Lines Matching +full:key +full:- +full:code

7 # EDIT THIS FILE WITH CAUTION  (invoke-ntp.conf.texi)
9 # It has been AutoGen-ed  May 25, 2024 at 12:03:56 AM by AutoGen 5.18.16
11 # and the template file   agtexi-file.tpl
17 @code{ntp.conf}
19 @code{ntpd(1ntpdmdoc)}
27 @code{-c}
42 host addresses written in numeric, dotted-quad form,
77 @code{pool},
78 @code{server},
79 @code{peer},
80 @code{broadcast}
82 @code{manycastclient}
108 If the Basic Socket Interface Extensions for IPv6 (RFC-2553)
112 @code{reslist}
115 @code{ntpq(1ntpqmdoc)}
117 @code{ntpdc(1ntpdcmdoc)},
128 @code{-4}
132 @code{-6}
137 @item @code{pool} @kbd{address} @code{[@code{burst}]} @code{[@code{iburst}]} @code{[@code{version} @kbd{version}]} @code{[@code{prefer}]} @code{[@code{minpoll} @kbd{minpoll}]} @code{[@code{maxpoll} @kbd{maxpoll}]} @code{[@code{xmtnonce}]}
138 @item @code{server} @kbd{address} @code{[@code{key} @kbd{key} @kbd{|} @code{autokey}]} @code{[@code{burst}]} @code{[@code{iburst}]} @code{[@code{version} @kbd{version}]} @code{[@code{prefer}]} @code{[@code{minpoll} @kbd{minpoll}]} @code{[@code{maxpoll} @kbd{maxpoll}]} @code{[@code{true}]} @code{[@code{xmtnonce}]}
139 @item @code{peer} @kbd{address} @code{[@code{key} @kbd{key} @kbd{|} @code{autokey}]} @code{[@code{version} @kbd{version}]} @code{[@code{prefer}]} @code{[@code{minpoll} @kbd{minpoll}]} @code{[@code{maxpoll} @kbd{maxpoll}]} @code{[@code{true}]} @code{[@code{xleave}]}
140 @item @code{broadcast} @kbd{address} @code{[@code{key} @kbd{key} @kbd{|} @code{autokey}]} @code{[@code{version} @kbd{version}]} @code{[@code{prefer}]} @code{[@code{minpoll} @kbd{minpoll}]} @code{[@code{ttl} @kbd{ttl}]} @code{[@code{xleave}]}
141 @item @code{manycastclient} @kbd{address} @code{[@code{key} @kbd{key} @kbd{|} @code{autokey}]} @code{[@code{version} @kbd{version}]} @code{[@code{prefer}]} @code{[@code{minpoll} @kbd{minpoll}]} @code{[@code{maxpoll} @kbd{maxpoll}]} @code{[@code{ttl} @kbd{ttl}]}
149 either a DNS name or an IP address in dotted-quad notation.
157 @item @code{pool}
163 @item @code{server}
174 @item @code{peer}
176 persistent symmetric-active mode association with the specified
186 @item @code{broadcast}
208 @code{broadcastclient}
210 @code{multicastclient}
213 @item @code{manycastclient}
219 @code{manycastserver}
228 @code{manycastserver}
240 @code{server}
248 @item @code{autokey}
253 @item @code{burst}
257 @code{server}
259 @item @code{iburst}
265 @code{server}
267 @code{ntpd(1ntpdmdoc)}
269 @code{-q}
271 @item @code{key} @kbd{key}
274 @kbd{key}
278 @item @code{minpoll} @kbd{minpoll}
279 @item @code{maxpoll} @kbd{maxpoll}
284 @code{maxpoll}
289 @code{minpoll}
291 @item @code{noselect}
294 @item @code{preempt}
296 @item @code{prefer}
308 @item @code{true}
314 @item @code{ttl} @kbd{ttl}
317 It specifies the time-to-live
327 @item @code{version} @kbd{version}
330 Versions 1-4 are the choices, with version 4 the
332 @item @code{xleave}
334 @code{peer}
336 @code{broadcast}
338 @item @code{xmtnonce}
340 @code{server}
342 @code{pool}
348 @item @code{broadcastclient}
358 server and client should operate using symmetric-key or public-key
361 @item @code{manycastserver} @kbd{address} @kbd{...}
371 and client should operate using symmetric-key or public-key
374 @item @code{multicastclient} @kbd{address} @kbd{...}
384 both the server and client should operate using symmetric-key or
385 public-key authentication as described in
387 @item @code{mdnstries} @kbd{number}
393 @code{mdnstries}
396 @code{ntpd}
399 @code{mdnstries}
408 specification RFC-1305 defines a scheme which provides
413 DES-CBC.
415 5 (MD5) algorithm using a private key, commonly called keyed-MD5.
