Re: Using Go for NTPsec

2021-07-08 Thread Sanjeev Gupta via devel
Hal, on the Rust v Go issue. I am speaking as a consumer of your code, who builds from source. There is talk on the LKML, about adding Rust as an allowed language. There seems to be no objection in principle, work is proceeding. Much of my knowledge of Rust is from those threads, The issue I h

Re: Using Go for NTPsec

2021-06-29 Thread Sanjeev Gupta via devel
This is output from my 17 year old server, i386, 32-bit, no TXCO, cheap hardware, sitting in an airconditioned office where staff keep fiddling with the thermostat (the large unit is 20 years old, so you are either cold or very cold). root@ntpmon:~# uptime 10:20:02 up 14 days, 9:33, 1 user, lo

Using Go for NTPsec

2021-06-24 Thread Sanjeev Gupta via devel
This is a follow on to Eric's email a few hours ago, I am keeping that thread clean. (The last 3GL I programmed in was Fortran, and not the 77 version. I can read bash scripts and C pseudo-code) The literature I can find speaks of Go GC being improved in 1.5, such that the STW phase (the "sweep"

Fedora 34 ships with ntpsec

2021-04-27 Thread Sanjeev Gupta via devel
Hi, Fedora 34 has shipped. Among other changes, ntpsec replaces ntpd during an upgrade. https://fedoraproject.org/wiki/Releases/34/ChangeSet#ntp_replacement https://fedoraproject.org/wiki/Changes/NtpReplacement Thanks, Miroslav. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/gha

Re: Threads

2021-04-06 Thread Sanjeev Gupta via devel
Hal, newbie question. What use case on the internet would be saturating a Gb link with NTP? Surely, before that, we should be recommending a second server closer to the clients? Assume a large University campus, with 3 nodes (5k students, each with a tablet and phone, etc). Assume all nodes

Re: GitLab | Projects forced to "Private" (#294196)

2020-12-17 Thread Sanjeev Gupta via devel
As of 20 minutes ago, I can now pull from the repository unauthenticated. On Fri, 18 Dec 2020, 8:21 am Eric S. Raymond, wrote: > Neustifter Andreas : > > Hi, > > > > I have searched for similar incidents (e.g. > https://gitlab.com/gitlab-com/gl-infra/infrastructure/-/issues/6022) > which lead m

Re: Blizard of mail from GitLab-Abuse-Automation

2020-12-16 Thread Sanjeev Gupta via devel
Ah, so not my fault. I tried updating my fork about 11 hours ago, and was to authenticate to pull from the NTPsec git repo. I tried with another repo, it worked, so I assumed one of us was modifying the security settings of the repo. On Thu, 17 Dec 2020, 7:38 am James Browning via devel, wrote:

Re: Runtime testing, What's the CI environment like?

2020-09-06 Thread Sanjeev Gupta via devel
On Sun, Sep 6, 2020 at 11:13 PM James Browning via devel wrote: > On Fri, Sep 4, 2020 at 3:59 PM Hal Murray via devel > wrote: > > Can we run ntpd long enough to test the initialization and much of the > other code? > > Possibly, but to test some of the code paths (NTS) would take about a > day.

[no subject]

2020-09-02 Thread Sanjeev Gupta via devel
Ian, please see this, in ntpsnmpd.py if source == ntp.control.CTL_SST_TS_UNSPEC: mode = 2 # Not yet synced elif False: mode = 3 # No reference configured elif source == ntp.control.CTL_SST_TS_LOCAL: mode = 4 # Distributing local clock

Re: Pre-release cleanup

2020-09-02 Thread Sanjeev Gupta via devel
They support *any* git repository. Please see: https://lgtm.com/projects/g/ntpsec/ntpsec/?mode=list -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane ___ devel mailing list devel@ntpsec.org http://lists.ntpsec.org/mailman/listinfo/deve

Re: NTS-KE client side now defaults to port 4460

2020-07-12 Thread Sanjeev Gupta via devel
On Sat, Jul 11, 2020 at 10:56 AM Hal Murray via devel wrote: > > It's still listening on both 123 and 4460 > > I want to remove listening on 123 right before Mark releases 1.2.0 > Hal, why wait till just before the release? Switch the code now, so that the NTPsec testers can remind each other t

Re: ntpd Certificate Loading

2020-06-09 Thread Sanjeev Gupta via devel
Hal, I have solved the issue for now, by changing the group of the live/and archive/ directories in /etc/letsencrypt to ntp,and giving the group read permissions. root@ntpmon:/etc/letsencrypt# ls -l total 36 drwx-- 4 root root 4096 Oct 21 2018 accounts drwxr-x--- 3 root ntp 4096 Jan 17 20

