompts will be written to the standard output and
 commands read from the standard input. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpq interactive,
 Up: ntpq Invocation
-
    
+
 
    
 
 
    numeric option (-n)
    
@@ -910,11 +920,13 @@ This is the “numeric host addresses” option.
 Output all host addresses in dotted-quad numeric format rather than
 converting to the canonical host names. 
 
    
+
+
 
    
-Next: ,
+Next: ,
 Previous: ntpq numeric,
 Up: ntpq Invocation
-
    
+
 
    
 
 
    old-rv option
    
@@ -931,11 +943,12 @@ Using an environment variable to
 preset this option in a script will enable both older and
 newer ntpq to behave identically in this regard. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpq old-rv,
 Up: ntpq Invocation
-
    
+
 
    
 
 
    peers option (-p)
    
@@ -952,11 +965,12 @@ interactive.
   
    Print a list of the peers known to the server as well as a summary
 of their state. This is equivalent to the 'peers' interactive command. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpq peers,
 Up: ntpq Invocation
-
    
+
 
    
 
 
    wide option (-w)
    
@@ -968,11 +982,12 @@ more than 15 characters, display the full value, emit a newline,
 and continue the data display properly indented on the next line.
 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: ntpq wide,
 Up: ntpq Invocation
-
    
+
 
    
 
 
    presetting/configuring ntpq
    
@@ -990,9 +1005,9 @@ values are treated like option arguments.
 
  • $PWD
 

   The environment variables HOME, and PWD
-are expanded and replaced when ntpq runs. 
+are expanded and replaced when ntpq runs. 
 For any of these that are plain files, they are simply processed. 
-For any that are directories, then a file named .ntprc is searched for
+For any that are directories, then a file named .ntprc is searched for
 within that directory and processed.
 
   
Configuration files may be in a wide variety of formats. 
@@ -1034,35 +1049,37 @@ detail to provide.  The default is to print just the version.  The licensing inf
 Only the first letter of the argument is examined:
 
      

-
version
Only print the version.  This is the default. 
-
copyright
Name the copyright usage licensing terms. 
-
verbose
Print the full copyright usage licensing terms. 
+
‘version’
Only print the version.  This is the default. 
+
‘copyright’
Name the copyright usage licensing terms. 
+
‘verbose’
Print the full copyright usage licensing terms. 
 

 
 

+
 

-Previous: ntpq config,
+Previous: ntpq config,
 Up: ntpq Invocation
-

+
 

 
 
ntpq exit status

 
 
One of the following exit values will be returned:
      

-
0 (EXIT_SUCCESS)
Successful program execution. 
-
1 (EXIT_FAILURE)
The operation failed or the command syntax was not valid. 
-
66 (EX_NOINPUT)
A specified configuration file could not be loaded. 
-
70 (EX_SOFTWARE)
libopts had an internal operational error.  Please report
+
‘0 (EXIT_SUCCESS)’
Successful program execution. 
+
‘1 (EXIT_FAILURE)’
The operation failed or the command syntax was not valid. 
+
‘66 (EX_NOINPUT)’
A specified configuration file could not be loaded. 
+
‘70 (EX_SOFTWARE)’
libopts had an internal operational error.  Please report
 it to autogen-users@lists.sourceforge.net.  Thank you. 
 

 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpq Description,
 Up: Top
-

+
 

 
 
@@ -1104,11 +1121,12 @@ Up: Top
 

 
 

+
 

-Next: ,
+Next: ,
 Previous: Usage,
 Up: Top
-

+
 

 
 
@@ -1117,9 +1135,9 @@ Up: Top
 
Interactive format commands consist of a keyword followed by zero to four arguments.  Only enough characters of the full keyword to uniquely identify the command need be typed.  The output of a command is normally sent to the standard output, but optionally the output of individual commands may be sent to a file by appending a >, followed by a file name, to the command line.  A number of interactive format commands are executed entirely within the ntpq program itself and do not result in NTP mode-6 requests being sent to a server.  These are described following.
 
      

-
 ? [command_keyword]
help [command_keyword]
A ? by itself will print a list of all the command keywords known to ntpq.  A ? followed by a command keyword will print function and usage information about the command.
+
? [command_keyword]
help [command_keyword]
A ? by itself will print a list of all the command keywords known to ntpq.  A ? followed by a command keyword will print function and usage information about the command.
 
-     
 >addvars name [ = value] [...]
rmvars name [...]
clearvars</dt>
The arguments to these commands consist of a list of items of the form
+     
>addvars name [ = value] [...]
rmvars name [...]
clearvars</dt>
The arguments to these commands consist of a list of items of the form
 name = value, where the = value is ignored,
 and can be omitted in read requests. 
 ntpq maintains an internal list in which data to be included
@@ -1133,43 +1151,43 @@ The rmvars command can be used to remove individual variables
 from the list,
 while the clearlist command removes all variables from the list.
 
-     
 cooked
Display server messages in prettyprint format.
+     
cooked
Display server messages in prettyprint format.
 
-     
 debug more | less | off
Turns internal query program debugging on and off.
+     
debug more | less | off
Turns internal query program debugging on and off.
 
-     
 delay milliseconds
Specify a time interval to be added to timestamps included in requests which require authentication.  This is used to enable (unreliable) server reconfiguration over long delay network paths or between machines whose clocks are unsynchronized.  Actually the server does not now require timestamps in authenticated requests, so this command may be obsolete.
+     
delay milliseconds
Specify a time interval to be added to timestamps included in requests which require authentication.  This is used to enable (unreliable) server reconfiguration over long delay network paths or between machines whose clocks are unsynchronized.  Actually the server does not now require timestamps in authenticated requests, so this command may be obsolete.
 
-     
 host name
Set the host to which future queries will be sent. 
+     
host name
Set the host to which future queries will be sent. 
 The name may be either a DNS name or a numeric address.
 
-     
 hostnames [yes | no]
If yes is specified, host names are printed in information displays. 
+     
hostnames [yes | no]
If yes is specified, host names are printed in information displays. 
 If no is specified, numeric addresses are printed instead. 
 The default is yes,
 unless modified using the command line -n switch.
 
-     
 keyid keyid
This command specifies the key number to be used
+     
keyid keyid
This command specifies the key number to be used
 to authenticate configuration requests. 
 This must correspond to a key ID configured in ntp.conf for this purpose.
 
-     
 keytype
Specify the digest algorithm to use for authenticated requests,
+     
keytype
Specify the digest algorithm to use for authenticated requests,
 with default MD5. 
 If the OpenSSL library is installed,
 digest can be be any message digest algorithm supported by the library. 
 The current selections are: MD2, MD4, MD5, MDC2, RIPEMD160, SHA and SHA1.
 
-     
 ntpversion 1 | 2 | 3 | 4
Sets the NTP version number which ntpq claims in packets. 
+     
ntpversion 1 | 2 | 3 | 4
Sets the NTP version number which ntpq claims in packets. 
 Defaults to 2. 
 Note that mode-6 control messages (and modes, for that matter)
 didn't exist in NTP version 1.
 
-     
 passwd
This command prompts for a password to authenticate requests. 
+     
passwd
This command prompts for a password to authenticate requests. 
 The password must correspond to the key ID configured in ntp.conf for this purpose.
 
-     
 quit
Exit ntpq.
+     
quit
Exit ntpq.
 
-     
 raw
Display server messages as received and without reformatting.
+     
raw
Display server messages as received and without reformatting.
 
-     
 timeout millseconds
Specify a timeout period for responses to server queries. 
+     
timeout millseconds
Specify a timeout period for responses to server queries. 
 The default is about 5000 milliseconds. 
 Note that since ntpq retries each query once after a timeout
 the total waiting time for a timeout will be twice the timeout value set.
@@ -1177,11 +1195,12 @@ the total waiting time for a timeout will be twice the timeout value set.
   

 
 

+
 

-Next: ,
+Next: ,
 Previous: Internal Commands,
 Up: Top
-

+
 

 
 
@@ -1234,35 +1253,35 @@ event count (see the count field of the 
 
      

 
-     
 clockvar assocID [name [ = value [...]] [...]]
cv assocID [name [ = value [...] ][...]]
Display a list of clock variables for those associations supporting a reference clock.
+     
clockvar assocID [name [ = value [...]] [...]]
cv assocID [name [ = value [...] ][...]]
Display a list of clock variables for those associations supporting a reference clock.
 
-     
 :config [...]
Send the remainder of the command line, including whitespace, to the server
+     
:config [...]
Send the remainder of the command line, including whitespace, to the server
 as a run-time configuration command in the same format
 as the configuration file. 
 This command is experimental until further notice and clarification. 
 Authentication is of course required.
 
-     
 config-from-file filename
Send the each line of filename to the server as
+     
config-from-file filename
Send the each line of filename to the server as
 run-time configuration commands in the same format as the configuration file. 
 This command is experimental until further notice and clarification. 
 Authentication is required.
 
-     
 ifstats
Display statistics for each local network address. 
+     
ifstats
Display statistics for each local network address. 
 Authentication is required.
 
-     
 iostats
Display network and reference clock I/O statistics.
+     
iostats
Display network and reference clock I/O statistics.
 
-     
 kerninfo
Display kernel loop and PPS statistics. 
+     
kerninfo
Display kernel loop and PPS statistics. 
 As with other ntpq output, times are in milliseconds. 
 The precision value displayed is in milliseconds as well,
 unlike the precision system variable.
 
-     
 lassociations
Perform the same function as the associations command,
+     
lassociations
Perform the same function as the associations command,
 except display mobilized and unmobilized associations.
 
-     
 monstats
Display monitor facility statistics.
+     
monstats
Display monitor facility statistics.
 
-     
 mrulist [limited | kod | mincount=count | laddr=localaddr | sort=sortorder | resany=hexmask | resall=hexmask]
Obtain and print traffic counts collected and maintained by
+     
mrulist [limited | kod | mincount=count | laddr=localaddr | sort=sortorder | resany=hexmask | resall=hexmask]
Obtain and print traffic counts collected and maintained by
 the monitor facility. 
 With the exception of sort=sortorder,
 the options filter the list returned by ntpd. 
@@ -1328,15 +1347,15 @@ could not be verified in parentheses.
 
      

 
-     
 mreadvar assocID assocID [ variable_name [ = value[ ... ]
 mrv assocID assocID [ variable_name [ = value[ ... ]
Perform the same function as the readvar command,
+     
mreadvar assocID assocID [ variable_name [ = value[ ... ]
mrv assocID assocID [ variable_name [ = value[ ... ]
Perform the same function as the readvar command,
 except for a range of association IDs. 
 This range is determined from the association list cached by
 the most recent associations command.
 
-     
 passociations
Perform the same function as the associations command, except that
+     
passociations
Perform the same function as the associations command, except that
 it uses previously stored data rather than making a new query.
 
-     
 peers
Display a list of peers in the form:
+     
peers
Display a list of peers in the form:
 

 [tally]remote refid st t when pool reach delay offset jitter
 
@@ -1394,7 +1413,7 @@ jitter
 
      

 
-     
 readvar assocID name [ = value ] [,...]
rv assocID [ name ] [,...]
Display the specified variables. 
+     
readvar assocID name [ = value ] [,...]
rv assocID [ name ] [,...]
Display the specified variables. 
 If assocID is zero,
 the variables are from the system variables name space,
 otherwise they are from the peer variables name space. 
@@ -1409,7 +1428,7 @@ Some NTP timestamps are represented in the format YYYYMMDDTTTT,
 where YYYY is the year, MM the month of year, DD the day of month and
 TTTT the time of day.
 
-     
 saveconfig filename
Write the current configuration, including any runtime modifications
+     
saveconfig filename
Write the current configuration, including any runtime modifications
 given with :config or config-from-file,
 to the ntpd host's file filename. 
 This command will be rejected by the server unless
@@ -1421,25 +1440,26 @@ to substitute the current date and time, for example,
 The filename used is stored in system variable savedconfig. 
 Authentication is required.
 
-     
 writevar assocID name = value [,...]
Write the specified variables. 
+     
writevar assocID name = value [,...]
Write the specified variables. 
 If the assocID is zero, the variables are from the
 system variables name space, otherwise they are from the
 peer variables name	space. 
 The assocID is required,
 as the same name can occur in both spaces.
 
-     
 sysinfo
Display operational summary.
+     
sysinfo
Display operational summary.
 
-     
 sysstats
Print statistics counters maintained in the protocol module.
+     
sysstats
Print statistics counters maintained in the protocol module.
 
   
 
 

+
 

-Next: ,
+Next: ,
 Previous: Control Message Commands,
 Up: Top
-

+
 

 
 
@@ -1464,11 +1484,12 @@ They are now displayed, when appropriate,
 in the reference identifier field in various billboards.
 
 

+
 

-Next: ,
+Next: ,
 Previous: Status Words and Kiss Codes,
 Up: Top
-

+
 

 
 
@@ -1615,11 +1636,12 @@ NTP seconds when the certificate expires
   

 
 

+
 

-Next: ,
+Next: ,
 Previous: System Variables,
 Up: Top
-

+
 

 
 
@@ -1780,10 +1802,11 @@ Autokey signature timestamp
   

 
 

+
 

-Previous: Peer Variables,
+Previous: Peer Variables,
 Up: Top
-

+
 

 
 
diff --git a/ntpq/ntpq.man.in b/ntpq/ntpq.man.in
index cbfb2d5b9..f64bd824c 100644
--- a/ntpq/ntpq.man.in
+++ b/ntpq/ntpq.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntpq @NTPQ_MS@ "06 Oct 2015" "4.2.8p4-RC1" "User Commands"
+.TH ntpq @NTPQ_MS@ "17 Oct 2015" "4.2.8p4-sec-RC2" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-1da4iE/ag-ceaWhE)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 06:09:39 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:25:40 AM by AutoGen 5.18.5
 .\" From the definitions ntpq-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/ntpq/ntpq.mdoc.in b/ntpq/ntpq.mdoc.in
index 2e3e56ffa..47b4f2e0a 100644
--- a/ntpq/ntpq.mdoc.in
+++ b/ntpq/ntpq.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTPQ @NTPQ_MS@ User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntpq-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:10:30 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:25:33 AM by AutoGen 5.18.5
 .\"  From the definitions    ntpq-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/ntpsnmpd/invoke-ntpsnmpd.texi b/ntpsnmpd/invoke-ntpsnmpd.texi
index 80531a45a..71b5819cb 100644
--- a/ntpsnmpd/invoke-ntpsnmpd.texi
+++ b/ntpsnmpd/invoke-ntpsnmpd.texi
@@ -6,7 +6,7 @@
 #
 # EDIT THIS FILE WITH CAUTION  (invoke-ntpsnmpd.texi)
 #
-# It has been AutoGen-ed  October  6, 2015 at 06:15:50 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:25:53 AM by AutoGen 5.18.5
 # From the definitions    ntpsnmpd-opts.def
 # and the template file   agtexi-cmd.tpl
 @end ignore
@@ -47,7 +47,7 @@ with a status code of 0.
 
 @exampleindent 0
 @example
-ntpsnmpd - NTP SNMP MIB agent - Ver. 4.2.8p4-RC1
+ntpsnmpd - NTP SNMP MIB agent - Ver. 4.2.8p4-sec-RC2
 Usage:  ntpsnmpd [ - [] | --[@{=| @}] ]...
   Flg Arg Option-Name    Description
    -n no  nofork         Do not fork
diff --git a/ntpsnmpd/ntpsnmpd-opts.c b/ntpsnmpd/ntpsnmpd-opts.c
index 54e0db19b..0f6de0215 100644
--- a/ntpsnmpd/ntpsnmpd-opts.c
+++ b/ntpsnmpd/ntpsnmpd-opts.c
@@ -1,7 +1,7 @@
 /*
  *  EDIT THIS FILE WITH CAUTION  (ntpsnmpd-opts.c)
  *
- *  It has been AutoGen-ed  October  6, 2015 at 06:11:02 AM by AutoGen 5.18.5
+ *  It has been AutoGen-ed  October 17, 2015 at 06:25:42 AM by AutoGen 5.18.5
  *  From the definitions    ntpsnmpd-opts.def
  *  and the template file   options
  *
@@ -50,7 +50,7 @@ extern "C" {
 #endif
 extern FILE * option_usage_fp;
 #define zCopyright      (ntpsnmpd_opt_strs+0)
-#define zLicenseDescrip (ntpsnmpd_opt_strs+348)
+#define zLicenseDescrip (ntpsnmpd_opt_strs+352)
 
 
 #ifndef NULL
@@ -60,15 +60,15 @@ extern FILE * option_usage_fp;
 /**
  *  static const strings for ntpsnmpd options
  */
-static char const ntpsnmpd_opt_strs[1622] =
-/*     0 */ "ntpsnmpd 4.2.8p4-RC1\n"
+static char const ntpsnmpd_opt_strs[1634] =
+/*     0 */ "ntpsnmpd 4.2.8p4-sec-RC2\n"
             "Copyright (C) 1992-2015 The University of Delaware and Network Time Foundation, all rights reserved.\n"
             "This is free software. It is licensed for use, modification and\n"
             "redistribution under the terms of the NTP License, copies of which\n"
             "can be seen at:\n"
             "  \n"
             "  \n\0"
-/*   348 */ "Permission to use, copy, modify, and distribute this software and its\n"
+/*   352 */ "Permission to use, copy, modify, and distribute this software and its\n"
             "documentation for any purpose with or without fee is hereby granted,\n"
             "provided that the above copyright notice appears in all copies and that\n"
             "both the copyright notice and this permission notice appear in supporting\n"
@@ -78,47 +78,47 @@ static char const ntpsnmpd_opt_strs[1622] =
             "Time Foundation makes no representations about the suitability this\n"
             "software for any purpose.  It is provided \"as is\" without express or\n"
             "implied warranty.\n\0"
-/*  1016 */ "Do not fork\0"
-/*  1028 */ "NOFORK\0"
-/*  1035 */ "nofork\0"
-/*  1042 */ "Log to syslog()\0"
-/*  1058 */ "SYSLOG\0"
-/*  1065 */ "syslog\0"
-/*  1072 */ "The socket address ntpsnmpd uses to connect to net-snmpd\0"
-/*  1129 */ "AGENTXSOCKET\0"
-/*  1142 */ "agentxsocket\0"
-/*  1155 */ "unix:/var/agentx/master\0"
-/*  1179 */ "display extended usage information and exit\0"
-/*  1223 */ "help\0"
-/*  1228 */ "extended usage information passed thru pager\0"
-/*  1273 */ "more-help\0"
-/*  1283 */ "output version information and exit\0"
-/*  1319 */ "version\0"
-/*  1327 */ "save the option state to a config file\0"
-/*  1366 */ "save-opts\0"
-/*  1376 */ "load options from a config file\0"
-/*  1408 */ "LOAD_OPTS\0"
-/*  1418 */ "no-load-opts\0"
-/*  1431 */ "no\0"
-/*  1434 */ "NTPSNMPD\0"
-/*  1443 */ "ntpsnmpd - NTP SNMP MIB agent - Ver. 4.2.8p4-RC1\n"
+/*  1020 */ "Do not fork\0"
+/*  1032 */ "NOFORK\0"
+/*  1039 */ "nofork\0"
+/*  1046 */ "Log to syslog()\0"
+/*  1062 */ "SYSLOG\0"
+/*  1069 */ "syslog\0"
+/*  1076 */ "The socket address ntpsnmpd uses to connect to net-snmpd\0"
+/*  1133 */ "AGENTXSOCKET\0"
+/*  1146 */ "agentxsocket\0"
+/*  1159 */ "unix:/var/agentx/master\0"
+/*  1183 */ "display extended usage information and exit\0"
+/*  1227 */ "help\0"
+/*  1232 */ "extended usage information passed thru pager\0"
+/*  1277 */ "more-help\0"
+/*  1287 */ "output version information and exit\0"
+/*  1323 */ "version\0"
+/*  1331 */ "save the option state to a config file\0"
+/*  1370 */ "save-opts\0"
+/*  1380 */ "load options from a config file\0"
+/*  1412 */ "LOAD_OPTS\0"
+/*  1422 */ "no-load-opts\0"
+/*  1435 */ "no\0"
+/*  1438 */ "NTPSNMPD\0"
+/*  1447 */ "ntpsnmpd - NTP SNMP MIB agent - Ver. 4.2.8p4-sec-RC2\n"
             "Usage:  %s [ - [] | --[{=| }] ]...\n\0"
-/*  1550 */ "$HOME\0"
-/*  1556 */ ".\0"
-/*  1558 */ ".ntprc\0"
-/*  1565 */ "http://bugs.ntp.org, bugs@ntp.org\0"
-/*  1599 */ "\n\0"
-/*  1601 */ "ntpsnmpd 4.2.8p4-RC1";
+/*  1558 */ "$HOME\0"
+/*  1564 */ ".\0"
+/*  1566 */ ".ntprc\0"
+/*  1573 */ "http://bugs.ntp.org, bugs@ntp.org\0"
+/*  1607 */ "\n\0"
+/*  1609 */ "ntpsnmpd 4.2.8p4-sec-RC2";
 
 /**
  *  nofork option description:
  */
 /** Descriptive text for the nofork option */
-#define NOFORK_DESC      (ntpsnmpd_opt_strs+1016)
+#define NOFORK_DESC      (ntpsnmpd_opt_strs+1020)
 /** Upper-cased name for the nofork option */
-#define NOFORK_NAME      (ntpsnmpd_opt_strs+1028)
+#define NOFORK_NAME      (ntpsnmpd_opt_strs+1032)
 /** Name string for the nofork option */
-#define NOFORK_name      (ntpsnmpd_opt_strs+1035)
+#define NOFORK_name      (ntpsnmpd_opt_strs+1039)
 /** Compiled in flag settings for the nofork option */
 #define NOFORK_FLAGS     (OPTST_DISABLED)
 
@@ -126,11 +126,11 @@ static char const ntpsnmpd_opt_strs[1622] =
  *  syslog option description:
  */
 /** Descriptive text for the syslog option */
-#define SYSLOG_DESC      (ntpsnmpd_opt_strs+1042)
+#define SYSLOG_DESC      (ntpsnmpd_opt_strs+1046)
 /** Upper-cased name for the syslog option */
-#define SYSLOG_NAME      (ntpsnmpd_opt_strs+1058)
+#define SYSLOG_NAME      (ntpsnmpd_opt_strs+1062)
 /** Name string for the syslog option */
-#define SYSLOG_name      (ntpsnmpd_opt_strs+1065)
+#define SYSLOG_name      (ntpsnmpd_opt_strs+1069)
 /** Compiled in flag settings for the syslog option */
 #define SYSLOG_FLAGS     (OPTST_DISABLED)
 
@@ -138,13 +138,13 @@ static char const ntpsnmpd_opt_strs[1622] =
  *  agentXSocket option description:
  */
 /** Descriptive text for the agentXSocket option */
-#define AGENTXSOCKET_DESC      (ntpsnmpd_opt_strs+1072)
+#define AGENTXSOCKET_DESC      (ntpsnmpd_opt_strs+1076)
 /** Upper-cased name for the agentXSocket option */
-#define AGENTXSOCKET_NAME      (ntpsnmpd_opt_strs+1129)
+#define AGENTXSOCKET_NAME      (ntpsnmpd_opt_strs+1133)
 /** Name string for the agentXSocket option */
-#define AGENTXSOCKET_name      (ntpsnmpd_opt_strs+1142)
+#define AGENTXSOCKET_name      (ntpsnmpd_opt_strs+1146)
 /** The compiled in default value for the agentXSocket option argument */
-#define AGENTXSOCKET_DFT_ARG   (ntpsnmpd_opt_strs+1155)
+#define AGENTXSOCKET_DFT_ARG   (ntpsnmpd_opt_strs+1159)
 /** Compiled in flag settings for the agentXSocket option */
 #define AGENTXSOCKET_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -152,11 +152,11 @@ static char const ntpsnmpd_opt_strs[1622] =
 /*
  *  Help/More_Help/Version option descriptions:
  */
-#define HELP_DESC       (ntpsnmpd_opt_strs+1179)
-#define HELP_name       (ntpsnmpd_opt_strs+1223)
+#define HELP_DESC       (ntpsnmpd_opt_strs+1183)
+#define HELP_name       (ntpsnmpd_opt_strs+1227)
 #ifdef HAVE_WORKING_FORK
-#define MORE_HELP_DESC  (ntpsnmpd_opt_strs+1228)
-#define MORE_HELP_name  (ntpsnmpd_opt_strs+1273)
+#define MORE_HELP_DESC  (ntpsnmpd_opt_strs+1232)
+#define MORE_HELP_name  (ntpsnmpd_opt_strs+1277)
 #define MORE_HELP_FLAGS (OPTST_IMM | OPTST_NO_INIT)
 #else
 #define MORE_HELP_DESC  HELP_DESC
@@ -169,14 +169,14 @@ static char const ntpsnmpd_opt_strs[1622] =
 #  define VER_FLAGS     (OPTST_SET_ARGTYPE(OPARG_TYPE_STRING) | \
                          OPTST_ARG_OPTIONAL | OPTST_IMM | OPTST_NO_INIT)
 #endif
-#define VER_DESC        (ntpsnmpd_opt_strs+1283)
-#define VER_name        (ntpsnmpd_opt_strs+1319)
-#define SAVE_OPTS_DESC  (ntpsnmpd_opt_strs+1327)
-#define SAVE_OPTS_name  (ntpsnmpd_opt_strs+1366)
-#define LOAD_OPTS_DESC     (ntpsnmpd_opt_strs+1376)
-#define LOAD_OPTS_NAME     (ntpsnmpd_opt_strs+1408)
-#define NO_LOAD_OPTS_name  (ntpsnmpd_opt_strs+1418)
-#define LOAD_OPTS_pfx      (ntpsnmpd_opt_strs+1431)
+#define VER_DESC        (ntpsnmpd_opt_strs+1287)
+#define VER_name        (ntpsnmpd_opt_strs+1323)
+#define SAVE_OPTS_DESC  (ntpsnmpd_opt_strs+1331)
+#define SAVE_OPTS_name  (ntpsnmpd_opt_strs+1370)
+#define LOAD_OPTS_DESC     (ntpsnmpd_opt_strs+1380)
+#define LOAD_OPTS_NAME     (ntpsnmpd_opt_strs+1412)
+#define NO_LOAD_OPTS_name  (ntpsnmpd_opt_strs+1422)
+#define LOAD_OPTS_pfx      (ntpsnmpd_opt_strs+1435)
 #define LOAD_OPTS_name     (NO_LOAD_OPTS_name + 3)
 /**
  *  Declare option callback procedures
@@ -301,24 +301,24 @@ static tOptDesc optDesc[OPTION_CT] = {
 
