samba - Feb 2025 - Time sync issue

On 19.02.2025 13:50, Virgo P?rna via samba wrote:
>  ????Ok, so ntpsec in bookworm has issues ntp_signd. That explains, why 
> it stopped totally working.
>  ????Now remaining issue is, why chrony did not respond time requests 
> without registry change in windows side. Unfortunately Debian chrony is 
> without debug log support.
>  ????I'll try this specific issue with chrony mailing list also.
> 
> 
	And feedback from Chrony list was, that it seems, that Windows was 
using "extended MS-SNTP authenticator", that they think is not
supported
by samba... After registry change it used classic MS-SNTP authenticator 
requests.


-- 
Virgo P?rna
virgo.parna at mail.ee

> And feedback from Chrony list was, that it seems, that Windows was 
> using "extended MS-SNTP authenticator", that they think is not
supported
> by samba... After registry change it used classic MS-SNTP authenticator 
> requests.
I confirm that your tip does work and effectively solves the issue of secure
NTP.

HKLM\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders\NtpClient/
SignatureAuthAllowed

Change from 1 to 0.

After distributing this registry setting via GPO, the Windows clients are
synchronizing correctly.

Thank you!