<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<STYLE>
BLOCKQUOTE {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; MARGIN-LEFT: 2em
}
OL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
UL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
BODY {
LINE-HEIGHT: 1.5; FONT-FAMILY: 宋体; COLOR: #000080; FONT-SIZE: 10.5pt
}
</STYLE>
<META name=GENERATOR content="MSHTML 8.00.6001.18702"></HEAD>
<BODY style="MARGIN: 10px">
<DIV>
<DIV>Hi Jerry,</DIV>
<DIV>I have found three ods-signerd, but two of them are created in
configure-make-make install process, so I think only the last one is used.</DIV>
<DIV>
<DIV>[root@CST-BJ-103 opendnssec]# find / -name ods-signerd</DIV>
<DIV>/home/lius/opendnssec-related/OpenDNSSEC_trunk/signer/src/ods-signerd</DIV>
<DIV>/home/lius/opendnssec-related/opendnssec-1.3.9/signer/src/ods-signerd</DIV>
<DIV>/usr/local/sbin/ods-signerd</DIV>
<DIV> </DIV>
<DIV>I will show you how mutiple ods-signerds are running together</DIV>
<DIV>[root@CST-BJ-103 opendnssec]# ods-control start<BR>Starting
enforcer...<BR>OpenDNSSEC ods-enforcerd started (version 1.4.0-trunk), pid
2828<BR>Starting signer engine...<BR>OpenDNSSEC signer engine version
1.4.0-trunk<BR>Engine running.</DIV>
<DIV> </DIV>
<DIV>[root@CST-BJ-103 opendnssec]# ps -aux | grep ods<BR>Warning: bad syntax,
perhaps a bogus '-'? See
/usr/share/doc/procps-3.2.7/FAQ<BR>root 2828
1.6 0.1 40276 4896 ?
SLs 15:07 0:00
/usr/local/sbin/ods-enforcerd<BR>root 2834
201 0.6 300696 27448 ? SLsl
15:07 0:08
/usr/local/sbin/ods-signerd<BR>root 2851
0.0 0.0 61188 752 pts/2 S+
15:07 0:00 grep ods<BR>[root@CST-BJ-103 opendnssec]# ll<BR>total
8<BR>-rw-r--r-- 1 root root 5 Jul 18 15:07 enforcerd.pid<BR>srwxr-xr-x 1 root
root 0 Jul 18 15:07 engine.sock<BR>-rw-r--r-- 1 root root 5 Jul 18 15:07
signerd.pid<BR></DIV>
<DIV>The messages above is normal and show that the OpenDNSSEC works well, but
let's continue:</DIV>
<DIV> </DIV>
<DIV>[root@CST-BJ-103 opendnssec]# ods-signerd<BR>OpenDNSSEC signer engine
version 1.4.0-trunk<BR>[root@CST-BJ-103 opendnssec]# ps -aux | grep
ods<BR>Warning: bad syntax, perhaps a bogus '-'? See
/usr/share/doc/procps-3.2.7/FAQ<BR>root 2828
0.1 0.1 40276 4896 ?
SLs 15:07 0:00 /usr/local/sbin/ods-enforcerd<BR><SPAN
style="FONT-WEIGHT: bold">root 2834
188 5.5 462208 224584 ? SLsl
15:07 1:26
/usr/local/sbin/ods-signerd<BR>root 2858
159 0.5 222600 23516 ? SLsl
15:08 0:09 ods-signerd</SPAN><BR>root
2871 0.0 0.0 61188 752 pts/2
R+ 15:08 0:00 grep ods<BR><BR>[root@CST-BJ-103
opendnssec]# ll<BR>total 8<BR>-rw-r--r-- 1 root root 5 Jul 18 15:07
enforcerd.pid<BR>srwxr-xr-x 1 root root 0 Jul 18 <SPAN
style="FONT-WEIGHT: bold">15:08</SPAN> engine.sock<BR>-rw-r--r-- 1 root root 5
Jul 18 <SPAN style="FONT-WEIGHT: bold">15:08</SPAN> signerd.pid<BR></DIV>
<DIV>engine.sock and signerd.pid is changed, and the content of signerd.pid is
the latter on, that is 2858.</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>When I run ods-control stop, the former ods-signerd is left, the latter
setup ods-signerd is shundown with ods-enforcerd</DIV>
<DIV>
<DIV>[root@CST-BJ-103 tmp]# ods-control stop</DIV>