Re: ntpd Certificate Loading

2020-06-08 Thread Sanjeev Gupta via devel
On Tue, Jun 9, 2020 at 12:23 PM Hal Murray wrote: > > Which causes ntpd to fail on startup (I assume after dropping root): > > Looks like you are dying trying to read the certificate. It will get > worse > when you want to read the key. > > -- > > Do you trust user ntp? If so, the f

Re: ntpd Certificate Loading

2020-06-08 Thread Sanjeev Gupta via devel
(git commit 892fbb435e71349da502b7e2436648f52a09af6f ) Hal, I have the other end of the stick now. My LetsEncrypt certificate path is /etc/letsencrypt/archive/ntpmon.dcs1.biz/ The file: -rw-r--r-- 1 root root 3558 May 9 09:39 fullchain28.pem However, root@ntpmon:/etc/letsencrypt# ls -dl /etc/l

Re: thinking of tagging 1.2.0 for when NTS is officially official.

2020-05-30 Thread Sanjeev Gupta via devel
On Sun, May 31, 2020 at 5:51 AM Hal Murray via devel wrote: > I'm expecting there will be a new port number assigned for the KE server. > Step 1 will be to listen on both old and new port # > Step 2 is to switch the client side to default to the new port #. > Step 3 is to stop listening on

Re: the MSNTP feature and author, Andrew Bartlett

2020-05-24 Thread Sanjeev Gupta via devel
On Mon, May 25, 2020 at 12:56 PM Hal Murray via devel wrote: > The code is still there. I don't know if it works or anybody uses it. > > I don't see any mention of it in NEWS. Do you have a line number? > git show 0a46b8bbcd bottom of docs/ntpsec.adoc My apologies, I misread the line. You a

Re: the MSNTP feature and author, Andrew Bartlett

2020-05-24 Thread Sanjeev Gupta via devel
Andrew, Daniel, I am trying to track down if MS-SNTP support was added back, and if it is supported. We have an entry in the news file, about removal, but none on addition. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Wed, Jan 18, 2017 at 3:32 AM Andrew Bartlett wrot

Re: Copyright years in source code

2020-05-08 Thread Sanjeev Gupta via devel
On Thu, May 7, 2020 at 3:42 AM Gary E. Miller via devel wrote: > > I did this at the suggestion of Mark Atwood. He is project head for > gpsd, NTPsec and other projects. He also works at Amazon on software > license issues. The MAGA have deemed that the current copyright notices > in gpsd are

Copyright years in source code

2020-05-05 Thread Sanjeev Gupta via devel
(cc: to devel@ntpsec) Hi, Over at the NTPsec project (whose developer community intersects with gpsd's) they have scrubbed the Copyright Year from the "Form of Notice". eg: -* Copyright (c) University of Delaware 1992-2015 * +* Copyright University of Delaware

Re: BSD-4-Clause-UC license usage

2020-04-30 Thread Sanjeev Gupta via devel
Hal, I have sent in a MR, https://gitlab.com/NTPsec/ntpsec/-/merge_requests/1121 for your review. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Thu, Apr 30, 2020 at 3:21 PM Hal Murray via devel wrote: > > devel@ntpsec.org said: > > Much our of NTS code uses BSD-4-Claus

A problem with Pivot Years

2020-01-12 Thread Sanjeev Gupta via devel
https://www.zdnet.com/article/the-y2k-bug-is-back-causing-headaches-for-developers-again/ "Say you are an institution founded in 1920. It is safe to assume that you are not sitting on any information dated from before then; and so, in the double-digit date-recording system, "20" becomes your pivot

Re: cloudflare refers NTS users to wrong page

2019-12-10 Thread Sanjeev Gupta via devel
Merge Request submitted. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Tue, Dec 10, 2019 at 10:13 AM Sanjeev Gupta wrote: > I will do that, and re-read Quick-NTS (which was written early on). > > -- > Sanjeev Gupta > +65 98551208 http://www.linkedin.com/in/ghane >

Re: cloudflare refers NTS users to wrong page

2019-12-09 Thread Sanjeev Gupta via devel
I will do that, and re-read Quick-NTS (which was written early on). -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Tue, Dec 10, 2019 at 7:22 AM Hal Murray via devel wrote: > > > links to the NTPsec quickstart page - > > https://docs.ntpsec.org/latest/quick.html > > whic

Re: Please review this document fragment

2019-11-25 Thread Sanjeev Gupta via devel
/me gets popcorn, sits back:-) -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane ___ devel mailing list devel@ntpsec.org http://lists.ntpsec.org/mailman/listinfo/devel

