<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hi All, <div><br></div><div>There seems to be a lot of traffic on the users list about problems with signature expiry dates and signing back-offs for various reasons. Some issues have been traced to:</div><div><br></div><div>- use of the auditor. (This can be addresses by disabling the auditor.)</div><div>- configuration issues</div><div><br></div><div>however there are a couple we haven't been able to get the bottom of, or are still waiting for logs to investigate. I know that Paul, in particular, has a sense that 1.3 is unreliable in this regard. I have opened this thread to tackle the following:</div><div><br></div><div>1) Do we think there is an underlying issue and if so can we form a plan to investigate.</div><div><br></div><div>2) Paul - please make us aware of any specific issues on this that have been reported but you think merit further investigation. (I believe <a href="https://issues.opendnssec.org/browse/SUPPORT-22">https://issues.opendnssec.org/browse/SUPPORT-22</a> is in this category?) We absolutely want to know about and fix issues in 1.3.</div><div><br></div><div>3) Can we think of any improvements to tools or monitoring, documentation, etc that would help users detect signing back-off issues earlier?</div><div><br></div><div>Sara.</div><div><br></div><div><br></div><div><div>
<div><br></div></div></div></body></html>