I've found that at boot time, ntpdate isn't running properly, because named isn't ready for it. I've found that putting in a few seconds delay before it starts solves the problem. Is there a simpler solution? Am I missing something? --Steve Bellovin, http://www.research.att.com/~smb