416 Either algorithm computes a message digest, or one-way hash, which
417 can be used to verify the server has the correct private key and
418 key identifier.
420 NTPv4 retains the NTPv3 scheme, properly described as symmetric key
422 based on public key cryptography.
423 Public key cryptography is generally considered more secure
424 than symmetric key cryptography, since the security is based
427 With Autokey all key distribution and
429 considerably simplifies key distribution and storage.
430 Public key management is based on X.509 certificates,
435 While the algorithms for symmetric key cryptography are
436 included in the NTPv4 distribution, public key cryptography
444 @code{key}
446 @code{autokey}
448 @code{peer},
449 @code{server},
450 @code{broadcast}
452 @code{manycastclient}
457 options described below specify the locations of the key files,
466 code (MAC), it is accepted only if it
469 checks require correct key ID, key value
481 @code{auth}
485 @code{enable}
487 @code{disable}
490 @code{ntpdc(1ntpdcmdoc)}
496 authenticated using either symmetric key or public key cryptography.
503 @code{auth}
522 Either symmetric key or public key
532 both symmetric key and public key
536 @code{http://www.ntp.org/}.
537 @subsubsection Symmetric-Key Cryptography
538 The original RFC-1305 specification allows any one of possibly
539 65,535 keys, each distinguished by a 32-bit key identifier, to
542 agree on the key and key identifier to
545 related information are specified in a key
553 @code{ntpq(1ntpqmdoc)}
555 @code{ntpdc(1ntpdcmdoc)}
559 @code{ntpd(1ntpdmdoc)}
560 is first started, it reads the key file specified in the
561 @code{keys}
563 in the key cache.
566 @code{trusted}
573 @code{ntpdc(1ntpdcmdoc)}.
575 if a key becomes compromised.
577 @code{requestkey}
578 command selects the key used as the password for the
579 @code{ntpdc(1ntpdcmdoc)}
581 @code{controlkey}
582 command selects the key used as the password for the
583 @code{ntpq(1ntpqmdoc)}
585 @subsubsection Public Key Cryptography
586 NTPv4 supports the original NTPv3 symmetric key scheme
587 described in RFC-1305 and in addition the Autokey protocol,
588 which is based on public key cryptography.
605 All modes use in addition a variant of the S-KEY scheme,
606 in which a pseudo-random key list is generated and used
616 @code{ntp-keygen(1ntpkeygenmdoc)}
618 This includes a required host key file,
619 required certificate file and optional sign key file,
623 along with the matching sign key.
627 @code{md5WithRSAEncryption},
659 @code{gethostname(2)}
680 symmetric key, public key) and identity scheme is called
695 @code{server}
697 @code{peer}
699 @code{key}
701 @code{autokey}
704 @code{key}
706 using the symmetric key ID specified; if the
707 @code{autokey}
736 Server Bob has both a symmetric key file and minimal Autokey files.
740 key file and has selected key ID 4 in messages to Bob.
741 Bob verifies the message with his key ID 4.
743 same key and the message is verified, Bob sends Cathy a reply
744 authenticated with that key.
746 Bob sends Cathy a thing called a crypto-NAK, which tells her
749 @code{ntpq(1ntpqmdoc)}
752 Denise has rolled her own host key and certificate.
767 @subsubsection Key Management
770 @code{ntp-keygen(1ntpkeygenmdoc)}
771 utility program, including symmetric key, host key and
772 public certificate files, as well as sign key, identity parameters
779 @code{ntpq(1ntpqmdoc)}
781 @code{ntpdc(1ntpdcmdoc)}
797 a subject key identifier or a issuer key identifier field;
798 however, an extended key usage field for a trusted host must
800 @code{trustRoot};.
804 @item @code{autokey} @code{[@kbd{logsec}]}
805 Specifies the interval between regenerations of the session key
807 Note that the size of the key
811 For poll intervals above the specified interval, a session key list
814 @item @code{controlkey} @kbd{key}
815 Specifies the key identifier to use with the
816 @code{ntpq(1ntpqmdoc)}
818 protocol defined in RFC-1305.
