<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On 27 Sep 2012, at 12:57, Jerry Lundström wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>On Sep 27, 2012, at 12:19 , Sara Dickinson wrote:<br><br><blockquote type="cite">With a little more thought I realised that this doesn't completely de-couple the file dependancies (i.e. aiming for a situation where the signer then only needs the /var/opendnssec dir) since the signer also requires the addns.xml file from the /etc/opendnssec directory....<br></blockquote><br><br>I don't think that is an issue since addns.xml is only read by the signer and its a user generated configure file so it should be in /etc.<br></div></blockquote><div><br></div><div>Sorry - should have been clearer. This solution does solve the current issue with conflicts between the signer and enforcer use of a single zone list file. However Jakob and I had a conversation about this from an architectural point of view in terms of the interface between the enforcer and signer, and possibly replacing the/var/opendnssec/*. xml files with something else in future. Also, we initially thought this solution could simplify the HA set of of a secondary signer since the user would only have to copy the /var/opendnssec dir across but this is not the case. </div><div><br></div><div>Yuri - this is directly related to <a href="https://issues.opendnssec.org/browse/OPENDNSSEC-197">https://issues.opendnssec.org/browse/OPENDNSSEC-197</a> and different to what we agreed in the developer workshop so lets recap when you get round to implementing this issue. </div><div><br></div><div>Sara.</div><br><blockquote type="cite"><div><br>--<br>Jerry Lundström - OpenDNSSEC Developer<br><a href="http://www.opendnssec.org/">http://www.opendnssec.org/</a><br><br></div></blockquote></div><br></body></html>