added TSIG clock skew FAQ entry [RT #919]

diff --git a/FAQ b/FAQ
index c50d8b56873e56b6482681506318f7711b84f14e..dbcd999519de84d9ba80a17c890c6a02c83f2d9d 100644 (file)
--- a/FAQ
+++ b/FAQ
@@ -127,3 +127,10 @@ A: You probably have a buggy version of GNU bison installed on your
 system.  Remove bison it from your path, remove the config.cache file,
 and rerun configure so that it picks up the AIX yacc instead.
 
+
+Q: I'm trying to use TSIG to authenticate dynamic updates or zone
+transfers.  I'm sure I have the keys set up correctly, but the server
+is rejecting the TSIG.  Why?
+
+A: This may be a clock skew problem.  Check that the the clocks on
+the client and server are properly synchronized (e.g., using ntp).