 /* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
 /** Reference to the upper cased version of ntpsnmpd. */
-#define zPROGNAME       (ntpsnmpd_opt_strs+1434)
+#define zPROGNAME       (ntpsnmpd_opt_strs+1438)
 /** Reference to the title line for ntpsnmpd usage. */
-#define zUsageTitle     (ntpsnmpd_opt_strs+1443)
+#define zUsageTitle     (ntpsnmpd_opt_strs+1447)
 /** ntpsnmpd configuration file name. */
-#define zRcName         (ntpsnmpd_opt_strs+1558)
+#define zRcName         (ntpsnmpd_opt_strs+1566)
 /** Directories to search for ntpsnmpd config files. */
 static char const * const apzHomeList[3] = {
-    ntpsnmpd_opt_strs+1550,
-    ntpsnmpd_opt_strs+1556,
+    ntpsnmpd_opt_strs+1558,
+    ntpsnmpd_opt_strs+1564,
     NULL };
 /** The ntpsnmpd program bug email address. */
-#define zBugsAddr       (ntpsnmpd_opt_strs+1565)
+#define zBugsAddr       (ntpsnmpd_opt_strs+1573)
 /** Clarification/explanation of what ntpsnmpd does. */
-#define zExplain        (ntpsnmpd_opt_strs+1599)
+#define zExplain        (ntpsnmpd_opt_strs+1607)
 /** Extra detail explaining what ntpsnmpd does. */
 #define zDetail         (NULL)
 /** The full version string for ntpsnmpd. */
-#define zFullVersion    (ntpsnmpd_opt_strs+1601)
+#define zFullVersion    (ntpsnmpd_opt_strs+1609)
 /* extracted from optcode.tlib near line 364 */
 
 #if defined(ENABLE_NLS)
@@ -554,7 +554,7 @@ static void bogus_function(void) {
      translate option names.
    */
   /* referenced via ntpsnmpdOptions.pzCopyright */
-  puts(_("ntpsnmpd 4.2.8p4-RC1\n\
+  puts(_("ntpsnmpd 4.2.8p4-sec-RC2\n\
 Copyright (C) 1992-2015 The University of Delaware and Network Time Foundation, all rights reserved.\n\
 This is free software. It is licensed for use, modification and\n\
 redistribution under the terms of the NTP License, copies of which\n\
@@ -599,14 +599,14 @@ implied warranty.\n"));
   puts(_("load options from a config file"));
 
   /* referenced via ntpsnmpdOptions.pzUsageTitle */
-  puts(_("ntpsnmpd - NTP SNMP MIB agent - Ver. 4.2.8p4-RC1\n\
+  puts(_("ntpsnmpd - NTP SNMP MIB agent - Ver. 4.2.8p4-sec-RC2\n\
 Usage:  %s [ - [] | --[{=| }] ]...\n"));
 
   /* referenced via ntpsnmpdOptions.pzExplain */
   puts(_("\n"));
 
   /* referenced via ntpsnmpdOptions.pzFullVersion */
-  puts(_("ntpsnmpd 4.2.8p4-RC1"));
+  puts(_("ntpsnmpd 4.2.8p4-sec-RC2"));
 
   /* referenced via ntpsnmpdOptions.pzFullUsage */
   puts(_("<<>>"));
diff --git a/ntpsnmpd/ntpsnmpd-opts.h b/ntpsnmpd/ntpsnmpd-opts.h
index 715941c06..06d2f4026 100644
--- a/ntpsnmpd/ntpsnmpd-opts.h
+++ b/ntpsnmpd/ntpsnmpd-opts.h
@@ -1,7 +1,7 @@
 /*
  *  EDIT THIS FILE WITH CAUTION  (ntpsnmpd-opts.h)
  *
- *  It has been AutoGen-ed  October  6, 2015 at 06:11:02 AM by AutoGen 5.18.5
+ *  It has been AutoGen-ed  October 17, 2015 at 06:25:42 AM by AutoGen 5.18.5
  *  From the definitions    ntpsnmpd-opts.def
  *  and the template file   options
  *
@@ -76,9 +76,9 @@ typedef enum {
 /** count of all options for ntpsnmpd */
 #define OPTION_CT    8
 /** ntpsnmpd version */
-#define NTPSNMPD_VERSION       "4.2.8p4-RC1"
+#define NTPSNMPD_VERSION       "4.2.8p4-sec-RC2"
 /** Full ntpsnmpd version text */
-#define NTPSNMPD_FULL_VERSION  "ntpsnmpd 4.2.8p4-RC1"
+#define NTPSNMPD_FULL_VERSION  "ntpsnmpd 4.2.8p4-sec-RC2"
 
 /**
  *  Interface defines for all options.  Replace "n" with the UPPER_CASED
diff --git a/ntpsnmpd/ntpsnmpd.1ntpsnmpdman b/ntpsnmpd/ntpsnmpd.1ntpsnmpdman
index a6a129595..55f0c124f 100644
--- a/ntpsnmpd/ntpsnmpd.1ntpsnmpdman
+++ b/ntpsnmpd/ntpsnmpd.1ntpsnmpdman
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntpsnmpd 1ntpsnmpdman "06 Oct 2015" "4.2.8p4-RC1" "User Commands"
+.TH ntpsnmpd 1ntpsnmpdman "17 Oct 2015" "4.2.8p4-sec-RC2" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-tYaOrF/ag-FYaGqF)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 06:15:38 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:25:54 AM by AutoGen 5.18.5
 .\" From the definitions ntpsnmpd-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/ntpsnmpd/ntpsnmpd.1ntpsnmpdmdoc b/ntpsnmpd/ntpsnmpd.1ntpsnmpdmdoc
index 99c9c3a9b..f88df87ad 100644
--- a/ntpsnmpd/ntpsnmpd.1ntpsnmpdmdoc
+++ b/ntpsnmpd/ntpsnmpd.1ntpsnmpdmdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTPSNMPD 1ntpsnmpdmdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntpsnmpd-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:16:06 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:25:50 AM by AutoGen 5.18.5
 .\"  From the definitions    ntpsnmpd-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/ntpsnmpd/ntpsnmpd.html b/ntpsnmpd/ntpsnmpd.html
index adee1c719..f4f7a0751 100644
--- a/ntpsnmpd/ntpsnmpd.html
+++ b/ntpsnmpd/ntpsnmpd.html
@@ -3,7 +3,7 @@
 ntpsnmpd: Network Time Protocol SNMP Daemon User's Manual
 
 
-
+
 
 
 
@@ -14,8 +14,9 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
@@ -30,11 +31,12 @@
 
 
 

+
 

-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-

+
 

 
 
ntpsnmpd: Network Time Protocol Query User Manual

@@ -42,7 +44,7 @@ Up: (dir)
 
The ntpsnmpd utility program is used to monitor NTP daemon ntpd
 operations and determine performance.  It uses the standard NTP mode 6 control
 
-  
This document applies to version 4.2.8p4-RC1 of ntpsnmpd.
+  
This document applies to version 4.2.8p4-sec-RC2 of ntpsnmpd.
 
 
    
 
  • ntpsnmpd Description:             Description
@@ -51,11 +53,12 @@ operations and determine performance.  It uses the standard NTP mode 6 control
 

 
 

+
 

-Next: ,
+Next: ,
 Previous: Top,
 Up: Top
-

+
 

 
 
@@ -64,10 +67,11 @@ Up: Top
 
The ntpsnmpd utility program provides an SNMP MIB agent for ntpd.
 
 

+
 

-Previous: ntpsnmpd Description,
+Previous: ntpsnmpd Description,
 Up: Top
-

+
 

 
 
diff --git a/ntpsnmpd/ntpsnmpd.man.in b/ntpsnmpd/ntpsnmpd.man.in
index 9b8ed341d..eecf4ac5e 100644
--- a/ntpsnmpd/ntpsnmpd.man.in
+++ b/ntpsnmpd/ntpsnmpd.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntpsnmpd @NTPSNMPD_MS@ "06 Oct 2015" "4.2.8p4-RC1" "User Commands"
+.TH ntpsnmpd @NTPSNMPD_MS@ "17 Oct 2015" "4.2.8p4-sec-RC2" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-tYaOrF/ag-FYaGqF)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 06:15:38 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:25:54 AM by AutoGen 5.18.5
 .\" From the definitions ntpsnmpd-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/ntpsnmpd/ntpsnmpd.mdoc.in b/ntpsnmpd/ntpsnmpd.mdoc.in
index 55494096f..5fb947cbd 100644
--- a/ntpsnmpd/ntpsnmpd.mdoc.in
+++ b/ntpsnmpd/ntpsnmpd.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTPSNMPD @NTPSNMPD_MS@ User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntpsnmpd-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:16:06 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:25:50 AM by AutoGen 5.18.5
 .\"  From the definitions    ntpsnmpd-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/packageinfo.sh b/packageinfo.sh
index 269169fe7..8a6a0fa43 100644
--- a/packageinfo.sh
+++ b/packageinfo.sh
@@ -67,7 +67,7 @@ esac
 
 # Special.  Normally unused.  A suffix.
 #special=ag
-special=
+special=sec
 
 # prerelease can be empty, 'beta', or 'rc'.
 prerelease=rc
@@ -104,4 +104,4 @@ betapoint=0
 # - - prerelease is emptied
 # else (not in RC)
 # - rcpoint is empty and unused (for now).
-rcpoint=1
+rcpoint=2
diff --git a/scripts/calc_tickadj/calc_tickadj.1calc_tickadjman b/scripts/calc_tickadj/calc_tickadj.1calc_tickadjman
index f574d264f..afb92ae2c 100644
--- a/scripts/calc_tickadj/calc_tickadj.1calc_tickadjman
+++ b/scripts/calc_tickadj/calc_tickadj.1calc_tickadjman
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH calc_tickadj 1calc_tickadjman "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH calc_tickadj 1calc_tickadjman "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-Z6aGoq/ag-a7aOnq)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:58:19 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:21:35 AM by AutoGen 5.18.5
 .\" From the definitions calc_tickadj-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/calc_tickadj/calc_tickadj.1calc_tickadjmdoc b/scripts/calc_tickadj/calc_tickadj.1calc_tickadjmdoc
index add28d790..d72b49a18 100644
--- a/scripts/calc_tickadj/calc_tickadj.1calc_tickadjmdoc
+++ b/scripts/calc_tickadj/calc_tickadj.1calc_tickadjmdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt CALC_TICKADJ 1calc_tickadjmdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (calc_tickadj-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:58:22 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:21:33 AM by AutoGen 5.18.5
 .\"  From the definitions    calc_tickadj-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/scripts/calc_tickadj/calc_tickadj.html b/scripts/calc_tickadj/calc_tickadj.html
index d6cae8c9d..28cd3cac0 100644
--- a/scripts/calc_tickadj/calc_tickadj.html
+++ b/scripts/calc_tickadj/calc_tickadj.html
@@ -3,7 +3,7 @@
 calc_tickadj User's Manual
 
 
-
+
 
 
 
@@ -14,24 +14,26 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
 
calc_tickadj User's Manual

 

+
 

-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-

+
 

 
 
calc_tickadj User's Manual

 
 
This document describes the use of the NTP Project's calc_tickadj program. 
-This document applies to version 4.2.8p4-RC1 of calc_tickadj.
+This document applies to version 4.2.8p4-sec-RC2 of calc_tickadj.
 
   

 
Short Contents

@@ -46,10 +48,12 @@ This document applies to version 4.2.8p4-RC1 of calc_tickadj.
 
 
 

+
+
 

-Previous: calc_tickadj Description,
+Previous: calc_tickadj Description,
 Up: Top
-

+
 

 
 
Invoking calc_tickadj

@@ -82,30 +86,32 @@ current tick manually on command line.
 using the agtexi-cmd template and the option descriptions for the calc_tickadj program.
 
 
 
 

+
+
 

-Next: ,
+Next: ,
 Up: calc_tickadj Invocation
-

+
 

 
-
calc_tickadj help/usage (--help)

+
calc_tickadj help/usage (--help)

 
 

 This is the automatically generated usage text for calc_tickadj.
 
   
The text printed is the same whether selected with the help option
-(--help) or the more-help option (--more-help).  more-help will print
+(--help) or the more-help option (--more-help).  more-help will print
 the usage text by passing it through a pager program. 
 more-help is disabled on platforms without a working
 fork(2) function.  The PAGER environment variable is
-used to select the program, defaulting to more.  Both will exit
+used to select the program, defaulting to more.  Both will exit
 with a status code of 0.
 
 
calc_tickadj - Calculates "optimal" value for tick given ntp drift file. - Ver. 4.2.7p467
@@ -120,11 +126,13 @@ Options are specified by doubled hyphens and their name or by a single
 hyphen and the flag character.
 

   

+
+
 

-Next: ,
+Next: ,
 Previous: calc_tickadj usage,
 Up: calc_tickadj Invocation
-

+
 

 
 
drift-file option (-d)

@@ -134,11 +142,13 @@ This is the “ntp drift file to use” option.
 This option takes a string argument. 
 Use the specified drift file for calculations
 

+
+
 

-Next: ,
+Next: ,
 Previous: calc_tickadj drift-file,
 Up: calc_tickadj Invocation
-

+
 

 
 
tick option (-t)

@@ -148,18 +158,20 @@ This is the “tick value of this host” option.
 This option takes a number argument. 
 The current tick which to adjustment will be calculated
 

+
+
 

-Previous: calc_tickadj tick,
+Previous: calc_tickadj tick,
 Up: calc_tickadj Invocation
-

+
 

 
 
calc_tickadj exit status

 
 
One of the following exit values will be returned:
      

-
0 (EXIT_SUCCESS)
Successful program execution. 
-
1 (EXIT_FAILURE)
The operation failed or the command syntax was not valid. 
+
‘0 (EXIT_SUCCESS)’
Successful program execution. 
+
‘1 (EXIT_FAILURE)’
The operation failed or the command syntax was not valid. 
 

 
 
diff --git a/scripts/calc_tickadj/calc_tickadj.man.in b/scripts/calc_tickadj/calc_tickadj.man.in
index f574d264f..afb92ae2c 100644
--- a/scripts/calc_tickadj/calc_tickadj.man.in
+++ b/scripts/calc_tickadj/calc_tickadj.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH calc_tickadj 1calc_tickadjman "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH calc_tickadj 1calc_tickadjman "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-Z6aGoq/ag-a7aOnq)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:58:19 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:21:35 AM by AutoGen 5.18.5
 .\" From the definitions calc_tickadj-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/calc_tickadj/calc_tickadj.mdoc.in b/scripts/calc_tickadj/calc_tickadj.mdoc.in
index add28d790..d72b49a18 100644
--- a/scripts/calc_tickadj/calc_tickadj.mdoc.in
+++ b/scripts/calc_tickadj/calc_tickadj.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt CALC_TICKADJ 1calc_tickadjmdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (calc_tickadj-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:58:22 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:21:33 AM by AutoGen 5.18.5
 .\"  From the definitions    calc_tickadj-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/scripts/calc_tickadj/invoke-calc_tickadj.texi b/scripts/calc_tickadj/invoke-calc_tickadj.texi
index 0b16318ec..f1da58fd7 100644
--- a/scripts/calc_tickadj/invoke-calc_tickadj.texi
+++ b/scripts/calc_tickadj/invoke-calc_tickadj.texi
@@ -6,7 +6,7 @@
 #
 # EDIT THIS FILE WITH CAUTION  (invoke-calc_tickadj.texi)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:58:24 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:21:37 AM by AutoGen 5.18.5
 # From the definitions    calc_tickadj-opts.def
 # and the template file   agtexi-cmd.tpl
 @end ignore
diff --git a/scripts/invoke-plot_summary.texi b/scripts/invoke-plot_summary.texi
index ccd459ad5..44464b2bd 100644
--- a/scripts/invoke-plot_summary.texi
+++ b/scripts/invoke-plot_summary.texi
@@ -6,7 +6,7 @@
 #
 # EDIT THIS FILE WITH CAUTION  (invoke-plot_summary.texi)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:59:09 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:22:03 AM by AutoGen 5.18.5
 # From the definitions    plot_summary-opts.def
 # and the template file   agtexi-cmd.tpl
 @end ignore
@@ -41,7 +41,7 @@ with a status code of 0.
 
 @exampleindent 0
 @example
-plot_summary - plot statistics generated by summary script - Ver. 4.2.8p4-RC1
+plot_summary - plot statistics generated by summary script - Ver. 4.2.8p4-sec-RC2
 USAGE: plot_summary [ - [] | --[@{=| @}] ]... 
 
         --directory=str          Where the summary files are
diff --git a/scripts/invoke-summary.texi b/scripts/invoke-summary.texi
index 6e12b9d16..db3733428 100644
--- a/scripts/invoke-summary.texi
+++ b/scripts/invoke-summary.texi
@@ -6,7 +6,7 @@
 #
 # EDIT THIS FILE WITH CAUTION  (invoke-summary.texi)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:59:14 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:22:07 AM by AutoGen 5.18.5
 # From the definitions    summary-opts.def
 # and the template file   agtexi-cmd.tpl
 @end ignore
@@ -42,7 +42,7 @@ with a status code of 0.
 
 @exampleindent 0
 @example
-summary - compute various stastics from NTP stat files - Ver. 4.2.8p4-RC1
+summary - compute various stastics from NTP stat files - Ver. 4.2.8p4-sec-RC2
 USAGE: summary [ - [] | --[@{=| @}] ]... 
 
         --directory=str          Directory containing stat files
diff --git a/scripts/ntp-wait/invoke-ntp-wait.texi b/scripts/ntp-wait/invoke-ntp-wait.texi
index 2b6d2bc20..4a71bd245 100644
--- a/scripts/ntp-wait/invoke-ntp-wait.texi
+++ b/scripts/ntp-wait/invoke-ntp-wait.texi
@@ -6,7 +6,7 @@
 #
 # EDIT THIS FILE WITH CAUTION  (invoke-ntp-wait.texi)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:58:32 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:21:41 AM by AutoGen 5.18.5
 # From the definitions    ntp-wait-opts.def
 # and the template file   agtexi-cmd.tpl
 @end ignore
@@ -61,7 +61,7 @@ with a status code of 0.
 
 @exampleindent 0
 @example
-ntp-wait - Wait for ntpd to stabilize the system clock - Ver. 4.2.8p4-RC1
+ntp-wait - Wait for ntpd to stabilize the system clock - Ver. 4.2.8p4-sec-RC2
 USAGE: ntp-wait [ - [] | --[@{=| @}] ]... 
 
     -n, --tries=num              Number of times to check ntpd
diff --git a/scripts/ntp-wait/ntp-wait-opts b/scripts/ntp-wait/ntp-wait-opts
index 78f0a7912..257edb383 100644
--- a/scripts/ntp-wait/ntp-wait-opts
+++ b/scripts/ntp-wait/ntp-wait-opts
@@ -1,6 +1,6 @@
 # EDIT THIS FILE WITH CAUTION  (ntp-wait-opts)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:58:26 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:21:38 AM by AutoGen 5.18.5
 # From the definitions    ntp-wait-opts.def
 # and the template file   perlopt
 
@@ -40,7 +40,7 @@ sub processOptions {
         'help|?', 'more-help'));
 
     $usage = <<'USAGE';
-ntp-wait - Wait for ntpd to stabilize the system clock - Ver. 4.2.8p4-RC1
+ntp-wait - Wait for ntpd to stabilize the system clock - Ver. 4.2.8p4-sec-RC2
 USAGE: ntp-wait [ - [] | --[{=| }] ]... 
 
     -n, --tries=num              Number of times to check ntpd
diff --git a/scripts/ntp-wait/ntp-wait.1ntp-waitman b/scripts/ntp-wait/ntp-wait.1ntp-waitman
index 9e135c491..b417b1078 100644
--- a/scripts/ntp-wait/ntp-wait.1ntp-waitman
+++ b/scripts/ntp-wait/ntp-wait.1ntp-waitman
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntp-wait 1ntp-waitman "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH ntp-wait 1ntp-waitman "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-xqayOr/ag-KqaGNr)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:58:28 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:21:43 AM by AutoGen 5.18.5
 .\" From the definitions ntp-wait-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/ntp-wait/ntp-wait.1ntp-waitmdoc b/scripts/ntp-wait/ntp-wait.1ntp-waitmdoc
index 14e36029c..33b356bd0 100644
--- a/scripts/ntp-wait/ntp-wait.1ntp-waitmdoc
+++ b/scripts/ntp-wait/ntp-wait.1ntp-waitmdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTP_WAIT 1ntp-waitmdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntp-wait-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:58:34 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:21:39 AM by AutoGen 5.18.5
 .\"  From the definitions    ntp-wait-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/scripts/ntp-wait/ntp-wait.html b/scripts/ntp-wait/ntp-wait.html
index ff1f1aec5..f5519a560 100644
--- a/scripts/ntp-wait/ntp-wait.html
+++ b/scripts/ntp-wait/ntp-wait.html
@@ -3,7 +3,7 @@
 Ntp-wait User's Manual
 
 
-
+
 
 
 
@@ -14,18 +14,20 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
 
Ntp-wait User's Manual

 

+
 

-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-

+
 

 
   
This document describes the use of the NTP Project's ntp-wait program.
@@ -39,7 +41,7 @@ until the system's time has stabilized and synchronized,
 and only then start any applicaitons (like database servers) that require
 accurate and stable time.
 
-  
This document applies to version 4.2.8p4-RC1 of ntp-wait.
+  
This document applies to version 4.2.8p4-sec-RC2 of ntp-wait.
 
 

 
Short Contents

@@ -53,9 +55,11 @@ accurate and stable time.
 
 
 

-

+
 
-

+

+
+
 

 
 
0.1 Invoking ntp-wait

@@ -85,7 +89,7 @@ has set the time.
 using the agtexi-cmd template and the option descriptions for the ntp-wait program.
 
 
 
 

+
+
 

-Next: ,
+Next: ,
 Up: ntp-wait Invocation
-

+
 

 
-
0.1.1 ntp-wait help/usage (--help)

+
0.1.1 ntp-wait help/usage (--help)

 
 

 This is the automatically generated usage text for ntp-wait.
 
   
The text printed is the same whether selected with the help option
-(--help) or the more-help option (--more-help).  more-help will print
+(--help) or the more-help option (--more-help).  more-help will print
 the usage text by passing it through a pager program. 
 more-help is disabled on platforms without a working
 fork(2) function.  The PAGER environment variable is
-used to select the program, defaulting to more.  Both will exit
+used to select the program, defaulting to more.  Both will exit
 with a status code of 0.
 