820 @kbd{key}
822 the key identifier for a trusted key, where the value can be in the
824 @item @code{crypto} @code{[@code{cert} @kbd{file}]} @code{[@code{leap} @kbd{file}]} @code{[@code{randfile} @kbd{file}]} @code{[@code{host} @kbd{file}]} @code{[@code{gq} @kbd{file}]} @code{[@code{gqpar} @kbd{file}]} @code{[@code{iffpar} @kbd{file}]} @code{[@code{mvpar} @kbd{file}]} @code{[@code{pw} @kbd{password}]}
826 It activates public key
835 @code{keysdir}
840 @item @code{cert} @kbd{file}
845 @item @code{gqpar} @kbd{file}
851 @item @code{host} @kbd{file}
852 Specifies the location of the required host key file.
857 @item @code{iffpar} @kbd{file}
862 @item @code{leap} @kbd{file}
867 @item @code{mvpar} @kbd{file}
872 @item @code{pw} @kbd{password}
877 @item @code{randfile} @kbd{file}
882 @item @code{keys} @kbd{keyfile}
883 Specifies the complete path and location of the MD5 key file
884 containing the keys and key identifiers used by
885 @code{ntpd(1ntpdmdoc)},
886 @code{ntpq(1ntpqmdoc)}
888 @code{ntpdc(1ntpdcmdoc)}
889 when operating with symmetric key cryptography.
891 @code{-k}
893 @item @code{keysdir} @kbd{path}
898 @item @code{requestkey} @kbd{key}
899 Specifies the key identifier to use with the
900 @code{ntpdc(1ntpdcmdoc)}
903 @code{ntpd(1ntpdmdoc)}.
905 @kbd{key}
906 argument is a key identifier
907 for the trusted key, where the value can be in the range 1 to
909 @item @code{revoke} @kbd{logsec}
910 Specifies the interval between re-randomization of certain
914 deflect brute-force attacks on the algorithms of the scheme;
920 @item @code{trustedkey} @kbd{key} @kbd{...}
921 Specifies the key identifiers which are trusted for the
922 purposes of authenticating peers with symmetric key cryptography,
924 @code{ntpq(1ntpqmdoc)}
926 @code{ntpdc(1ntpdcmdoc)}
929 and remote servers share the same key and key identifier for this
933 @kbd{key}
934 arguments are 32-bit unsigned
951 This could be due to a replay or a key file generation error.
953 (bad or missing public key)
954 The public key is missing, has incorrect format or is an unsupported type.
963 The signature length does not match the current public key.
968 different private key.
971 The certificate is invalid or signed with the wrong key.
987 The identity key is missing, corrupt or bogus.
991 @code{ntpd(1ntpdmdoc)}
996 @code{statistics}
1003 directory of the source code distribution.
1007 @code{cron(8)}
1012 @item @code{statistics} @kbd{name} @kbd{...}
1018 @item @code{clockstats}
1023 @code{clockstats}:
1031 clock address in dotted-quad notation.
1039 @item @code{cryptostats}
1042 enables recording of cryptographic public key protocol information.
1045 @code{cryptostats}:
1053 address in dotted-quad notation, The final message field includes the
1058 @item @code{loopstats}
1063 @code{loopstats}:
1071 show time offset (seconds), frequency offset (parts per million -
1074 @item @code{peerstats}
1082 @code{peerstats}:
1084 48773 10847.650 127.127.4.1 9714 -0.001605376 0.000000000 0.001424877 0.000958674
1090 show the peer address in dotted-quad notation and status,
1096 @item @code{rawstats}
1097 Enables recording of raw-timestamp statistics information.
1104 @code{rawstats}:
1113 in dotted-quad notation.
1119 @item @code{sysstats}
1124 @code{sysstats}:
1135 @item Time since restart @code{36000}
1137 @item Packets received @code{81965}
1139 @item Packets processed @code{0}
1141 @item Current version @code{9546}
1143 @item Previous version @code{56}
1145 @item Bad version @code{71793}
1147 @item Access denied @code{512}
1149 @item Bad length or format @code{540}
1151 @item Bad authentication @code{10}
1153 @item Rate exceeded @code{147}
1156 @item @code{statsdir} @kbd{directory_path}
1161 @code{filegen}
1164 @item @code{filegen} @kbd{name} @code{[@code{file} @kbd{filename}]} @code{[@code{type} @kbd{typename}]} @code{[@code{link} | @code{nolink}]} @code{[@code{enable} | @code{disable}]}
1183 @code{ntpdc(1ntpdcmdoc)}
1186 @item @code{name}
1188 @code{statistics}
1190 @item @code{file} @kbd{filename}
1194 @code{prefix},
1195 @code{filename}
1197 @code{suffix}:
1199 @item @code{prefix}
1206 server, usually specified as a compile-time constant.
