add czerny

diff --git a/modules/ntp/files/ntpkey_iff_czerny.pub b/modules/ntp/files/ntpkey_iff_czerny.pub
new file mode 100644 (file)
index 0000000..f7d7f9b
--- /dev/null
+++ b/modules/ntp/files/ntpkey_iff_czerny.pub
@@ -0,0 +1,13 @@
+# ntpkey_iffpar_czerny.3580328288
+# Sat Jun 15 23:38:08 2013
+
+# This is the public version of this 'private' key -
+# the private data has been replaced by 0x01.
+# (just ask 'openssl dsa -text < foo.pub')
+
+-----BEGIN PRIVATE KEY-----
+MIGzAgEAMIGoBgcqhkjOOAQBMIGcAkEA8roR8u2irXtdrgLHrjTC9RDvRJuDNrbD
+oMt1flSJSmWMW0zrfdYKyXzlOPwvf8YLClaFUQQTIW62ZDbuXPevOQIVAMt9N6tD
+WpLYqJIUxUeNLQSjRL3vAkA916pTvtXTAUERlwdKAI6rErZkPHY9S/F1t7O2TRce
+aOplDgAOVEtp4LCENj0NNpAm3/jFTc1eVsQZK82E9D6fBAMCAQE=
+-----END PRIVATE KEY-----

diff --git a/modules/ntp/manifests/client.pp b/modules/ntp/manifests/client.pp
index 6e8765c..c6f6fdf 100644 (file)
--- a/modules/ntp/manifests/client.pp
+++ b/modules/ntp/manifests/client.pp
@@ -4,6 +4,9 @@ class ntp::client {
                require => Package['ntp'],
                notify  => Service['ntp']
        }
+       file { '/etc/ntp.keys.d/ntpkey_iff_czerny':
+               source => 'puppet:///modules/ntp/ntpkey_iff_czerny.pub',
+       }
        file { '/etc/ntp.keys.d/ntpkey_iff_merikanto':
                source => 'puppet:///modules/ntp/ntpkey_iff_merikanto.pub',
        }

diff --git a/modules/ntp/templates/ntp.conf b/modules/ntp/templates/ntp.conf
index fea3e66..2e917d6 100644 (file)
--- a/modules/ntp/templates/ntp.conf
+++ b/modules/ntp/templates/ntp.conf
@@ -37,15 +37,18 @@ server ntp.ugent.be iburst dynamic
 server 86.59.118.147        iburst
 server 194.177.211.209      iburst
 
+server czerny.debian.org iburst
 server merikanto.debian.org iburst
 server orff.debian.org      iburst
 server ravel.debian.org     iburst
 server busoni.debian.org    iburst
 <% else -%>
+server czerny.debian.org    iburst autokey
 server merikanto.debian.org iburst autokey
 server orff.debian.org      iburst autokey
 server ravel.debian.org     iburst autokey
 server busoni.debian.org    iburst autokey
+restrict czerny.debian.org    notrust nomodify notrap ntpport
 restrict merikanto.debian.org notrust nomodify notrap ntpport
 restrict orff.debian.org      notrust nomodify notrap ntpport
 restrict ravel.debian.org     notrust nomodify notrap ntpport