Please review this document fragment

2019-11-25 Thread Sanjeev Gupta via devel
From: docs/driver_shm.adoc Is the first paragraph still required, if it doesn't apply to current nrpsec? And I cant parse the second paragraph, especially the first line. What should I use? Not the ancient method, surely? The _GPSD_ man page suggests setting minpoll and maxpoll to 4. That was

Re: IETF in Singapore

2019-11-17 Thread Sanjeev Gupta via devel
in RAN: https://www.ericsson.com/en/blog/2019/8/what-you-need-to-know-about-timing-and-sync-in-5G-transport-networks -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Mon, Nov 18, 2019 at 6:54 AM Richard Laager via devel wrote: > On 11/17/19 6:44 AM, Sanjeev Gupta via deve

Re: IETF in Singapore

2019-11-17 Thread Sanjeev Gupta via devel
Hal, I met Christer W (Netnod) and Dieter S (PTB) at the Hackathon. Interesting discussion on the 5G requirements, and Christer's setup (his NTS-KE feeding a patched Chrony). Good to put a face to an email address. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Sun, No

IETF in Singapore

2019-11-16 Thread Sanjeev Gupta via devel
Hi, Is there anyone on this list in Singapore this week? I see the Netnod NTS implementation listed in the Hackathon wiki, but could not find anyone yesterday. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane ___ devel mailing list d

seccomp filters

2019-10-03 Thread Sanjeev Gupta via devel
Hi, There has been work done (I believe Gary and Hal) on seccomp in NTPsec. There is a writeup on Postgresql's experience with this, here is a free link for non-subscribers to LWN: http://bit.ly/2oGeI5j I find that if you come back in a few days, the comments are informative, and add a great

IETF 106, Singapore

2019-09-29 Thread Sanjeev Gupta via devel
Hi, IETF 106 is in Singapore in November. For once, I am in the same country (at least as far as my travel plans stand now) Interop? What can I do to sweeten your trip here? -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane ___ deve

Re: Code freeze

2019-08-28 Thread Sanjeev Gupta via devel
:56 +0800 > Sanjeev Gupta via devel wrote: > > > Eric, there is a incompatibility break, so could we do 1.2.0 , please? > > What is the break? > > RGDS > GARY > --- > Gary E. Miller Rellim 109 N

Re: Code freeze

2019-08-28 Thread Sanjeev Gupta via devel
Eric, there is a incompatibility break, so could we do 1.2.0 , please? -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Thu, Aug 29, 2019 at 1:47 AM Eric S. Raymond via devel wrote: > We're preparing for a minor point release, probably 1.17, on or about > 1 Aug. > > Code

Re: prep for point release of NTPSec, suggest 2019-07-31

2019-08-25 Thread Sanjeev Gupta via devel
On Sun, Aug 25, 2019 at 1:49 PM Achim Gratz via devel wrote: > Mark Atwood via devel writes: > > How does everyone feel about next Saturday, Aug 31 2019-07-31? > > You've got a time machine? 8-) > No, but as Chronos is not implemented, he can set time to what ever he wants on the NIST and USN

Re: ALPN checking

2019-08-24 Thread Sanjeev Gupta via devel
On Sun, Aug 25, 2019 at 4:46 AM Hal Murray via devel wrote: > The 3rd case is when it gets back something other than "ntske/1". > I haven't found a test case for that one yet. If anybody still has a > system > still running our old/buggy code, please let me know the IP Address. > Hal, 203.123.4

Re: Point release of NTPSec

2019-08-23 Thread Sanjeev Gupta via devel
Eric NEWS: The NTS ALPN negotiation sequence has been modified for improved interoperability with orther NTS implementations. Would this be a better formulation? The NTS ALPN negotiation sequence now checks for length of the handshake string. This may break interoperability with other, non-compli

Re: Point release of NTPSec

2019-08-23 Thread Sanjeev Gupta via devel
:43 AM Sanjeev Gupta via devel > wrote: > >> We need a point release. Significant things that have happened recently: >> >> >>- The g and G suffixes >>- Removal of neoclock4x >>- Some doc changes >>- The ALPN change >> >>

Re: Point release of NTPSec

2019-08-23 Thread Sanjeev Gupta via devel
On Sat, Aug 24, 2019 at 2:36 AM Matthew Selsky wrote: > Does it make sense to call this 1.2.0 instead of 1.1.7? Especially since > we have the ALPN compatiblity fix? > Yes, please. Although NTS implementation internally has (only trivially) changed, a bump to 1.2.0 would provide more warning to

Point release of NTPSec

2019-08-23 Thread Sanjeev Gupta via devel
We need a point release. Significant things that have happened recently: - The g and G suffixes - Removal of neoclock4x - Some doc changes - The ALPN change The last is critical, it throws into doubt all the interop we have with other NTS implementations. We need a tag to describe o

Re: Does broadcast *server* mode still exist?