-
ntp-wait - Wait for ntpd to stabilize the system clock - Ver. 4.2.8p4-RC1
+
ntp-wait - Wait for ntpd to stabilize the system clock - Ver. 4.2.8p4-sec-RC2
 USAGE: ntp-wait [ -<flag> [<val>] | --<name>[{=| }<val>] ]...
 
     -n, --tries=num              Number of times to check ntpd
@@ -127,11 +133,13 @@ Options are specified by doubled hyphens and their name or by a single
 hyphen and the flag character.
 

   

+
+
 

-Next: ,
+Next: ,
 Previous: ntp-wait usage,
 Up: ntp-wait Invocation
-

+
 

 
 
0.1.2 tries option (-n)

@@ -142,26 +150,30 @@ This option takes a number argument.
         The maximum number of times we will check ntpd to see if
         it has been able to synchronize and stabilize the system clock. 
 

+
+
 

-Next: ,
+Next: ,
 Previous: ntp-wait tries,
 Up: ntp-wait Invocation
-

+
 

 
 
0.1.3 sleep option (-s)

 
 

 This is the “how long to sleep between tries” option. 
-This option takes a number argument secs-between-tries. 
-        We will sleep for secs-between-tries after each query
+This option takes a number argument secs-between-tries. 
+        We will sleep for secs-between-tries after each query
         of ntpd that returns "the time is not yet stable". 
 

+
+
 

-Next: ,
+Next: ,
 Previous: ntp-wait sleep,
 Up: ntp-wait Invocation
-

+
 

 
 
0.1.4 verbose option (-v)

@@ -171,35 +183,41 @@ This is the “be verbose” option.
         By default, ntp-wait is silent. 
         With this option, ntp-wait will provide status information. 
 

+
+
 

-Next: ,
+Next: ,
 Previous: ntp-wait verbose,
 Up: ntp-wait Invocation
-

+
 

 
 
0.1.5 ntp-wait exit status

 
 
One of the following exit values will be returned:
      

-
0 (EXIT_SUCCESS)
Successful program execution. 
-
1 (EXIT_FAILURE)
The operation failed or the command syntax was not valid. 
+
‘0 (EXIT_SUCCESS)’
Successful program execution. 
+
‘1 (EXIT_FAILURE)’
The operation failed or the command syntax was not valid. 
 

   

+
+
 

-Next: ,
+Next: ,
 Previous: ntp-wait exit status,
 Up: ntp-wait Invocation
-

+
 

 
 
0.1.6 ntp-wait Authors

 
 

+
+
 

-Previous: ntp-wait Authors,
+Previous: ntp-wait Authors,
 Up: ntp-wait Invocation
-

+
 

 
 
0.1.7 ntp-wait Notes

diff --git a/scripts/ntp-wait/ntp-wait.man.in b/scripts/ntp-wait/ntp-wait.man.in
index e3e8b6677..de6bdca3e 100644
--- a/scripts/ntp-wait/ntp-wait.man.in
+++ b/scripts/ntp-wait/ntp-wait.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntp-wait @NTP_WAIT_MS@ "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH ntp-wait @NTP_WAIT_MS@ "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-xqayOr/ag-KqaGNr)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:58:28 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:21:43 AM by AutoGen 5.18.5
 .\" From the definitions ntp-wait-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/ntp-wait/ntp-wait.mdoc.in b/scripts/ntp-wait/ntp-wait.mdoc.in
index 2f07d4cd1..3337ec136 100644
--- a/scripts/ntp-wait/ntp-wait.mdoc.in
+++ b/scripts/ntp-wait/ntp-wait.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTP_WAIT @NTP_WAIT_MS@ User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntp-wait-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:58:34 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:21:39 AM by AutoGen 5.18.5
 .\"  From the definitions    ntp-wait-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/scripts/ntpsweep/invoke-ntpsweep.texi b/scripts/ntpsweep/invoke-ntpsweep.texi
index 7354941a1..a4f45ece0 100644
--- a/scripts/ntpsweep/invoke-ntpsweep.texi
+++ b/scripts/ntpsweep/invoke-ntpsweep.texi
@@ -6,7 +6,7 @@
 #
 # EDIT THIS FILE WITH CAUTION  (invoke-ntpsweep.texi)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:58:38 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:21:47 AM by AutoGen 5.18.5
 # From the definitions    ntpsweep-opts.def
 # and the template file   agtexi-cmd.tpl
 @end ignore
@@ -45,7 +45,7 @@ with a status code of 0.
 
 @exampleindent 0
 @example
-ntpsweep - Print various informations about given ntp servers - Ver. 4.2.8p4-RC1
+ntpsweep - Print various informations about given ntp servers - Ver. 4.2.8p4-sec-RC2
 USAGE: ntpsweep [ - [] | --[@{=| @}] ]... [hostfile]
 
     -l, --host-list=str          Host to execute actions on
diff --git a/scripts/ntpsweep/ntpsweep-opts b/scripts/ntpsweep/ntpsweep-opts
index a09b1cb0f..a21416f68 100644
--- a/scripts/ntpsweep/ntpsweep-opts
+++ b/scripts/ntpsweep/ntpsweep-opts
@@ -1,6 +1,6 @@
 # EDIT THIS FILE WITH CAUTION  (ntpsweep-opts)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:58:36 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:21:44 AM by AutoGen 5.18.5
 # From the definitions    ntpsweep-opts.def
 # and the template file   perlopt
 
@@ -43,7 +43,7 @@ sub processOptions {
         'help|?', 'more-help'));
 
     $usage = <<'USAGE';
-ntpsweep - Print various informations about given ntp servers - Ver. 4.2.8p4-RC1
+ntpsweep - Print various informations about given ntp servers - Ver. 4.2.8p4-sec-RC2
 USAGE: ntpsweep [ - [] | --[{=| }] ]... [hostfile]
 
     -l, --host-list=str          Host to execute actions on
diff --git a/scripts/ntpsweep/ntpsweep.1ntpsweepman b/scripts/ntpsweep/ntpsweep.1ntpsweepman
index c7551ea29..9ab6338ef 100644
--- a/scripts/ntpsweep/ntpsweep.1ntpsweepman
+++ b/scripts/ntpsweep/ntpsweep.1ntpsweepman
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntpsweep 1ntpsweepman "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH ntpsweep 1ntpsweepman "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-Lmaqet/ag-Xmaydt)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:58:40 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:21:48 AM by AutoGen 5.18.5
 .\" From the definitions ntpsweep-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/ntpsweep/ntpsweep.1ntpsweepmdoc b/scripts/ntpsweep/ntpsweep.1ntpsweepmdoc
index 5077e2145..645a31471 100644
--- a/scripts/ntpsweep/ntpsweep.1ntpsweepmdoc
+++ b/scripts/ntpsweep/ntpsweep.1ntpsweepmdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTPSWEEP 1ntpsweepmdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntpsweep-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:58:44 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:21:45 AM by AutoGen 5.18.5
 .\"  From the definitions    ntpsweep-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/scripts/ntpsweep/ntpsweep.html b/scripts/ntpsweep/ntpsweep.html
index d204846cc..182f6752c 100644
--- a/scripts/ntpsweep/ntpsweep.html
+++ b/scripts/ntpsweep/ntpsweep.html
@@ -3,7 +3,7 @@
 ntpsweep User's Manual
 
 
-
+
 
 
 
@@ -14,23 +14,25 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
 
ntpsweep User's Manual

 

+
 

-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-

+
 

 
   
This document describes the use of the NTP Project's ntpsweep program.
 
-  
This document applies to version 4.2.8p4-RC1 of ntpsweep.
+  
This document applies to version 4.2.8p4-sec-RC2 of ntpsweep.
 
   

 
Short Contents

@@ -44,9 +46,10 @@ Up: (dir)
 
 
 

-

 
-

+

+
+
 

 
 
0.1 Invoking ntpsweep

@@ -61,7 +64,7 @@ all peers.
 using the agtexi-cmd template and the option descriptions for the ntpsweep program.
 
 
 
 

+
 

-Next: ,
+Next: ,
 Up: ntpsweep Invocation
-

+
 

 
-
0.1.1 ntpsweep help/usage (--help)

+
0.1.1 ntpsweep help/usage (--help)

 
 

 This is the automatically generated usage text for ntpsweep.
 
   
The text printed is the same whether selected with the help option
-(--help) or the more-help option (--more-help).  more-help will print
+(--help) or the more-help option (--more-help).  more-help will print
 the usage text by passing it through a pager program. 
 more-help is disabled on platforms without a working
 fork(2) function.  The PAGER environment variable is
-used to select the program, defaulting to more.  Both will exit
+used to select the program, defaulting to more.  Both will exit
 with a status code of 0.
 
-
ntpsweep - Print various informations about given ntp servers - Ver. 4.2.8p4-RC1
+
ntpsweep - Print various informations about given ntp servers - Ver. 4.2.8p4-sec-RC2
 USAGE: ntpsweep [ -<flag> [<val>] | --<name>[{=| }<val>] ]... [hostfile]
 
     -l, --host-list=str          Host to execute actions on
@@ -105,11 +109,13 @@ Options are specified by doubled hyphens and their name or by a single
 hyphen and the flag character.
 

   

+
+
 

-Next: ,
+Next: ,
 Previous: ntpsweep usage,
 Up: ntpsweep Invocation
-

+
 

 
 
0.1.2 host-list option (-l)

@@ -126,24 +132,26 @@ This option takes a string argument.
   
Use this option to specify the host on which this script operates. 
             May appear multiple times. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpsweep host-list,
 Up: ntpsweep Invocation
-

+
 

 
 
0.1.3 peers option (-p)

 
 

 This is the “recursively list all peers a host synchronizes to” option. 
-This option has no doc documentation. 
+This option has no ‘doc’ documentation. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpsweep peers,
 Up: ntpsweep Invocation
-

+
 

 
 
0.1.4 maxlevel option (-m)

@@ -151,13 +159,14 @@ Up: ntpsweep Invocati
 

 This is the “traverse peers up to this level (4 is a reasonable number)” option. 
 This option takes a number argument. 
-This option has no doc documentation. 
+This option has no ‘doc’ documentation. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpsweep maxlevel,
 Up: ntpsweep Invocation
-

+
 

 
 
0.1.5 strip option (-s)

@@ -165,13 +174,14 @@ Up: ntpsweep Invocati
 

 This is the “strip this string from hostnames” option. 
 This option takes a string argument. 
-This option has no doc documentation. 
+This option has no ‘doc’ documentation. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntpsweep strip,
 Up: ntpsweep Invocation
-

+
 

 
 
0.1.6 host option (-h)

@@ -179,22 +189,23 @@ Up: ntpsweep Invocati
 

 This is the “specify a single host” option. 
 This option takes a string argument. 
-This option has no doc documentation.
+This option has no ‘doc’ documentation.
 
   
NOTE: THIS OPTION IS DEPRECATED
 

+
 

-Previous: ntpsweep host,
+Previous: ntpsweep host,
 Up: ntpsweep Invocation
-

+
 

 
 
0.1.7 ntpsweep exit status

 
 
One of the following exit values will be returned:
      

-
0 (EXIT_SUCCESS)
Successful program execution. 
-
1 (EXIT_FAILURE)
The operation failed or the command syntax was not valid. 
+
‘0 (EXIT_SUCCESS)’
Successful program execution. 
+
‘1 (EXIT_FAILURE)’
The operation failed or the command syntax was not valid. 
 

 
 
diff --git a/scripts/ntpsweep/ntpsweep.man.in b/scripts/ntpsweep/ntpsweep.man.in
index c7551ea29..9ab6338ef 100644
--- a/scripts/ntpsweep/ntpsweep.man.in
+++ b/scripts/ntpsweep/ntpsweep.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntpsweep 1ntpsweepman "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH ntpsweep 1ntpsweepman "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-Lmaqet/ag-Xmaydt)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:58:40 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:21:48 AM by AutoGen 5.18.5
 .\" From the definitions ntpsweep-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/ntpsweep/ntpsweep.mdoc.in b/scripts/ntpsweep/ntpsweep.mdoc.in
index 5077e2145..645a31471 100644
--- a/scripts/ntpsweep/ntpsweep.mdoc.in
+++ b/scripts/ntpsweep/ntpsweep.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTPSWEEP 1ntpsweepmdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntpsweep-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:58:44 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:21:45 AM by AutoGen 5.18.5
 .\"  From the definitions    ntpsweep-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/scripts/ntptrace/invoke-ntptrace.texi b/scripts/ntptrace/invoke-ntptrace.texi
index 78bd73949..f872db373 100644
--- a/scripts/ntptrace/invoke-ntptrace.texi
+++ b/scripts/ntptrace/invoke-ntptrace.texi
@@ -6,7 +6,7 @@
 #
 # EDIT THIS FILE WITH CAUTION  (invoke-ntptrace.texi)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:58:51 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:21:52 AM by AutoGen 5.18.5
 # From the definitions    ntptrace-opts.def
 # and the template file   agtexi-cmd.tpl
 @end ignore
@@ -62,7 +62,7 @@ with a status code of 0.
 
 @exampleindent 0
 @example
-ntptrace - Trace peers of an NTP server - Ver. 4.2.8p4-RC1
+ntptrace - Trace peers of an NTP server - Ver. 4.2.8p4-sec-RC2
 USAGE: ntptrace [ - [] | --[@{=| @}] ]... [host]
 
     -n, --numeric                Print IP addresses instead of hostnames
diff --git a/scripts/ntptrace/ntptrace-opts b/scripts/ntptrace/ntptrace-opts
index 1205ceddb..fe11ad47a 100644
--- a/scripts/ntptrace/ntptrace-opts
+++ b/scripts/ntptrace/ntptrace-opts
@@ -1,6 +1,6 @@
 # EDIT THIS FILE WITH CAUTION  (ntptrace-opts)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:58:45 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:21:49 AM by AutoGen 5.18.5
 # From the definitions    ntptrace-opts.def
 # and the template file   perlopt
 
@@ -40,7 +40,7 @@ sub processOptions {
         'help|?', 'more-help'));
 
     $usage = <<'USAGE';
-ntptrace - Trace peers of an NTP server - Ver. 4.2.8p4-RC1
+ntptrace - Trace peers of an NTP server - Ver. 4.2.8p4-sec-RC2
 USAGE: ntptrace [ - [] | --[{=| }] ]... [host]
 
     -n, --numeric                Print IP addresses instead of hostnames
diff --git a/scripts/ntptrace/ntptrace.1ntptraceman b/scripts/ntptrace/ntptrace.1ntptraceman
index e6cb0df37..1e8dc41d6 100644
--- a/scripts/ntptrace/ntptrace.1ntptraceman
+++ b/scripts/ntptrace/ntptrace.1ntptraceman
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntptrace 1ntptraceman "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH ntptrace 1ntptraceman "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-F6aywu/ag-S6aGvu)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:58:47 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:21:54 AM by AutoGen 5.18.5
 .\" From the definitions ntptrace-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/ntptrace/ntptrace.1ntptracemdoc b/scripts/ntptrace/ntptrace.1ntptracemdoc
index 99080634c..7ed445883 100644
--- a/scripts/ntptrace/ntptrace.1ntptracemdoc
+++ b/scripts/ntptrace/ntptrace.1ntptracemdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTPTRACE 1ntptracemdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntptrace-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:58:53 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:21:50 AM by AutoGen 5.18.5
 .\"  From the definitions    ntptrace-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/scripts/ntptrace/ntptrace.html b/scripts/ntptrace/ntptrace.html
index 4d8b9814a..8b95d7e95 100644
--- a/scripts/ntptrace/ntptrace.html
+++ b/scripts/ntptrace/ntptrace.html
@@ -3,7 +3,7 @@
 Ntptrace User's Manual
 
 
-
+
 
 
 
@@ -14,24 +14,26 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
 
Ntptrace User's Manual

 

+
 

-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-

+
 

 
 
Simple Network Time Protocol User Manual

 
 
This document describes the use of the NTP Project's ntptrace program. 
-This document applies to version 4.2.8p4-RC1 of ntptrace.
+This document applies to version 4.2.8p4-sec-RC2 of ntptrace.
 
   

 
Short Contents

@@ -46,10 +48,11 @@ This document applies to version 4.2.8p4-RC1 of ntptrace.
 
 
 

+
 

-Previous: ntptrace Description,
+Previous: ntptrace Description,
 Up: Top
-

+
 

 
 
Invoking ntptrace

@@ -80,7 +83,7 @@ defined in RFC-1305.
 using the agtexi-cmd template and the option descriptions for the ntptrace program.
 
 
 
 

+
 

-Next: ,
+Next: ,
 Up: ntptrace Invocation
-

+
 

 
-
ntptrace help/usage (--help)

+
ntptrace help/usage (--help)

 
 

 This is the automatically generated usage text for ntptrace.
 
   
The text printed is the same whether selected with the help option
-(--help) or the more-help option (--more-help).  more-help will print
+(--help) or the more-help option (--more-help).  more-help will print
 the usage text by passing it through a pager program. 
 more-help is disabled on platforms without a working
 fork(2) function.  The PAGER environment variable is
-used to select the program, defaulting to more.  Both will exit
+used to select the program, defaulting to more.  Both will exit
 with a status code of 0.
 
-
ntptrace - Trace peers of an NTP server - Ver. 4.2.8p4-RC1
+
ntptrace - Trace peers of an NTP server - Ver. 4.2.8p4-sec-RC2
 USAGE: ntptrace [ -<flag> [<val>] | --<name>[{=| }<val>] ]... [host]
 
     -n, --numeric                Print IP addresses instead of hostnames
@@ -120,11 +124,12 @@ Options are specified by doubled hyphens and their name or by a single
 hyphen and the flag character.
 

   

+
 

-Next: ,
+Next: ,
 Previous: ntptrace usage,
 Up: ntptrace Invocation
-

+
 

 
 
numeric option (-n)

@@ -134,11 +139,13 @@ This is the “print ip addresses instead of hostnames” option.
 Output hosts as dotted-quad numeric format rather than converting to
 the canonical host names. 
 

+
+
 

-Next: ,
+Next: ,
 Previous: ntptrace numeric,
 Up: ntptrace Invocation
-

+
 

 
 
max-hosts option (-m)

@@ -146,13 +153,14 @@ Up: ntptrace Invocati
 

 This is the “maximum number of peers to trace” option. 
 This option takes a number argument. 
-This option has no doc documentation. 
+This option has no ‘doc’ documentation. 
 

+
 

-Next: ,
+Next: ,
 Previous: ntptrace max-hosts,
 Up: ntptrace Invocation
-

+
 

 
 
host option (-r)

@@ -160,20 +168,21 @@ Up: ntptrace Invocati
 

 This is the “single remote host” option. 
 This option takes a string argument. 
-This option has no doc documentation. 
+This option has no ‘doc’ documentation. 
 

+
 

-Previous: ntptrace host,
+Previous: ntptrace host,
 Up: ntptrace Invocation
-

+
 

 
 
ntptrace exit status

 
 
One of the following exit values will be returned:
      

-
0 (EXIT_SUCCESS)
Successful program execution. 
-
1 (EXIT_FAILURE)
The operation failed or the command syntax was not valid. 
+
‘0 (EXIT_SUCCESS)’
Successful program execution. 
+
‘1 (EXIT_FAILURE)’
The operation failed or the command syntax was not valid. 
 

 
 
diff --git a/scripts/ntptrace/ntptrace.man.in b/scripts/ntptrace/ntptrace.man.in
index ea1e1f2c9..d6b8f9a69 100644
--- a/scripts/ntptrace/ntptrace.man.in
+++ b/scripts/ntptrace/ntptrace.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntptrace @NTPTRACE_MS@ "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH ntptrace @NTPTRACE_MS@ "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-F6aywu/ag-S6aGvu)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:58:47 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:21:54 AM by AutoGen 5.18.5
 .\" From the definitions ntptrace-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/ntptrace/ntptrace.mdoc.in b/scripts/ntptrace/ntptrace.mdoc.in
index ed8e4c8ca..4083f530f 100644
--- a/scripts/ntptrace/ntptrace.mdoc.in
+++ b/scripts/ntptrace/ntptrace.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTPTRACE @NTPTRACE_MS@ User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntptrace-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:58:53 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:21:50 AM by AutoGen 5.18.5
 .\"  From the definitions    ntptrace-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/scripts/plot_summary-opts b/scripts/plot_summary-opts
index b70764225..42e91dbf8 100644
--- a/scripts/plot_summary-opts
+++ b/scripts/plot_summary-opts
@@ -1,6 +1,6 @@
 # EDIT THIS FILE WITH CAUTION  (plot_summary-opts)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:59:05 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:22:01 AM by AutoGen 5.18.5
 # From the definitions    plot_summary-opts.def
 # and the template file   perlopt
 
@@ -46,7 +46,7 @@ sub processOptions {
         'help|?', 'more-help'));
 
     $usage = <<'USAGE';
-plot_summary - plot statistics generated by summary script - Ver. 4.2.8p4-RC1
+plot_summary - plot statistics generated by summary script - Ver. 4.2.8p4-sec-RC2
 USAGE: plot_summary [ - [] | --[{=| }] ]... 
 
         --directory=str          Where the summary files are
diff --git a/scripts/plot_summary.1plot_summaryman b/scripts/plot_summary.1plot_summaryman
index 6395f212e..9b0be351b 100644
--- a/scripts/plot_summary.1plot_summaryman
+++ b/scripts/plot_summary.1plot_summaryman
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH plot_summary 1plot_summaryman "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH plot_summary 1plot_summaryman "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-1Maamx/ag-cNailx)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:59:11 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:22:04 AM by AutoGen 5.18.5
 .\" From the definitions plot_summary-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/plot_summary.1plot_summarymdoc b/scripts/plot_summary.1plot_summarymdoc
index da8d35a62..5c1b8b1e3 100644
--- a/scripts/plot_summary.1plot_summarymdoc
+++ b/scripts/plot_summary.1plot_summarymdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt PLOT_SUMMARY 1plot_summarymdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (plot_summary-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:59:12 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:22:05 AM by AutoGen 5.18.5
 .\"  From the definitions    plot_summary-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/scripts/plot_summary.html b/scripts/plot_summary.html
index 1e9a0fcbc..b0072fba1 100644
--- a/scripts/plot_summary.html
+++ b/scripts/plot_summary.html
@@ -3,7 +3,7 @@
 Plot_summary User's Manual
 
 
-
+
 
 
 
@@ -14,24 +14,26 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
 
Plot_summary User's Manual

 

+
 

-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-

+
 

 
 
Plot_summary User Manual

 
 
This document describes the use of the NTP Project's plot_summary program. 
-This document applies to version 4.2.8p4-RC1 of plot_summary.
+This document applies to version 4.2.8p4-sec-RC2 of plot_summary.
 
   

 
Short Contents

@@ -46,10 +48,12 @@ This document applies to version 4.2.8p4-RC1 of plot_summary.
 
 
 

+
+
 

-Previous: plot_summary Description,
+Previous: plot_summary Description,
 Up: Top
-

+
 

 
 
Invoking plot_summary

@@ -60,7 +64,7 @@ Up: Top
 using the agtexi-cmd template and the option descriptions for the plot_summary program.
 
 
 
 

+
+
 

-Next: ,
+Next: ,
 Up: plot_summary Invocation
-

+
 

 
-
plot_summary help/usage (--help)

+
plot_summary help/usage (--help)

 
 

 This is the automatically generated usage text for plot_summary.
 
   
The text printed is the same whether selected with the help option
-(--help) or the more-help option (--more-help).  more-help will print
+(--help) or the more-help option (--more-help).  more-help will print
 the usage text by passing it through a pager program. 
 more-help is disabled on platforms without a working
 fork(2) function.  The PAGER environment variable is
-used to select the program, defaulting to more.  Both will exit
+used to select the program, defaulting to more.  Both will exit
 with a status code of 0.
 
-
plot_summary - plot statistics generated by summary script - Ver. 4.2.8p4-RC1
+
plot_summary - plot statistics generated by summary script - Ver. 4.2.8p4-sec-RC2
 USAGE: plot_summary [ -<flag> [<val>] | --<name>[{=| }<val>] ]...
 
         --directory=str          Where the summary files are
@@ -107,11 +113,13 @@ Options are specified by doubled hyphens and their name or by a single
 hyphen and the flag character.
 

   

+
+
 

-Next: ,
+Next: ,
 Previous: plot_summary usage,
 Up: plot_summary Invocation
-

+
 

 
 
directory option

@@ -122,11 +130,13 @@ This option takes a string argument.
         The directory where the plot_summary will search for the
         *_summary files generated by summary script. 
 