1217 @item @code{filename}
1231 @item @code{suffix}
1236 @item @code{type} @kbd{typename}
1241 @item @code{none}
1243 @item @code{pid}
1249 @code{ntpd(1ntpdmdoc)}
1259 @code{ntpd(1ntpdmdoc)}
1261 @item @code{day}
1270 @code{YYYYMMdd}.
1271 @code{YYYY}
1272 is a 4-digit year number (e.g., 1992).
1273 @code{MM}
1275 @code{dd}
1281 @item @code{week}
1284 The term week is defined by computing day-of-year
1288 filename base: A dot, a 4-digit year number, the letter
1289 @code{W},
1290 and a 2-digit week number.
1294 @item @code{month}
1297 file name suffix consists of a dot, a 4-digit year number, and
1298 a 2-digit month.
1299 @item @code{year}
1303 @item @code{age}
1308 @code{a},
1309 and an 8-digit number.
1311 running at the start of the corresponding 24-hour period.
1313 @code{enable};
1315 @code{disable}.
1317 @item @code{link} | @code{nolink}
1322 @code{link}
1324 @code{nolink}.
1331 @code{C},
1333 @code{ntpd(1ntpdmdoc)}
1339 @item @code{enable} @code{|} @code{disable}
1347 @code{ntpd(1ntpdmdoc)}
1379 @code{restrict}
1394 @subsubsection The Kiss-of-Death Packet
1402 for this purpose called the "kiss-of-death" (KoD) packet.
1404 to zero and the reference identifier field set to a four-byte
1405 ASCII code.
1407 @code{noserve}
1409 @code{notrust}
1411 the code is "DENY"; if the
1412 @code{limited}
1414 is exceeded, the code is "RATE".
1415 Finally, if a cryptographic violation occurs, the code is "CRYP".
1431 @item @code{discard} @code{[@code{average} @kbd{avg}]} @code{[@code{minimum} @kbd{min}]} @code{[@code{monitor} @kbd{prob}]}
1433 @code{limited}
1437 @code{average}
1440 @code{minimum}
1444 and a kiss-o'-death packet returned if enabled.
1446 @code{monitor}
1453 @code{monitor}
1460 @item @code{restrict} @kbd{address} @code{[@code{mask} @kbd{mask}]} @code{[@code{ippeerlimit} @kbd{int}]} @code{[@kbd{flag} @kbd{...}]}
1482 @code{default},
1486 @code{ippeerlimit}
1489 where a value of -1 means "unlimited", the current default.
1495 @code{flag}
1504 restrict informational queries and attempts to do run-time
1509 @item @code{ignore}
1511 @code{ntpq(1ntpqmdoc)}
1513 @code{ntpdc(1ntpdcmdoc)}
1515 @item @code{kod}
1516 If this flag is set when a rate violation occurs, a kiss-o'-death
1520 @code{discard} @code{average}
1522 @item @code{limited}
1525 @code{discard}
1529 @code{ntpd(1ntpdmdoc)}.
1532 @code{limited}
1534 @item @code{lowpriotrap}
1544 @item @code{noepeer}
1547 Note that the ability to use a symmetric key for authentication may be restricted to
1554 @code{noepeer}
1555 to become the default in ntp-4.4.
1556 @item @code{nomodify}
1558 @code{ntpq(1ntpqmdoc)}
1560 @code{ntpdc(1ntpdcmdoc)}
1565 @item @code{noquery}
1567 @code{ntpq(1ntpqmdoc)}
1569 @code{ntpdc(1ntpdcmdoc)}
1572 @item @code{nopeer}
1578 @code{pool}
1580 @code{pool}
1582 @code{nopeer}
1584 @code{restrict source ...}
1588 @code{nopeer}
1590 @item @code{noserve}
1592 @code{ntpq(1ntpqmdoc)}
1594 @code{ntpdc(1ntpdcmdoc)}
1596 @item @code{notrap}
1600 @code{ntpq(1ntpqmdoc)}
1603 @item @code{notrust}
1605 @item @code{ntpport}
1613 @code{ntpport}
1616 @code{ntpport}
1619 @item @code{serverresponse fuzz}
1622 @code{reftime}.
