<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=NL link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>Hey all,<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span lang=EN-US>I can’t figure out what’s going
wrong here. As I interpreted the logging, the auditor says there is no NSEC3
record present, but there are. Using default policy, with tighter timings (24H
KSK rollover, 8H ZSK rollover, 15min resign etc.) .<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Can anyone help me out on this one?<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal>LOGGING:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
opendnssec-enforcer starting...<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
opendnssec-enforcer Parent exiting...<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
opendnssec-enforcer forked OK...<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
opendnssec-enforcer started (version 1.1.0rc2), pid 24419<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
HSM opened successfully.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
Reading config "/etc/opendnssec/conf.xml"<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
Reading config schema "/usr/local/share/opendnssec/conf.rng"<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
Communication Interval: 3600<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
No DS Submit command supplied<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
SQLite database set to: /var/opendnssec/kasp.db<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
Log User set to: local0<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
Switched log facility to: local0<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
Connecting to Database...<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
Policy default found.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
Key sharing is Off.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
SoftHSM: C_GenerateKeyPair: Key pair generated<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:28 signer1 ods-enforcerd:
Created KSK size: 2048, alg: 7 with id: eb57c8ad8ca6220932bdf15247351f19 in
repository: SoftHSM and database.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:29 signer1 ods-enforcerd:
SoftHSM: C_GenerateKeyPair: Key pair generated<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:29 signer1 ods-enforcerd:
Created KSK size: 2048, alg: 7 with id: 0424219554651888c2d6287eb85a8ebf in
repository: SoftHSM and database.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:29 signer1 ods-enforcerd:
SoftHSM: C_GenerateKeyPair: Key pair generated<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:29 signer1 ods-enforcerd:
Created ZSK size: 1024, alg: 7 with id: ee47a4ad43b7db7d3d155781c6a94ee2 in
repository: SoftHSM and database.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:29 signer1 ods-enforcerd:
SoftHSM: C_GenerateKeyPair: Key pair generated<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-enforcerd:
Created ZSK size: 1024, alg: 7 with id: 357b7f1f5968385518e734dc3bc9850b in
repository: SoftHSM and database.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-enforcerd:
zonelist filename set to /etc/opendnssec/zonelist.xml.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-enforcerd:
Zone ods found.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-enforcerd:
Policy for ods set to default.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-enforcerd:
Config will be output to /var/opendnssec/signconf/ods.xml.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-enforcerd:
INFO: Promoting ZSK from publish to active as this is the first pass for the
zone<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-enforcerd:
WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the
potential problems of using keys which are not recoverable<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Received command: 'update ods'<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Scheduling task to sign zone ods at 1273157488.15 with resign time 600<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Scheduling task to sign zone ods at 1273157488.15 with resign time 600<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Zone action to perform: 3<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-enforcerd:
Could not call signer engine<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-enforcerd:
Will continue: call 'ods-signer update' to manually update zones<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-enforcerd:
Disconnecting from Database...<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-enforcerd:
