Even worse, in the latest incarnation of ntpdate, it is run via ipup, which runs long before bind9. In the case where the system's DNS resolver is a local bind9, this is a non-starter, since ntpdate will NEVER work. Ever.