+
+
 

-Next: ,
+Next: ,
 Previous: plot_summary directory,
 Up: plot_summary Invocation
-

+
 

 
 
identifier option

@@ -137,11 +147,13 @@ This option takes a string argument.
         Where does the plotted data come from, default to string "host" plus
         current hostname
 

+
+
 

-Next: ,
+Next: ,
 Previous: plot_summary identifier,
 Up: plot_summary Invocation
-

+
 

 
 
peer option

@@ -158,11 +170,13 @@ This option takes a string argument.
   
By default the peer_summary plots are not generated. Use this option to
         specify list of peers if you want to generate plots for them. 
 

+
+
 

-Next: ,
+Next: ,
 Previous: plot_summary peer,
 Up: plot_summary Invocation
-

+
 

 
 
plot-term option

@@ -175,11 +189,13 @@ This option takes a string argument.
         dumb is it's not'. See output from  -e "set
         terminal") for the list of avalaible options. 
 

+
+
 

-Next: ,
+Next: ,
 Previous: plot_summary plot-term,
 Up: plot_summary Invocation
-

+
 

 
 
output-file option

@@ -189,18 +205,20 @@ This is the “output file” option.
 This option takes a str argument. 
         Output file for gnuplot, default to stdout. 
 

+
+
 

-Previous: plot_summary output-file,
+Previous: plot_summary output-file,
 Up: plot_summary Invocation
-

+
 

 
 
plot_summary exit status

 
 
One of the following exit values will be returned:
      

-
0 (EXIT_SUCCESS)
Successful program execution. 
-
1 (EXIT_FAILURE)
The operation failed or the command syntax was not valid. 
+
‘0 (EXIT_SUCCESS)’
Successful program execution. 
+
‘1 (EXIT_FAILURE)’
The operation failed or the command syntax was not valid. 
 

 
 
diff --git a/scripts/plot_summary.man.in b/scripts/plot_summary.man.in
index 6395f212e..9b0be351b 100644
--- a/scripts/plot_summary.man.in
+++ b/scripts/plot_summary.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH plot_summary 1plot_summaryman "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH plot_summary 1plot_summaryman "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-1Maamx/ag-cNailx)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:59:11 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:22:04 AM by AutoGen 5.18.5
 .\" From the definitions plot_summary-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/plot_summary.mdoc.in b/scripts/plot_summary.mdoc.in
index da8d35a62..5c1b8b1e3 100644
--- a/scripts/plot_summary.mdoc.in
+++ b/scripts/plot_summary.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt PLOT_SUMMARY 1plot_summarymdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (plot_summary-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:59:12 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:22:05 AM by AutoGen 5.18.5
 .\"  From the definitions    plot_summary-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/scripts/summary-opts b/scripts/summary-opts
index d0b076d94..d5da203f1 100644
--- a/scripts/summary-opts
+++ b/scripts/summary-opts
@@ -1,6 +1,6 @@
 # EDIT THIS FILE WITH CAUTION  (summary-opts)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:59:07 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:22:02 AM by AutoGen 5.18.5
 # From the definitions    summary-opts.def
 # and the template file   perlopt
 
@@ -44,7 +44,7 @@ sub processOptions {
         'help|?', 'more-help'));
 
     $usage = <<'USAGE';
-summary - compute various stastics from NTP stat files - Ver. 4.2.8p4-RC1
+summary - compute various stastics from NTP stat files - Ver. 4.2.8p4-sec-RC2
 USAGE: summary [ - [] | --[{=| }] ]... 
 
         --directory=str          Directory containing stat files
diff --git a/scripts/summary.1summaryman b/scripts/summary.1summaryman
index 526a2cbc2..3f519eab3 100644
--- a/scripts/summary.1summaryman
+++ b/scripts/summary.1summaryman
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH summary 1summaryman "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH summary 1summaryman "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-B7aOzx/ag-O7aWyx)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:59:16 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:22:08 AM by AutoGen 5.18.5
 .\" From the definitions summary-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/summary.1summarymdoc b/scripts/summary.1summarymdoc
index 897da45f6..468667d9d 100644
--- a/scripts/summary.1summarymdoc
+++ b/scripts/summary.1summarymdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt SUMMARY 1summarymdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (summary-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:59:18 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:22:09 AM by AutoGen 5.18.5
 .\"  From the definitions    summary-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/scripts/summary.html b/scripts/summary.html
index fa2191e1a..d9b70a50d 100644
--- a/scripts/summary.html
+++ b/scripts/summary.html
@@ -3,7 +3,7 @@
 Summary User's Manual
 
 
-
+
 
 
 
@@ -14,24 +14,26 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
 
Summary User's Manual

 

+
 

-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-

+
 

 
 
Summary User Manual

 
 
This document describes the use of the NTP Project's summary program. 
-This document applies to version 4.2.8p4-RC1 of summary.
+This document applies to version 4.2.8p4-sec-RC2 of summary.
 
   

 
Short Contents

@@ -46,10 +48,11 @@ This document applies to version 4.2.8p4-RC1 of summary.
 
 
 

+
 

-Previous: summary Description,
+Previous: summary Description,
 Up: Top
-

+
 

 
 
Invoking summary

@@ -60,7 +63,7 @@ Up: Top
 using the agtexi-cmd template and the option descriptions for the summary program.
 
 
 
 

+
 

-Next: ,
+Next: ,
 Up: summary Invocation
-

+
 

 
-
summary help/usage (--help)

+
summary help/usage (--help)

 
 

 This is the automatically generated usage text for summary.
 
   
The text printed is the same whether selected with the help option
-(--help) or the more-help option (--more-help).  more-help will print
+(--help) or the more-help option (--more-help).  more-help will print
 the usage text by passing it through a pager program. 
 more-help is disabled on platforms without a working
 fork(2) function.  The PAGER environment variable is
-used to select the program, defaulting to more.  Both will exit
+used to select the program, defaulting to more.  Both will exit
 with a status code of 0.
 
-
summary - compute various stastics from NTP stat files - Ver. 4.2.8p4-RC1
+
summary - compute various stastics from NTP stat files - Ver. 4.2.8p4-sec-RC2
 USAGE: summary [ -<flag> [<val>] | --<name>[{=| }<val>] ]...
 
         --directory=str          Directory containing stat files
@@ -104,11 +108,12 @@ Options are specified by doubled hyphens and their name or by a single
 hyphen and the flag character.
 

   

+
 

-Next: ,
+Next: ,
 Previous: summary usage,
 Up: summary Invocation
-

+
 

 
 
directory option

@@ -119,11 +124,13 @@ This option takes a string argument.
         The directory where ntpd will search for .stat files generated
         by ntpd. 
 

+
+
 

-Next: ,
+Next: ,
 Previous: summary directory,
 Up: summary Invocation
-

+
 

 
 
end-date option

@@ -135,11 +142,13 @@ This option takes a number argument.
         option.  Defaults to today minus one day (Use date -u +%Y%m%d)
         to get the timestamp. 
 

+
+
 

-Next: ,
+Next: ,
 Previous: summary end-date,
 Up: summary Invocation
-

+
 

 
 
output-directory option

@@ -149,11 +158,13 @@ This is the “output directory” option.
 This option takes a str argument. 
         The output directory summary will write all output files to. 
 

+
+
 

-Next: ,
+Next: ,
 Previous: summary output-directory,
 Up: summary Invocation
-

+
 

 
 
start-date option

@@ -164,18 +175,19 @@ This option takes a num argument.
         Process all files with the date suffix more or equal to value of
         this option.  Defaults to 197000101. 
 

+
 

-Previous: summary start-date,
+Previous: summary start-date,
 Up: summary Invocation
-

+
 

 
 
summary exit status

 
 
One of the following exit values will be returned:
      

-
0 (EXIT_SUCCESS)
Successful program execution. 
-
1 (EXIT_FAILURE)
The operation failed or the command syntax was not valid. 
+
‘0 (EXIT_SUCCESS)’
Successful program execution. 
+
‘1 (EXIT_FAILURE)’
The operation failed or the command syntax was not valid. 
 

 
 
diff --git a/scripts/summary.man.in b/scripts/summary.man.in
index 526a2cbc2..3f519eab3 100644
--- a/scripts/summary.man.in
+++ b/scripts/summary.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH summary 1summaryman "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH summary 1summaryman "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-B7aOzx/ag-O7aWyx)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:59:16 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:22:08 AM by AutoGen 5.18.5
 .\" From the definitions summary-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/summary.mdoc.in b/scripts/summary.mdoc.in
index 897da45f6..468667d9d 100644
--- a/scripts/summary.mdoc.in
+++ b/scripts/summary.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt SUMMARY 1summarymdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (summary-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:59:18 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:22:09 AM by AutoGen 5.18.5
 .\"  From the definitions    summary-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/scripts/update-leap/invoke-update-leap.texi b/scripts/update-leap/invoke-update-leap.texi
index 2df2e4c9c..a16e8f520 100644
--- a/scripts/update-leap/invoke-update-leap.texi
+++ b/scripts/update-leap/invoke-update-leap.texi
@@ -6,7 +6,7 @@
 #
 # EDIT THIS FILE WITH CAUTION  (invoke-update-leap.texi)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:58:58 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:21:57 AM by AutoGen 5.18.5
 # From the definitions    update-leap-opts.def
 # and the template file   agtexi-cmd.tpl
 @end ignore
diff --git a/scripts/update-leap/update-leap-opts b/scripts/update-leap/update-leap-opts
index 9036dffab..9f5ae9277 100644
--- a/scripts/update-leap/update-leap-opts
+++ b/scripts/update-leap/update-leap-opts
@@ -1,6 +1,6 @@
 # EDIT THIS FILE WITH CAUTION  (update-leap-opts)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:59:04 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:22:01 AM by AutoGen 5.18.5
 # From the definitions    update-leap-opts.def
 # and the template file   perlopt
 
@@ -46,7 +46,7 @@ sub processOptions {
         'help|?', 'more-help'));
 
     $usage = <<'USAGE';
-update-leap - leap-seconds file manager/updater - Ver. 4.2.8p4-RC1
+update-leap - leap-seconds file manager/updater - Ver. 4.2.8p4-sec-RC2
 USAGE: update-leap [ - [] | --[{=| }] ]... 
 
     -s, --source-url=str         The URL of the master copy of the leapseconds file
diff --git a/scripts/update-leap/update-leap.1update-leapman b/scripts/update-leap/update-leap.1update-leapman
index d42bad819..e1b8c4f72 100644
--- a/scripts/update-leap/update-leap.1update-leapman
+++ b/scripts/update-leap/update-leap.1update-leapman
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH update-leap 1update-leapman "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH update-leap 1update-leapman "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-KSaamv/ag-XSailv)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:58:55 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:22:00 AM by AutoGen 5.18.5
 .\" From the definitions update-leap-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/update-leap/update-leap.1update-leapmdoc b/scripts/update-leap/update-leap.1update-leapmdoc
index 85face035..ee4a5d066 100644
--- a/scripts/update-leap/update-leap.1update-leapmdoc
+++ b/scripts/update-leap/update-leap.1update-leapmdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt UPDATE_LEAP 1update-leapmdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (update-leap-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:59:03 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:21:55 AM by AutoGen 5.18.5
 .\"  From the definitions    update-leap-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/scripts/update-leap/update-leap.html b/scripts/update-leap/update-leap.html
index 7774c0ecd..1426b912e 100644
--- a/scripts/update-leap/update-leap.html
+++ b/scripts/update-leap/update-leap.html
@@ -3,7 +3,7 @@
 update-leap User's Manual
 
 
-
+
 
 
 
@@ -14,23 +14,25 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
 
update-leap User's Manual

 

+
 

-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-

+
 

 
   
This document describes the use of the NTP Project's update-leap program.
 
-  
This document applies to version 4.2.8p4-RC1 of update-leap.
+  
This document applies to version 4.2.8p4-sec-RC2 of update-leap.
 
 

 
Short Contents

@@ -44,9 +46,11 @@ Up: (dir)
 
 
 

-

+
 
-

+

+
+
 

 
 
0.1 Invoking update-leap

@@ -82,7 +86,7 @@ This script depends on$REQUIREDCMDS
 using the agtexi-cmd template and the option descriptions for the update-leap program.
 
 
 
 

+
+
 

-Next: ,
+Next: ,
 Up: update-leap Invocation
-

+
 

 
-
0.1.1 update-leap help/usage (--help)

+
0.1.1 update-leap help/usage (--help)

 
 

 This is the automatically generated usage text for update-leap.
 
   
The text printed is the same whether selected with the help option
-(--help) or the more-help option (--more-help).  more-help will print
+(--help) or the more-help option (--more-help).  more-help will print
 the usage text by passing it through a pager program. 
 more-help is disabled on platforms without a working
 fork(2) function.  The PAGER environment variable is
-used to select the program, defaulting to more.  Both will exit
+used to select the program, defaulting to more.  Both will exit
 with a status code of 0.
 
 
    update-leap
@@ -166,11 +172,13 @@ with a status code of 0.
         Version $VERSION
 

   

+
+
 

-Next: ,
+Next: ,
 Previous: update-leap usage,
 Up: update-leap Invocation
-

+
 

 
 
0.1.2 source-url option (-s)

@@ -181,11 +189,13 @@ This option takes a string argument.
 Specify the URL of the master copy to download
 $LEAPSRC
 

+
+
 

-Next: ,
+Next: ,
 Previous: update-leap source-url,
 Up: update-leap Invocation
-

+
 

 
 
0.1.3 ipv4 option (-4)

@@ -225,26 +235,30 @@ ipv6.
     doc         = <<-  _EndOfDoc_
 Prefer IPv4 or IPv6 (as specified) addresses, but use either. 
 

+
+
 

-Next: ,
+Next: ,
 Previous: update-leap ipv4,
 Up: update-leap Invocation
-

+
 

 
 
0.1.4 destination option (-d)

 
 

 This is the “filename on the local system” option. 
-This option takes a string argument float. 
+This option takes a string argument float. 
 The name to use to store the leapfile on the local system. 
 $LEAPFILE
 

+
+
 

-Next: ,
+Next: ,
 Previous: update-leap destination,
 Up: update-leap Invocation
-

+
 

 
 
0.1.5 expiration option (-e)

@@ -257,11 +271,13 @@ Units are required, e.g. "-e 60 days"  Note that larger values
 imply more frequent refreshes. 
 "$PREFETCH"
 

+
+
 

-Next: ,
+Next: ,
 Previous: update-leap expiration,
 Up: update-leap Invocation
-

+
 

 
 
0.1.6 ntp-conf-file option (-f)

@@ -273,11 +289,13 @@ Specify location of ntp.conf (used to make sure leapfile directive is
 present and to default  leapfile)
 /etc/ntp.conf
 

+
+
 

-Next: ,
+Next: ,
 Previous: update-leap ntp-conf-file,
 Up: update-leap Invocation
-

+
 

 
 
0.1.7 force-update option (-F)

@@ -286,35 +304,41 @@ Up: update-lea
 This is the “force update of the leapfile” option. 
 Force update even if current file is OK and not close to expiring. 
 

+
+
 

-Next: ,
+Next: ,
 Previous: update-leap force-update,
 Up: update-leap Invocation
-

+
 

 
 
0.1.8 update-leap exit status

 
 
One of the following exit values will be returned:
      

-
0 (EXIT_SUCCESS)
Successful program execution. 
-
1 (EXIT_FAILURE)
The operation failed or the command syntax was not valid. 
+
‘0 (EXIT_SUCCESS)’
Successful program execution. 
+
‘1 (EXIT_FAILURE)’
The operation failed or the command syntax was not valid. 
 

   

+
+
 

-Next: ,
+Next: ,
 Previous: update-leap exit status,
 Up: update-leap Invocation
-

+
 

 
 
0.1.9 update-leap Usage

 
 

+
+
 

-Previous: update-leap Usage,
+Previous: update-leap Usage,
 Up: update-leap Invocation
-

+
 

 
 
0.1.10 update-leap Authors

diff --git a/scripts/update-leap/update-leap.man.in b/scripts/update-leap/update-leap.man.in
index d42bad819..e1b8c4f72 100644
--- a/scripts/update-leap/update-leap.man.in
+++ b/scripts/update-leap/update-leap.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH update-leap 1update-leapman "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH update-leap 1update-leapman "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-KSaamv/ag-XSailv)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:58:55 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:22:00 AM by AutoGen 5.18.5
 .\" From the definitions update-leap-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/scripts/update-leap/update-leap.mdoc.in b/scripts/update-leap/update-leap.mdoc.in
index 85face035..ee4a5d066 100644
--- a/scripts/update-leap/update-leap.mdoc.in
+++ b/scripts/update-leap/update-leap.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt UPDATE_LEAP 1update-leapmdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (update-leap-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:59:03 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:21:55 AM by AutoGen 5.18.5
 .\"  From the definitions    update-leap-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/sntp/invoke-sntp.texi b/sntp/invoke-sntp.texi
index 9d47ab2a7..e26b2348c 100644
--- a/sntp/invoke-sntp.texi
+++ b/sntp/invoke-sntp.texi
@@ -6,7 +6,7 @@
 #
 # EDIT THIS FILE WITH CAUTION  (invoke-sntp.texi)
 #
-# It has been AutoGen-ed  October  6, 2015 at 05:55:22 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:18:11 AM by AutoGen 5.18.5
 # From the definitions    sntp-opts.def
 # and the template file   agtexi-cmd.tpl
 @end ignore
@@ -101,7 +101,7 @@ with a status code of 0.
 
 @exampleindent 0
 @example
-sntp - standard Simple Network Time Protocol client program - Ver. 4.2.8p4-RC1
+sntp - standard Simple Network Time Protocol client program - Ver. 4.2.8p4-sec-RC2
 Usage:  sntp [ - [] | --[@{=| @}] ]... \
                 [ hostname-or-IP ...]
   Flg Arg Option-Name    Description
diff --git a/sntp/sntp-opts.c b/sntp/sntp-opts.c
index b90aae8b8..3b86a0043 100644
--- a/sntp/sntp-opts.c
+++ b/sntp/sntp-opts.c
@@ -1,7 +1,7 @@
 /*
  *  EDIT THIS FILE WITH CAUTION  (sntp-opts.c)
  *
- *  It has been AutoGen-ed  October  6, 2015 at 05:54:01 AM by AutoGen 5.18.5
+ *  It has been AutoGen-ed  October 17, 2015 at 06:17:04 AM by AutoGen 5.18.5
  *  From the definitions    sntp-opts.def
  *  and the template file   options
  *
@@ -51,7 +51,7 @@ extern "C" {
 #endif
 extern FILE * option_usage_fp;
 #define zCopyright      (sntp_opt_strs+0)
-#define zLicenseDescrip (sntp_opt_strs+344)
+#define zLicenseDescrip (sntp_opt_strs+348)
 
 /*
  *  global included definitions
@@ -69,15 +69,15 @@ extern FILE * option_usage_fp;
 /**
  *  static const strings for sntp options
  */
-static char const sntp_opt_strs[2561] =
-/*     0 */ "sntp 4.2.8p4-RC1\n"
+static char const sntp_opt_strs[2573] =
+/*     0 */ "sntp 4.2.8p4-sec-RC2\n"
             "Copyright (C) 1992-2015 The University of Delaware and Network Time Foundation, all rights reserved.\n"
             "This is free software. It is licensed for use, modification and\n"
             "redistribution under the terms of the NTP License, copies of which\n"
             "can be seen at:\n"
             "  \n"
             "  \n\0"
-/*   344 */ "Permission to use, copy, modify, and distribute this software and its\n"
+/*   348 */ "Permission to use, copy, modify, and distribute this software and its\n"
             "documentation for any purpose with or without fee is hereby granted,\n"
             "provided that the above copyright notice appears in all copies and that\n"
             "both the copyright notice and this permission notice appear in supporting\n"
@@ -87,94 +87,94 @@ static char const sntp_opt_strs[2561] =
             "Time Foundation makes no representations about the suitability this\n"
             "software for any purpose.  It is provided \"as is\" without express or\n"
             "implied warranty.\n\0"
-/*  1012 */ "Force IPv4 DNS name resolution\0"
-/*  1043 */ "IPV4\0"
-/*  1048 */ "ipv4\0"
-/*  1053 */ "Force IPv6 DNS name resolution\0"
-/*  1084 */ "IPV6\0"
-/*  1089 */ "ipv6\0"
-/*  1094 */ "Enable authentication with the key auth-keynumber\0"
-/*  1144 */ "AUTHENTICATION\0"
-/*  1159 */ "authentication\0"
-/*  1174 */ "Listen to the address specified for broadcast time sync\0"
-/*  1230 */ "BROADCAST\0"
-/*  1240 */ "broadcast\0"
-/*  1250 */ "Concurrently query all IPs returned for host-name\0"
-/*  1300 */ "CONCURRENT\0"
-/*  1311 */ "concurrent\0"
-/*  1322 */ "Increase debug verbosity level\0"
-/*  1353 */ "DEBUG_LEVEL\0"
-/*  1365 */ "debug-level\0"
-/*  1377 */ "Set the debug verbosity level\0"
-/*  1407 */ "SET_DEBUG_LEVEL\0"
-/*  1423 */ "set-debug-level\0"
-/*  1439 */ "The gap (in milliseconds) between time requests\0"
-/*  1487 */ "GAP\0"
-/*  1491 */ "gap\0"
-/*  1495 */ "KoD history filename\0"
-/*  1516 */ "KOD\0"
-/*  1520 */ "kod\0"
-/*  1524 */ "/var/db/ntp-kod\0"
-/*  1540 */ "Look in this file for the key specified with -a\0"
-/*  1588 */ "KEYFILE\0"
-/*  1596 */ "keyfile\0"
-/*  1604 */ "Log to specified logfile\0"
-/*  1629 */ "LOGFILE\0"
-/*  1637 */ "logfile\0"
-/*  1645 */ "Adjustments less than steplimit msec will be slewed\0"
-/*  1697 */ "STEPLIMIT\0"
-/*  1707 */ "steplimit\0"
-/*  1717 */ "Send int as our NTP protocol version\0"
-/*  1754 */ "NTPVERSION\0"
-/*  1765 */ "ntpversion\0"
-/*  1776 */ "Use the NTP Reserved Port (port 123)\0"
-/*  1813 */ "USERESERVEDPORT\0"
-/*  1829 */ "usereservedport\0"
-/*  1845 */ "OK to 'step' the time with settimeofday(2)\0"
-/*  1888 */ "STEP\0"
-/*  1893 */ "step\0"
-/*  1898 */ "OK to 'slew' the time with adjtime(2)\0"
-/*  1936 */ "SLEW\0"
-/*  1941 */ "slew\0"
-/*  1946 */ "The number of seconds to wait for responses\0"
-/*  1990 */ "TIMEOUT\0"
-/*  1998 */ "timeout\0"
-/*  2006 */ "Wait for pending replies (if not setting the time)\0"
-/*  2057 */ "WAIT\0"
-/*  2062 */ "no-wait\0"
-/*  2070 */ "no\0"
-/*  2073 */ "display extended usage information and exit\0"
-/*  2117 */ "help\0"
-/*  2122 */ "extended usage information passed thru pager\0"
-/*  2167 */ "more-help\0"
-/*  2177 */ "output version information and exit\0"
-/*  2213 */ "version\0"
-/*  2221 */ "save the option state to a config file\0"
-/*  2260 */ "save-opts\0"
-/*  2270 */ "load options from a config file\0"
-/*  2302 */ "LOAD_OPTS\0"
-/*  2312 */ "no-load-opts\0"
-/*  2325 */ "SNTP\0"
-/*  2330 */ "sntp - standard Simple Network Time Protocol client program - Ver. 4.2.8p4-RC1\n"
+/*  1016 */ "Force IPv4 DNS name resolution\0"
+/*  1047 */ "IPV4\0"
+/*  1052 */ "ipv4\0"
+/*  1057 */ "Force IPv6 DNS name resolution\0"
+/*  1088 */ "IPV6\0"
+/*  1093 */ "ipv6\0"
+/*  1098 */ "Enable authentication with the key auth-keynumber\0"
+/*  1148 */ "AUTHENTICATION\0"
+/*  1163 */ "authentication\0"
+/*  1178 */ "Listen to the address specified for broadcast time sync\0"
+/*  1234 */ "BROADCAST\0"
+/*  1244 */ "broadcast\0"
+/*  1254 */ "Concurrently query all IPs returned for host-name\0"
+/*  1304 */ "CONCURRENT\0"
+/*  1315 */ "concurrent\0"
+/*  1326 */ "Increase debug verbosity level\0"
+/*  1357 */ "DEBUG_LEVEL\0"
+/*  1369 */ "debug-level\0"
+/*  1381 */ "Set the debug verbosity level\0"
+/*  1411 */ "SET_DEBUG_LEVEL\0"
+/*  1427 */ "set-debug-level\0"
+/*  1443 */ "The gap (in milliseconds) between time requests\0"
+/*  1491 */ "GAP\0"
+/*  1495 */ "gap\0"
+/*  1499 */ "KoD history filename\0"
+/*  1520 */ "KOD\0"
+/*  1524 */ "kod\0"
+/*  1528 */ "/var/db/ntp-kod\0"
+/*  1544 */ "Look in this file for the key specified with -a\0"
+/*  1592 */ "KEYFILE\0"
+/*  1600 */ "keyfile\0"
+/*  1608 */ "Log to specified logfile\0"
+/*  1633 */ "LOGFILE\0"
+/*  1641 */ "logfile\0"
+/*  1649 */ "Adjustments less than steplimit msec will be slewed\0"
+/*  1701 */ "STEPLIMIT\0"
+/*  1711 */ "steplimit\0"
+/*  1721 */ "Send int as our NTP protocol version\0"
+/*  1758 */ "NTPVERSION\0"
+/*  1769 */ "ntpversion\0"
+/*  1780 */ "Use the NTP Reserved Port (port 123)\0"
+/*  1817 */ "USERESERVEDPORT\0"
+/*  1833 */ "usereservedport\0"
+/*  1849 */ "OK to 'step' the time with settimeofday(2)\0"
+/*  1892 */ "STEP\0"
+/*  1897 */ "step\0"
+/*  1902 */ "OK to 'slew' the time with adjtime(2)\0"
+/*  1940 */ "SLEW\0"
+/*  1945 */ "slew\0"
+/*  1950 */ "The number of seconds to wait for responses\0"
+/*  1994 */ "TIMEOUT\0"
+/*  2002 */ "timeout\0"
+/*  2010 */ "Wait for pending replies (if not setting the time)\0"
+/*  2061 */ "WAIT\0"
+/*  2066 */ "no-wait\0"
+/*  2074 */ "no\0"
+/*  2077 */ "display extended usage information and exit\0"
+/*  2121 */ "help\0"
+/*  2126 */ "extended usage information passed thru pager\0"
+/*  2171 */ "more-help\0"
+/*  2181 */ "output version information and exit\0"
+/*  2217 */ "version\0"
+/*  2225 */ "save the option state to a config file\0"
+/*  2264 */ "save-opts\0"
+/*  2274 */ "load options from a config file\0"
+/*  2306 */ "LOAD_OPTS\0"
+/*  2316 */ "no-load-opts\0"
+/*  2329 */ "SNTP\0"
+/*  2334 */ "sntp - standard Simple Network Time Protocol client program - Ver. 4.2.8p4-sec-RC2\n"
             "Usage:  %s [ - [] | --[{=| }] ]... \\\n"
             "\t\t[ hostname-or-IP ...]\n\0"
-/*  2493 */ "$HOME\0"
-/*  2499 */ ".\0"
-/*  2501 */ ".ntprc\0"
-/*  2508 */ "http://bugs.ntp.org, bugs@ntp.org\0"
-/*  2542 */ "\n\0"
-/*  2544 */ "sntp 4.2.8p4-RC1";
+/*  2501 */ "$HOME\0"
+/*  2507 */ ".\0"
+/*  2509 */ ".ntprc\0"
+/*  2516 */ "http://bugs.ntp.org, bugs@ntp.org\0"
+/*  2550 */ "\n\0"
+/*  2552 */ "sntp 4.2.8p4-sec-RC2";
 
