Turns out I had mis-typed a NTP server name, so I was in the well-documented situation of "when you have 2 servers, and they don't agree, neither server is selected."
It would be A Good Thing, I think, to add some sort of "time is not trustworthy" indication to the status page. :-)
