Re: Testing NTPSec with NTS

Yo Hal! On Thu, 21 Mar 2019 21:49:31 -0700 Hal Murray via devel wrote: > > What's your environment? I'm passing "ntp" to getaddrinfo. > > Ah, that's the bug. Don't do that. There is no offical tcp/ntp > > port assigned. So trying to look it up is not going to work > > well... > > For "n

Re: Testing NTPSec with NTS

> What's your environment? I'm passing "ntp" to getaddrinfo. > Ah, that's the bug. Don't do that. There is no offical tcp/ntp port > assigned. So trying to look it up is not going to work well... For "not going to work", it took a long time to fail. Fix pushed. -- These are my opinions.

Re: Testing NTPSec with NTS

Gary, It works with a mix of NTS and NTP, I removed the NTP to force it to sync with your servers. All seems OK now. On Fri, Mar 22, 2019, 12:20 PM Gary E. Miller wrote: > Yo Sanjeev! > > On Fri, 22 Mar 2019 08:31:34 +0800 > Sanjeev Gupta wrote: > > > I removed all non-NTS servers from my co

Re: Testing NTPSec with NTS

Yo Sanjeev! On Fri, 22 Mar 2019 08:31:34 +0800 Sanjeev Gupta wrote: > I removed all non-NTS servers from my config,and I am now synced!!! Weird. I can run with a mix of plain NTPD and NTS/NTPD. > No rest for the helpful: How do I check if I am an NTS server? I like Hal's suggestions. I also

Re: Testing NTPSec with NTS

Yo Hal! On Thu, 21 Mar 2019 17:49:55 -0700 Hal Murray via devel wrote: > > 2019-03-22T03:56:32 ntpd[21039]: NTSc: nts_probe: DNS error trying > > to contact pi3.rellim.com: -8, Servname not supported for > > ai_socktype > > What's your environment? I'm passing "ntp" to getaddrinfo. Ah, tha

Re: Testing NTPSec with NTS

> No rest for the helpful: How do I check if I am an NTS server? The real check is that somebody can connect to your server. Other maybe helpful sources of info: netstat -tl Should show: tcp0 0 0.0.0.0:ntp 0.0.0.0:* LISTEN tcp6 0 0 [::]:ntp

Re: Testing NTPSec with NTS

> Been runnig for a few hours now. ntpq -pn output: ... > And the log is here: https://pastebin.com/fM9uDwVi Thanks. > 2019-03-22T03:56:32 ntpd[21039]: NTSc: nts_probe: DNS error trying to contact > pi3.rellim.com: -8, Servname not supported for ai_socktype What's your environment? I'm passi

Re: Testing NTPSec with NTS

Gary, I removed all non-NTS servers from my config,and I am now synced!!! root@ntpmon:~/ntpsec# ntpq -p remote refid st t when poll reach delay offset jitter ==

Re: Testing NTPSec with NTS

Gary, Adding this to /etc/services seems to fix the issue: ntp 123/tcp # Network Time Protocol I now see: -pi3.rellim.com .PPS.1 84 64 37 197.8958 0.5317 0.4966 -kong.rellim.com 204.17.205.1

Re: Testing NTPSec with NTS

Yo Sanjeev! > > Looks good. What is your server so I can try to connect back? > My server is ntpmon.dcs1.biz . It is in the pool, BTW. I can't connect to any NTS from kong now. Not getting any cookies. Some of my other 3 still work in various combinations. I'm not putting NTS on my one pool s

Re: Testing NTPSec with NTS

On Fri, Mar 22, 2019 at 7:24 AM Gary E. Miller via devel wrote: > > I have been lurking and trying to set up NTS to talk to the rellim.com > > servers. This is a recent git head. > > Cool. > I just did a git pull and rebuilt. > > My ntp.conf snippet: > > > > nts enable > > nts cert /etc/letse

Re: Testing NTPSec with NTS

Yo Sanjeev! On Fri, 22 Mar 2019 07:14:29 +0800 Sanjeev Gupta via devel wrote: > I have been lurking and trying to set up NTS to talk to the rellim.com > servers. This is a recent git head. Cool. > My ntp.conf snippet: > > nts enable > nts cert /etc/letsencrypt/live/ntpmon.dcs1.biz/fullchain.

Testing NTPSec with NTS

Hi, I have been lurking and trying to set up NTS to talk to the rellim.com servers. This is a recent git head. My ntp.conf snippet: nts enable nts cert /etc/letsencrypt/live/ntpmon.dcs1.biz/fullchain.pem nts key /etc/letsencrypt/live/ntpmon.dcs1.biz/privkey.pem server pi3.rellim.com nts server