Sleeping for 3600 seconds.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Client socket shut down<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Preprocessing signed zone: ods<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
No signed zone yet<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Sorting zone: ods<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Nseccing zone: ods<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
No information yet for key eb57c8ad8ca6220932bdf15247351f19<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Generating DNSKEY RR for eb57c8ad8ca6220932bdf15247351f19<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Found key eb57c8ad8ca6220932bdf15247351f19<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
No information yet for key ee47a4ad43b7db7d3d155781c6a94ee2<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Generating DNSKEY RR for ee47a4ad43b7db7d3d155781c6a94ee2<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Found key ee47a4ad43b7db7d3d155781c6a94ee2<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
No information yet for key 357b7f1f5968385518e734dc3bc9850b<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Generating DNSKEY RR for 357b7f1f5968385518e734dc3bc9850b<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Found key 357b7f1f5968385518e734dc3bc9850b<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
signer stderr: Warning: unable to open /var/opendnssec/tmp/ods.signed: No such
file or directory, performing full zone sign<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
signer stderr: signer: number of signatures created: 72 (within a second)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Created 72 new signatures<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:30 signer1 ods-signerd:
Running auditor on zone<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Auditor started<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Auditor starting on ods<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1 ods-auditor[24448]:
SOA differs : from 1000 to 1273157490<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Auditing ods zone : NSEC3 SIGNED<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns2.label21.ods
(0500q2sct81770labmqd07qg58u9nf1h.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns3.label17.ods
(06ba5j2jegq44jfntoeaaej09n5jm6a8.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns4.label22.ods (0pgfld8lg2n0uh432q4q6ajd19uistqo.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns4.label14.ods
(15igbgmrf4cla49bikads1tfqepnkl5u.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1 ods-auditor[24448]:
Found RRs for ns5.label25.ods (16o5ithnkd0h2076590trkbd21bdf299.ods) which was
not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns3.label8.ods
(1f458tjkcpk555ms7rgrr9f06nlg5hs0.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns1.label6.ods
(1qpoohlmjoveluert9s26og50crurgh5.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns6.label11.ods (1u3jah5m0tnc7kq8usqrkmtf34v3j4pc.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns6.label13.ods
(2a4velsj96qmuupcv6i6i9ll1r0ksjm7.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1 ods-auditor[24448]:
Found domain (ns4.label29.ods) whose hash
(2s24haq50m31l4br2kcdl5jopp508ef8.ods) is between owner
(2m05mung7vu3n9qtdh3vmu0b585pdl2b.ods) and next_hashed
(3v5ieqoqrk1qnl5uft39sh4lfuqsegcj.ods)for non-optout NSEC3<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1 ods-auditor[24448]:
ERROR : expected at ns4.label29.ods
(2m05mung7vu3n9qtdh3vmu0b585pdl2b.ods) but found A<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns4.label9.ods
(2scoild81jadchp0canf7sh9bedmc49k.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns3.label18.ods
(32dbcbfngc06qenimh6s1qij67kbuspt.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns1.label30.ods
(34nj4k3fcbtpfnbt7l8bsm5uein0kdaf.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns2.label30.ods (3hs8tvtfbhm8bro055arpsg5ksf3l9ue.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns6.label30.ods
(4040ubcevebghn5s7c1ogods8ue8aspm.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns2.label14.ods
(439m51qiojp0gb4bbl19em529h6rfu5c.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns5.label4.ods
(4ktt7ekohnh68vbpcll4k7di9p2ff84g.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns5.label21.ods
(4smlu9arc4vvbd9f8tm2o9ihmufdrv3s.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns4.label32.ods (5985m4vgtrauoies0u5mjfl5frde4r0f.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns3.label14.ods
(5kascm0vmrlojane8q7ebv5hjrqi7cgn.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns2.label22.ods
(5u4gqjhklhfcr03h1gr5fai2ar9pi0m2.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns3.label4.ods