1623 @item @code{version}
1631 @code{manycastclient}
1633 @code{manycast}
1639 @item @code{delrestrict} @code{[source]} @kbd{address}
1640 Remove a previously-set restriction.  This is useful for
1642 @code{ntpq(1ntpqmdoc)}
1644 @code{source}
1646 @code{restrict} @code{source}
1649 @code{source}
1668 with the anycast paradigm described in RFC-1546,
1674 Manycasting can be used with either symmetric key
1675 or public key cryptography.
1676 The public key infrastructure (PKI)
1679 large key sizes.
1682 @code{http://www.openssl.org/}.
1688 @code{manycastclient}
1690 @code{server}
1692 @code{D}
1694 @code{FF})
1700 and minimum feasible time-to-live (TTL) hops, depending
1707 @code{manycastserver}
1725 and either symmetric key or public key (Autokey) can be used.
1730 in a volley of eight client/server at 2-s intervals
1743 and the effects of implosion due to near-simultaneous
1746 @code{manycastclient},
1747 @code{tos}
1749 @code{ttl}
1754 @code{minpoll}
1756 @code{manycastclient},
1758 @code{maxpolll}
1762 @code{ttl}
1772 @code{minclock}
1774 @code{minsane}
1776 @code{tos}
1779 @code{minsane}
1782 @code{minclock}
1787 @code{minsane}
1789 @code{minclock}
1792 @code{minsane}
1797 @code{minclock}
1800 @code{maxpoll}.
1802 @code{minclock}
1808 @code{maxpoll}.
1820 @code{ttl}
1835 @code{tos}
1838 @code{floor}
1840 @code{ceiling}
1842 @code{tos}
1847 @code{minclock}.
1856 @code{minclock},
1866 @code{maxpoll}
1880 @code{multicastclient}
1882 @code{multicastserver}
1891 @code{tos}
1896 @code{floor}
1911 re-associate accordingly.
1914 @code{ntpd(1ntpdmdoc)}
1916 @code{sntp(1sntpmdoc)}
1918 @code{ntpd(1ntpdmdoc)}
1919 @code{-q}
1926 @code{ntpd(1ntpdmdoc)}
1927 @code{-q}.
1949 exceeds this, the client regenerates the Autokey key list.
1966 @item @code{tos} @code{[@code{bcpollbstep} @kbd{gate}]}
1982 @item @code{tos} @code{[@code{ceiling} @kbd{ceiling} | @code{cohort} @code{@{} @code{0} | @code{1} @code{@}} | @code{floor} @kbd{floor} | @code{minclock} @kbd{minclock} | @code{minsane} @kbd{minsane}]}
1991 @item @code{ceiling} @kbd{ceiling}
1993 @code{ceiling}
1995 @code{minclock}
1999 @item @code{cohort} @code{@{0 | 1@}}
2007 @item @code{floor} @kbd{floor}
2009 @code{floor}
2011 @code{minclock}
2015 @item @code{minclock} @kbd{minclock}
2018 @code{minclock}
2023 @item @code{minsane} @kbd{minsane}
2033 @code{minsane}
2037 @item @code{ttl} @kbd{hop} @kbd{...}
2041 in an expanding-ring search.
2048 satellite and modem reference clocks plus a special pseudo-clock
2068 "Pulse-per-second (PPS) Signal Interfacing"
2101 @code{ntpd(1ntpdmdoc)}
2109 @code{127.127.}@kbd{t}.@kbd{u},
2116 number in the range 0-3.
2122 @code{server}
2129 @code{key},
2130 @code{version}
2132 @code{ttl}
2135 @code{mode}
2139 @code{prefer}
2151 @code{minpoll}
2153 @code{maxpoll}
2160 @code{fudge}
2164 @code{server}
2170 @code{refid}
2172 @code{stratum}
2176 device-dependent time offsets and four flags that can be included
2178 @code{fudge}
2183 @code{ntpd(1ntpdmdoc)}
2190 @code{stratum}
2193 involving both a reference clock and a pulse-per-second (PPS)
2197 @code{refid}
2203 @item @code{server} @code{127.127.}@kbd{t}.@kbd{u} @code{[@code{prefer}]} @code{[@code{mode} @kbd{int}]} @code{[@code{minpoll} @kbd{int}]} @code{[@code{maxpoll} @kbd{int}]}
2208 @item @code{prefer}
2220 @item @code{mode} @kbd{int}
2222 device-specific fashion.