 /**
  *  ipv4 option description with
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the ipv4 option */
-#define IPV4_DESC      (sntp_opt_strs+1012)
+#define IPV4_DESC      (sntp_opt_strs+1016)
 /** Upper-cased name for the ipv4 option */
-#define IPV4_NAME      (sntp_opt_strs+1043)
+#define IPV4_NAME      (sntp_opt_strs+1047)
 /** Name string for the ipv4 option */
-#define IPV4_name      (sntp_opt_strs+1048)
+#define IPV4_name      (sntp_opt_strs+1052)
 /** Other options that appear in conjunction with the ipv4 option */
 static int const aIpv4CantList[] = {
     INDEX_OPT_IPV6, NO_EQUIVALENT };
@@ -186,11 +186,11 @@ static int const aIpv4CantList[] = {
  *  "Must also have options" and "Incompatible options":
  */
 /** Descriptive text for the ipv6 option */
-#define IPV6_DESC      (sntp_opt_strs+1053)
+#define IPV6_DESC      (sntp_opt_strs+1057)
 /** Upper-cased name for the ipv6 option */
-#define IPV6_NAME      (sntp_opt_strs+1084)
+#define IPV6_NAME      (sntp_opt_strs+1088)
 /** Name string for the ipv6 option */
-#define IPV6_name      (sntp_opt_strs+1089)
+#define IPV6_name      (sntp_opt_strs+1093)
 /** Other options that appear in conjunction with the ipv6 option */
 static int const aIpv6CantList[] = {
     INDEX_OPT_IPV4, NO_EQUIVALENT };
@@ -201,11 +201,11 @@ static int const aIpv6CantList[] = {
  *  authentication option description:
  */
 /** Descriptive text for the authentication option */
-#define AUTHENTICATION_DESC      (sntp_opt_strs+1094)
+#define AUTHENTICATION_DESC      (sntp_opt_strs+1098)
 /** Upper-cased name for the authentication option */
-#define AUTHENTICATION_NAME      (sntp_opt_strs+1144)
+#define AUTHENTICATION_NAME      (sntp_opt_strs+1148)
 /** Name string for the authentication option */
-#define AUTHENTICATION_name      (sntp_opt_strs+1159)
+#define AUTHENTICATION_name      (sntp_opt_strs+1163)
 /** Compiled in flag settings for the authentication option */
 #define AUTHENTICATION_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -214,11 +214,11 @@ static int const aIpv6CantList[] = {
  *  broadcast option description:
  */
 /** Descriptive text for the broadcast option */
-#define BROADCAST_DESC      (sntp_opt_strs+1174)
+#define BROADCAST_DESC      (sntp_opt_strs+1178)
 /** Upper-cased name for the broadcast option */
-#define BROADCAST_NAME      (sntp_opt_strs+1230)
+#define BROADCAST_NAME      (sntp_opt_strs+1234)
 /** Name string for the broadcast option */
-#define BROADCAST_name      (sntp_opt_strs+1240)
+#define BROADCAST_name      (sntp_opt_strs+1244)
 /** Compiled in flag settings for the broadcast option */
 #define BROADCAST_FLAGS     (OPTST_DISABLED | OPTST_STACKED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -227,11 +227,11 @@ static int const aIpv6CantList[] = {
  *  concurrent option description:
  */
 /** Descriptive text for the concurrent option */
-#define CONCURRENT_DESC      (sntp_opt_strs+1250)
+#define CONCURRENT_DESC      (sntp_opt_strs+1254)
 /** Upper-cased name for the concurrent option */
-#define CONCURRENT_NAME      (sntp_opt_strs+1300)
+#define CONCURRENT_NAME      (sntp_opt_strs+1304)
 /** Name string for the concurrent option */
-#define CONCURRENT_name      (sntp_opt_strs+1311)
+#define CONCURRENT_name      (sntp_opt_strs+1315)
 /** Compiled in flag settings for the concurrent option */
 #define CONCURRENT_FLAGS     (OPTST_DISABLED | OPTST_STACKED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -240,11 +240,11 @@ static int const aIpv6CantList[] = {
  *  debug-level option description:
  */
 /** Descriptive text for the debug-level option */
-#define DEBUG_LEVEL_DESC      (sntp_opt_strs+1322)
+#define DEBUG_LEVEL_DESC      (sntp_opt_strs+1326)
 /** Upper-cased name for the debug-level option */
-#define DEBUG_LEVEL_NAME      (sntp_opt_strs+1353)
+#define DEBUG_LEVEL_NAME      (sntp_opt_strs+1357)
 /** Name string for the debug-level option */
-#define DEBUG_LEVEL_name      (sntp_opt_strs+1365)
+#define DEBUG_LEVEL_name      (sntp_opt_strs+1369)
 /** Compiled in flag settings for the debug-level option */
 #define DEBUG_LEVEL_FLAGS     (OPTST_DISABLED)
 
@@ -252,11 +252,11 @@ static int const aIpv6CantList[] = {
  *  set-debug-level option description:
  */
 /** Descriptive text for the set-debug-level option */
-#define SET_DEBUG_LEVEL_DESC      (sntp_opt_strs+1377)
+#define SET_DEBUG_LEVEL_DESC      (sntp_opt_strs+1381)
 /** Upper-cased name for the set-debug-level option */
-#define SET_DEBUG_LEVEL_NAME      (sntp_opt_strs+1407)
+#define SET_DEBUG_LEVEL_NAME      (sntp_opt_strs+1411)
 /** Name string for the set-debug-level option */
-#define SET_DEBUG_LEVEL_name      (sntp_opt_strs+1423)
+#define SET_DEBUG_LEVEL_name      (sntp_opt_strs+1427)
 /** Compiled in flag settings for the set-debug-level option */
 #define SET_DEBUG_LEVEL_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -265,11 +265,11 @@ static int const aIpv6CantList[] = {
  *  gap option description:
  */
 /** Descriptive text for the gap option */
-#define GAP_DESC      (sntp_opt_strs+1439)
+#define GAP_DESC      (sntp_opt_strs+1443)
 /** Upper-cased name for the gap option */
-#define GAP_NAME      (sntp_opt_strs+1487)
+#define GAP_NAME      (sntp_opt_strs+1491)
 /** Name string for the gap option */
-#define GAP_name      (sntp_opt_strs+1491)
+#define GAP_name      (sntp_opt_strs+1495)
 /** The compiled in default value for the gap option argument */
 #define GAP_DFT_ARG   ((char const*)50)
 /** Compiled in flag settings for the gap option */
@@ -280,13 +280,13 @@ static int const aIpv6CantList[] = {
  *  kod option description:
  */
 /** Descriptive text for the kod option */
-#define KOD_DESC      (sntp_opt_strs+1495)
+#define KOD_DESC      (sntp_opt_strs+1499)
 /** Upper-cased name for the kod option */
-#define KOD_NAME      (sntp_opt_strs+1516)
+#define KOD_NAME      (sntp_opt_strs+1520)
 /** Name string for the kod option */
-#define KOD_name      (sntp_opt_strs+1520)
+#define KOD_name      (sntp_opt_strs+1524)
 /** The compiled in default value for the kod option argument */
-#define KOD_DFT_ARG   (sntp_opt_strs+1524)
+#define KOD_DFT_ARG   (sntp_opt_strs+1528)
 /** Compiled in flag settings for the kod option */
 #define KOD_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_FILE))
@@ -295,11 +295,11 @@ static int const aIpv6CantList[] = {
  *  keyfile option description:
  */
 /** Descriptive text for the keyfile option */
-#define KEYFILE_DESC      (sntp_opt_strs+1540)
+#define KEYFILE_DESC      (sntp_opt_strs+1544)
 /** Upper-cased name for the keyfile option */
-#define KEYFILE_NAME      (sntp_opt_strs+1588)
+#define KEYFILE_NAME      (sntp_opt_strs+1592)
 /** Name string for the keyfile option */
-#define KEYFILE_name      (sntp_opt_strs+1596)
+#define KEYFILE_name      (sntp_opt_strs+1600)
 /** Compiled in flag settings for the keyfile option */
 #define KEYFILE_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_FILE))
@@ -308,11 +308,11 @@ static int const aIpv6CantList[] = {
  *  logfile option description:
  */
 /** Descriptive text for the logfile option */
-#define LOGFILE_DESC      (sntp_opt_strs+1604)
+#define LOGFILE_DESC      (sntp_opt_strs+1608)
 /** Upper-cased name for the logfile option */
-#define LOGFILE_NAME      (sntp_opt_strs+1629)
+#define LOGFILE_NAME      (sntp_opt_strs+1633)
 /** Name string for the logfile option */
-#define LOGFILE_name      (sntp_opt_strs+1637)
+#define LOGFILE_name      (sntp_opt_strs+1641)
 /** Compiled in flag settings for the logfile option */
 #define LOGFILE_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_FILE))
@@ -321,11 +321,11 @@ static int const aIpv6CantList[] = {
  *  steplimit option description:
  */
 /** Descriptive text for the steplimit option */
-#define STEPLIMIT_DESC      (sntp_opt_strs+1645)
+#define STEPLIMIT_DESC      (sntp_opt_strs+1649)
 /** Upper-cased name for the steplimit option */
-#define STEPLIMIT_NAME      (sntp_opt_strs+1697)
+#define STEPLIMIT_NAME      (sntp_opt_strs+1701)
 /** Name string for the steplimit option */
-#define STEPLIMIT_name      (sntp_opt_strs+1707)
+#define STEPLIMIT_name      (sntp_opt_strs+1711)
 /** Compiled in flag settings for the steplimit option */
 #define STEPLIMIT_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -334,11 +334,11 @@ static int const aIpv6CantList[] = {
  *  ntpversion option description:
  */
 /** Descriptive text for the ntpversion option */
-#define NTPVERSION_DESC      (sntp_opt_strs+1717)
+#define NTPVERSION_DESC      (sntp_opt_strs+1721)
 /** Upper-cased name for the ntpversion option */
-#define NTPVERSION_NAME      (sntp_opt_strs+1754)
+#define NTPVERSION_NAME      (sntp_opt_strs+1758)
 /** Name string for the ntpversion option */
-#define NTPVERSION_name      (sntp_opt_strs+1765)
+#define NTPVERSION_name      (sntp_opt_strs+1769)
 /** The compiled in default value for the ntpversion option argument */
 #define NTPVERSION_DFT_ARG   ((char const*)4)
 /** Compiled in flag settings for the ntpversion option */
@@ -349,11 +349,11 @@ static int const aIpv6CantList[] = {
  *  usereservedport option description:
  */
 /** Descriptive text for the usereservedport option */
-#define USERESERVEDPORT_DESC      (sntp_opt_strs+1776)
+#define USERESERVEDPORT_DESC      (sntp_opt_strs+1780)
 /** Upper-cased name for the usereservedport option */
-#define USERESERVEDPORT_NAME      (sntp_opt_strs+1813)
+#define USERESERVEDPORT_NAME      (sntp_opt_strs+1817)
 /** Name string for the usereservedport option */
-#define USERESERVEDPORT_name      (sntp_opt_strs+1829)
+#define USERESERVEDPORT_name      (sntp_opt_strs+1833)
 /** Compiled in flag settings for the usereservedport option */
 #define USERESERVEDPORT_FLAGS     (OPTST_DISABLED)
 
@@ -361,11 +361,11 @@ static int const aIpv6CantList[] = {
  *  step option description:
  */
 /** Descriptive text for the step option */
-#define STEP_DESC      (sntp_opt_strs+1845)
+#define STEP_DESC      (sntp_opt_strs+1849)
 /** Upper-cased name for the step option */
-#define STEP_NAME      (sntp_opt_strs+1888)
+#define STEP_NAME      (sntp_opt_strs+1892)
 /** Name string for the step option */
-#define STEP_name      (sntp_opt_strs+1893)
+#define STEP_name      (sntp_opt_strs+1897)
 /** Compiled in flag settings for the step option */
 #define STEP_FLAGS     (OPTST_DISABLED)
 
@@ -373,11 +373,11 @@ static int const aIpv6CantList[] = {
  *  slew option description:
  */
 /** Descriptive text for the slew option */
-#define SLEW_DESC      (sntp_opt_strs+1898)
+#define SLEW_DESC      (sntp_opt_strs+1902)
 /** Upper-cased name for the slew option */
-#define SLEW_NAME      (sntp_opt_strs+1936)
+#define SLEW_NAME      (sntp_opt_strs+1940)
 /** Name string for the slew option */
-#define SLEW_name      (sntp_opt_strs+1941)
+#define SLEW_name      (sntp_opt_strs+1945)
 /** Compiled in flag settings for the slew option */
 #define SLEW_FLAGS     (OPTST_DISABLED)
 
@@ -385,11 +385,11 @@ static int const aIpv6CantList[] = {
  *  timeout option description:
  */
 /** Descriptive text for the timeout option */
-#define TIMEOUT_DESC      (sntp_opt_strs+1946)
+#define TIMEOUT_DESC      (sntp_opt_strs+1950)
 /** Upper-cased name for the timeout option */
-#define TIMEOUT_NAME      (sntp_opt_strs+1990)
+#define TIMEOUT_NAME      (sntp_opt_strs+1994)
 /** Name string for the timeout option */
-#define TIMEOUT_name      (sntp_opt_strs+1998)
+#define TIMEOUT_name      (sntp_opt_strs+2002)
 /** The compiled in default value for the timeout option argument */
 #define TIMEOUT_DFT_ARG   ((char const*)5)
 /** Compiled in flag settings for the timeout option */
@@ -400,13 +400,13 @@ static int const aIpv6CantList[] = {
  *  wait option description:
  */
 /** Descriptive text for the wait option */
-#define WAIT_DESC      (sntp_opt_strs+2006)
+#define WAIT_DESC      (sntp_opt_strs+2010)
 /** Upper-cased name for the wait option */
-#define WAIT_NAME      (sntp_opt_strs+2057)
+#define WAIT_NAME      (sntp_opt_strs+2061)
 /** disablement name for the wait option */
-#define NOT_WAIT_name  (sntp_opt_strs+2062)
+#define NOT_WAIT_name  (sntp_opt_strs+2066)
 /** disablement prefix for the wait option */
-#define NOT_WAIT_PFX   (sntp_opt_strs+2070)
+#define NOT_WAIT_PFX   (sntp_opt_strs+2074)
 /** Name string for the wait option */
 #define WAIT_name      (NOT_WAIT_name + 3)
 /** Compiled in flag settings for the wait option */
@@ -415,11 +415,11 @@ static int const aIpv6CantList[] = {
 /*
  *  Help/More_Help/Version option descriptions:
  */
-#define HELP_DESC       (sntp_opt_strs+2073)
-#define HELP_name       (sntp_opt_strs+2117)
+#define HELP_DESC       (sntp_opt_strs+2077)
+#define HELP_name       (sntp_opt_strs+2121)
 #ifdef HAVE_WORKING_FORK
-#define MORE_HELP_DESC  (sntp_opt_strs+2122)
-#define MORE_HELP_name  (sntp_opt_strs+2167)
+#define MORE_HELP_DESC  (sntp_opt_strs+2126)
+#define MORE_HELP_name  (sntp_opt_strs+2171)
 #define MORE_HELP_FLAGS (OPTST_IMM | OPTST_NO_INIT)
 #else
 #define MORE_HELP_DESC  HELP_DESC
@@ -432,14 +432,14 @@ static int const aIpv6CantList[] = {
 #  define VER_FLAGS     (OPTST_SET_ARGTYPE(OPARG_TYPE_STRING) | \
                          OPTST_ARG_OPTIONAL | OPTST_IMM | OPTST_NO_INIT)
 #endif
-#define VER_DESC        (sntp_opt_strs+2177)
-#define VER_name        (sntp_opt_strs+2213)
-#define SAVE_OPTS_DESC  (sntp_opt_strs+2221)
-#define SAVE_OPTS_name  (sntp_opt_strs+2260)
-#define LOAD_OPTS_DESC     (sntp_opt_strs+2270)
-#define LOAD_OPTS_NAME     (sntp_opt_strs+2302)
-#define NO_LOAD_OPTS_name  (sntp_opt_strs+2312)
-#define LOAD_OPTS_pfx      (sntp_opt_strs+2070)
+#define VER_DESC        (sntp_opt_strs+2181)
+#define VER_name        (sntp_opt_strs+2217)
+#define SAVE_OPTS_DESC  (sntp_opt_strs+2225)
+#define SAVE_OPTS_name  (sntp_opt_strs+2264)
+#define LOAD_OPTS_DESC     (sntp_opt_strs+2274)
+#define LOAD_OPTS_NAME     (sntp_opt_strs+2306)
+#define NO_LOAD_OPTS_name  (sntp_opt_strs+2316)
+#define LOAD_OPTS_pfx      (sntp_opt_strs+2074)
 #define LOAD_OPTS_name     (NO_LOAD_OPTS_name + 3)
 /**
  *  Declare option callback procedures
@@ -745,24 +745,24 @@ static tOptDesc optDesc[OPTION_CT] = {
 
 /* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
 /** Reference to the upper cased version of sntp. */
-#define zPROGNAME       (sntp_opt_strs+2325)
+#define zPROGNAME       (sntp_opt_strs+2329)
 /** Reference to the title line for sntp usage. */
-#define zUsageTitle     (sntp_opt_strs+2330)
+#define zUsageTitle     (sntp_opt_strs+2334)
 /** sntp configuration file name. */
-#define zRcName         (sntp_opt_strs+2501)
+#define zRcName         (sntp_opt_strs+2509)
 /** Directories to search for sntp config files. */
 static char const * const apzHomeList[3] = {
-    sntp_opt_strs+2493,
-    sntp_opt_strs+2499,
+    sntp_opt_strs+2501,
+    sntp_opt_strs+2507,
     NULL };
 /** The sntp program bug email address. */
-#define zBugsAddr       (sntp_opt_strs+2508)
+#define zBugsAddr       (sntp_opt_strs+2516)
 /** Clarification/explanation of what sntp does. */
-#define zExplain        (sntp_opt_strs+2542)
+#define zExplain        (sntp_opt_strs+2550)
 /** Extra detail explaining what sntp does. */
 #define zDetail         (NULL)
 /** The full version string for sntp. */
-#define zFullVersion    (sntp_opt_strs+2544)
+#define zFullVersion    (sntp_opt_strs+2552)
 /* extracted from optcode.tlib near line 364 */
 
 #if defined(ENABLE_NLS)
@@ -1173,7 +1173,7 @@ static void bogus_function(void) {
      translate option names.
    */
   /* referenced via sntpOptions.pzCopyright */
-  puts(_("sntp 4.2.8p4-RC1\n\
+  puts(_("sntp 4.2.8p4-sec-RC2\n\
 Copyright (C) 1992-2015 The University of Delaware and Network Time Foundation, all rights reserved.\n\
 This is free software. It is licensed for use, modification and\n\
 redistribution under the terms of the NTP License, copies of which\n\
@@ -1263,7 +1263,7 @@ implied warranty.\n"));
   puts(_("load options from a config file"));
 
   /* referenced via sntpOptions.pzUsageTitle */
-  puts(_("sntp - standard Simple Network Time Protocol client program - Ver. 4.2.8p4-RC1\n\
+  puts(_("sntp - standard Simple Network Time Protocol client program - Ver. 4.2.8p4-sec-RC2\n\
 Usage:  %s [ - [] | --[{=| }] ]... \\\n\
 \t\t[ hostname-or-IP ...]\n"));
 
@@ -1271,7 +1271,7 @@ Usage:  %s [ - [] | --[{=| }] ]... \\\n\
   puts(_("\n"));
 
   /* referenced via sntpOptions.pzFullVersion */
-  puts(_("sntp 4.2.8p4-RC1"));
+  puts(_("sntp 4.2.8p4-sec-RC2"));
 
   /* referenced via sntpOptions.pzFullUsage */
   puts(_("<<>>"));
diff --git a/sntp/sntp-opts.h b/sntp/sntp-opts.h
index e76fb07a4..39c41e75a 100644
--- a/sntp/sntp-opts.h
+++ b/sntp/sntp-opts.h
@@ -1,7 +1,7 @@
 /*
  *  EDIT THIS FILE WITH CAUTION  (sntp-opts.h)
  *
- *  It has been AutoGen-ed  October  6, 2015 at 05:54:00 AM by AutoGen 5.18.5
+ *  It has been AutoGen-ed  October 17, 2015 at 06:17:04 AM by AutoGen 5.18.5
  *  From the definitions    sntp-opts.def
  *  and the template file   options
  *
@@ -91,9 +91,9 @@ typedef enum {
 /** count of all options for sntp */
 #define OPTION_CT    23
 /** sntp version */
-#define SNTP_VERSION       "4.2.8p4-RC1"
+#define SNTP_VERSION       "4.2.8p4-sec-RC2"
 /** Full sntp version text */
-#define SNTP_FULL_VERSION  "sntp 4.2.8p4-RC1"
+#define SNTP_FULL_VERSION  "sntp 4.2.8p4-sec-RC2"
 
 /**
  *  Interface defines for all options.  Replace "n" with the UPPER_CASED
diff --git a/sntp/sntp.1sntpman b/sntp/sntp.1sntpman
index 7f355ada6..de9f5391b 100644
--- a/sntp/sntp.1sntpman
+++ b/sntp/sntp.1sntpman
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH sntp 1sntpman "06 Oct 2015" "4.2.8p4-RC1" "User Commands"
+.TH sntp 1sntpman "17 Oct 2015" "4.2.8p4-sec-RC2" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-i2ayF3/ag-u2aqE3)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:55:18 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:21:32 AM by AutoGen 5.18.5
 .\" From the definitions sntp-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/sntp/sntp.1sntpmdoc b/sntp/sntp.1sntpmdoc
index acc90362b..6eee483f0 100644
--- a/sntp/sntp.1sntpmdoc
+++ b/sntp/sntp.1sntpmdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt SNTP 1sntpmdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (sntp-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:55:25 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:18:08 AM by AutoGen 5.18.5
 .\"  From the definitions    sntp-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/sntp/sntp.html b/sntp/sntp.html
index 51d39b5e4..61d1aac7d 100644
--- a/sntp/sntp.html
+++ b/sntp/sntp.html
@@ -3,7 +3,7 @@
 Sntp User's Manual
 
 
-
+
 
 
 
@@ -14,18 +14,20 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
 
Sntp User's Manual

 

+
 

-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-

+
 

 
 
Simple Network Time Protocol User Manual

@@ -36,7 +38,7 @@ display the time offset of the system clock relative to the server
 clock.  Run as root, it can correct the system clock to this offset as
 well.  It can be run as an interactive command or from a cron job.
 