2019-08-19 Thread Sanjeev Gupta via devel
On Mon, Aug 19, 2019 at 1:45 PM Hal Murray via devel wrote: > > There is probably something like a FAQ entry that explains that if you > want to > get time relevant data from A to B, you have to start by sending something > from B to A, a nonce if nothing else. > > You could eliminate duplicates

Re: Does broadcast *server* mode still exist?

2019-08-19 Thread Sanjeev Gupta via devel
On Mon, Aug 19, 2019 at 7:22 AM Eric S. Raymond via devel wrote: > Hal Murray : > > I remember a comment about there being no way to do broadcast securely. > It > > would be good to include an expanded version of that in the > documentation. > > That's covered. In the page on NTPsec changes: > >

Re: Does broadcast *server* mode still exist?

2019-08-18 Thread Sanjeev Gupta via devel
On Sun, Aug 18, 2019 at 7:35 PM Eric S. Raymond wrote: > Sanjeev Gupta via devel : > > I have a feeling that was also removed, at some time. Has it? > > I do not recall that we explicitly removed it. But I wouldn't count on > it to work without testing. > Th

Does broadcast *server* mode still exist?

2019-08-18 Thread Sanjeev Gupta via devel
Hi, I know that broadcast *client* mode was removed last year, because it was impossible to secure. Broadcast *server* mode was deprecated. I have a feeling that was also removed, at some time. Has it? -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane

Re: 'g' suffix egg on my face

2019-08-17 Thread Sanjeev Gupta via devel
I can vouch for the fact that 100% of grouchy/lazy hobbyists running EOL equipment who tried this gave this feature five stars. It is not only my Puck that is EOL, but my i686 as well. Eric, next request. I have a spare parallel port on the system, could I have a software patch so that it can con

Re: 'g' suffix egg on my face

2019-08-17 Thread Sanjeev Gupta via devel
Eric, It works, perfectly. refclock shm unit 1 prefer refid PPS time1 0g flag4 1 refclock shm unit 0 refid GPS time1 0.450g flag4 1 Note that the first line (PPS) also needs a "g" suffix, else I am reset to 19 years ago. gpsmon still shows wrong time, but I need that only to check skyview. Th

Re: Error on g suffix in time1 fudge

2019-08-16 Thread Sanjeev Gupta via devel
Eric,a data point. This works: refclock shm unit 0 refid GPS time1 619315200.450 flag4 1 (the large number is 1024 weeks, the 0.450 is a delay) -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Sat, Aug 17, 2019 at 5:04 AM Eric S. Raymond wrote: > Sanjeev Gupta : > > Eri

Re: New config feature - time1 can declare GPS wraparound compensation

2019-08-16 Thread Sanjeev Gupta via devel
On Sat, Aug 17, 2019 at 6:14 AM Gary E. Miller via devel wrote: > > On Sat, 17 Aug 2019 06:07:14 +0800 > Sanjeev Gupta wrote: > > > The widest integer I have is "long long int", which is 8 bytes. I > > need a bit more for "nuber of secs in 8192 weeks". > > Here is my math: > > seconds in 8192 w

Re: New config feature - time1 can declare GPS wraparound compensation

2019-08-16 Thread Sanjeev Gupta via devel
Gary, The widest integer I have is "long long int", which is 8 bytes. I need a bit more for "nuber of secs in 8192 weeks". I reproduce my attempt at C below, have I goofed up? root@ntpmon:~/ntpsec# cat /tmp/aa.c #include int main() { int integerType; long int longi

Re: New config feature - time1 can declare GPS wraparound compensation

2019-08-16 Thread Sanjeev Gupta via devel
Gary, On my 32 bit x86, gcc 8 Size of int: 4 bytesSize of long int: 4 bytesSize of long long int: 8 bytesSize of float: 4 bytesSize of double: 8 bytesSize of long double: 12 bytesSize of char: 1 byte I have cast explicitly to (long double), please review: https://gitlab.com/NTPsec/ntpsec/merge_

Re: New config feature - time1 can declare GPS wraparound compensation

2019-08-16 Thread Sanjeev Gupta via devel
Eric, double is 8 bytes long double is 12 bytes Long double should be enough, I think -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Sat, Aug 17, 2019 at 5:01 AM Eric S. Raymond wrote: > Sanjeev Gupta : > > Eric, > > > > sizeof(double) seems to be 8 bytes. The 8192 *

