Rocksolid Light

Welcome to RetroBBS

mail  files  register  newsreader  groups  login

Message-ID:  

We come to bury DOS, not to praise it. -- Paul Vojta, vojta@math.berkeley.edu

devel / comp.protocols.time.ntp / Re: [questions] Alternative to ntpdc delrestrict?

SubjectAuthor
* Alternative to ntpdc delrestrict?Edward McGuire
`* Re: [questions] Alternative to ntpdc delrestrict?Edward McGuire
 +- Re: [questions] Alternative to ntpdc delrestrict?Edward McGuire
 `* Re: [questions] Alternative to ntpdc delrestrict?Edward McGuire
  `- Re: [questions] Alternative to ntpdc delrestrict?Harlan Stenn

1
Alternative to ntpdc delrestrict?

<a52be4a0-20d8-402a-97a1-e39f6e0e2650n@googlegroups.com>

  copy mid

https://www.rocksolidbbs.com/devel/article-flat.php?id=526&group=comp.protocols.time.ntp#526

  copy link   Newsgroups: comp.protocols.time.ntp
X-Received: by 2002:a05:622a:50b:b0:403:da2f:a9c with SMTP id l11-20020a05622a050b00b00403da2f0a9cmr15967qtx.4.1690562199186;
Fri, 28 Jul 2023 09:36:39 -0700 (PDT)
X-Received: by 2002:a05:6808:30a2:b0:3a1:f3e2:c977 with SMTP id
bl34-20020a05680830a200b003a1f3e2c977mr5757020oib.11.1690562198755; Fri, 28
Jul 2023 09:36:38 -0700 (PDT)
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.protocols.time.ntp
Date: Fri, 28 Jul 2023 09:36:38 -0700 (PDT)
Injection-Info: google-groups.googlegroups.com; posting-host=2600:3c00:e000:8a5:0:0:0:3;
posting-account=99-szAoAAABeqjQXkwq9U3xS8fVveYhv
NNTP-Posting-Host: 2600:3c00:e000:8a5:0:0:0:3
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <a52be4a0-20d8-402a-97a1-e39f6e0e2650n@googlegroups.com>
Subject: Alternative to ntpdc delrestrict?
From: metaed@gmail.com (Edward McGuire)
Injection-Date: Fri, 28 Jul 2023 16:36:39 +0000
Content-Type: text/plain; charset="UTF-8"
X-Received-Bytes: 1155
 by: Edward McGuire - Fri, 28 Jul 2023 16:36 UTC

The fine manual says ntpq "can do everything ntpdc used to do". For the ntpdc command "delrestrict" what is the equivalent ntpq command?

Re: [questions] Alternative to ntpdc delrestrict?

<13988819-f1cc-4ded-b3ca-bc7570201958n@googlegroups.com>

  copy mid

https://www.rocksolidbbs.com/devel/article-flat.php?id=528&group=comp.protocols.time.ntp#528

  copy link   Newsgroups: comp.protocols.time.ntp
X-Received: by 2002:a37:2c04:0:b0:76c:b4ab:140d with SMTP id s4-20020a372c04000000b0076cb4ab140dmr8675qkh.15.1690821529804;
Mon, 31 Jul 2023 09:38:49 -0700 (PDT)
X-Received: by 2002:a05:6808:2019:b0:3a2:2146:1e0 with SMTP id
q25-20020a056808201900b003a2214601e0mr20609257oiw.0.1690821529424; Mon, 31
Jul 2023 09:38:49 -0700 (PDT)
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!news.mixmin.net!proxad.net!feeder1-2.proxad.net!209.85.160.216.MISMATCH!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.protocols.time.ntp
Date: Mon, 31 Jul 2023 09:38:49 -0700 (PDT)
In-Reply-To: <CAMbSiYBL4f45Y-Kq3nQAUO9iN=5VXr0_xn2ewfT_OxRqKhGkmA@mail.gmail.com>
Injection-Info: google-groups.googlegroups.com; posting-host=2600:3c00:e000:8a5:0:0:0:3;
posting-account=99-szAoAAABeqjQXkwq9U3xS8fVveYhv
NNTP-Posting-Host: 2600:3c00:e000:8a5:0:0:0:3
References: <a52be4a0-20d8-402a-97a1-e39f6e0e2650n@googlegroups.com> <CAMbSiYBL4f45Y-Kq3nQAUO9iN=5VXr0_xn2ewfT_OxRqKhGkmA@mail.gmail.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <13988819-f1cc-4ded-b3ca-bc7570201958n@googlegroups.com>
Subject: Re: [questions] Alternative to ntpdc delrestrict?
From: metaed@gmail.com (Edward McGuire)
Injection-Date: Mon, 31 Jul 2023 16:38:49 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
 by: Edward McGuire - Mon, 31 Jul 2023 16:38 UTC