2227 @item @code{minpoll} @kbd{int}
2228 @item @code{maxpoll} @kbd{int}
2233 @code{minpoll}
2235 @code{maxpoll}
2238 @code{minpoll}
2240 @code{maxpoll}
2244 @item @code{fudge} @code{127.127.}@kbd{t}.@kbd{u} @code{[@code{time1} @kbd{sec}]} @code{[@code{time2} @kbd{sec}]} @code{[@code{stratum} @kbd{int}]} @code{[@code{refid} @kbd{string}]} @code{[@code{mode} @kbd{int}]} @code{[@code{flag1} @code{0} @code{|} @code{1}]} @code{[@code{flag2} @code{0} @code{|} @code{1}]} @code{[@code{flag3} @code{0} @code{|} @code{1}]} @code{[@code{flag4} @code{0} @code{|} @code{1}]}
2248 @code{server}
2252 @code{ntpdc(1ntpdcmdoc)}
2257 @item @code{time1} @kbd{sec}
2259 the driver, a fixed-point decimal number in seconds.
2277 @code{enable}
2286 @item @code{time2} @kbd{secs}
2287 Specifies a fixed-point decimal number in seconds, which is
2288 interpreted in a driver-dependent way.
2296 @item @code{stratum} @kbd{int}
2301 @item @code{refid} @kbd{string}
2307 @item @code{mode} @kbd{int}
2309 device-specific fashion.
2314 @item @code{flag1} @code{0} @code{|} @code{1}
2315 @item @code{flag2} @code{0} @code{|} @code{1}
2316 @item @code{flag3} @code{0} @code{|} @code{1}
2317 @item @code{flag4} @code{0} @code{|} @code{1}
2324 @code{flag4}
2327 @code{clockstats}
2329 @code{filegen}
2332 @code{filegen}
2340 @item @code{broadcastdelay} @kbd{seconds}
2355 @item @code{driftfile} @kbd{driftfile}
2360 @code{-f}
2373 in parts-per-million (PPM).
2378 @code{ntpd(1ntpdmdoc)}
2382 @item @code{dscp} @kbd{value}
2384 a 6-bit code.
2386 @item @code{enable} @code{[@code{auth} | @code{bclient} | @code{calibrate} | @code{kernel} | @code{mode7} | @code{monitor} | @code{ntp} | @code{stats} | @code{peer_clear_digest_early} | @code{unpeer_crypto_early} | @code{unpeer_crypto_nak_early} | @code{unpeer_digest_early}]}
2387 @item @code{disable} @code{[@code{auth} | @code{bclient} | @code{calibrate} | @code{kernel} | @code{mode7} | @code{monitor} | @code{ntp} | @code{stats} | @code{peer_clear_digest_early} | @code{unpeer_crypto_early} | @code{unpeer_crypto_nak_early} | @code{unpeer_digest_early}]}
2392 @code{ntpdc(1ntpdcmdoc)}
2395 @item @code{auth}
2397 peer has been correctly authenticated using either public key or
2398 private key cryptography.
2400 @code{enable}.
2401 @item @code{bclient}
2404 @code{multicastclient}
2408 @code{disable}.
2409 @item @code{calibrate}
2413 @code{disable}.
2414 @item @code{kernel}
2418 @code{enable}
2420 @code{disable}.
2421 @item @code{mode7}
2422 Enables processing of NTP mode 7 implementation-specific requests
2424 @code{ntpdc(1ntpdcmdoc)}
2428 @code{ntpq(1ntpqmdoc)}.
2430 @code{ntpq(1ntpqmdoc)}
2432 @code{ntpdc(1ntpdcmdoc)}
2434 @item @code{monitor}
2437 @code{ntpdc(1ntpdcmdoc)}
2440 @code{monlist}
2444 @code{enable}.
2445 @item @code{ntp}
2451 @code{enable}.
2452 @item @code{peer_clear_digest_early}
2454 @code{ntpd(1ntpdmdoc)}
2456 receives a crypto-NAK packet that
2460 as it allows for quick recovery if a server key has changed,
2461 a properly forged and appropriately delivered crypto-NAK packet
2467 @code{peerstats}
2471 @code{enable}.
2472 @item @code{stats}
2478 @code{disable}.
