1) If using TSIG, then the times on client and server MUST be synchronized. Test this with nsupdate, dhcpd does not give enough diagnostics. 2) use 9.2.1 - it has better diagnostics.