On Friday, July 28, 2023 at 9:48:35 PM UTC, Dave Hart wrote:
> You can do the equivalent using ntpq's remote configuration command ":config".
> ntpq -c "keyid 99" -c "passwd myntpqpasswd" -c ":config restrict 10.11.12..13"

That's not quite what I'm asking about.
On my system, your example does not delete an access control entry.
It adds an access control entry for 10.11.12.13, with no flags set -- or updates an existing entry, if present:

$ ntpq -n -c 'keyid 99' -c 'passwd' -c ':config restrict 10.11.12.13'
MD5 Password:
Config Succeeded
$ ntpdc -n -c 'keyid 99' -c 'passwd' -c 'reslist' | grep 10.11.12.13
MD5 Password:
10.11.12.13 255.255.255.255 0 none
$

It is a useful thing to do when the "default" entry has restrictive flags set.
It punches a hole for a trusted host.

But later, when you want to patch that hole, that's where "delrestrict" comes in.
It drops the access control entry, letting the "default" entry take over.

$ ntpdc -n -c 'keyid 99' -c 'passwd' -c 'delrestrict 10.11.12.13 255.255.255.255'
MD5 Password:
done!
$ ntpdc -n -c 'keyid 2' -c 'passwd' -c 'reslist' | grep 10.11.12.13
MD5 Password:
$

Deleting an access control entry (not: adding a no-flags entry) is what I'm trying to find equivalent functionality for in ntpq.

Cheers!
Edward

Re: [questions] Alternative to ntpdc delrestrict?

<750cccaf-af0b-4b3d-a595-48f7fbe1f5bbn@googlegroups.com>

  copy mid

https://www.rocksolidbbs.com/devel/article-flat.php?id=529&group=comp.protocols.time.ntp#529

  copy link   Newsgroups: comp.protocols.time.ntp
X-Received: by 2002:a05:6214:1911:b0:63c:f88d:48f0 with SMTP id er17-20020a056214191100b0063cf88d48f0mr34052qvb.9.1690821640618;
Mon, 31 Jul 2023 09:40:40 -0700 (PDT)
X-Received: by 2002:a05:6870:a89b:b0:1bb:6519:d254 with SMTP id
eb27-20020a056870a89b00b001bb6519d254mr13124708oab.3.1690821640354; Mon, 31
Jul 2023 09:40:40 -0700 (PDT)
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!tncsrv06.tnetconsulting.net!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.protocols.time.ntp
Date: Mon, 31 Jul 2023 09:40:39 -0700 (PDT)
In-Reply-To: <13988819-f1cc-4ded-b3ca-bc7570201958n@googlegroups.com>
Injection-Info: google-groups.googlegroups.com; posting-host=2600:3c00:e000:8a5:0:0:0:3;
posting-account=99-szAoAAABeqjQXkwq9U3xS8fVveYhv
NNTP-Posting-Host: 2600:3c00:e000:8a5:0:0:0:3
References: <a52be4a0-20d8-402a-97a1-e39f6e0e2650n@googlegroups.com>
<CAMbSiYBL4f45Y-Kq3nQAUO9iN=5VXr0_xn2ewfT_OxRqKhGkmA@mail.gmail.com> <13988819-f1cc-4ded-b3ca-bc7570201958n@googlegroups.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <750cccaf-af0b-4b3d-a595-48f7fbe1f5bbn@googlegroups.com>
Subject: Re: [questions] Alternative to ntpdc delrestrict?
From: metaed@gmail.com (Edward McGuire)
Injection-Date: Mon, 31 Jul 2023 16:40:40 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Received-Bytes: 1618
 by: Edward McGuire - Mon, 31 Jul 2023 16:40 UTC

