[Opendnssec-develop] Fw: Cannot sign .FR, stops at fr.in.sorted

Matthijs Mekking matthijs at NLnetLabs.nl
Wed Oct 28 14:50:18 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Note that the signer will still call the auditor if the signer
configuration is not updated. The signer configuration is generated from
the policy configuration, by default kasp.xml.

Best regards,

Matthijs

Alexd at nominet.org.uk wrote:
> Anyone have any idea about this?
> 
> Stephane has disabled the auditor, but still cannot sign fr. - please
> see below.
> 
> Thanks,
> 
> 
> Alex.
> 
> ----- Forwarded by Alex Dalitz/Nominet on 28/10/2009 14:41 -----
> *Stephane Bortzmeyer <bortzmeyer at nic.fr>*
> 
> 28/10/2009 14:36
> 
> 	
> To
> 	Alexd at nominet.org.uk
> cc
> 	Stephane Bortzmeyer <bortzmeyer at nic.fr>
> Subject
> 	Re: Cannot sign .FR, stops at fr.in.sorted
> 
> 
> 	
> 
> 
> 
> 
> 
> On Wed, Oct 28, 2009 at 01:58:06PM +0000,
> Alexd at nominet.org.uk <Alexd at nominet.org.uk> wrote
> a message of 32 lines which said:
> 
>> Does disabling the audior leave you with a successfully signed zone?
> 
> No, same problem. I suppressed <Audit> in conf.xml, I restarted the
> daemons and requested a signing. The auditor did not run (obviously)
> but I still had no /var/opendnssec/signed:fr as I expected.
> 
> Last lines in the log (note the spurious mention of the auditor which
> did not run actually, with the time it takes, I would have noticed):
> 
> Oct 28 15:34:10 jezabel ods-signerd: Running auditor on zone
> Oct 28 15:34:10 jezabel ods-signerd: Run command:
> '/usr/local/bin/ods-auditor -c /etc/opendnssec/conf.xml -s
> /var/opendnssec/tmp/fr.finalized -z fr'
> Oct 28 15:34:11 jezabel ods-signerd: Auditor result: 1
> Oct 28 15:34:11 jezabel ods-signerd: worker 3 acquiring lock
> Oct 28 15:34:11 jezabel ods-signerd: worker 3 acquired lock
> Oct 28 15:34:11 jezabel ods-signerd: no task for worker 3, sleep for
> 6821.41999006
> Oct 28 15:34:11 jezabel ods-signerd: worker 3 released lock by going to
> wait (for ttime)
> 
> 
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Opendnssec-develop mailing list
> Opendnssec-develop at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBAgAGBQJK6FooAAoJEA8yVCPsQCW5d5QIAKbytFgyFCNeOI+JjcaQZLdZ
jv5ahChO1dgFw21xr5NFG5qZtYJSqORoDKqvLhEbcZpyL8WTZnru8ubkPTRJIqqN
tvd4h7t1m3/tO6PZ1PYzU0u+JdRL6Au0E36Z9Nc/pjMigVcuOANpKmRoxdM+rLSy
Gb2WB/70UOtwOHtCBF+73GiTcuipVUymxmgy5t3Dd5fqzYQL8yrXaXgxenS6WaIc
QpG+UhKEC5DeRHGnEMWl5IHuAKVUcEu78JJa0sLOLaRlkA1BaHiWrzLqWBgsPXMT
K8ezvilwok89llSyBJd5rHTxjDJPeE9itW7Ci0Q/SMpSbwjM464JIgtgGQRT1Ts=
=jGkK
-----END PGP SIGNATURE-----



More information about the Opendnssec-develop mailing list