(65urmqflp4r8lsfme7kfpb54b2v5qpma.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns1.label5.ods
(6ct35gcbbsgh1j5sahsiisv1eit444u8.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns6.label4.ods (6e15lbkb0gujeh663tht6p8qjpv93cvn.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns3.label22.ods
(6u4kt6d91rsh89na32qp0vkg9968ejsa.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns6.label33.ods
(6unkss61rm9e7pfp265uliqec0m6o4ll.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for some.ns.at.label7.ods
(70mbpd0n8t6s7krbca8eq50d6oiu2vto.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:31 signer1
ods-auditor[24448]: Found RRs for ns2.label34.ods
(7bq2ansdhctb00up3btett7lr9l2kup8.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns6.label14.ods (7jrlt4kku7nc0bf0amhubr8hv2fkflsb.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns3.label10.ods
(7m047daqo4eiujds61s9t1qcr5sv2s1a.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns5.label34.ods
(7n8ef6dlqsck2jae9d132uvo3nu2rtjp.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns5.label17.ods
(7p0brl3i0vojkb2lm29t0m4mq5f2o90p.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns1.label8.ods
(7sbl2laio94tb9rmg367kpj0s3t6n9qo.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns2.label10.ods (7vhhr0nrcufea2b367fti5qqo9cipi8s.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns2.label25.ods
(8pu2kvr2c513t606lc9rvv85q38gbvfg.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns1.label9.ods
(8r78m0tsfjgfk0vrtbqfpdj978gm0ri1.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns2.label13.ods
(8rmmclt46ief0csi6rhvh8miae8281a6.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns6.label6.ods
(9517n9q0ohaddftd9jgnb0hi1hoh3hml.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns4.label33.ods (9gfku9lgt9ksp2enes7orlpb9ad581lj.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns6.label21.ods
(9l26ehlrjqfv059cipqs30to966l3ioe.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns5.label10.ods
(9p5tbff6k4iktts6eipfsfce1ili078j.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns5.label13.ods
(adabo19jemopvks1rcju794nq3npccrs.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns3.label32.ods (besq4if7688o3rd1jb4jf7uf7t5r6dj0.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns4.label30.ods
(bje9l4b2jjes8v3og0r0r5vvo61jjskp.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns1.label17.ods
(bqd6aku51afcg5f3qpfaqu7hr6vqmb67.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns2.label32.ods
(buug5ukgu1q7d2dkqhh9iamrsr90ueb9.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns2.label5.ods
(cbc50kjttjlegij5e2qdbggcemj2a2e2.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns5.label22.ods (cph6ad3nmj3ub8cjks30a4tj0l53grvr.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns5.label32.ods
(crff0fta791en33ajtok91ubv5li3jr5.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns2.label11.ods
(cuoilmom3rgbq42e3lnueg0hskq736rj.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns4.label17.ods
(d2pn32kv32pou650lfsoo7k4nq7eetn7.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns2.label4.ods
(dob2dgf2glfmohdagm2jfpkkgpdigd7i.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns4.label5.ods (dpp69tnld7rc0510k5gtgikfr55m6svm.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns5.label29.ods
(e2husvlqtuot3qcltheeavcneopv4djs.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns5.label18.ods
(eqk1e45qf6ka8hs5ktkkqu17ll53tai9.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns3.label34.ods
(esgtngcslho8q44cljvlvnn0rkdh2359.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns1.label18.ods
(f3fih9dn1atrpkihbqollfv684h9r7m9.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns6.label5.ods (fgokfk9ame3hinec6fqcqfmlr49l3jk8.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns6.label25.ods
(fldeg2bj2ie18n6mkcvacpoa9or1ta4o.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns4.label8.ods
(fq0hp42e1vutbsi72u3oifl6bmkdpvdf.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns3.label13.ods
(g406lbpft0po3dgjad4akqu34am8h1va.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found domain (ns4.label18.ods) whose hash
(gliqlf2dsr3raeb5q4kp33ehmcfchk6c.ods) is between owner
(gispjmo8f6ikpsgl5e3opvh400rd2e2b.ods) and next_hashed
(hvggdmjnc74khi6lenmbjl69eijm9vr7.ods)for non-optout NSEC3<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: ERROR : expected at ns4.label18.ods
(gispjmo8f6ikpsgl5e3opvh400rd2e2b.ods) but found A<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns4.label34.ods
(hmng8eakfoo28s8gfb9mok3s719m07cs.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns2.label9.ods
(hq00uoahl4fgl473urf6s64e4i83cqt0.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns2.label6.ods
