NTP users are strongly urged to take immediate action to ensure that their NTP daemons are not susceptible to being used in distributed denial-of-service (DDoS) attacks. Please also take this opportunity to defeat denial-of-service attacks by implementing Ingress and Egress filtering through BCP38.

ntp-4.2.8p13 was released on 07 March 2019. It addresses 1 medium-severity security issue in ntpd, and provides 17 non-security bugfixes and 1 other improvements over 4.2.8p12.

Please see the NTP Security Notice for vulnerability and mitigation details.

---

Are you using Autokey in production? If so, please contact Harlan - he's got some questions for you.

The following settings are web preferences of the NTP.Support web. These preferences overwrite the site-level preferences in TWikiPreferences, and can be overwritten by user preferences (your personal topic, i.e. TWikiGuest in the NTP.Users web)

Preferences:

• List of topics of the NTP.Support web:
  • Set WEBTOPICLIST = Readme  |  Changes  |  Index  |  Search  |  Go

• Web specific background color: (Pick a lighter one of the StandardColors)
  • Set WEBBGCOLOR = #F0FFF0

• List this web in the SiteMap:
  • If yes, Set SITEMAPLIST = on, and add the "what" and "use to..." description for the site map. Make sure to list only links that include the name of the web, e.g. Support.Topic links.
  • Set SITEMAPLIST = on
  • Set SITEMAPWHAT = NTP user/admin support area - HOWTOs, FAQs, etc.
  • Set SITEMAPUSETO = ...collaborate on tips and tricks for using NTP.

• Exclude web from a web="all" search: (Set to on for hidden webs)
  • Set NOSEARCHALL =

• Default template for new topics and form(s) for this web:
  • WebTopicEditTemplate: Default template for new topics in this web. (Site-level is used if topic does not exist)
  • TWiki.WebTopicEditTemplate: Site-level default template
  • TWikiForms: How to enable form(s)
  • Set WEBFORMS = WebForm

• Users or groups who are not / are allowed to view / change / rename topics in the Support web: (See TWikiAccessControl)
  • Set DENYWEBVIEW =
  • Set ALLOWWEBVIEW =
  • Set DENYWEBCHANGE = TWikiGuest
  • Set ALLOWWEBCHANGE =
  • Set DENYWEBRENAME = TWikiGuest
  • Set ALLOWWEBRENAME =

• Users or groups allowed to change or rename this WebPreferences topic: (I.e. TWikiAdminGroup)
  • Set ALLOWTOPICCHANGE = TWikiAdminGroup
  • Set ALLOWTOPICRENAME = TWikiAdminGroup

• Web preferences that are not allowed to be overridden by user preferences:
  • Set FINALPREFERENCES = WEBTOPICLIST, DENYWEBVIEW, ALLOWWEBVIEW, DENYWEBCHANGE, ALLOWWEBCHANGE, DENYWEBRENAME, ALLOWWEBRENAME

• Local variables:
  • The NTPNAV and DISCUSS variables are defined. But you need to edit this topic to see the definitions.
  • Set NTPNAV = %NAVBAR{prefix="
    " suffix="
    " graphics="on"}%
    • • Set DISCUSS = See WebPreferencesDev for discussion of this topic.

        Notes:

        • A preference is defined as:
          6 spaces * Set NAME = value
          Example:
          • Set WEBBGCOLOR = #FFFFC0
        • Preferences are used as TWikiVariables by enclosing the name in percent signs. Example:
          • When you write variable %WEBBGCOLOR%, it gets expanded to #F0FFF0.
        • The sequential order of the preference settings is significant. Define preferences that use other preferences first, i.e. set WEBCOPYRIGHT before WIKIWEBMASTER since %WEBCOPYRIGHT% uses the %WIKIWEBMASTER% variable.
        • You can introduce new preferences variables and use them in your topics and templates. There is no need to change the NTP engine (Perl scripts).

        Related Topics:

        • TWikiPreferences has site-level preferences.
        • TWikiUsers has a list of user topics. User topics can have optional user preferences.
        • TWikiVariables has a list of common %VARIABLES%.
        • TWikiAccessControl explains how to restrict access by users or groups.