>From 5b6c32eb632f7451bc2d14584ac9ac41217d8144 Mon Sep 17 00:00:00 2001 From: Clifford Trueman Date: Mon, 16 Jul 2012 15:26:14 -0400 Subject: [PATCH 4/4] added guidance for ntp encryption Signed-off-by: Clifford Trueman --- RHEL6/input/services/ntp.xml | 11 ++++++++++- 1 files changed, 10 insertions(+), 1 deletions(-) diff --git a/RHEL6/input/services/ntp.xml b/RHEL6/input/services/ntp.xml index c1acd4a..f3ea935 100644 --- a/RHEL6/input/services/ntp.xml +++ b/RHEL6/input/services/ntp.xml @@ -1,6 +1,6 @@ Network Time Protocol -The Network Time Protocol is used to manage the system +check123 The Network Time Protocol is used to manage the system clock over a network. Computer clocks are not very accurate, so time will drift unpredictably on unmanaged systems. Central time protocols can be used both to ensure that time is consistent among @@ -29,6 +29,9 @@ network to have a small number of machines operating as NTP servers, and the remainder obtaining time information from those internal servers. + + + Configure an NTP Server The site's NTP server contacts a central NTP server, @@ -66,6 +69,12 @@ providing time data from the local clock. However, it is a good idea to periodically synchronize the clock to some source of accurate time, even if it is not appropriate to do so automatically. + +NTP Encyrption +Basically NTP uses encryption only for integrity checking and authentication (which effectively is integrity checking): symmetric keys (shared secrets) are used to prove authenticity of data received over the network key pairs are used where establishing shared secrets is difficult. The autokey mechanism uses key pairs. + + + Specify a Remote NTP Server for Time Data A remote NTP Server for time synchronization should be specified. -- 1.7.1