-  
This document applies to version 4.2.8p4-RC1 of sntp.
+  
This document applies to version 4.2.8p4-sec-RC2 of sntp.
 
   
The program implements the SNTP protocol as defined by RFC 5905, the NTPv4
 IETF specification.
@@ -55,9 +57,10 @@ IETF specification.
 
 
 

-

 
-

+

+
+
 

 
 
@@ -76,9 +79,10 @@ the +4.567 +/- 0.089 secs indicates the time offset and
 error bound of the system clock relative to the server clock.
 
 

-

 
-

+

+
+
 

 
 
Invoking sntp

@@ -135,7 +139,7 @@ using the agtexi-cmd template and the option descriptions for the <
 This software is released under the NTP license, <http://ntp.org/license>.
 
 
 
 

+
 

-Next: ,
+Next: ,
 Up: sntp Invocation
-

+
 

 
-
sntp help/usage (--help)

+
sntp help/usage (--help)

 
 

 This is the automatically generated usage text for sntp.
 
   
The text printed is the same whether selected with the help option
-(--help) or the more-help option (--more-help).  more-help will print
+(--help) or the more-help option (--more-help).  more-help will print
 the usage text by passing it through a pager program. 
 more-help is disabled on platforms without a working
 fork(2) function.  The PAGER environment variable is
-used to select the program, defaulting to more.  Both will exit
+used to select the program, defaulting to more.  Both will exit
 with a status code of 0.
 
-
sntp - standard Simple Network Time Protocol client program - Ver. 4.2.8p4-RC1
+
sntp - standard Simple Network Time Protocol client program - Ver. 4.2.8p4-sec-RC2
 Usage:  sntp [ -<flag> [<val>] | --<name>[{=| }<val>] ]... \
                 [ hostname-or-IP ...]
   Flg Arg Option-Name    Description
@@ -230,11 +235,12 @@ The following option preset mechanisms are supported:
 Please send bug reports to:  <http://bugs.ntp.org, bugs@ntp.org>
 

   

+
 

-Next: ,
+Next: ,
 Previous: sntp usage,
 Up: sntp Invocation
-

+
 

 
 
ipv4 option (-4)

@@ -251,11 +257,12 @@ ipv6.
   
Force DNS resolution of the following host names on the command line
 to the IPv4 namespace. 
 

+
 

-Next: ,
+Next: ,
 Previous: sntp ipv4,
 Up: sntp Invocation
-

+
 

 
 
ipv6 option (-6)

@@ -272,35 +279,37 @@ ipv4.
   
Force DNS resolution of the following host names on the command line
 to the IPv6 namespace. 
 

+
 

-Next: ,
+Next: ,
 Previous: sntp ipv6,
 Up: sntp Invocation
-

+
 

 
 
authentication option (-a)

 
 

 This is the “enable authentication with the key auth-keynumber” option. 
-This option takes a number argument auth-keynumber. 
+This option takes a number argument auth-keynumber. 
 Enable authentication using the key specified in this option's
-argument.  The argument of this option is the keyid, a
-number specified in the keyfile as this key's identifier. 
-See the keyfile option (-k) for more details. 
+argument.  The argument of this option is the keyid, a
+number specified in the keyfile as this key's identifier. 
+See the keyfile option (-k) for more details. 
 

+
 

-Next: ,
+Next: ,
 Previous: sntp authentication,
 Up: sntp Invocation
-

+
 

 
 
broadcast option (-b)

 
 

 This is the “listen to the address specified for broadcast time sync” option. 
-This option takes a string argument broadcast-address.
+This option takes a string argument broadcast-address.
 
 
This option has some usage constraints.  It:
      
    
@@ -309,20 +318,21 @@ This option takes a string argument broadcast-address.
 
   
    If specified sntp will listen to the specified address
 for NTP broadcasts.  The default maximum wait time
-can (and probably should) be modified with -t. 
+can (and probably should) be modified with -t. 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: sntp broadcast,
 Up: sntp Invocation
-
    
+
 
    
 
 
    concurrent option (-c)
    
 
 
    
 This is the “concurrently query all ips returned for host-name” option. 
-This option takes a string argument host-name.
+This option takes a string argument host-name.
 
 
    This option has some usage constraints.  It:
      
      
@@ -335,80 +345,85 @@ as part of a DNS lookup are assumed to be for a single instance of
 ntpd, and therefore sntp will send queries to these IPs
 one after another, with a 2-second gap in between each query.
 
-  
      The -c or --concurrent flag says that any IPs
+  
      The -c or --concurrent flag says that any IPs
 returned for the DNS lookup of the supplied host-name are on
 different machines, so we can send concurrent queries. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: sntp concurrent,
 Up: sntp Invocation
-
      
+
 
      
 
 
      gap option (-g)
      
 
 
      
 This is the “the gap (in milliseconds) between time requests” option. 
-This option takes a number argument milliseconds. 
+This option takes a number argument milliseconds. 
 Since we're only going to use the first valid response we get and
 there is benefit to specifying a good number of servers to query,
 separate the queries we send out by the specified number of
 milliseconds. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: sntp gap,
 Up: sntp Invocation
-
      
+
 
      
 
 
      kod option (-K)
      
 
 
      
 This is the “kod history filename” option. 
-This option takes a file argument file-name. 
+This option takes a file argument file-name. 
 Specifies the filename to be used for the persistent history of KoD
 responses received from servers.  If the file does not exist, a
 warning message will be displayed.  The file will not be created. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: sntp kod,
 Up: sntp Invocation
-
      
+
 
      
 
 
      keyfile option (-k)
      
 
 
      
-This is the “look in this file for the key specified with -a” option. 
-This option takes a file argument file-name. 
+This is the “look in this file for the key specified with -a” option. 
+This option takes a file argument file-name. 
 This option specifies the keyfile. 
-sntp will search for the key specified with -a
-keyno in this file.  See ntp.keys(5) for more
+sntp will search for the key specified with -a
+keyno in this file.  See ntp.keys(5) for more
 information. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: sntp keyfile,
 Up: sntp Invocation
-
      
+
 
      
 
 
      logfile option (-l)
      
 
 
      
 This is the “log to specified logfile” option. 
-This option takes a file argument file-name. 
+This option takes a file argument file-name. 
 This option causes the client to write log messages to the specified
-logfile. 
+logfile. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: sntp logfile,
 Up: sntp Invocation
-
      
+
 
      
 
 
      steplimit option (-M)
      
@@ -416,17 +431,18 @@ Up: sntp Invocation
 
      
 This is the “adjustments less than steplimit msec will be slewed” option. 
 This option takes a number argument. 
-If the time adjustment is less than steplimit milliseconds,
-slew the amount using adjtime(2).  Otherwise, step the
-correction using settimeofday(2).  The default value is 0,
+If the time adjustment is less than steplimit milliseconds,
+slew the amount using adjtime(2).  Otherwise, step the
+correction using settimeofday(2).  The default value is 0,
 which means all adjustments will be stepped.  This is a feature, as
 different situations demand different values. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: sntp steplimit,
 Up: sntp Invocation
-
      
+
 
      
 
 
      ntpversion option (-o)
      
@@ -435,13 +451,14 @@ Up: sntp Invocation
 This is the “send int as our ntp protocol version” option. 
 This option takes a number argument. 
 When sending requests to a remote server, tell them we are running
-NTP protocol version ntpversion . 
+NTP protocol version ntpversion . 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: sntp ntpversion,
 Up: sntp Invocation
-
      
+
 
      
 
 
      usereservedport option (-r)
      
@@ -451,29 +468,31 @@ This is the “use the ntp reserved port (port 123)” option.
 Use port 123, which is reserved for NTP, for our network
 communications. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: sntp usereservedport,
 Up: sntp Invocation
-
      
+
 
      
 
 
      timeout option (-t)
      
 
 
      
 This is the “the number of seconds to wait for responses” option. 
-This option takes a number argument seconds. 
+This option takes a number argument seconds. 
 When waiting for a reply, sntp will wait the number
 of seconds specified before giving up.  The default should be
 more than enough for a unicast response.  If sntp is
 only waiting for a broadcast response a longer timeout is
 likely needed. 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: sntp timeout,
 Up: sntp Invocation
-
      
+
 
      
 
 
      wait option
      
@@ -490,11 +509,12 @@ This is the “wait for pending replies (if not setting the time)” opt
   
      If we are not setting the time, wait for all pending responses.
 
 
      
+
 
      
-Next: ,
+Next: ,
 Previous: sntp wait,
 Up: sntp Invocation
-
      
+
 
      
 
 
      presetting/configuring sntp
      
@@ -512,9 +532,9 @@ values are treated like option arguments.
 
    • $PWD
 
    
   The environment variables HOME, and PWD
-are expanded and replaced when sntp runs. 
+are expanded and replaced when sntp runs. 
 For any of these that are plain files, they are simply processed. 
-For any that are directories, then a file named .ntprc is searched for
+For any that are directories, then a file named .ntprc is searched for
 within that directory and processed.
 
   
    Configuration files may be in a wide variety of formats. 
@@ -556,52 +576,56 @@ detail to provide.  The default is to print just the version.  The licensing inf
 Only the first letter of the argument is examined:
 
      
    
-
    version
    Only print the version.  This is the default. 
-
    copyright
    Name the copyright usage licensing terms. 
-
    verbose
    Print the full copyright usage licensing terms. 
+
    ‘version’
    Only print the version.  This is the default. 
+
    ‘copyright’
    Name the copyright usage licensing terms. 
+
    ‘verbose’
    Print the full copyright usage licensing terms. 
 
    
 
 
    
+
 
    
-Next: ,
+Next: ,
 Previous: sntp config,
 Up: sntp Invocation
-
    
+
 
    
 
 
    sntp exit status
    
 
 
    One of the following exit values will be returned:
      
    
-
    0 (EXIT_SUCCESS)
    Successful program execution. 
-
    1 (EXIT_FAILURE)
    The operation failed or the command syntax was not valid. 
-
    66 (EX_NOINPUT)
    A specified configuration file could not be loaded. 
-
    70 (EX_SOFTWARE)
    libopts had an internal operational error.  Please report
+
    ‘0 (EXIT_SUCCESS)’
    Successful program execution. 
+
    ‘1 (EXIT_FAILURE)’
    The operation failed or the command syntax was not valid. 
+
    ‘66 (EX_NOINPUT)’
    A specified configuration file could not be loaded. 
+
    ‘70 (EX_SOFTWARE)’
    libopts had an internal operational error.  Please report
 it to autogen-users@lists.sourceforge.net.  Thank you. 
 
    
   
    
+
 
    
-Next: ,
+Next: ,
 Previous: sntp exit status,
 Up: sntp Invocation
-
    
+
 
    
 
 
    sntp Usage
    
 
 
    
+
 
    
-Previous: sntp Usage,
+Previous: sntp Usage,
 Up: sntp Invocation
-
    
+
 
    
 
 
    sntp Authors
    
 
 
    
-
    
 
-
    
+
    
+
+
 
    
 
 
diff --git a/sntp/sntp.man.in b/sntp/sntp.man.in
index 5177c4ac5..c690d526c 100644
--- a/sntp/sntp.man.in
+++ b/sntp/sntp.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH sntp @SNTP_MS@ "06 Oct 2015" "4.2.8p4-RC1" "User Commands"
+.TH sntp @SNTP_MS@ "17 Oct 2015" "4.2.8p4-sec-RC2" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-i2ayF3/ag-u2aqE3)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 05:55:18 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:21:32 AM by AutoGen 5.18.5
 .\" From the definitions sntp-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/sntp/sntp.mdoc.in b/sntp/sntp.mdoc.in
index c33cb6fc1..cc3396ad0 100644
--- a/sntp/sntp.mdoc.in
+++ b/sntp/sntp.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt SNTP @SNTP_MS@ User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (sntp-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 05:55:25 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:18:08 AM by AutoGen 5.18.5
 .\"  From the definitions    sntp-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/util/invoke-ntp-keygen.texi b/util/invoke-ntp-keygen.texi
index 9068f618d..09cd1f63b 100644
--- a/util/invoke-ntp-keygen.texi
+++ b/util/invoke-ntp-keygen.texi
@@ -6,7 +6,7 @@
 #
 # EDIT THIS FILE WITH CAUTION  (invoke-ntp-keygen.texi)
 #
-# It has been AutoGen-ed  October  6, 2015 at 06:18:09 AM by AutoGen 5.18.5
+# It has been AutoGen-ed  October 17, 2015 at 06:26:07 AM by AutoGen 5.18.5
 # From the definitions    ntp-keygen-opts.def
 # and the template file   agtexi-cmd.tpl
 @end ignore
@@ -886,7 +886,7 @@ with a status code of 0.
 
 @exampleindent 0
 @example
-ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.8p4-RC1
+ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.8p4-sec-RC2
 Usage:  ntp-keygen [ - [] | --[@{=| @}] ]...
   Flg Arg Option-Name    Description
    -b Num imbits         identity modulus bits
diff --git a/util/ntp-keygen-opts.c b/util/ntp-keygen-opts.c
index b477160f0..fdba3bb48 100644
--- a/util/ntp-keygen-opts.c
+++ b/util/ntp-keygen-opts.c
@@ -1,7 +1,7 @@
 /*
  *  EDIT THIS FILE WITH CAUTION  (ntp-keygen-opts.c)
  *
- *  It has been AutoGen-ed  October  6, 2015 at 06:17:13 AM by AutoGen 5.18.5
+ *  It has been AutoGen-ed  October 17, 2015 at 06:25:57 AM by AutoGen 5.18.5
  *  From the definitions    ntp-keygen-opts.def
  *  and the template file   options
  *
@@ -51,7 +51,7 @@ extern "C" {
 #endif
 extern FILE * option_usage_fp;
 #define zCopyright      (ntp_keygen_opt_strs+0)
-#define zLicenseDescrip (ntp_keygen_opt_strs+356)
+#define zLicenseDescrip (ntp_keygen_opt_strs+360)
 
 /*
  *  global included definitions
@@ -71,15 +71,15 @@ extern FILE * option_usage_fp;
 /**
  *  static const strings for ntp-keygen options
  */
-static char const ntp_keygen_opt_strs[2431] =
-/*     0 */ "ntp-keygen (ntp) 4.2.8p4-RC1\n"
+static char const ntp_keygen_opt_strs[2443] =
+/*     0 */ "ntp-keygen (ntp) 4.2.8p4-sec-RC2\n"
             "Copyright (C) 1992-2015 The University of Delaware and Network Time Foundation, all rights reserved.\n"
             "This is free software. It is licensed for use, modification and\n"
             "redistribution under the terms of the NTP License, copies of which\n"
             "can be seen at:\n"
             "  \n"
             "  \n\0"
-/*   356 */ "Permission to use, copy, modify, and distribute this software and its\n"
+/*   360 */ "Permission to use, copy, modify, and distribute this software and its\n"
             "documentation for any purpose with or without fee is hereby granted,\n"
             "provided that the above copyright notice appears in all copies and that\n"
             "both the copyright notice and this permission notice appear in supporting\n"
@@ -89,100 +89,100 @@ static char const ntp_keygen_opt_strs[2431] =
             "Time Foundation makes no representations about the suitability this\n"
             "software for any purpose.  It is provided \"as is\" without express or\n"
             "implied warranty.\n\0"
-/*  1024 */ "identity modulus bits\0"
-/*  1046 */ "IMBITS\0"
-/*  1053 */ "imbits\0"
-/*  1060 */ "certificate scheme\0"
-/*  1079 */ "CERTIFICATE\0"
-/*  1091 */ "certificate\0"
-/*  1103 */ "privatekey cipher\0"
-/*  1121 */ "CIPHER\0"
-/*  1128 */ "cipher\0"
-/*  1135 */ "Increase debug verbosity level\0"
-/*  1166 */ "DEBUG_LEVEL\0"
-/*  1178 */ "debug-level\0"
-/*  1190 */ "Set the debug verbosity level\0"
-/*  1220 */ "SET_DEBUG_LEVEL\0"
-/*  1236 */ "set-debug-level\0"
-/*  1252 */ "Write IFF or GQ identity keys\0"
-/*  1282 */ "ID_KEY\0"
-/*  1289 */ "id-key\0"
-/*  1296 */ "Generate GQ parameters and keys\0"
-/*  1328 */ "GQ_PARAMS\0"
-/*  1338 */ "gq-params\0"
-/*  1348 */ "generate RSA host key\0"
-/*  1370 */ "HOST_KEY\0"
-/*  1379 */ "host-key\0"
-/*  1388 */ "generate IFF parameters\0"
-/*  1412 */ "IFFKEY\0"
-/*  1419 */ "iffkey\0"
-/*  1426 */ "set Autokey group name\0"
-/*  1449 */ "IDENT\0"
-/*  1455 */ "ident\0"
-/*  1461 */ "set certificate lifetime\0"
-/*  1486 */ "LIFETIME\0"
-/*  1495 */ "lifetime\0"
-/*  1504 */ "generate MD5 keys\0"
-/*  1522 */ "MD5KEY\0"
-/*  1529 */ "md5key\0"
-/*  1536 */ "modulus\0"
-/*  1544 */ "MODULUS\0"
-/*  1552 */ "generate PC private certificate\0"
-/*  1584 */ "PVT_CERT\0"
-/*  1593 */ "pvt-cert\0"
-/*  1602 */ "local private password\0"
-/*  1625 */ "PASSWORD\0"
-/*  1634 */ "password\0"
-/*  1643 */ "export IFF or GQ group keys with password\0"
-/*  1685 */ "EXPORT_PASSWD\0"
-/*  1699 */ "export-passwd\0"
-/*  1713 */ "generate sign key (RSA or DSA)\0"
-/*  1744 */ "SIGN_KEY\0"
-/*  1753 */ "sign-key\0"
-/*  1762 */ "set host and optionally group name\0"
-/*  1797 */ "SUBJECT_NAME\0"
-/*  1810 */ "subject-name\0"
-/*  1823 */ "trusted certificate (TC scheme)\0"
-/*  1855 */ "TRUSTED_CERT\0"
-/*  1868 */ "trusted-cert\0"
-/*  1881 */ "generate  MV parameters\0"
-/*  1910 */ "MV_PARAMS\0"
-/*  1920 */ "mv-params\0"
-/*  1930 */ "update  MV keys\0"
-/*  1951 */ "MV_KEYS\0"
-/*  1959 */ "mv-keys\0"
-/*  1967 */ "display extended usage information and exit\0"
-/*  2011 */ "help\0"
-/*  2016 */ "extended usage information passed thru pager\0"
-/*  2061 */ "more-help\0"
-/*  2071 */ "output version information and exit\0"
-/*  2107 */ "version\0"
-/*  2115 */ "save the option state to a config file\0"
-/*  2154 */ "save-opts\0"
-/*  2164 */ "load options from a config file\0"
-/*  2196 */ "LOAD_OPTS\0"
-/*  2206 */ "no-load-opts\0"
-/*  2219 */ "no\0"
-/*  2222 */ "NTP_KEYGEN\0"
-/*  2233 */ "ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.8p4-RC1\n"
+/*  1028 */ "identity modulus bits\0"
+/*  1050 */ "IMBITS\0"
+/*  1057 */ "imbits\0"
+/*  1064 */ "certificate scheme\0"
+/*  1083 */ "CERTIFICATE\0"
+/*  1095 */ "certificate\0"
+/*  1107 */ "privatekey cipher\0"
+/*  1125 */ "CIPHER\0"
+/*  1132 */ "cipher\0"
+/*  1139 */ "Increase debug verbosity level\0"
+/*  1170 */ "DEBUG_LEVEL\0"
+/*  1182 */ "debug-level\0"
+/*  1194 */ "Set the debug verbosity level\0"
+/*  1224 */ "SET_DEBUG_LEVEL\0"
+/*  1240 */ "set-debug-level\0"
+/*  1256 */ "Write IFF or GQ identity keys\0"
+/*  1286 */ "ID_KEY\0"
+/*  1293 */ "id-key\0"
+/*  1300 */ "Generate GQ parameters and keys\0"
+/*  1332 */ "GQ_PARAMS\0"
+/*  1342 */ "gq-params\0"
+/*  1352 */ "generate RSA host key\0"
+/*  1374 */ "HOST_KEY\0"
+/*  1383 */ "host-key\0"
+/*  1392 */ "generate IFF parameters\0"
+/*  1416 */ "IFFKEY\0"
+/*  1423 */ "iffkey\0"
+/*  1430 */ "set Autokey group name\0"
+/*  1453 */ "IDENT\0"
+/*  1459 */ "ident\0"
+/*  1465 */ "set certificate lifetime\0"
+/*  1490 */ "LIFETIME\0"
+/*  1499 */ "lifetime\0"
+/*  1508 */ "generate MD5 keys\0"
+/*  1526 */ "MD5KEY\0"
+/*  1533 */ "md5key\0"
+/*  1540 */ "modulus\0"
+/*  1548 */ "MODULUS\0"
+/*  1556 */ "generate PC private certificate\0"
+/*  1588 */ "PVT_CERT\0"
+/*  1597 */ "pvt-cert\0"
+/*  1606 */ "local private password\0"
+/*  1629 */ "PASSWORD\0"
+/*  1638 */ "password\0"
+/*  1647 */ "export IFF or GQ group keys with password\0"
+/*  1689 */ "EXPORT_PASSWD\0"
+/*  1703 */ "export-passwd\0"
+/*  1717 */ "generate sign key (RSA or DSA)\0"
+/*  1748 */ "SIGN_KEY\0"
+/*  1757 */ "sign-key\0"
+/*  1766 */ "set host and optionally group name\0"
+/*  1801 */ "SUBJECT_NAME\0"
+/*  1814 */ "subject-name\0"
+/*  1827 */ "trusted certificate (TC scheme)\0"
+/*  1859 */ "TRUSTED_CERT\0"
+/*  1872 */ "trusted-cert\0"
+/*  1885 */ "generate  MV parameters\0"
+/*  1914 */ "MV_PARAMS\0"
+/*  1924 */ "mv-params\0"
+/*  1934 */ "update  MV keys\0"
+/*  1955 */ "MV_KEYS\0"
+/*  1963 */ "mv-keys\0"
+/*  1971 */ "display extended usage information and exit\0"
+/*  2015 */ "help\0"
+/*  2020 */ "extended usage information passed thru pager\0"
+/*  2065 */ "more-help\0"
+/*  2075 */ "output version information and exit\0"
+/*  2111 */ "version\0"
+/*  2119 */ "save the option state to a config file\0"
+/*  2158 */ "save-opts\0"
+/*  2168 */ "load options from a config file\0"
+/*  2200 */ "LOAD_OPTS\0"
+/*  2210 */ "no-load-opts\0"
+/*  2223 */ "no\0"
+/*  2226 */ "NTP_KEYGEN\0"
+/*  2237 */ "ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.8p4-sec-RC2\n"
             "Usage:  %s [ - [] | --[{=| }] ]...\n\0"
-/*  2351 */ "$HOME\0"
-/*  2357 */ ".\0"
-/*  2359 */ ".ntprc\0"
-/*  2366 */ "http://bugs.ntp.org, bugs@ntp.org\0"
-/*  2400 */ "\n\0"
-/*  2402 */ "ntp-keygen (ntp) 4.2.8p4-RC1";
+/*  2359 */ "$HOME\0"
+/*  2365 */ ".\0"
+/*  2367 */ ".ntprc\0"
+/*  2374 */ "http://bugs.ntp.org, bugs@ntp.org\0"
+/*  2408 */ "\n\0"
+/*  2410 */ "ntp-keygen (ntp) 4.2.8p4-sec-RC2";
 
