Created attachment 223902 [details]
Since this is needed to provide time to Windows domain clients when running a Samba 4 AD DC, I propose to add --enable-ntp-signd as an option. I didn't set it as default, but arguably it would be of benefit for many users (I looked a long time to find out why my windows clients just wouldn't sync time....). Many Linux distributions seem to set it in their packages.
thanks for the contribution. Does this have any special requirements? If no, I am inclined to just enable it by default and not make it an option.
I have committed this. Please test chrony 4.0_1 and report back if that works for you.
A commit in branch main references this bug:
Author: Matthias Andree <mandree@FreeBSD.org>
AuthorDate: 2021-04-07 18:57:26 +0000
Commit: Matthias Andree <mandree@FreeBSD.org>
CommitDate: 2021-04-07 18:59:33 +0000
net/chrony: enable MS-SNTP authentication (SIGND)
Reported by: Andrej Ebert
net/chrony/Makefile | 2 ++
1 file changed, 2 insertions(+)
(In reply to Matthias Andree from comment #2)
Works for me, thanks for the quick commit!