Index: univention-base-files/debian/univention-base-files.univention-config-registry
===================================================================
--- univention-base-files/debian/univention-base-files.univention-config-registry	(Revision 30721)
+++ univention-base-files/debian/univention-base-files.univention-config-registry	(Arbeitskopie)
@@ -71,6 +71,7 @@
 Variables: timeserver
 Variables: timeserver2
 Variables: timeserver3
+Variables: ntp/signed
 
 Type: file
 File: etc/default/ntpdate
Index: univention-base-files/conffiles/etc/ntp.conf
===================================================================
--- univention-base-files/conffiles/etc/ntp.conf	(Revision 30721)
+++ univention-base-files/conffiles/etc/ntp.conf	(Arbeitskopie)
@@ -27,6 +27,10 @@
 	for ts in [timeserver] + [configRegistry.get('timeserver%d' % d) for d in range(2, 4)]:
 		if ts and ts not in dcs:
 			print "server %s" % ts
+
+if configRegistry.is_true('ntp/signed'):
+	print 'ntpsigndsocket /var/run/samba/ntp_signd'
+	print 'restrict default mssntp'
 @!@
 
 ### Synchronize with local server, if no other