<DIV>Stopping enforcer...</DIV>
<DIV>Stopping signer engine...</DIV>
<DIV>Engine shut down.</DIV>
<DIV>[root@CST-BJ-103 tmp]# tail /var/log/messages</DIV>
<DIV>Jul 18 15:16:24 CST-BJ-103 last message repeated 85080 times</DIV>
<DIV>Jul 18 15:16:24 CST-BJ-103 ods-signerd: [tools] unable to write zone example2: adapter failed (Assertion error)</DIV>
<DIV>Jul 18 15:16:24 CST-BJ-103 ods-signerd: [worker[2]] backoff task [configure] for zone example2 with 120 seconds</DIV>
<DIV>Jul 18 15:17:01 CST-BJ-103 ods-enforcerd: Received SIGTERM, exiting...</DIV>
<DIV>Jul 18 15:17:01 CST-BJ-103 ods-enforcerd: all done! hsm_close result: 0</DIV>
<DIV>Jul 18 15:17:02 CST-BJ-103 puppet-agent[2881]: Could not request certificate: getaddrinfo: Name or service not known</DIV>
<DIV>Jul 18 15:17:02 CST-BJ-103 ods-signerd: [cmdhandler] received command stop[4]</DIV>
<DIV>Jul 18 15:17:02 CST-BJ-103 ods-signerd: [engine] signer shutdown</DIV>
<DIV>Jul 18 15:17:02 CST-BJ-103 ods-signerd: [cmdhandler] received command [0]</DIV>
<DIV>Jul 18 15:17:06 CST-BJ-103 ods-signerd: [log] switching log to stderr verbosity 0 (log level 2)</DIV>
<DIV>[root@CST-BJ-103 tmp]# ps -aux | grep ods</DIV>
<DIV>Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ</DIV>
<DIV>root 2834 129 12.2 744468 496204 ? SLsl 15:07 12:36 /usr/local/sbin/ods-signerd</DIV>
<DIV>root 2979 0.0 0.0 61192 764 pts/2 S+ 15:17 0:00 grep ods</DIV>
<DIV> </DIV>
<DIV>I'm puzzled, I know ods-signerd will bind to a port whose default value is
53, so why can I setup more than one ods-signerd?</DIV>
<DIV> </DIV></DIV></DIV>
<DIV>
<DIV>Best regards,</DIV>
<DIV>Stuart</DIV></DIV></DIV>
<DIV>
<DIV><SPAN></SPAN></DIV></DIV>
<DIV
style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0cm; PADDING-LEFT: 0cm; PADDING-RIGHT: 0cm; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<DIV
style="PADDING-BOTTOM: 8px; PADDING-LEFT: 8px; PADDING-RIGHT: 8px; BACKGROUND: #efefef; COLOR: #000000; FONT-SIZE: 12px; PADDING-TOP: 8px">
<DIV><B>From:</B> <A href="mailto:jerry@opendnssec.org">Jerry
Lundstr鰉</A></DIV>
<DIV><B>Date:</B> 2012-07-18 14:29</DIV>
<DIV><B>To:</B> <A href="mailto:shuoleo@126.com">shuoleo</A></DIV>
<DIV><B>CC:</B> <A
href="mailto:opendnssec-user@lists.opendnssec.org">opendnssec-user</A></DIV>
<DIV><B>Subject:</B> Re: Re: [Opendnssec-user]ods-signer failed when
ods-signerd is running</DIV></DIV></DIV>
<DIV>
<DIV>Hi Stuart,</DIV>
<DIV> </DIV>
<DIV>On Wed, Jul 18, 2012 at 8:08 AM, 刘硕 <shuoleo@126.com> wrote:</DIV>
<DIV>> If ods-signerd is running, then I run ods-signerd seems do nothing at all,</DIV>
<DIV>> but sometimes there are more than one ods-signerd process at the same time!</DIV>
<DIV>> I don't this situation would affect opendnssec's signing work, because I</DIV>
<DIV>> think some ods-signerd would do the work at a mixed period.</DIV>
<DIV> </DIV>
<DIV>You should not have more then one ods-signerd process running.</DIV>
<DIV> </DIV>
<DIV>Maybe you have installed OpenDNSSEC in different locations.</DIV>
<DIV> </DIV>
<DIV>Can you run as root:</DIV>
<DIV> </DIV>
<DIV>find / -name ods-signerd</DIV>
<DIV> </DIV>
<DIV>/Jerry</DIV></DIV></BODY></HTML>