Re: Error on g suffix in time1 fudge

2019-08-16 Thread Sanjeev Gupta via devel
Eric, My (minimal) config: root@ntpmon:~/ntpsec/docs# grep -v "^#" /etc/ntp.conf | grep -v "^$" logfile /var/www/html/ntp/ntpd.log logconfig =syncall +clockall +peerall +sysall statsdir /var/www/html/ntp/ filegen loopstats type day link filegen peerstats type day link filegen protostats type da

Re: New config feature - time1 can declare GPS wraparound compensation

2019-08-16 Thread Sanjeev Gupta via devel
Eric, sizeof(double) seems to be 8 bytes. The 8192 * No of Secs per week overflows this. More info below: root@ntpmon:/tmp# gcc -v Using built-in specs. COLLECT_GCC=gcc COLLECT_LTO_WRAPPER=/usr/lib/gcc/i686-linux-gnu/8/lto-wrapper Target: i686-linux-gnu Configured with: ../src/configure -v --wit

Re: New config feature - time1 can declare GPS wraparound compensation

2019-08-16 Thread Sanjeev Gupta via devel
Eric, I am using the SHM driver , which talks to gpsd. The presence of the "g" suffix causes the line to be ignored. root@ntpmon:~/ntpsec# grep refclock /etc/ntp.conf refclock shm unit 0 refid GPS time1 0.650g flag4 1 root@ntpmon:~/ntpsec# kill -9 `pidof ntpd` ; ntpd -D 100 root@ntpmon:~/ntpsec

Re: New config feature - time1 can declare GPS wraparound compensation

2019-08-16 Thread Sanjeev Gupta via devel
Eric, On a 32-bit debian: [ 73/101] Compiling ntpd/ntp_io.c ../../ntpd/ntp_scanner.c: In function ‘yylex’: ../../ntpd/ntp_scanner.c:40:30: warning: integer overflow in expression of type ‘long int’ results in ‘659554304’ [-Woverflow] #define GPS_ERA_13BIT (8192L * SECONDS_IN_WEEK)

Re: Open Issues on Gitlab Tracker

2019-06-17 Thread Sanjeev Gupta via devel
Gary, True, and I see you are busy with gpsd these days. My suggestion: The last commit to ntpsec that touched code was over two months ago. In that sense, we have already had a quiet time :-) Eric will look at the open issues list. I assume there is nothing critical there, most of the reports

Re: Open Issues on Gitlab Tracker

2019-06-17 Thread Sanjeev Gupta via devel
Release, release release! On Tue, 18 Jun 2019, 9:59 AM Gary E. Miller via devel, wrote: > Yo Eric! > > On Mon, 17 Jun 2019 21:54:54 -0400 > "Eric S. Raymond via devel" wrote: > > > Sanjeev Gupta : > > > On Sun, Jun 16, 2019 at 8:47 PM Eric S. Raymond > > > wrote: > > > > Do you cansider the NT

Re: Open Issues on Gitlab Tracker

2019-06-17 Thread Sanjeev Gupta via devel
On Sun, Jun 16, 2019 at 8:47 PM Eric S. Raymond wrote: > Do you cansider the NTS documentation to be in good shape? > Yes, enough to get it up and running. I have moved the Quickstart from devel/ to docs/ , and merged it into the existing documentation. I have had an NTS server running publicl

Open Issues on Gitlab Tracker

2019-06-16 Thread Sanjeev Gupta via devel
Hi, We have 26 issues on the tracker, https://gitlab.com/NTPsec/ntpsec/issues As NTS support works (for me, and in interop), could we triage and release? -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane ___ devel mailing list devel@n

Certificate rollover

2019-04-11 Thread Sanjeev Gupta via devel
Hi, I just realised something: LetsEncrypt certs are max 90 days. When I renew them, will I need to restart NTPd? So the max uptime of NTPd is 90 days? This does not matter now, when I am doing a git pull, build, restart daily, but would it have an impact in production? Can the S2C code check

Re: I just pushed a NTS IP Address fix

2019-03-27 Thread Sanjeev Gupta via devel
Gary, no, I didn't install their cert chain. Do you need access to my host? On Thu, Mar 28, 2019, 9:25 AM Gary E. Miller via devel wrote: > Yo Sanjeev! > > On Thu, 28 Mar 2019 09:16:17 +0800 > Sanjeev Gupta wrote: > > > Mine works. > > Odd. > > > root@ntpmon:~/ntpsec# git describe > > NTPsec_1

