From owner-freebsd-questions  Tue Nov  5 13:35:50 1996
Return-Path: owner-questions
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id NAA26535
          for questions-outgoing; Tue, 5 Nov 1996 13:35:50 -0800 (PST)
Received: from cs.pdx.edu (root@cs.pdx.edu [204.203.64.22])
          by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id NAA26527
          for <questions@freefall.freebsd.org>; Tue, 5 Nov 1996 13:35:46 -0800 (PST)
Received: from sirius.cs.pdx.edu (root@sirius.cs.pdx.edu [204.203.64.13])
        by cs.pdx.edu (8.7.5/CATastrophe-2/10/96-P) with ESMTP
        id NAA07519; Tue, 5 Nov 1996 13:35:39 -0800 (PST) for <questions@freefall.freebsd.org>
Received: from localhost (jrb@localhost [127.0.0.1])
        by sirius.cs.pdx.edu (8.7.5/CATastrophe-9/18/94-C) with ESMTP
        id NAA06268; Tue, 5 Nov 1996 13:35:37 -0800 (PST) for <questions@freefall.freebsd.org>
Message-Id: <199611052135.NAA06268@sirius.cs.pdx.edu>
To: questions@freefall.freebsd.org
Subject: one more xntpd question
In-reply-to: Your message of "Tue, 05 Nov 1996 21:36:47 +0100."
             <9611052136.aa10106@lda.leissner.se> 
Date: Tue, 05 Nov 1996 13:35:37 -0800
From: Jim Binkley <jrb@cs.pdx.edu>
Sender: owner-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk


Since there seems to be a nice xntpd thread going...

Is it possible to take the security stuff in xntpd (md5/des I believe)
and do the following:

client/leaf                 server			    real clock source
xntpd <------------------->  xntpd <--------------------->   xntpd
         authenticated                 non-authenticated

Assume we only care about authentication.

Say we have 3 systems:
1. client
2. server
3. clock source

#2 gets the time from #3, but #3 only serves up nonauthenticated time
ntp messages.  However 1 (client) gets its time from #2.  Can
we setup an authenticated time "channel" between #1 and #2, assuming
we control both.  And obviousally, if so, how?

					regards,

					Jim Binkley
					jrb@cs.pdx.edu