[Opendnssec-develop] Meeting agenda 20090602

[Stephen.Morris at nominet.org.uk]

"Rickard Bondesson" <rickard.bondesson at iis.se> wrote on 01/06/2009 
09:34:47:

> Hi
> 
> Next meeting
> Date: Tuesday 2 June
> Time: 14:00-15:00 CEST
> 
> Please add more topics on the wiki if you have any:
> 
> http://www.opendnssec.se/wiki/Meetings/Agenda/2009-06-02
> 
> // Rickard

Some things we should raise in the topic "What functionality are we 
missing?":

1. A "Watchdog" process that checks that everything is running.
This is something that should be running from the time the system is 
booted.  If any process is missing, it logs an emergency message.  Is 
something like this needed?

2. Emergency messages
This leads on the from the last one.  Some messages should be immediately 
notified to the operator (e.g. the Kasp Auditor notifying the operator 
that the signed zone file has failed one or more tests). How do we do 
this?  Although some sites will use programs like Nagios and do their own 
monitoring, others may want a system that comes "out of the box".  The 
easiest way seems to be some form of email notification - should we supply 
the framework? (e.g. 
http://www.johnandcailin.com/blog/john/how-setup-real-time-email-notification-critical-syslog-events
)

3. HSM PIN
How do we enter the PIN for the HSM?  The requirements suggest it should 
be entered just once at startup - how is the user prompted to do this?

4. AXFR in/out
What part of the system is responsible for extracting an AXFR from an 
upstream nameserver into the input zone file, and what part is responsible 
for loading it into the local nameserver for the downstream AXFR?


Stephen