Re: EXPORTER strings

2019-03-24 Thread Sanjeev Gupta via devel
Updated mine, thanks. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Sun, Mar 24, 2019 at 2:53 PM Hal Murray via devel wrote: > > I had the same problem, just change this > > ntpd/nts_client.c: const char *label = "EXPORTER-nts/1"; > > To this: > > ntpd/nts_client.c: c

Re: I just pushed a bug-fix - please update

2019-03-23 Thread Sanjeev Gupta via devel
Done. Thanks. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Sat, Mar 23, 2019 at 11:40 PM Hal Murray wrote: > > The server response wasn't setting up the right length for the encrypted > part. > The client receive side didn't use that field but computed the length > a

Re: Testing NTPSec with NTS

2019-03-21 Thread Sanjeev Gupta via devel
Gary, It works with a mix of NTS and NTP, I removed the NTP to force it to sync with your servers. All seems OK now. On Fri, Mar 22, 2019, 12:20 PM Gary E. Miller wrote: > Yo Sanjeev! > > On Fri, 22 Mar 2019 08:31:34 +0800 > Sanjeev Gupta wrote: > > > I removed all non-NTS servers from my co

Re: Testing NTPSec with NTS

2019-03-21 Thread Sanjeev Gupta via devel
Gary, I removed all non-NTS servers from my config,and I am now synced!!! root@ntpmon:~/ntpsec# ntpq -p remote refid st t when poll reach delay offset jitter ==

Re: Testing NTPSec with NTS

2019-03-21 Thread Sanjeev Gupta via devel
Gary, Adding this to /etc/services seems to fix the issue: ntp 123/tcp # Network Time Protocol I now see: -pi3.rellim.com .PPS.1 84 64 37 197.8958 0.5317 0.4966 -kong.rellim.com 204.17.205.1

Re: Testing NTPSec with NTS

2019-03-21 Thread Sanjeev Gupta via devel
On Fri, Mar 22, 2019 at 7:24 AM Gary E. Miller via devel wrote: > > I have been lurking and trying to set up NTS to talk to the rellim.com > > servers. This is a recent git head. > > Cool. > I just did a git pull and rebuilt. > > My ntp.conf snippet: > > > > nts enable > > nts cert /etc/letse

Testing NTPSec with NTS

2019-03-21 Thread Sanjeev Gupta via devel
Hi, I have been lurking and trying to set up NTS to talk to the rellim.com servers. This is a recent git head. My ntp.conf snippet: nts enable nts cert /etc/letsencrypt/live/ntpmon.dcs1.biz/fullchain.pem nts key /etc/letsencrypt/live/ntpmon.dcs1.biz/privkey.pem server pi3.rellim.com nts server

Re: Certificates, DNS, Hackathon

2019-03-20 Thread Sanjeev Gupta via devel
I recently switched from namecheap to Gandi, because Gandi has better DNSSec support. Namecheap will offer you a .xyz or .vip domain for under $2 for the first year, $10 renewal. Basic DNS is included by all. But if you want something better,please have a look at https://dns.he.net. HE has serv

Re: NTS off the ground - time for testing

2019-02-22 Thread Sanjeev Gupta via devel
On Wed, Feb 20, 2019 at 2:04 PM Hal Murray via devel wrote: > > Testing. Get it up and running in your local environment. If you have a > real > certificate and are willing to support some testing traffic, tell me/us > the > host name and/or send us the root certificate. > I have a server runn

Error in parsing ntp.conf

2019-02-12 Thread Sanjeev Gupta via devel
Hi, I just noticed this, no idea when this started. Feb 12 18:29:50 ntpmon ntpd[2152]: INIT: ntpd ntpsec-1.1.3+ 2019-02-12T10:25:36Z (git rev b4f55578e): Starting Feb 12 18:29:50 ntpmon ntpd[2152]: INIT: Command line: ntpd -c /etc/ntp.conf Feb 12 18:29:50 ntpmon ntpd[2153]: INIT: precision = 0.36

Re: Do certificates for IP Addresses work?