(i6jtvrh97r4ejg4a7vskt2npi30mrpe0.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns4.label10.ods
(i7q89egv792cqnh20sa7mo7m9e6b1ad1.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns2.label33.ods
(igs3bfm23c547spui06dg211ct59jjvq.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns4.label11.ods
(iheoe1ihamd13kd7joku1k0lmdv83eh5.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns3.label11.ods
(ir6r11kq3j7rlqbsar3o4fpthpdpdp8f.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns4.label6.ods
(iu689jck711kug4voj6fbo5ku66hqvv2.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns6.label10.ods (j0ktpagkcatp1p7tak03mt9fs8ae1a42.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns6.label18.ods
(j19j0dqa8n0flaq8ofl41ft6sktct9r3.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns1.label25.ods
(j6a7n0eth8ensauo4ka3f2vi68vrj04v.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns3.label29.ods
(k1ll22l8v1ianvuffc76c83bcvhku9d3.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns3.label9.ods
(k3l51jbpc9541tfqn65cuc944quq9gdk.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns1.label21.ods (k68eorm0emlmt5tm4sg83ah826b6sklo.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns3.label6.ods
(kioqei1vk5o52jreoubv9atvfc2p4n5d.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns1.label11.ods
(l9q0db2vocmvfs30lcibjdcqkf44b890.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns6.label34.ods
(lhlsenbs7di6uev2cblram47es6hknfh.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns2.label18.ods
(lrd8ujf9rhrphqe4kvufkkch52fos5qg.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns1.label14.ods (lvdskfa9j3ttvfmt2mtu9g0qr0va99nc.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns2.label17.ods
(mvldnb4msovvh633nquntp7m4bmql0i4.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns5.label30.ods
(n6f0ovehd2jlfgl4ic6hhlmsomt7pgku.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns4.label4.ods
(n95hq28vmlqojnmbmrq39j0agav4km5q.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns1.label13.ods
(ngu2mf796q6dlniiu9764o8h94r2p7kg.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns1.label4.ods (o2kifr82anr30ov65r9c509lmessse8r.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns1.label10.ods
(o2slm445gghnceep94v4f9bjlupl055m.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns2.label29.ods
(o3h9kor3tudvj6l8ml3ff7f6jdkr8ln5.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns1.label22.ods
(o52tg8p8as7r5p7094vigh8spshfsu72.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns6.label9.ods
(o8klvgip3r28v9u2h3h2huetnp2s8cto.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns4.label21.ods (oaapfs5b5smc9t1r97jnm2c6a8tmbktm.ods)
which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns5.label14.ods
(osq29se5r4sl9sfi1sfmkhmu915fmm8r.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns3.label21.ods
(ot114galqt8vteg0b49av79k99sbavf8.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns6.label8.ods
(pk89iv6jt1p120v1vrr496nu18u1k04v.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Found RRs for ns1.label34.ods
(pneq2bqqla57r1u9t2rntha7e66bu3nj.ods) which was not covered by an NSEC3 record<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>May 6 16:51:32 signer1
ods-auditor[24448]: Too much output from auditor - suppressing for rest of run<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Piece from the
/var/opendnssec/tmp/ods.signed:<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>label21.ods.
3600 IN
NS ns1.label21.ods.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>label21.ods.
3600 IN
NS ns2.label21.ods.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>label21.ods.
3600 IN
NS ns3.label21.ods.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>label21.ods.
3600 IN
NS ns4.label21.ods.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>label21.ods.
3600 IN
NS ns5.label21.ods.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>label21.ods.
3600 IN
NS ns6.label21.ods.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>7kctrj4d4djg7p1trhmv1isaokun2ebi.ods.
1800 IN NSEC3 1 0 5
6730d04f36602116 83us8o3j96vtapffs8ktm6gb3pu6v9t3 NS<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>7kctrj4d4djg7p1trhmv1isaokun2ebi.ods.
1800 IN RRSIG NSEC3
7 2 1800 20100506170422 20100506144630 59493 ods.
KUbwz8kuGHlPeINluX5oW0zz1irsDCKkiufCwyk1SyqkavTpywuovyk1H9Ij92y0DjEth2hVLRB4LCmuMvoT46lb<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>LkvWf7O4hsWWw+4jwbjQE1yeKyArW6n7tOMhy8jl3iIVF2mwPTDZFE7BMgm8FnzfYUQgSBLuiUv9QAIrIxg=
;{id = 59493}<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Cheers,<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Rick<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
</div>
</body>
</html>