<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=gb2312" http-equiv=Content-Type>
<STYLE>
BLOCKQUOTE {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; MARGIN-LEFT: 2em
}
OL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
UL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
BODY {
LINE-HEIGHT: 1.5; FONT-FAMILY: ËÎÌå; COLOR: #000000; FONT-SIZE: 10.5pt
}
</STYLE>
<META name=GENERATOR content="MSHTML 8.00.6001.18702"></HEAD>
<BODY style="MARGIN: 10px">
<DIV>Hi Matthijs,</DIV>
<DIV>I'm testing signing large zone(20Mb) with trunk and the signed zone in
/signed directory is always has a .tmp suffix, say example4.tmp, and the
example4.tmp is signed. And in the syslog I can get some information like
:</DIV>
<DIV>
<DIV>Jul 13 10:00:32 CST-BJ-104 ods-signerd: [tools] unable to write zone example4: adapter failed (Assertion error)</DIV>
<DIV> </DIV>
<DIV>If I don't use XFR I can rename the file to example4 and let BIND reload
it.</DIV>
<DIV>But, the XFR funcation is my priority, so when I configured the example4's
adapter to DNS, the same log occured, and you know there would no signed zone in
/signed directory, but I have found something similar in /var/opendnssec/tmp
directory:</DIV>
<DIV>
<DIV>[root@CST-BJ-104:202.173.9.19 :/var/opendnssec/tmp]$ll</DIV>
<DIV>total 39492</DIV>
<DIV>-rw-r--r-- 1 root root 9900 Jul 17 11:36 example2.axfr</DIV>
<DIV>-rw-r--r-- 1 root root 11881 Jul 17 11:36 example2.backup2</DIV>
<DIV>-rw-r--r-- 1 root root 10626 Jul 17 11:36 example2.ixfr</DIV>
<DIV>-rw-r--r-- 1 root root 9900 Jul 17 11:36 example3.axfr</DIV>
<DIV>-rw-r--r-- 1 root root 11881 Jul 17 11:36 example3.backup2</DIV>
<DIV>-rw-r--r-- 1 root root 9192 Jul 17 11:36 example3.ixfr</DIV>
<DIV
style="FONT-WEIGHT: bold">-rw-r--r-- 1 root root 40325915 Jul 17 11:34 example4.axfr.tmp</DIV>
<DIV>-rw-r--r-- 1 root root 9819 Jul 17 11:36 example.axfr</DIV>
<DIV>-rw-r--r-- 1 root root 11800 Jul 17 11:36 example.backup2</DIV>
<DIV>-rw-r--r-- 1 root root 12264 Jul 17 11:36 example.ixfr</DIV>
<DIV> </DIV>
<DIV>You see example4.axfr.tmp? there is a .tmp suffix,too. And the hidden
master did not receive any notify signal about example4, but received
example,example2 and example3, because they are all small zone just less than
1Kb.</DIV>
<DIV>So I think the problem may be caused by the .tmp suffixed, it affected
OpenDNSSEC's normal logical process and then made the XFR failed.</DIV>
<DIV> </DIV>
<DIV>Any ideas?</DIV>
<DIV> </DIV>
<DIV>Best regards,</DIV>
<DIV>Stuart</DIV></DIV></DIV>
<DIV><SPAN></SPAN> </DIV></BODY></HTML>