2019-02-03 Thread Sanjeev Gupta via devel
On Sat, Feb 2, 2019 at 8:57 AM Richard Laager via devel wrote: > > About 19% of the world is doing DNSSEC validation, in large part because > apparently 15% of the world is using Google's recursive DNS service. > Actually,things are much worse. The Google resolver checks for valid DNSSEC, and s

Re: NTS software

2019-01-13 Thread Sanjeev Gupta via devel
Hal, debian testing has 1.67 OpenSuse Tumbleweed has 1.68 -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Sun, Jan 13, 2019 at 9:00 AM Hal Murray via devel wrote: > The draft has links to two chunks of software. > https://gitlab.com/MLanger/nts/ > https://github.com

Re: ntpd: program structure

2019-01-11 Thread Sanjeev Gupta via devel
Gary, Hal, If you bump up your scale factor in the pool, traffic will ramp up slowly, over days or weeks. If you bump down, or leave, traffic will take months, or longer, to stop. On Sat, 12 Jan 2019, 4:02 am Hal Murray via devel > Gary said: > > I have a RasPi in the ntp pool. Typically aro

Re: ntpd: program structure

2019-01-06 Thread Sanjeev Gupta via devel
Achim, apologies for the lack of clarity. 500pps is TX. RX is slightly higher. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Mon, Jan 7, 2019 at 3:42 AM Achim Gratz via devel wrote: > Sanjeev Gupta via devel writes: > > PPS is about 500/s, RX is 10% mor

Re: ntpd: program structure

2019-01-06 Thread Sanjeev Gupta via devel
On Mon, Jan 7, 2019 at 2:23 AM Achim Gratz via devel wrote: > Sanjeev Gupta via devel writes: > > root@ntpmon:~# ntpq -n -c direct -c mrulist | wc -l > > 17306 > > > > I am in the sg, in, and asia pools. v4 and v6. Server access is > available > > if you

Re: ntpd: program structure

2019-01-06 Thread Sanjeev Gupta via devel
On Mon, Jan 7, 2019 at 12:57 AM Eric S. Raymond via devel wrote: > Achim Gratz via devel : > > > Anyway, I think that thinking about them as separate parts will help > our > > > discussions. > > > We should be able to improve performance on busy servers. > > > > It's been decades since I looked a

Re: Out of date chunks in documentation

2018-12-24 Thread Sanjeev Gupta via devel
On Tue, Dec 25, 2018 at 3:32 AM Hal Murray via devel wrote: > The usual solution to the maintain 2 places problem is to write a program > to > translate one format into the other. Then we have to maintain that > program. :) > Which program? The C or the Python? Double :-) -- Sanjeev Gupta +6

Re: Warnings from asciidoc

2018-12-02 Thread Sanjeev Gupta via devel
Apologies. I meant that the current continuous integration is being tested only on Alpine, hence a breakage on Fedora may not be caught automatically. I build, with all reflcocks and docs, on Debian testing and Ubuntu dev weekly, no problems here. On Sun, 2 Dec 2018, 9:46 pm Hal Murray via devel

Re: Warnings from asciidoc

2018-12-02 Thread Sanjeev Gupta via devel
Gary, Hal, If I am reading the ci.yaml file right,the docs are being built only on an Alpine image,not on Fedora, etc. Matt is maintaining this file, I think -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Sat, Dec 1, 2018 at 6:17 AM Gary E. Miller via devel wrote: > Yo

Re: NIST unit rules and conventions

2018-09-21 Thread Sanjeev Gupta via devel
On Sat, Sep 22, 2018 at 12:54 AM Paul Theodoropoulos wrote: > On 9/21/2018 1:07 AM, Sanjeev Gupta wrote: > > My concern is that the space between "25" and "kg" should be > non-breaking. Else, readability suffers badly. How do you do this in > asciidoc? > > > By non-breakingI assume you mean

Re: NIST unit rules and conventions

2018-09-21 Thread Sanjeev Gupta via devel
Paul, Personally, I find 25kg, 50ppm, 3m, more readable; but that is neither here nor there. My concern is that the space between "25" and "kg" should be non-breaking. Else, readability suffers badly. How do you do this in asciidoc? -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/

On the perils of PYTHONPATH

2018-05-01 Thread Sanjeev Gupta via devel
https://xkcd.com/1987/ Enough said? -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane ___ devel mailing list devel@ntpsec.org http://lists.ntpsec.org/mailman/listinfo/devel

Re: 1.0.1 and ntpsnmpd

2018-03-15 Thread Sanjeev Gupta via devel
Jason, yes, that is the result of the bounty offer. I have not had a chance to play with it, but the offer included a requirement to upstream into cacti and provide a working example. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Fri, Mar 16, 2018 at 3:35 AM, Jason Azze

Re: 1.0.1 and ntpsnmpd

2018-03-01 Thread Sanjeev Gupta via devel
Please see https://github.com/netniV/cacti-templates/tree/master/NTP On 27 Feb 2018 7:45 pm, "Sanjeev Gupta" wrote: Apologies. I checked an hour ago, and the guy who assured me that we were using 'native' SNMP has come back saying he setup the cacti script that talks over ntpq I have posted