2479 @item @code{unpeer_crypto_early}
2481 @code{ntpd(1ntpdmdoc)}
2496 @code{peerstats}
2500 @code{enable}.
2501 @item @code{unpeer_crypto_nak_early}
2503 @code{ntpd(1ntpdmdoc)}
2504 receives a crypto-NAK packet that
2508 as it allows for quick recovery if a server key has changed,
2509 a properly forged and appropriately delivered crypto-NAK packet
2515 @code{peerstats}
2519 @code{enable}.
2520 @item @code{unpeer_digest_early}
2522 @code{ntpd(1ntpdmdoc)}
2535 @code{peerstats}
2539 @code{enable}.
2541 @item @code{includefile} @kbd{includefile}
2549 @code{ntpd(1ntpdmdoc)}
2552 @item @code{interface} @code{[@code{listen} | @code{ignore} | @code{drop}]} @code{[@code{all} | @code{ipv4} | @code{ipv6} | @code{wildcard} @kbd{name} | @kbd{address} @code{[@code{/} @kbd{prefixlen}]}]}
2554 @code{interface}
2556 @code{ntpd(1ntpdmdoc)}
2566 @code{ignore}
2568 @code{drop}
2570 @code{ntpd(1ntpdmdoc)}
2573 @code{interface}
2576 @code{interface}
2578 @code{-I},
2579 @code{--interface},
2580 @code{-L},
2582 @code{--novirtualips}
2583 command-line options are specified in the configuration file,
2586 @code{nic}
2588 @code{interface}.
2589 @item @code{leapfile} @kbd{leapfile}
2594 @code{https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list}
2596 @code{ftp://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list}.
2598 @code{leapfile}
2600 @code{ntpd(1ntpdmdoc)}
2602 @code{leapfile} @code{directive} @code{or} @code{when}
2603 @code{ntpd} @code{detects} @code{that} @code{the}
2606 @code{ntpd}
2611 @code{update-leap(1update_leapmdoc)}
2615 @item @code{leapsmearinterval} @kbd{seconds}
2617 @code{ntpd(1ntpdmdoc)}
2619 @code{--enable-leap-smear}
2621 @code{configure}
2626 .Sy DO NOT USE THIS OPTION ON PUBLIC-ACCESS SERVERS!
2628 @item @code{logconfig} @kbd{configkeyword}
2631 @code{syslog(3)}
2633 @code{logfile}
2642 @quoteleft{}-@quoteright{},
2646 @code{syslog(3)}
2650 @quoteleft{}-@quoteright{}
2653 @code{syslog(3)}
2656 (@code{clock}, @code{peer}, @code{sys} and @code{sync}).
2659 (@code{info}),
2661 (@code{events}),
2663 (@code{statistics})
2666 (@code{status}).
2671 @code{all}
2675 @code{all}
2685 @code{ntpd(1ntpdmdoc)}
2697 @item @code{logfile} @kbd{logfile}
2700 @code{syslog(3)}
2703 @code{-l}
2705 @item @code{mru} @code{[@code{maxdepth} @kbd{count} | @code{maxmem} @kbd{kilobytes} | @code{mindepth} @kbd{count} | @code{maxage} @kbd{seconds} | @code{initialloc} @kbd{count} | @code{initmem} @kbd{kilobytes} | @code{incalloc} @kbd{count} | @code{incmem} @kbd{kilobytes}]}
2711 @item @code{maxdepth} @kbd{count}
2712 @item @code{maxmem} @kbd{kilobytes}
2715 @code{incalloc}
2717 @code{incmem}
2720 @code{mru}
2722 @code{maxdepth}
2724 @code{maxmem} @code{are} @code{used,} @code{the} @code{last} @code{one} @code{used} @code{controls.}
2726 @item @code{mindepth} @kbd{count}
2729 @code{mindepth}
2733 @item @code{maxage} @kbd{seconds}
2735 @code{mindepth}
2738 @code{maxage}
2742 @code{maxdepth} @code{/} @code{moxmem}.
2744 @item @code{initalloc} @kbd{count}
2745 @item @code{initmem} @kbd{kilobytes}
2749 @item @code{incalloc} @kbd{count}
2750 @item @code{incmem} @kbd{kilobytes}
2754 @item @code{nonvolatile} @kbd{threshold}
2758 @code{driftfile}
2759 (frequency file) will be written, with a default value of 1e-7 (0.1 PPM).
