What is editing /etc/ntp.conf file during a reboot

[Bill Hassell]

Use this command:

ls -lrt /etc/rc.config.d

The files at the bottom of the list are the most recently changed or created files. Unlike any other directory in HP-UX, /etc/rc.config.d must NEVER have junk files, test files or old copies of current files. During bootup, *every* file is run in order to set the start variables. This includes junk files and test files. If this behavior (changed ntp.conf) just started happening, look at the newest files at the bottom of the list. You should also look at the most recently changed files in /sbin/init.d. And look at every "S" link in /sbin/rc0.d and /etc/rc1.d...check the files that they point to.

And of course the easiest way is to locate every file that contains the string /etc/ntp.conf:

grep /etc/ntp.conf /etc/rc.config.d/*
grep /etc/ntp.conf /sbin/rc?.d/*
grep /etc/ntp.conf /sbin/init.d/*