<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.5pt;
font-family:Consolas;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:Consolas;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoPlainText>I did try the same (signing 50.000 zones). The signer
stops signing after about 12.000 zones. When the enforcer has finished his
work, I will shut down the system and do a restart of ods.<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Below you can find a small part of the logging:<o:p></o:p></p>
<p class=MsoPlainText><i>Mar 18 12:44:33 DEVELOPER15 ods-enforcerd: Policy for
13777small.ods set to default.<o:p></o:p></i></p>
<p class=MsoPlainText><i>Mar 18 12:44:33 DEVELOPER15 ods-enforcerd: Config will
be output to /var/opendnssec/signconf/13777small.ods.xml.<o:p></o:p></i></p>
<p class=MsoPlainText><i>Mar 18 12:44:34 DEVELOPER15 ods-enforcerd: INFO:
Promoting ZSK from publish to active as this is the first pass for the zone<o:p></o:p></i></p>
<p class=MsoPlainText><i>Mar 18 12:44:34 DEVELOPER15 ods-enforcerd: WARNING:
Making non-backed up ZSK active, PLEASE make sure that you know the potential
problems of using keys which are not recoverable<o:p></o:p></i></p>
<p class=MsoPlainText><i>Mar 18 12:44:34 DEVELOPER15 ods-enforcerd: Zone
13778small.ods found.<o:p></o:p></i></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><span lang=NL>Nick van den Heuvel<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=NL>Testanalist<o:p></o:p></span></p>
<p class=MsoPlainText><span lang=NL><o:p> </o:p></span></p>
<p class=MsoPlainText><span lang=NL>SIDN | Utrechtseweg 310 | 6812 AR | Postbus
5022 | 6802 EA | ARNHEM<o:p></o:p></span></p>
<p class=MsoPlainText>T +31 (0)26 352 55 00 | F +31 (0)26 352 55 05 <o:p></o:p></p>
<p class=MsoPlainText>nick.vandenheuvel@sidn.nl | www.sidn.nl<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>-----Original Message-----<br>
From: opendnssec-develop-bounces@lists.opendnssec.org
[mailto:opendnssec-develop-bounces@lists.opendnssec.org] On Behalf Of Patrik
Wallström<br>
Sent: woensdag 16 februari 2011 9:37<br>
To: opendnssec-develop@lists.opendnssec.org<br>
Subject: [Opendnssec-develop] 1.2.0 with 50000 zones<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>So I have now 50000 zones in the system. Previous to the
start I had added 20500 zones which both the signer and the enforcer was happy
with. After shutting down the system and added another 29500 zones I synced
the database to zonelist.xml and started it again with ods-control start.<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Both the enforcer and the signer started as excepted. The
enforcer happily generated all the signconf files, and the signer started doing
its thing. However, after coming back this morning, the enforcer was finished
having a full 50000 signconfigs in the signconf directory. But the signer only
knew about 21823 zones, which was the number both in the queue and in the tmp
and signed directories. So, somehow there was some sort of miscommunication
between the two components. After shutting down the system, and started the
signer again, the signer was working as expected.<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Any thoughts on this? Why isn't the signer picking up all
the signconfs?<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>-- <o:p></o:p></p>
<p class=MsoPlainText>Patrik Wallström<o:p></o:p></p>
<p class=MsoPlainText>Project Manager, R&D<o:p></o:p></p>
<p class=MsoPlainText>.SE (Stiftelsen för Internetinfrastruktur)<o:p></o:p></p>
<p class=MsoPlainText>E-mail: patrik.wallstrom@iis.se<o:p></o:p></p>
<p class=MsoPlainText>Web: http://www.iis.se/<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>_______________________________________________<o:p></o:p></p>
<p class=MsoPlainText>Opendnssec-develop mailing list<o:p></o:p></p>
<p class=MsoPlainText>Opendnssec-develop@lists.opendnssec.org<o:p></o:p></p>
<p class=MsoPlainText>https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop<o:p></o:p></p>
</div>
</body>
</html>