topic Re: IDS Sensor and setting NTP in Network Security https://community.cisco.com/t5/network-security/ids-sensor-and-setting-ntp/m-p/506899#M94864 <HTML><HEAD></HEAD><BODY><P>any insight on how to configure ntpd or some other linux ntp service to support this authentication?</P><P></P><P>Im not seeing it documented at ntp.org</P></BODY></HTML> Fri, 16 Jun 2006 14:49:50 GMT slug420 2006-06-16T14:49:50Z IDS Sensor and setting NTP https://community.cisco.com/t5/network-security/ids-sensor-and-setting-ntp/m-p/506896#M94861 <P>I'm configuring all of the cisco sensors I manage to update their time using a public NTP server.</P><P></P><P>I've hit two bumps.</P><P></P><P>On a few of the 4.x sensors I get the error "Error: Could not run ntpdate utility. Fatal Error has occurred. Node MUST be rebooted to enable alarming."</P><P></P><P>On all of the 5.x sensors, I can't apply the NTP settings because it requries two additional values (keys?) - but the public NTP I'm using doesn't require these. I was able to get this to work on the 4.x servers by entering the value 1 in both fields, but the 5.x sensor seems to be doing some additional checking.</P><P></P><P>Any help/insight is much appreciated. I checked the configuration documentation but didn't find anything other than descriptions of the fields.</P> Sun, 10 Mar 2019 10:01:20 GMT https://community.cisco.com/t5/network-security/ids-sensor-and-setting-ntp/m-p/506896#M94861 RichardSW 2019-03-10T10:01:20Z Re: IDS Sensor and setting NTP https://community.cisco.com/t5/network-security/ids-sensor-and-setting-ntp/m-p/506897#M94862 <HTML><HEAD></HEAD><BODY><P>The error message is a known issue, see <A class="jive-link-custom" href="http://www.cisco.com/cgi-bin/Support/Bugtool/onebug.pl?bugid=CSCed84480&amp;Submit=Search" target="_blank">http://www.cisco.com/cgi-bin/Support/Bugtool/onebug.pl?bugid=CSCed84480&amp;Submit=Search</A> for the details and workarounds to it.</P><P></P><P>The second issue is actually the way it's supposed to work. NTP on the sensor requires NTP authentication, but because of a bug in the 4.x code it actually let you set it by just putting in dummy values (although it would only sync up once upon reboot and then get slowly out of sync as time went on). Version 5.x fixed the authentication "problem" and it now requires authentication to be set up correctly right from the start. You'll need an NTP server that can handle authentication correctly to get your 5.x sensors to sync up with it. </P></BODY></HTML> Fri, 19 May 2006 03:46:31 GMT https://community.cisco.com/t5/network-security/ids-sensor-and-setting-ntp/m-p/506897#M94862 gfullage 2006-05-19T03:46:31Z Re: IDS Sensor and setting NTP https://community.cisco.com/t5/network-security/ids-sensor-and-setting-ntp/m-p/506898#M94863 <HTML><HEAD></HEAD><BODY><P>I tried the URL you provided, but I get a Error #403: Forbidden. Is it only accessible by those who subscribe to the extended forum options?</P><P></P><P>Thanks for the quick reply on the NTP authentication.</P></BODY></HTML> Fri, 19 May 2006 12:59:43 GMT https://community.cisco.com/t5/network-security/ids-sensor-and-setting-ntp/m-p/506898#M94863 RichardSW 2006-05-19T12:59:43Z Re: IDS Sensor and setting NTP https://community.cisco.com/t5/network-security/ids-sensor-and-setting-ntp/m-p/506899#M94864 <HTML><HEAD></HEAD><BODY><P>any insight on how to configure ntpd or some other linux ntp service to support this authentication?</P><P></P><P>Im not seeing it documented at ntp.org</P></BODY></HTML> Fri, 16 Jun 2006 14:49:50 GMT https://community.cisco.com/t5/network-security/ids-sensor-and-setting-ntp/m-p/506899#M94864 slug420 2006-06-16T14:49:50Z