Solaris

Dear All

I'm solaris user . I need to setup NTP authentication for my office server but I have some question for ntp setting up. I need to know if i set authen NTP the client that doesn't set for authen key can sync time from authen ntp server or not ?? when i setup the authen at ntp server why the simple ntp can sync my authen time server ? Below is my config file


ntpserver

(ntp.conf)

server 127.127.1.0 prefer key 4
#fudge 127.127.XType.0 stratum 0

#broadcast 224.0.1.1 key 4 ttl 4

enable auth monitor
driftfile /var/ntp/ntp.drift
statsdir /var/ntp/ntpstats/
filegen peerstats file peerstats type day enable
filegen loopstats file loopstats type day enable
filegen clockstats file clockstats type day enable

keys /etc/inet/ntp.keys
trustedkey 4
#requestkey 0
#controlkey 0

(ntp.keys)

4 M DonTTelL
6 M hElloWorld
22 M ImASecret



ntpclient

(ntp.conf)

#driftfile /var/ntp/drift
server 192.168.109.11 prefer key 4
#multicastclient 224.0.1.1 key 4
keys /etc/inet/ntp.keys
trustedkey 4


(ntp.keys)

4 M DonTTelL
6 M hElloWorld
22 M ImASecret


Could you please check it for me , what wrong with my config file .


Best regards,

Sontas J

more information below

this ntpq output of ntp client that set authen key

root@sol9_e250 # ntpq
ntpq> pe
remote refid st t when poll reach delay offset disp
==============================================================================
*sol9_11 LOCAL(0) 4 u 18 64 377 0.81 -8.976 2.09
ntpq> as
ind assID status conf reach auth condition last_event cnt
===========================================================
1 20676 f614 yes yes ok sys.peer reachable 1


And this is ntpq output from ntp client that's not set key authen

sol9_55(root):[/etc/init.d] # ntpq
ntpq> pe
remote refid st t when poll reach delay offset disp
==============================================================================
sol9_11 0.0.0.0 16 - - 64 0 0.00 0.000 16000.0
ntpq> as
ind assID status conf reach auth condition last_event cnt
===========================================================
1 16100 c000 yes no


But all of ntp client can sync time . I don't know why . My opinion it should be sync only ntp client that set key authen , isn't it ??

who has information or recommend please help me .

Thank

Sontas J.
(sorry about my english )