 /**
  *  imbits option description:
  */
 #ifdef AUTOKEY
 /** Descriptive text for the imbits option */
-#define IMBITS_DESC      (ntp_keygen_opt_strs+1024)
+#define IMBITS_DESC      (ntp_keygen_opt_strs+1028)
 /** Upper-cased name for the imbits option */
-#define IMBITS_NAME      (ntp_keygen_opt_strs+1046)
+#define IMBITS_NAME      (ntp_keygen_opt_strs+1050)
 /** Name string for the imbits option */
-#define IMBITS_name      (ntp_keygen_opt_strs+1053)
+#define IMBITS_name      (ntp_keygen_opt_strs+1057)
 /** Compiled in flag settings for the imbits option */
 #define IMBITS_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -199,11 +199,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the certificate option */
-#define CERTIFICATE_DESC      (ntp_keygen_opt_strs+1060)
+#define CERTIFICATE_DESC      (ntp_keygen_opt_strs+1064)
 /** Upper-cased name for the certificate option */
-#define CERTIFICATE_NAME      (ntp_keygen_opt_strs+1079)
+#define CERTIFICATE_NAME      (ntp_keygen_opt_strs+1083)
 /** Name string for the certificate option */
-#define CERTIFICATE_name      (ntp_keygen_opt_strs+1091)
+#define CERTIFICATE_name      (ntp_keygen_opt_strs+1095)
 /** Compiled in flag settings for the certificate option */
 #define CERTIFICATE_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -220,11 +220,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the cipher option */
-#define CIPHER_DESC      (ntp_keygen_opt_strs+1103)
+#define CIPHER_DESC      (ntp_keygen_opt_strs+1107)
 /** Upper-cased name for the cipher option */
-#define CIPHER_NAME      (ntp_keygen_opt_strs+1121)
+#define CIPHER_NAME      (ntp_keygen_opt_strs+1125)
 /** Name string for the cipher option */
-#define CIPHER_name      (ntp_keygen_opt_strs+1128)
+#define CIPHER_name      (ntp_keygen_opt_strs+1132)
 /** Compiled in flag settings for the cipher option */
 #define CIPHER_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -240,11 +240,11 @@ static char const ntp_keygen_opt_strs[2431] =
  *  debug-level option description:
  */
 /** Descriptive text for the debug-level option */
-#define DEBUG_LEVEL_DESC      (ntp_keygen_opt_strs+1135)
+#define DEBUG_LEVEL_DESC      (ntp_keygen_opt_strs+1139)
 /** Upper-cased name for the debug-level option */
-#define DEBUG_LEVEL_NAME      (ntp_keygen_opt_strs+1166)
+#define DEBUG_LEVEL_NAME      (ntp_keygen_opt_strs+1170)
 /** Name string for the debug-level option */
-#define DEBUG_LEVEL_name      (ntp_keygen_opt_strs+1178)
+#define DEBUG_LEVEL_name      (ntp_keygen_opt_strs+1182)
 /** Compiled in flag settings for the debug-level option */
 #define DEBUG_LEVEL_FLAGS     (OPTST_DISABLED)
 
@@ -252,11 +252,11 @@ static char const ntp_keygen_opt_strs[2431] =
  *  set-debug-level option description:
  */
 /** Descriptive text for the set-debug-level option */
-#define SET_DEBUG_LEVEL_DESC      (ntp_keygen_opt_strs+1190)
+#define SET_DEBUG_LEVEL_DESC      (ntp_keygen_opt_strs+1194)
 /** Upper-cased name for the set-debug-level option */
-#define SET_DEBUG_LEVEL_NAME      (ntp_keygen_opt_strs+1220)
+#define SET_DEBUG_LEVEL_NAME      (ntp_keygen_opt_strs+1224)
 /** Name string for the set-debug-level option */
-#define SET_DEBUG_LEVEL_name      (ntp_keygen_opt_strs+1236)
+#define SET_DEBUG_LEVEL_name      (ntp_keygen_opt_strs+1240)
 /** Compiled in flag settings for the set-debug-level option */
 #define SET_DEBUG_LEVEL_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -266,11 +266,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the id-key option */
-#define ID_KEY_DESC      (ntp_keygen_opt_strs+1252)
+#define ID_KEY_DESC      (ntp_keygen_opt_strs+1256)
 /** Upper-cased name for the id-key option */
-#define ID_KEY_NAME      (ntp_keygen_opt_strs+1282)
+#define ID_KEY_NAME      (ntp_keygen_opt_strs+1286)
 /** Name string for the id-key option */
-#define ID_KEY_name      (ntp_keygen_opt_strs+1289)
+#define ID_KEY_name      (ntp_keygen_opt_strs+1293)
 /** Compiled in flag settings for the id-key option */
 #define ID_KEY_FLAGS     (OPTST_DISABLED)
 
@@ -286,11 +286,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the gq-params option */
-#define GQ_PARAMS_DESC      (ntp_keygen_opt_strs+1296)
+#define GQ_PARAMS_DESC      (ntp_keygen_opt_strs+1300)
 /** Upper-cased name for the gq-params option */
-#define GQ_PARAMS_NAME      (ntp_keygen_opt_strs+1328)
+#define GQ_PARAMS_NAME      (ntp_keygen_opt_strs+1332)
 /** Name string for the gq-params option */
-#define GQ_PARAMS_name      (ntp_keygen_opt_strs+1338)
+#define GQ_PARAMS_name      (ntp_keygen_opt_strs+1342)
 /** Compiled in flag settings for the gq-params option */
 #define GQ_PARAMS_FLAGS     (OPTST_DISABLED)
 
@@ -306,11 +306,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the host-key option */
-#define HOST_KEY_DESC      (ntp_keygen_opt_strs+1348)
+#define HOST_KEY_DESC      (ntp_keygen_opt_strs+1352)
 /** Upper-cased name for the host-key option */
-#define HOST_KEY_NAME      (ntp_keygen_opt_strs+1370)
+#define HOST_KEY_NAME      (ntp_keygen_opt_strs+1374)
 /** Name string for the host-key option */
-#define HOST_KEY_name      (ntp_keygen_opt_strs+1379)
+#define HOST_KEY_name      (ntp_keygen_opt_strs+1383)
 /** Compiled in flag settings for the host-key option */
 #define HOST_KEY_FLAGS     (OPTST_DISABLED)
 
@@ -326,11 +326,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the iffkey option */
-#define IFFKEY_DESC      (ntp_keygen_opt_strs+1388)
+#define IFFKEY_DESC      (ntp_keygen_opt_strs+1392)
 /** Upper-cased name for the iffkey option */
-#define IFFKEY_NAME      (ntp_keygen_opt_strs+1412)
+#define IFFKEY_NAME      (ntp_keygen_opt_strs+1416)
 /** Name string for the iffkey option */
-#define IFFKEY_name      (ntp_keygen_opt_strs+1419)
+#define IFFKEY_name      (ntp_keygen_opt_strs+1423)
 /** Compiled in flag settings for the iffkey option */
 #define IFFKEY_FLAGS     (OPTST_DISABLED)
 
@@ -346,11 +346,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the ident option */
-#define IDENT_DESC      (ntp_keygen_opt_strs+1426)
+#define IDENT_DESC      (ntp_keygen_opt_strs+1430)
 /** Upper-cased name for the ident option */
-#define IDENT_NAME      (ntp_keygen_opt_strs+1449)
+#define IDENT_NAME      (ntp_keygen_opt_strs+1453)
 /** Name string for the ident option */
-#define IDENT_name      (ntp_keygen_opt_strs+1455)
+#define IDENT_name      (ntp_keygen_opt_strs+1459)
 /** Compiled in flag settings for the ident option */
 #define IDENT_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -367,11 +367,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the lifetime option */
-#define LIFETIME_DESC      (ntp_keygen_opt_strs+1461)
+#define LIFETIME_DESC      (ntp_keygen_opt_strs+1465)
 /** Upper-cased name for the lifetime option */
-#define LIFETIME_NAME      (ntp_keygen_opt_strs+1486)
+#define LIFETIME_NAME      (ntp_keygen_opt_strs+1490)
 /** Name string for the lifetime option */
-#define LIFETIME_name      (ntp_keygen_opt_strs+1495)
+#define LIFETIME_name      (ntp_keygen_opt_strs+1499)
 /** Compiled in flag settings for the lifetime option */
 #define LIFETIME_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -387,11 +387,11 @@ static char const ntp_keygen_opt_strs[2431] =
  *  md5key option description:
  */
 /** Descriptive text for the md5key option */
-#define MD5KEY_DESC      (ntp_keygen_opt_strs+1504)
+#define MD5KEY_DESC      (ntp_keygen_opt_strs+1508)
 /** Upper-cased name for the md5key option */
-#define MD5KEY_NAME      (ntp_keygen_opt_strs+1522)
+#define MD5KEY_NAME      (ntp_keygen_opt_strs+1526)
 /** Name string for the md5key option */
-#define MD5KEY_name      (ntp_keygen_opt_strs+1529)
+#define MD5KEY_name      (ntp_keygen_opt_strs+1533)
 /** Compiled in flag settings for the md5key option */
 #define MD5KEY_FLAGS     (OPTST_DISABLED)
 
@@ -400,11 +400,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the modulus option */
-#define MODULUS_DESC      (ntp_keygen_opt_strs+1536)
+#define MODULUS_DESC      (ntp_keygen_opt_strs+1540)
 /** Upper-cased name for the modulus option */
-#define MODULUS_NAME      (ntp_keygen_opt_strs+1544)
+#define MODULUS_NAME      (ntp_keygen_opt_strs+1548)
 /** Name string for the modulus option */
-#define MODULUS_name      (ntp_keygen_opt_strs+1536)
+#define MODULUS_name      (ntp_keygen_opt_strs+1540)
 /** Compiled in flag settings for the modulus option */
 #define MODULUS_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -421,11 +421,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the pvt-cert option */
-#define PVT_CERT_DESC      (ntp_keygen_opt_strs+1552)
+#define PVT_CERT_DESC      (ntp_keygen_opt_strs+1556)
 /** Upper-cased name for the pvt-cert option */
-#define PVT_CERT_NAME      (ntp_keygen_opt_strs+1584)
+#define PVT_CERT_NAME      (ntp_keygen_opt_strs+1588)
 /** Name string for the pvt-cert option */
-#define PVT_CERT_name      (ntp_keygen_opt_strs+1593)
+#define PVT_CERT_name      (ntp_keygen_opt_strs+1597)
 /** Compiled in flag settings for the pvt-cert option */
 #define PVT_CERT_FLAGS     (OPTST_DISABLED)
 
@@ -441,11 +441,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the password option */
-#define PASSWORD_DESC      (ntp_keygen_opt_strs+1602)
+#define PASSWORD_DESC      (ntp_keygen_opt_strs+1606)
 /** Upper-cased name for the password option */
-#define PASSWORD_NAME      (ntp_keygen_opt_strs+1625)
+#define PASSWORD_NAME      (ntp_keygen_opt_strs+1629)
 /** Name string for the password option */
-#define PASSWORD_name      (ntp_keygen_opt_strs+1634)
+#define PASSWORD_name      (ntp_keygen_opt_strs+1638)
 /** Compiled in flag settings for the password option */
 #define PASSWORD_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -462,11 +462,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the export-passwd option */
-#define EXPORT_PASSWD_DESC      (ntp_keygen_opt_strs+1643)
+#define EXPORT_PASSWD_DESC      (ntp_keygen_opt_strs+1647)
 /** Upper-cased name for the export-passwd option */
-#define EXPORT_PASSWD_NAME      (ntp_keygen_opt_strs+1685)
+#define EXPORT_PASSWD_NAME      (ntp_keygen_opt_strs+1689)
 /** Name string for the export-passwd option */
-#define EXPORT_PASSWD_name      (ntp_keygen_opt_strs+1699)
+#define EXPORT_PASSWD_name      (ntp_keygen_opt_strs+1703)
 /** Compiled in flag settings for the export-passwd option */
 #define EXPORT_PASSWD_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -483,11 +483,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the sign-key option */
-#define SIGN_KEY_DESC      (ntp_keygen_opt_strs+1713)
+#define SIGN_KEY_DESC      (ntp_keygen_opt_strs+1717)
 /** Upper-cased name for the sign-key option */
-#define SIGN_KEY_NAME      (ntp_keygen_opt_strs+1744)
+#define SIGN_KEY_NAME      (ntp_keygen_opt_strs+1748)
 /** Name string for the sign-key option */
-#define SIGN_KEY_name      (ntp_keygen_opt_strs+1753)
+#define SIGN_KEY_name      (ntp_keygen_opt_strs+1757)
 /** Compiled in flag settings for the sign-key option */
 #define SIGN_KEY_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -504,11 +504,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the subject-name option */
-#define SUBJECT_NAME_DESC      (ntp_keygen_opt_strs+1762)
+#define SUBJECT_NAME_DESC      (ntp_keygen_opt_strs+1766)
 /** Upper-cased name for the subject-name option */
-#define SUBJECT_NAME_NAME      (ntp_keygen_opt_strs+1797)
+#define SUBJECT_NAME_NAME      (ntp_keygen_opt_strs+1801)
 /** Name string for the subject-name option */
-#define SUBJECT_NAME_name      (ntp_keygen_opt_strs+1810)
+#define SUBJECT_NAME_name      (ntp_keygen_opt_strs+1814)
 /** Compiled in flag settings for the subject-name option */
 #define SUBJECT_NAME_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_STRING))
@@ -525,11 +525,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the trusted-cert option */
-#define TRUSTED_CERT_DESC      (ntp_keygen_opt_strs+1823)
+#define TRUSTED_CERT_DESC      (ntp_keygen_opt_strs+1827)
 /** Upper-cased name for the trusted-cert option */
-#define TRUSTED_CERT_NAME      (ntp_keygen_opt_strs+1855)
+#define TRUSTED_CERT_NAME      (ntp_keygen_opt_strs+1859)
 /** Name string for the trusted-cert option */
-#define TRUSTED_CERT_name      (ntp_keygen_opt_strs+1868)
+#define TRUSTED_CERT_name      (ntp_keygen_opt_strs+1872)
 /** Compiled in flag settings for the trusted-cert option */
 #define TRUSTED_CERT_FLAGS     (OPTST_DISABLED)
 
@@ -545,11 +545,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the mv-params option */
-#define MV_PARAMS_DESC      (ntp_keygen_opt_strs+1881)
+#define MV_PARAMS_DESC      (ntp_keygen_opt_strs+1885)
 /** Upper-cased name for the mv-params option */
-#define MV_PARAMS_NAME      (ntp_keygen_opt_strs+1910)
+#define MV_PARAMS_NAME      (ntp_keygen_opt_strs+1914)
 /** Name string for the mv-params option */
-#define MV_PARAMS_name      (ntp_keygen_opt_strs+1920)
+#define MV_PARAMS_name      (ntp_keygen_opt_strs+1924)
 /** Compiled in flag settings for the mv-params option */
 #define MV_PARAMS_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -566,11 +566,11 @@ static char const ntp_keygen_opt_strs[2431] =
  */
 #ifdef AUTOKEY
 /** Descriptive text for the mv-keys option */
-#define MV_KEYS_DESC      (ntp_keygen_opt_strs+1930)
+#define MV_KEYS_DESC      (ntp_keygen_opt_strs+1934)
 /** Upper-cased name for the mv-keys option */
-#define MV_KEYS_NAME      (ntp_keygen_opt_strs+1951)
+#define MV_KEYS_NAME      (ntp_keygen_opt_strs+1955)
 /** Name string for the mv-keys option */
-#define MV_KEYS_name      (ntp_keygen_opt_strs+1959)
+#define MV_KEYS_name      (ntp_keygen_opt_strs+1963)
 /** Compiled in flag settings for the mv-keys option */
 #define MV_KEYS_FLAGS     (OPTST_DISABLED \
         | OPTST_SET_ARGTYPE(OPARG_TYPE_NUMERIC))
@@ -585,11 +585,11 @@ static char const ntp_keygen_opt_strs[2431] =
 /*
  *  Help/More_Help/Version option descriptions:
  */
-#define HELP_DESC       (ntp_keygen_opt_strs+1967)
-#define HELP_name       (ntp_keygen_opt_strs+2011)
+#define HELP_DESC       (ntp_keygen_opt_strs+1971)
+#define HELP_name       (ntp_keygen_opt_strs+2015)
 #ifdef HAVE_WORKING_FORK
-#define MORE_HELP_DESC  (ntp_keygen_opt_strs+2016)
-#define MORE_HELP_name  (ntp_keygen_opt_strs+2061)
+#define MORE_HELP_DESC  (ntp_keygen_opt_strs+2020)
+#define MORE_HELP_name  (ntp_keygen_opt_strs+2065)
 #define MORE_HELP_FLAGS (OPTST_IMM | OPTST_NO_INIT)
 #else
 #define MORE_HELP_DESC  HELP_DESC
@@ -602,14 +602,14 @@ static char const ntp_keygen_opt_strs[2431] =
 #  define VER_FLAGS     (OPTST_SET_ARGTYPE(OPARG_TYPE_STRING) | \
                          OPTST_ARG_OPTIONAL | OPTST_IMM | OPTST_NO_INIT)
 #endif
-#define VER_DESC        (ntp_keygen_opt_strs+2071)
-#define VER_name        (ntp_keygen_opt_strs+2107)
-#define SAVE_OPTS_DESC  (ntp_keygen_opt_strs+2115)
-#define SAVE_OPTS_name  (ntp_keygen_opt_strs+2154)
-#define LOAD_OPTS_DESC     (ntp_keygen_opt_strs+2164)
-#define LOAD_OPTS_NAME     (ntp_keygen_opt_strs+2196)
-#define NO_LOAD_OPTS_name  (ntp_keygen_opt_strs+2206)
-#define LOAD_OPTS_pfx      (ntp_keygen_opt_strs+2219)
+#define VER_DESC        (ntp_keygen_opt_strs+2075)
+#define VER_name        (ntp_keygen_opt_strs+2111)
+#define SAVE_OPTS_DESC  (ntp_keygen_opt_strs+2119)
+#define SAVE_OPTS_name  (ntp_keygen_opt_strs+2158)
+#define LOAD_OPTS_DESC     (ntp_keygen_opt_strs+2168)
+#define LOAD_OPTS_NAME     (ntp_keygen_opt_strs+2200)
+#define NO_LOAD_OPTS_name  (ntp_keygen_opt_strs+2210)
+#define LOAD_OPTS_pfx      (ntp_keygen_opt_strs+2223)
 #define LOAD_OPTS_name     (NO_LOAD_OPTS_name + 3)
 /**
  *  Declare option callback procedures
@@ -960,24 +960,24 @@ static tOptDesc optDesc[OPTION_CT] = {
 
 /* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
 /** Reference to the upper cased version of ntp-keygen. */
-#define zPROGNAME       (ntp_keygen_opt_strs+2222)
+#define zPROGNAME       (ntp_keygen_opt_strs+2226)
 /** Reference to the title line for ntp-keygen usage. */
-#define zUsageTitle     (ntp_keygen_opt_strs+2233)
+#define zUsageTitle     (ntp_keygen_opt_strs+2237)
 /** ntp-keygen configuration file name. */
-#define zRcName         (ntp_keygen_opt_strs+2359)
+#define zRcName         (ntp_keygen_opt_strs+2367)
 /** Directories to search for ntp-keygen config files. */
 static char const * const apzHomeList[3] = {
-    ntp_keygen_opt_strs+2351,
-    ntp_keygen_opt_strs+2357,
+    ntp_keygen_opt_strs+2359,
+    ntp_keygen_opt_strs+2365,
     NULL };
 /** The ntp-keygen program bug email address. */
-#define zBugsAddr       (ntp_keygen_opt_strs+2366)
+#define zBugsAddr       (ntp_keygen_opt_strs+2374)
 /** Clarification/explanation of what ntp-keygen does. */
-#define zExplain        (ntp_keygen_opt_strs+2400)
+#define zExplain        (ntp_keygen_opt_strs+2408)
 /** Extra detail explaining what ntp-keygen does. */
 #define zDetail         (NULL)
 /** The full version string for ntp-keygen. */
-#define zFullVersion    (ntp_keygen_opt_strs+2402)
+#define zFullVersion    (ntp_keygen_opt_strs+2410)
 /* extracted from optcode.tlib near line 364 */
 
 #if defined(ENABLE_NLS)
@@ -1309,7 +1309,7 @@ static void bogus_function(void) {
      translate option names.
    */
   /* referenced via ntp_keygenOptions.pzCopyright */
-  puts(_("ntp-keygen (ntp) 4.2.8p4-RC1\n\
+  puts(_("ntp-keygen (ntp) 4.2.8p4-sec-RC2\n\
 Copyright (C) 1992-2015 The University of Delaware and Network Time Foundation, all rights reserved.\n\
 This is free software. It is licensed for use, modification and\n\
 redistribution under the terms of the NTP License, copies of which\n\
@@ -1408,14 +1408,14 @@ implied warranty.\n"));
   puts(_("load options from a config file"));
 
   /* referenced via ntp_keygenOptions.pzUsageTitle */
-  puts(_("ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.8p4-RC1\n\
+  puts(_("ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.8p4-sec-RC2\n\
 Usage:  %s [ - [] | --[{=| }] ]...\n"));
 
   /* referenced via ntp_keygenOptions.pzExplain */
   puts(_("\n"));
 
   /* referenced via ntp_keygenOptions.pzFullVersion */
-  puts(_("ntp-keygen (ntp) 4.2.8p4-RC1"));
+  puts(_("ntp-keygen (ntp) 4.2.8p4-sec-RC2"));
 
   /* referenced via ntp_keygenOptions.pzFullUsage */
   puts(_("<<>>"));
diff --git a/util/ntp-keygen-opts.h b/util/ntp-keygen-opts.h
index 0d6ab5ba3..5bffaa618 100644
--- a/util/ntp-keygen-opts.h
+++ b/util/ntp-keygen-opts.h
@@ -1,7 +1,7 @@
 /*
  *  EDIT THIS FILE WITH CAUTION  (ntp-keygen-opts.h)
  *
- *  It has been AutoGen-ed  October  6, 2015 at 06:17:12 AM by AutoGen 5.18.5
+ *  It has been AutoGen-ed  October 17, 2015 at 06:25:57 AM by AutoGen 5.18.5
  *  From the definitions    ntp-keygen-opts.def
  *  and the template file   options
  *
@@ -94,9 +94,9 @@ typedef enum {
 /** count of all options for ntp-keygen */
 #define OPTION_CT    26
 /** ntp-keygen version */
-#define NTP_KEYGEN_VERSION       "4.2.8p4-RC1"
+#define NTP_KEYGEN_VERSION       "4.2.8p4-sec-RC2"
 /** Full ntp-keygen version text */
-#define NTP_KEYGEN_FULL_VERSION  "ntp-keygen (ntp) 4.2.8p4-RC1"
+#define NTP_KEYGEN_FULL_VERSION  "ntp-keygen (ntp) 4.2.8p4-sec-RC2"
 
 /**
  *  Interface defines for all options.  Replace "n" with the UPPER_CASED
diff --git a/util/ntp-keygen.1ntp-keygenman b/util/ntp-keygen.1ntp-keygenman
index c4233a50a..ab5270c8a 100644
--- a/util/ntp-keygen.1ntp-keygenman
+++ b/util/ntp-keygen.1ntp-keygenman
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntp-keygen 1ntp-keygenman "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH ntp-keygen 1ntp-keygenman "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-EraaUG/ag-Rra4SG)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 06:18:04 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:26:08 AM by AutoGen 5.18.5
 .\" From the definitions ntp-keygen-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/util/ntp-keygen.1ntp-keygenmdoc b/util/ntp-keygen.1ntp-keygenmdoc
index 05c952e1a..9184a7dbd 100644
--- a/util/ntp-keygen.1ntp-keygenmdoc
+++ b/util/ntp-keygen.1ntp-keygenmdoc
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTP_KEYGEN 1ntp-keygenmdoc User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntp-keygen-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:18:12 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:26:04 AM by AutoGen 5.18.5
 .\"  From the definitions    ntp-keygen-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME
diff --git a/util/ntp-keygen.html b/util/ntp-keygen.html
index bfd33e452..4e421fae5 100644
--- a/util/ntp-keygen.html
+++ b/util/ntp-keygen.html
@@ -3,7 +3,7 @@
 Ntp-keygen User's Manual
 
 
-
+
 
 
 
@@ -14,8 +14,9 @@
   pre.smallformat  { font-family:inherit; font-size:smaller }
   pre.smallexample { font-size:smaller }
   pre.smalllisp    { font-size:smaller }
-  span.sc { font-variant:small-caps }
-  span.roman { font-family: serif; font-weight: normal; } 
+  span.sc    { font-variant:small-caps }
+  span.roman { font-family:serif; font-weight:normal; } 
+  span.sansserif { font-family:sans-serif; font-weight:normal; } 
 -->
 
 
@@ -31,9 +32,10 @@
 
 
 
    
+
 
    
-Up: (dir)
-
    
+Up: (dir)
+
 
    
 
 
    Top
    
@@ -47,11 +49,12 @@
 

 
 

+
 

-Next: ,
+Next: ,
 Previous: (dir),
 Up: (dir)
-

+
 

 
 
NTP Key Generation Program User Manual

@@ -70,14 +73,15 @@ All other files are in PEM-encoded
 printable ASCII format so they can be embedded as MIME attachments in
 mail to other sites.
 
