Authenticated NTP still indicating that is in syn when it is not
Issue
- Authenticated NTP is configured using pre shared symetric keys: https://access.redhat.com/site/solutions/393663.
- It works as expected but if a man in the middle attack is simulated by changing the key on the upstream ntp device (Cisco), RHEL ntp client continues to indicate that it is syncing without problems.
- There are no indications in syslog and
ntpq -pstill shows the asterix "*" next to the upstream device. - In
ntpq -c asthe condition field does switch fromsys.peertorejected:
ind assID status conf reach auth condition last_event cnt
===========================================================
1 6620 e033 yes yes ok reject lost reach 3
Environment
- Red Hat Enterprise Linux
- Network Time Protocol (NTP)
- Cisco as NTP server
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.