On Monday, July 31, 2023 at 4:38:50 PM UTC, Edward McGuire wrote:
> $ ntpdc -n -c 'keyid 2' -c 'passwd' -c 'reslist' | grep 10.11.12.13

Sorry, obviously that should have been 'keyid 99' to make it an internally consistent example. Copy/paste error.

Re: [questions] Alternative to ntpdc delrestrict?

<a11dbcb4-12f7-4fed-ba6f-8be519a97b25n@googlegroups.com>

  copy mid

https://www.rocksolidbbs.com/devel/article-flat.php?id=531&group=comp.protocols.time.ntp#531

  copy link   Newsgroups: comp.protocols.time.ntp
X-Received: by 2002:ad4:4e25:0:b0:63c:f47d:1fe7 with SMTP id dm5-20020ad44e25000000b0063cf47d1fe7mr63355qvb.13.1690949198065;
Tue, 01 Aug 2023 21:06:38 -0700 (PDT)
X-Received: by 2002:a9d:6a0a:0:b0:6b9:4d78:cf07 with SMTP id
g10-20020a9d6a0a000000b006b94d78cf07mr15713404otn.7.1690949197713; Tue, 01
Aug 2023 21:06:37 -0700 (PDT)
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.protocols.time.ntp
Date: Tue, 1 Aug 2023 21:06:37 -0700 (PDT)
In-Reply-To: <CAMbSiYCA1A9RfzKXPa7YMgi+nmPpG0k9mMZSS9F9xxzBDU0vig@mail.gmail.com>
Injection-Info: google-groups.googlegroups.com; posting-host=2600:3c00:e000:8a5:0:0:0:3;
posting-account=99-szAoAAABeqjQXkwq9U3xS8fVveYhv
NNTP-Posting-Host: 2600:3c00:e000:8a5:0:0:0:3
References: <CAMbSiYBL4f45Y-Kq3nQAUO9iN=5VXr0_xn2ewfT_OxRqKhGkmA@mail.gmail.com>
<a52be4a0-20d8-402a-97a1-e39f6e0e2650n@googlegroups.com> <13988819-f1cc-4ded-b3ca-bc7570201958n@googlegroups.com>
<CAMbSiYCA1A9RfzKXPa7YMgi+nmPpG0k9mMZSS9F9xxzBDU0vig@mail.gmail.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <a11dbcb4-12f7-4fed-ba6f-8be519a97b25n@googlegroups.com>
Subject: Re: [questions] Alternative to ntpdc delrestrict?
From: metaed@gmail.com (Edward McGuire)
Injection-Date: Wed, 02 Aug 2023 04:06:38 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Received-Bytes: 1657
 by: Edward McGuire - Wed, 2 Aug 2023 04:06 UTC

On Monday, July 31, 2023 at 6:13:04 PM UTC, Dave Hart wrote:
> Please open a report at https://bugs.ntp.org and we'll make a "delrestrict" verb for ntpq.

https://bugs.ntp.org/show_bug.cgi?id=3855

Cheers! Edward

Re: [questions] Alternative to ntpdc delrestrict?

<d73ee0a6-b1ca-0de3-612b-517866ceef0a@ntp.org>

  copy mid

https://www.rocksolidbbs.com/devel/article-flat.php?id=532&group=comp.protocols.time.ntp#532