Re: 1.0.1 and ntpsnmpd

2018-02-27 Thread Sanjeev Gupta via devel
Apologies. I checked an hour ago, and the guy who assured me that we were using 'native' SNMP has come back saying he setup the cacti script that talks over ntpq I have posted a bounty offer on the cacti forum. Apologies for raising hopes. On 27 Feb 2018 7:40 pm, "Jason Azze via devel" wrote:

Re: 1.0.1 and ntpsnmpd

2018-02-27 Thread Sanjeev Gupta via devel
PM, Ian Bruene via devel wrote: > > > On 02/26/2018 06:13 PM, Sanjeev Gupta via devel wrote: > > Hi, > > For what it is worth, I am running the ntpsnmpd code on a number of debian > and ubuntu machines for some time, including one with an actual GPS. No > issues

Re: 1.0.1 and ntpsnmpd

2018-02-26 Thread Sanjeev Gupta via devel
(apologies for the top posts) Richard, I am using cacti. Have been planning to add it to observium as well, will try tonight. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Tue, Feb 27, 2018 at 8:14 AM, Richard Laager wrote: > On 02/26/2018 06:13 PM, Sanjeev Gupta wro

Re: 1.0.1 and ntpsnmpd

2018-02-26 Thread Sanjeev Gupta via devel
Hi, For what it is worth, I am running the ntpsnmpd code on a number of debian and ubuntu machines for some time, including one with an actual GPS. No issues so far. I just like to see graphs. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane On Tue, Feb 27, 2018 at 8:09 AM,

Re: Name clash

2018-02-16 Thread Sanjeev Gupta via devel
> That works only because we install in /usr/local/ while the system version of > ntp classic gets installed in /usr/ What's going to happen if a distro > packages up our stuff and somebody wants to install both our code and ntp > classic? For a distro, like Debian, the new package would be calle

Re: rasPi Stretch Lite install notes

2018-01-07 Thread Sanjeev Gupta via devel
> - sudo apt-get update && sudo apt-get -us dist-upgrade && sudo apt-get -u dist-upgrade && sudo apt-get autoremove I find apt-get --purge autoremove better, as it removes any config files as well, reducing surprises when you next re-install a package. -- Sanjeev Gupta +65 98551208

Re: Bite of the Buildbugs!

2017-12-12 Thread Sanjeev Gupta via devel
> 2. Provide tools, options and support, for binary downstreams (Debian, > Mint, etc.), to repackage ntpsec components as binaries, integrated with > their install tools. As a start, as Richard has already done the work of packaging ntpsec for Debian, perhaps we could include his "patches" in HEAD

Re: Upcoming feature freeze

2017-08-23 Thread Sanjeev Gupta via devel
Hi, I would dearly love to see #204 (/etc/ntp.d) be included in 1.0. As a SysAdm, I typically read the new features list rarely. If it does not land in 1.0 (and pacakge managers and I do not start using it then), it may never get used. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com

Re: ✘HPUX ??

2017-06-07 Thread Sanjeev Gupta via devel
On Thu, Jun 8, 2017 at 7:11 AM, Gary E. Miller via devel wrote: > > Sanjeev, keep those servers mothballed, unless you have a personal > > itch make hpux work. > > Oh, I hope not... Give them to a museum, if they'll take them... Gary, the critical word there is "if". How do you think I landed

Re: ✘HPUX ??

2017-06-07 Thread Sanjeev Gupta via devel
On Wed, Jun 7, 2017 at 2:55 PM, Mark Atwood via devel wrote: > Hilariously, I don't know where we can get a HPUX lab machine. I have two (mothballed) HP Integrity servers, Itanium architecture. I think they have HPUX installed. If there is interest, I can power on, and turn over to whoever is

Re: NTPsec on MIPSbe

2017-05-23 Thread Sanjeev Gupta via devel
On Wed, May 24, 2017 at 3:23 AM, Matthew Selsky via devel wrote: > > Sanjeev/Hal, > > Did waf's endian-ness test not detect this properly? It worked perfectly, no manual intervention or extra parameters required. -- Sanjeev Gupta +65 98551208 http://www.linkedin.com/in/ghane _

NTPsec on MIPSbe

2017-05-22 Thread Sanjeev Gupta via devel
After a fruitless two months trying to find a big endian machine, I finally booted a qemu instance. Running Debian 7, 256M RAM, 32 bit. gcc 4.6, kernel 3.2 buildprep fails because Debian 7 did not have libseccomp. I installed python-dev, bison, and build-essential manually. waf configured, bui