-  
This document applies to version 4.2.8p4-RC1 of ntp-keygen.
+  
This document applies to version 4.2.8p4-sec-RC2 of ntp-keygen.
 
 

+
 

-Next: ,
+Next: ,
 Previous: Top,
 Up: Top
-

+
 

 
 
@@ -150,11 +154,12 @@ generating host and filestamp,
 as described in the Cryptographic Data Files section below.
 
 

+
 

-Next: ,
+Next: ,
 Previous: Description,
 Up: Top
-

+
 

 
 
@@ -206,9 +211,11 @@ certificate should be re-generated.
 Autokey Public-Key Authentication page.
 
 

-

+
 
-

+

+
+
 

 
 
Invoking ntp-keygen

@@ -282,16 +289,16 @@ this page.
 The symmetric keys file, normally called
 ntp.keys,
 is usually installed in
-/etc. 
+/etc. 
 Other files and links are usually installed in
-/usr/local/etc,
+/usr/local/etc,
 which is normally in a shared filesystem in
 NFS-mounted networks and cannot be changed by shared clients. 
 The location of the keys directory can be changed by the
 keysdir
 configuration command in such cases. 
 Normally, this is in
-/etc.
+/etc.
 
   
This program directs commentary and error messages to the standard
 error stream
@@ -304,14 +311,14 @@ string
 ntpkey
 and include the file type, generating host and filestamp,
 as described in the
-Cryptographic Data Files
+“Cryptographic Data Files”
 section below.
 
 
Running the Program

 
 
To test and gain experience with Autokey concepts, log in as root and
 change to the keys directory, usually
-/usr/local/etc
+/usr/local/etc
 When run for the first time, or if all files with names beginning with
 ntpkey
 have been removed, use the
@@ -361,7 +368,7 @@ After that and when the host is synchronized to a proventic source, the
 certificate should be re-generated.
 
   
Additional information on trusted groups and identity schemes is on the
-Autokey Public-Key Authentication
+“Autokey Public-Key Authentication”
 page.
 
   
The
@@ -401,7 +408,7 @@ the first two lines of a file contain the file name
 and generation date and time as comments.
 
   
All files are installed by default in the keys directory
-/usr/local/etc,
+/usr/local/etc,
 which is normally in a shared filesystem
 in NFS-mounted networks. 
 The actual location of the keys directory
@@ -448,7 +455,7 @@ recognized in monitoring data.
 program is logged in directly as root. 
 The recommended procedure is change to the keys directory,
 usually
-/usr/local/etc,
+/usr/local/etc,
 then run the program. 
 When run for the first time,
 or if all
@@ -502,7 +509,7 @@ shared file systems, as NFS clients may not be able to write
 to the shared keys directory, even as root. 
 In this case, NFS clients can specify the files in another
 directory such as
-/etc
+/etc
 using the
 keysdir
 command. 
@@ -521,7 +528,7 @@ The owner name is also used for the host and sign key files,
 while the trusted name is used for the identity files.
 
   
All files are installed by default in the keys directory
-/usr/local/etc,
+/usr/local/etc,
 which is normally in a shared filesystem
 in NFS-mounted networks. 
 The actual location of the keys directory
@@ -568,7 +575,7 @@ recognized in monitoring data.
 program is logged in directly as root. 
 The recommended procedure is change to the keys directory,
 usually
-/usr/local/etc,
+/usr/local/etc,
 then run the program. 
 When run for the first time,
 or if all
@@ -622,7 +629,7 @@ shared file systems, as NFS clients may not be able to write
 to the shared keys directory, even as root. 
 In this case, NFS clients can specify the files in another
 directory such as
-/etc
+/etc
 using the
 keysdir
 command. 
@@ -756,15 +763,15 @@ On trusted host alice run
 -P
 -p password
 to generate the host key file
-ntpkey_RSAkey_alice.filestamp
+ntpkey_RSAkey_alice.filestamp
 and trusted private certificate file
-ntpkey_RSA-MD5_cert_alice.filestamp. 
+ntpkey_RSA-MD5_cert_alice.filestamp. 
 Copy both files to all group hosts;
 they replace the files which would be generated in other schemes. 
 On each host bob install a soft link from the generic name
-ntpkey_host_bob
+ntpkey_host_bob
 to the host key file and soft link
-ntpkey_cert_bob
+ntpkey_cert_bob
 to the private certificate file. 
 Note the generic links are on bob, but point to files generated
 by trusted host alice. 
@@ -781,11 +788,11 @@ On trusted host alice run
 -I
 -p password
 to produce her parameter file
-ntpkey_IFFpar_alice.filestamp,
+ntpkey_IFFpar_alice.filestamp,
 which includes both server and client keys. 
 Copy this file to all group hosts that operate as both servers
 and clients and install a soft link from the generic
-ntpkey_iff_alice
+ntpkey_iff_alice
 to this file. 
 If there are no hosts restricted to operate only as clients,
 there is nothing further to do. 
@@ -802,7 +809,7 @@ After generating the parameter file, on alice run
 and pipe the output to a file or mail program. 
 Copy or mail this file to all restricted clients. 
 On these clients install a soft link from the generic
-ntpkey_iff_alice
+ntpkey_iff_alice
 to this file. 
 To further protect the integrity of the keys,
 each file can be encrypted with a secret password.
@@ -816,15 +823,15 @@ On trusted host alice run
 -G
 -p password
 to produce her parameter file
-ntpkey_GQpar_alice.filestamp,
+ntpkey_GQpar_alice.filestamp,
 which includes both server and client keys. 
 Copy this file to all group hosts and install a soft link
 from the generic
-ntpkey_gq_alice
+ntpkey_gq_alice
 to this file. 
 In addition, on each host bob install a soft link
 from generic
-ntpkey_gq_bob
+ntpkey_gq_bob
 to this file. 
 As the GQ scheme updates the GQ parameters file and certificate
 at the same time, keys and certificates can be regenerated as needed.
@@ -841,9 +848,9 @@ where
 n
 is the number of revokable keys (typically 5) to produce
 the parameter file
-ntpkeys_MVpar_trish.filestamp
+ntpkeys_MVpar_trish.filestamp
 and client key files
-ntpkeys_MVkeyd_trish.filestamp
+ntpkeys_MVkeyd_trish.filestamp
 where
 d
 is the key number (0 <
@@ -852,7 +859,7 @@ is the key number (0 <
 n). 
 Copy the parameter file to alice and install a soft link
 from the generic
-ntpkey_mv_alice
+ntpkey_mv_alice
 to this file. 
 Copy one of the client key files to alice for later distribution
 to her clients. 
@@ -860,7 +867,7 @@ It doesn't matter which client key file goes to alice,
 since they all work the same way. 
 Alice copies the client key file to all of her cliens. 
 On client bob install a soft link from generic
-ntpkey_mvkey_bob
+ntpkey_mvkey_bob
 to the client key file. 
 As the MV scheme is independent of keys and certificates,
 these files can be refreshed as needed.
@@ -999,7 +1006,7 @@ is the key itself,
 which is a printable ASCII string 16 characters or less in length. 
 Each character is chosen from the 93 printable characters
 in the range 0x21 through 0x7f excluding space and the
-#
+‘#’
 character.
 
   
Note that the keys used by the
@@ -1014,12 +1021,12 @@ in human readable ASCII format.
   
The
 ntp-keygen
 program generates a MD5 symmetric keys file
-ntpkey_MD5key_hostname.filestamp. 
+ntpkey_MD5key_hostname.filestamp. 
 Since the file contains private shared keys,
 it should be visible only to root and distributed by secure means
 to other subnet hosts. 
 The NTP daemon loads the file
-ntp.keys,
+ntp.keys,
 so
 ntp-keygen
 installs a soft link from this name to the generated file. 
@@ -1038,7 +1045,7 @@ using the agtexi-cmd template and the option descriptions for the <
 This software is released under the NTP license, <http://ntp.org/license>.
 
 

 
 

+
+
 

-Next: ,
+Next: ,
 Up: ntp-keygen Invocation
-

+
 

 
-
ntp-keygen help/usage (--help)

+
ntp-keygen help/usage (--help)

 
 

 This is the automatically generated usage text for ntp-keygen.
 
   
The text printed is the same whether selected with the help option
-(--help) or the more-help option (--more-help).  more-help will print
+(--help) or the more-help option (--more-help).  more-help will print
 the usage text by passing it through a pager program. 
 more-help is disabled on platforms without a working
 fork(2) function.  The PAGER environment variable is
-used to select the program, defaulting to more.  Both will exit
+used to select the program, defaulting to more.  Both will exit
 with a status code of 0.
 
-
ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.8p3
+
ntp-keygen (ntp) - Create a NTP host key - Ver. 4.2.8p4-RC1
 Usage:  ntp-keygen [ -<flag> [<val>] | --<name>[{=| }<val>] ]...
   Flg Arg Option-Name    Description
    -b Num imbits         identity modulus bits
@@ -1135,18 +1144,20 @@ The following option preset mechanisms are supported:
 Please send bug reports to:  <http://bugs.ntp.org, bugs@ntp.org>
 

   

+
+
 

-Next: ,
+Next: ,
 Previous: ntp-keygen usage,
 Up: ntp-keygen Invocation
-

+
 

 
 
imbits option (-b)

 
 

 This is the “identity modulus bits” option. 
-This option takes a number argument imbits.
+This option takes a number argument imbits.
 
 
This option has some usage constraints.  It:
      
    
@@ -1155,18 +1166,20 @@ This option takes a number argument imbits.
 
   
    The number of bits in the identity modulus.  The default is 256. 
 
    
+
+
 
    
-Next: ,
+Next: ,
 Previous: ntp-keygen imbits,
 Up: ntp-keygen Invocation
-
    
+
 
    
 
 
    certificate option (-c)
    
 
 
    
 This is the “certificate scheme” option. 
-This option takes a string argument scheme.
+This option takes a string argument scheme.
 
 
    This option has some usage constraints.  It:
      
      
@@ -1182,18 +1195,20 @@ Note that RSA schemes must be used with a RSA sign key and DSA
 schemes must be used with a DSA sign key.  The default without
 this option is RSA-MD5. 
 
      
+
+
 
      
-Next: ,
+Next: ,
 Previous: ntp-keygen certificate,
 Up: ntp-keygen Invocation
-
      
+
 
      
 
 
      cipher option (-C)
      
 
 
      
 This is the “privatekey cipher” option. 
-This option takes a string argument cipher.
+This option takes a string argument cipher.
 
 
      This option has some usage constraints.  It:
      
        
@@ -1205,11 +1220,13 @@ private keys.  The default is three-key triple DES in CBC mode,
 equivalent to "-C des-ede3-cbc".  The openssl tool lists ciphers
 available in "openssl -h" output. 
 
        
+
+
 
        
-Next: ,
+Next: ,
 Previous: ntp-keygen cipher,
 Up: ntp-keygen Invocation
-
        
+
 
        
 
 
        id-key option (-e)
        
@@ -1225,11 +1242,13 @@ This is the “write iff or gq identity keys” option.
   
        Write the IFF or GQ client keys to the standard output.  This is
 intended for automatic key distribution by mail. 
 
        
+
+
 
        
-Next: ,
+Next: ,
 Previous: ntp-keygen id-key,
 Up: ntp-keygen Invocation
-
        
+
 
        
 
 
        gq-params option (-G)
        
@@ -1245,11 +1264,13 @@ This is the “generate gq parameters and keys” option.
   
        Generate parameters and keys for the GQ identification scheme,
 obsoleting any that may exist. 
 
        
+
+
 
        
-Next: ,
+Next: ,
 Previous: ntp-keygen gq-params,
 Up: ntp-keygen Invocation
-
        
+
 
        
 
 
        host-key option (-H)
        
@@ -1264,11 +1285,13 @@ This is the “generate rsa host key” option.
 
   
        Generate new host keys, obsoleting any that may exist. 
 
        
+
+
 
        
-Next: ,
+Next: ,
 Previous: ntp-keygen host-key,
 Up: ntp-keygen Invocation
-
        
+
 
        
 
 
        iffkey option (-I)
        
@@ -1284,18 +1307,20 @@ This is the “generate iff parameters” option.
   
        Generate parameters for the IFF identification scheme, obsoleting
 any that may exist. 
 
        
+
+
 
        
-Next: ,
+Next: ,
 Previous: ntp-keygen iffkey,
 Up: ntp-keygen Invocation
-
        
+
 
        
 
 
        ident option (-i)
        
 
 
        
 This is the “set autokey group name” option. 
-This option takes a string argument group.
+This option takes a string argument group.
 
 
        This option has some usage constraints.  It:
      
          
@@ -1312,18 +1337,20 @@ issuer names in the form host
   
          'crypto ident' or 'server ident' configuration in
 ntpd's configuration file. 
 
          
+
+
 
          
-Next: ,
+Next: ,
 Previous: ntp-keygen ident,
 Up: ntp-keygen Invocation
-
          
+
 
          
 
 
          lifetime option (-l)
          
 
 
          
 This is the ``set certificate lifetime'' option. 
-This option takes a number argument lifetime.
+This option takes a number argument lifetime.
 
 
          This option has some usage constraints.  It:
      
            
@@ -1332,11 +1359,13 @@ This option takes a number argument lifetime.
 
   
            Set the certificate expiration to lifetime days from now. 
 
            
+
+
 
            
-Next: ,
+Next: ,
 Previous: ntp-keygen lifetime,
 Up: ntp-keygen Invocation
-
            
+
 
            
 
 
            md5key option (-M)
            
@@ -1345,18 +1374,20 @@ Up: ntp-keygen
 This is the ``generate md5 keys'' option. 
 Generate MD5 keys, obsoleting any that may exist. 
 
            
+
+
 
            
-Next: ,
+Next: ,
 Previous: ntp-keygen md5key,
 Up: ntp-keygen Invocation
-
            
+
 
            
 
 
            modulus option (-m)
            
 
 
            
 This is the ``modulus'' option. 
-This option takes a number argument modulus.
+This option takes a number argument modulus.
 
 
            This option has some usage constraints.  It:
      
              
@@ -1365,11 +1396,13 @@ This option takes a number argument modulus.
 
   
              The number of bits in the prime modulus.  The default is 512. 
 
              
+
+
 
              
-Next: ,
+Next: ,
 Previous: ntp-keygen modulus,
 Up: ntp-keygen Invocation
-
              
+
 
              
 
 
              pvt-cert option (-P)
              
@@ -1385,18 +1418,20 @@ This is the ``generate pc private certificate'' option.
   
              Generate a private certificate.  By default, the program generates
 public certificates. 
 
              
+
+
 
              
-Next: ,
+Next: ,
 Previous: ntp-keygen pvt-cert,
 Up: ntp-keygen Invocation
-
              
+
 
              
 
 
              password option (-p)
              
 
 
              
 This is the ``local private password'' option. 
-This option takes a string argument passwd.
+This option takes a string argument passwd.
 
 
              This option has some usage constraints.  It:
      
                
@@ -1409,18 +1444,20 @@ must be specified to the local ntpd via the "crypto pw password"
 configuration command.  The default password is the local
 hostname. 
 
                
+
+
 
                
-Next: ,
+Next: ,
 Previous: ntp-keygen password,
 Up: ntp-keygen Invocation
-
                
+
 
                
 
 
                export-passwd option (-q)
                
 
 
                
 This is the ``export iff or gq group keys with password'' option. 
-This option takes a string argument passwd.
+This option takes a string argument passwd.
 
 
                This option has some usage constraints.  It:
      
                  
@@ -1433,18 +1470,20 @@ The same password must be specified to the remote ntpd via the
 "crypto pw password" configuration command.  See also the option
 --id-key (-e) for unencrypted exports. 
 
                  
+
+
 
                  
-Next: ,
+Next: ,
 Previous: ntp-keygen export-passwd,
 Up: ntp-keygen Invocation
-
                  
+
 
                  
 
 
                  sign-key option (-S)
                  
 
 
                  
 This is the ``generate sign key (rsa or dsa)'' option. 
-This option takes a string argument sign.
+This option takes a string argument sign.
 
 
                  This option has some usage constraints.  It:
      
                    
@@ -1455,18 +1494,20 @@ This option takes a string argument sign.
 that may exist.  By default, the program uses the host key as the
 sign key. 
 
                    
+
+
 
                    
-Next: ,
+Next: ,
 Previous: ntp-keygen sign-key,
 Up: ntp-keygen Invocation
-
                    
+
 
                    
 
 
                    subject-name option (-s)
                    
 
 
                    
 This is the ``set host and optionally group name'' option. 
-This option takes a string argument host@group.
+This option takes a string argument host@group.
 
 
                    This option has some usage constraints.  It:
      
                      
@@ -1484,11 +1525,13 @@ in host
 if not provided, the host name are also used in the file names
 of IFF, GQ, and MV client parameter files. 
 
                      
+
+
 
                      
-Next: ,
+Next: ,
 Previous: ntp-keygen subject-name,
 Up: ntp-keygen Invocation
-
                      
+
 
                      
 
 
                      trusted-cert option (-T)
                      
@@ -1504,18 +1547,20 @@ This is the ``trusted certificate (tc scheme)'' option.
   
                      Generate a trusted certificate.  By default, the program generates
 a non-trusted certificate. 
 
                      
+
+
 
                      
-Next: ,
+Next: ,
 Previous: ntp-keygen trusted-cert,
 Up: ntp-keygen Invocation
-
                      
+
 
                      
 
 
                      mv-params option (-V)
                      
 
 
                      
 This is the ``generate <num> mv parameters'' option. 
-This option takes a number argument num.
+This option takes a number argument num.
 
 
                      This option has some usage constraints.  It:
      
                        
@@ -1525,32 +1570,36 @@ This option takes a number argument num.
   
                        Generate parameters and keys for the Mu-Varadharajan (MV)
 identification scheme. 
 
                        
+
+
 
                        
-Next: ,
+Next: ,
 Previous: ntp-keygen mv-params,
 Up: ntp-keygen Invocation
-
                        
+
 
                        
 
 
                        mv-keys option (-v)
                        
 
 
                        
 This is the ``update <num> mv keys'' option. 
-This option takes a number argument num.
+This option takes a number argument num.
 
 
                        This option has some usage constraints.  It:
      
                          
 
                        • must be compiled in by defining AUTOKEY during the compilation. 
 
                        
 
-  
                        This option has no doc documentation.
+  
                        This option has no ‘doc’ documentation.
 
 
                        
+
+
 
                        
-Next: ,
+Next: ,
 Previous: ntp-keygen mv-keys,
 Up: ntp-keygen Invocation
-
                        
+
 
                        
 
 
                        presetting/configuring ntp-keygen
                        
@@ -1568,9 +1617,9 @@ values are treated like option arguments.
 
                      • $PWD
 
                      
   The environment variables HOME, and PWD
-are expanded and replaced when ntp-keygen runs. 
+are expanded and replaced when ntp-keygen runs. 
 For any of these that are plain files, they are simply processed. 
-For any that are directories, then a file named .ntprc is searched for
+For any that are directories, then a file named .ntprc is searched for
 within that directory and processed.
 
   
                      Configuration files may be in a wide variety of formats. 
@@ -1612,64 +1661,73 @@ detail to provide.  The default is to print just the version.  The licensing inf
 Only the first letter of the argument is examined:
 
      
                      
-
                      version
                      Only print the version.  This is the default. 
-
                      copyright
                      Name the copyright usage licensing terms. 
-
                      verbose
                      Print the full copyright usage licensing terms. 
+
                      ‘version’
                      Only print the version.  This is the default. 
+
                      ‘copyright’
                      Name the copyright usage licensing terms. 
+
                      ‘verbose’
                      Print the full copyright usage licensing terms. 
 
                      
 
 
                      
+
+
 
                      
-Next: ,
+Next: ,
 Previous: ntp-keygen config,
 Up: ntp-keygen Invocation
-
                      
+
 
                      
 
 
                      ntp-keygen exit status
                      
 
 
                      One of the following exit values will be returned:
      
                      
-
                      0 (EXIT_SUCCESS)
                      Successful program execution. 
-
                      1 (EXIT_FAILURE)
                      The operation failed or the command syntax was not valid. 
-
                      66 (EX_NOINPUT)
                      A specified configuration file could not be loaded. 
-
                      70 (EX_SOFTWARE)
                      libopts had an internal operational error.  Please report
+
                      ‘0 (EXIT_SUCCESS)’
                      Successful program execution. 
+
                      ‘1 (EXIT_FAILURE)’
                      The operation failed or the command syntax was not valid. 
+
                      ‘66 (EX_NOINPUT)’
                      A specified configuration file could not be loaded. 
+
                      ‘70 (EX_SOFTWARE)’
                      libopts had an internal operational error.  Please report
 it to autogen-users@lists.sourceforge.net.  Thank you. 
 
                      
   
                      
+
+
 
                      
-Next: ,
+Next: ,
 Previous: ntp-keygen exit status,
 Up: ntp-keygen Invocation
-
                      
+
 
                      
 
 
                      ntp-keygen Usage
                      
 
 
                      
+
+
 
                      
-Next: ,
+Next: ,
 Previous: ntp-keygen Usage,
 Up: ntp-keygen Invocation
-
                      
+
 
                      
 
 
                      ntp-keygen Notes
                      
 
 
                      
+
+
 
                      
-Previous: ntp-keygen Notes,
+Previous: ntp-keygen Notes,
 Up: ntp-keygen Invocation
-
                      
+
 
                      
 
 
                      ntp-keygen Bugs
                      
 
 
                      
+
 
                      
-Next: ,
+Next: ,
 Previous: Running the Program,
 Up: Top
-
                      
+
 
                      
 
 
@@ -1697,10 +1755,11 @@ If the file is not available or cannot be written, the program exits
 with a message to the system log.
 
 
                      
+
 
                      
-Previous: Random Seed File,
+Previous: Random Seed File,
 Up: Top
-
                      
+
 
                      
 
 
diff --git a/util/ntp-keygen.man.in b/util/ntp-keygen.man.in
index 6a4c47e1b..aa8e2720f 100644
--- a/util/ntp-keygen.man.in
+++ b/util/ntp-keygen.man.in
@@ -10,11 +10,11 @@
 .ds B-Font B
 .ds I-Font I
 .ds R-Font R
-.TH ntp-keygen @NTP_KEYGEN_MS@ "06 Oct 2015" "ntp (4.2.8p4-RC1)" "User Commands"
+.TH ntp-keygen @NTP_KEYGEN_MS@ "17 Oct 2015" "ntp (4.2.8p4-sec-RC2)" "User Commands"
 .\"
-.\" EDIT THIS FILE WITH CAUTION (/tmp/.ag-EraaUG/ag-Rra4SG)
+.\" EDIT THIS FILE WITH CAUTION (in-mem file)
 .\"
-.\" It has been AutoGen-ed October 6, 2015 at 06:18:04 AM by AutoGen 5.18.5
+.\" It has been AutoGen-ed October 17, 2015 at 06:26:08 AM by AutoGen 5.18.5
 .\" From the definitions ntp-keygen-opts.def
 .\" and the template file agman-cmd.tpl
 .SH NAME
diff --git a/util/ntp-keygen.mdoc.in b/util/ntp-keygen.mdoc.in
index 003eba68b..6a32dd565 100644
--- a/util/ntp-keygen.mdoc.in
+++ b/util/ntp-keygen.mdoc.in
@@ -1,9 +1,9 @@
-.Dd October 6 2015
+.Dd October 17 2015
 .Dt NTP_KEYGEN @NTP_KEYGEN_MS@ User Commands
 .Os
 .\"  EDIT THIS FILE WITH CAUTION  (ntp-keygen-opts.mdoc)
 .\"
-.\"  It has been AutoGen-ed  October  6, 2015 at 06:18:12 AM by AutoGen 5.18.5
+.\"  It has been AutoGen-ed  October 17, 2015 at 06:26:04 AM by AutoGen 5.18.5
 .\"  From the definitions    ntp-keygen-opts.def
 .\"  and the template file   agmdoc-cmd.tpl
 .Sh NAME