2763 @code{threshold}
2768 @item @code{phone} @kbd{dial} @kbd{...}
2771 or the JJY driver (type 40, mode 100 - 180).
2775 For the JJY driver (type 40 mode 100 - 180), the argument is 
2779 @item @code{pollskewlist} @code{[@kbd{poll} @kbd{early} @kbd{late}]} @kbd{...} @code{[@code{default} @kbd{early} @kbd{late}]}
2788 The next two numbers must be between 0 and one-half of the poll interval,
2796 @item @code{reset} @code{[@code{allpeers}]} @code{[@code{auth}]} @code{[@code{ctl}]} @code{[@code{io}]} @code{[@code{mem}]} @code{[@code{sys}]} @code{[@code{timer}]}
2798 @code{ntpd}
2800 @code{ntpq}
2802 @code{ntpdc}.
2803 @item @code{rlimit} @code{[@code{memlock} @kbd{Nmegabytes} | @code{stacksize} @kbd{N4kPages} @code{filenum} @kbd{Nfiledescriptors}]}
2805 @item @code{memlock} @kbd{Nmegabytes}
2810 @code{-i}
2812 The default is 32 megabytes on non-Linux machines, and -1 under Linux.
2813 -1 means "do not lock the process into memory".
2815 @item @code{stacksize} @kbd{N4kPages}
2817 @code{mlockall()}
2820 @item @code{filenum} @kbd{Nfiledescriptors}
2824 @item @code{saveconfigdir} @kbd{directory_path}
2828 @code{saveconfig}
2831 @code{saveconfigdir}
2833 @code{saveconfig}
2835 @code{ntpd}.
2836 @item @code{saveconfig} @kbd{filename}
2839 @code{:config}
2841 @code{config-from-file}
2843 @code{ntpd}
2847 @code{saveconfigdir}.
2849 @code{saveconfigdir}
2855 @code{strftime(3)}
2858 @code{saveconfig\ ntp-%Y%m%d-%H%M%S.conf}.
2860 @code{savedconfig}.
2862 @item @code{setvar} @kbd{variable} @code{[@code{default}]}
2868 @code{name}@code{=}@kbd{value}
2870 @code{default}
2873 (@code{rv} command)).
2880 @code{setvar}
2885 @code{sys_var_list}
2889 @code{peer_var_list}
2892 @code{clock_var_list}
2894 @item @code{sysinfo}
2896 @item @code{sysstats}
2898 @item @code{tinker} @code{[@code{allan} @kbd{allan} | @code{dispersion} @kbd{dispersion} | @code{freq} @kbd{freq} | @code{huffpuff} @kbd{huffpuff} | @code{panic} @kbd{panic} | @code{step} @kbd{step} | @code{stepback} @kbd{stepback} | @code{stepfwd} @kbd{stepfwd} | @code{stepout} @kbd{stepout}]}
2918 @item @code{allan} @kbd{allan}
2924 @item @code{dispersion} @kbd{dispersion}
2927 @item @code{freq} @kbd{freq}
2929 parts-per-million.
2932 @item @code{huffpuff} @kbd{huffpuff}
2934 huff-n'-puff filter span, which determines the most recent interval
2941 @item @code{panic} @kbd{panic}
2946 @item @code{step} @kbd{step}
2955 @item @code{stepback} @kbd{stepback}
2966 @item @code{stepfwd} @kbd{stepfwd}
2968 @item @code{stepout} @kbd{stepout}
2975 @item @code{writevar} @kbd{assocID\ name} @kbd{=} @kbd{value} @kbd{[,...]}
2978 @code{assocID}
2985 @code{assocID}
2987 @item @code{trap} @kbd{host_address} @code{[@code{port} @kbd{port_number}]} @code{[@code{interface} @kbd{interface_address}]}
2998 @item @code{ttl} @kbd{hop} @kbd{...}
3002 @code{manycast}
3003 mode these values are used in-turn in an expanding-ring search.
3012 @item @code{hop} @kbd{...}
3016 an expanding-ring search.
3022 using the @code{agtexi-cmd} template and the option descriptions for the @code{ntp.conf} program.
3040 RSA private key
3042 RSA public key
3044 Diffie-Hellman agreement parameters
3048 @code{ntpd(1ntpdmdoc)},
3049 @code{ntpdc(1ntpdcmdoc)},
3050 @code{ntpq(1ntpqmdoc)}
3055 @code{http://www.ntp.org/}.