<html><body bgcolor="#FFFFFF"><div>You also need to setup the database, before you use it for the first time.</div><div><br></div><div>ods-ksmutil setup<br><br></div><div>Sorry about the documentation. It will be fixed within two weeks.</div><div><br>24 okt 2009 kl. 12.34 skrev "B C" <<a href="mailto:brettlists@gmail.com">brettlists@gmail.com</a>>:<br><br></div><div></div><blockquote type="cite"><div>Thanks Jakob they are all good pointers. As my /etc/opendnssec and /var/opendnssec are quite old I have decided to start afresh from this release.<div><br></div><div>Consequently I am now having some issues getting things up and running.</div>
<div><br></div><div>I have installed and configured softhsm and added/initialised a slot for opendnssec to use.</div><div><br></div><div>However when i start the signing/enforcer daemons I am seeing an error:</div><div><br>
</div><div><div>Oct 24 11:28:10 dnssigner2 ods-enforcerd: SQLite database set to: /var/opendnssec/kasp.db</div><div>Oct 24 11:28:10 dnssigner2 ods-enforcerd: Log User set to: local0</div><div>Oct 24 11:28:10 dnssigner2 ods-enforcerd: Switched log facility to: local0</div>
<div>Oct 24 11:28:10 dnssigner2 ods-enforcerd: Connecting to Database...</div><div>Oct 24 11:28:10 dnssigner2 ods-enforcerd: ERROR: error executing SQL - no such table: dbadmin</div><div><br></div><div>I do have an /var/opendnssec/kasp.db but it is empty:</div>
<div><br></div><div><div> ls -l /var/opendnssec</div><div>total 16</div><div>-rw-r--r-- 1 root root 0 Oct 24 11:28 kasp.db</div><div>-rw-r--r-- 1 root root 0 Oct 24 11:28 kasp.db.our_lock</div><div><br></div><div>Any ideas on where I am going wrong from anybody would be greatly appreciated.</div>
</div><div><br></div><div>Brett</div><div><br></div><br><div class="gmail_quote">On Fri, Oct 23, 2009 at 10:05 PM, Jakob Schlyter <span dir="ltr"><<a href="mailto:jakob@kirei.se"><a href="mailto:jakob@kirei.se">jakob@kirei.se</a></a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div class="im">On 23 okt 2009, at 21.23, B C wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Since the recent version(s) the user document at.<br>
<br>
<a href="http://www.opendnssec.org/documentation/" target="_blank"><a href="http://www.opendnssec.org/documentation/">http://www.opendnssec.org/documentation/</a></a><br>
<br>
seems to be quite out of date.<br>
</blockquote>
<br></div>
please use the documentation available starting at <a href="http://trac.opendnssec.org/wiki/Signer" target="_blank"><a href="http://trac.opendnssec.org/wiki/Signer">http://trac.opendnssec.org/wiki/Signer</a></a> for now.<div class="im"><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I have no problem(s) with the compile/install but am looking for a document that tells me howto:<br>
<br>
Add a new policy to a blank install.<br>
</blockquote>
<br></div>
edit kasp.xml and 'ods-ksmutil update' to import it into the enforcer.<div class="im"><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Add a new zone to a blank install.<br>
</blockquote>
<br></div>
ods-ksmutil zone add ...<div class="im"><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Start up the daemons (which ones in which order).<br>
</blockquote>
<br></div>
ods-control start<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Make changes to policies.<br>
</blockquote>
<br>
edit kasp.xml and 'ods-ksmutil update' to update.<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Emergency key rollover.<br>
</blockquote>
<br>
ods-ksmutil key rollover ...<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Immediate resign.<br>
</blockquote>
<br>
ods-signer ...<div class="im"><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Is there a new document in the works or at least a readme that covers the above points (and anything else I need ?<br>
</blockquote>
<br></div>
an update set of documentation is being work on, but I wouldn't hold my breath waiting for it just yet.<br><font color="#888888">
<br>
<br>
jakob<br>
<br>
</font></blockquote></div><br></div>
</div></blockquote><blockquote type="cite"><div><ATT00001..txt></div></blockquote></body></html>