We had the problem for a long time, and solved it by using ntpdate or htpdate on an IP address at startup. It works very well, since this request does not need DNSSEC. htpdate is useful if you use ntp, because ntpdate will not work if ntp is already loaded.
-- Cet e-mail a été vérifié par le logiciel antivirus d'Avast. www.avast.com