  copy link   Newsgroups: comp.protocols.time.ntp
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!news.iecc.com!.POSTED.gal.iecc.com!not-for-mail
From: stenn@ntp.org (Harlan Stenn)
Newsgroups: comp.protocols.time.ntp
Subject: Re: [questions] Alternative to ntpdc delrestrict?
Date: Wed, 2 Aug 2023 05:48:00 -0000 (UTC)
Organization: Taughannock Networks, Trumansburg NY
Message-ID: <d73ee0a6-b1ca-0de3-612b-517866ceef0a@ntp.org>
References: <13988819-f1cc-4ded-b3ca-bc7570201958n@googlegroups.com> <CAMbSiYBL4f45Y-Kq3nQAUO9iN=5VXr0_xn2ewfT_OxRqKhGkmA@mail.gmail.com> <a52be4a0-20d8-402a-97a1-e39f6e0e2650n@googlegroups.com> <CAMbSiYCA1A9RfzKXPa7YMgi+nmPpG0k9mMZSS9F9xxzBDU0vig@mail.gmail.com> <a11dbcb4-12f7-4fed-ba6f-8be519a97b25n@googlegroups.com>
Reply-To: questions@lists.ntp.org
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 2 Aug 2023 05:48:00 -0000 (UTC)
Injection-Info: gal.iecc.com; posting-host="gal.iecc.com:64.57.183.53";
logging-data="6235"; mail-complaints-to="abuse@iecc.com"
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv: 102.0) Gecko/20100101 Thunderbird/102.13.1
To: questions@lists.ntp.org
Return-Path: <questions+bounces-200-ntpquestions=iecc.com@lists.ntp.org>
Delivered-To: ntpquestions@iecc.com
Delivered-To: questions@lists.ntp.org
X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14) on gal.iecc.com
X-Spam-Status: No, score=-3.1 required=4.4 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DMARC_PASS,MAILING_LIST_MULTI,NICE_REPLY_A, SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=4.0.0
Authentication-Results: iecc.com; spf=pass spf.mailfrom=questions+bounces-200-ntpquestions=iecc.com@lists.ntp.org spf.helo=mail0.chi1.ntfo.org smtp.remote-ip="204.93.207.17"; dkim=pass header.d=ntp.org header.s=mail header.a=rsa-sha256 header.b="FDabqRwD"; dmarc=pass header.from=ntp.org polrec.p=none polrec.pct=100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ntp.org; s=mail; t=1690955193; bh=dbj7CK8ShXYTRp+WZtJieT/kyDq+8/oLqsWDbyGB/T8=; h=Message-ID:Date:Reply-To:List-unsubscribe:List-Id:MIME-Version: Subject:To:References:From:In-Reply-To:Content-Type: Content-Transfer-Encoding; b=FDabqRwD7Ew6aE30HlLXmI+H5x/5E/pN9NC/6uMdBTu1Rg+/nDYAoNhZoC4yAzAWk EUMPhUjMwo2/IBp8I1SS8LmK2Py5pRl5sxf8yeUEU+3e7RV6qB3Mgw56BB1gTwW5z0 2LdfT6IvEdw5xyfFnOxAQiUDiJhs9bTw4VUHkBnk=
X-Original-To: questions@lists.ntp.org
List-unsubscribe: mailto: questions+unsubscribe@lists.ntp.org
X-BeenThere: questions@lists.ntp.org
List-Id: questions.lists.ntp.org
Precedence: list
Content-Language: en-US
In-Reply-To: <a11dbcb4-12f7-4fed-ba6f-8be519a97b25n@googlegroups.com>
X-DCC-iecc-Metrics: gal.iecc.com 1107; Body=1 Fuz1=1 Fuz2=1
Mail-to-news: iecc.com
 by: Harlan Stenn - Wed, 2 Aug 2023 05:48 UTC

Thanks, Edward!

On 8/1/2023 9:06 PM, Edward McGuire wrote:
> On Monday, July 31, 2023 at 6:13:04 PM UTC, Dave Hart wrote:
>> Please open a report at https://bugs.ntp.org and we'll make a "delrestrict" verb for ntpq.
>
> https://bugs.ntp.org/show_bug.cgi?id=3855
>
> Cheers! Edward

--
Harlan Stenn <stenn@ntp.org>, part of
http://networktimefoundation.org - be a member!
--
This is questions@lists.ntp.org
Subscribe: questions+subscribe@lists.ntp.org
Unsubscribe: questions+unsubscribe@lists.ntp.org

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor