[Opendnssec-develop] NSEC3ing fails in RC2

Alex Dalitz AlexD at nominet.org.uk
Thu May 13 15:20:35 UTC 2010 

Hi -

Sorry for the delay in responding; I’ve been away.

Can you please try svn revision 3417 and let me know if you still have these issues?

Thanks,


Alex.


On 06/05/2010 16:04, "Rick Zijlker" <rick.zijlker at sidn.nl> wrote:

Hey all,

I can’t figure out what’s going wrong here. As I interpreted the logging, the auditor says there is no NSEC3 record present, but there are. Using default policy, with tighter timings (24H KSK rollover, 8H ZSK rollover, 15min resign etc.) .

Can anyone help me out on this one?

LOGGING:

May  6 16:51:28 signer1 ods-enforcerd: opendnssec-enforcer starting...
May  6 16:51:28 signer1 ods-enforcerd: opendnssec-enforcer Parent exiting...
May  6 16:51:28 signer1 ods-enforcerd: opendnssec-enforcer forked OK...
May  6 16:51:28 signer1 ods-enforcerd: opendnssec-enforcer started (version 1.1.0rc2), pid 24419
May  6 16:51:28 signer1 ods-enforcerd: HSM opened successfully.
May  6 16:51:28 signer1 ods-enforcerd: Reading config "/etc/opendnssec/conf.xml"
May  6 16:51:28 signer1 ods-enforcerd: Reading config schema "/usr/local/share/opendnssec/conf.rng"
May  6 16:51:28 signer1 ods-enforcerd: Communication Interval: 3600
May  6 16:51:28 signer1 ods-enforcerd: No DS Submit command supplied
May  6 16:51:28 signer1 ods-enforcerd: SQLite database set to: /var/opendnssec/kasp.db
May  6 16:51:28 signer1 ods-enforcerd: Log User set to: local0
May  6 16:51:28 signer1 ods-enforcerd: Switched log facility to: local0
May  6 16:51:28 signer1 ods-enforcerd: Connecting to Database...
May  6 16:51:28 signer1 ods-enforcerd: Policy default found.
May  6 16:51:28 signer1 ods-enforcerd: Key sharing is Off.
May  6 16:51:28 signer1 ods-enforcerd: SoftHSM: C_GenerateKeyPair: Key pair generated
May  6 16:51:28 signer1 ods-enforcerd: Created KSK size: 2048, alg: 7 with id: eb57c8ad8ca6220932bdf15247351f19 in repository: SoftHSM and database.
May  6 16:51:29 signer1 ods-enforcerd: SoftHSM: C_GenerateKeyPair: Key pair generated
May  6 16:51:29 signer1 ods-enforcerd: Created KSK size: 2048, alg: 7 with id: 0424219554651888c2d6287eb85a8ebf in repository: SoftHSM and database.
May  6 16:51:29 signer1 ods-enforcerd: SoftHSM: C_GenerateKeyPair: Key pair generated
May  6 16:51:29 signer1 ods-enforcerd: Created ZSK size: 1024, alg: 7 with id: ee47a4ad43b7db7d3d155781c6a94ee2 in repository: SoftHSM and database.
May  6 16:51:29 signer1 ods-enforcerd: SoftHSM: C_GenerateKeyPair: Key pair generated
May  6 16:51:30 signer1 ods-enforcerd: Created ZSK size: 1024, alg: 7 with id: 357b7f1f5968385518e734dc3bc9850b in repository: SoftHSM and database.
May  6 16:51:30 signer1 ods-enforcerd: zonelist filename set to /etc/opendnssec/zonelist.xml.
May  6 16:51:30 signer1 ods-enforcerd: Zone ods found.
May  6 16:51:30 signer1 ods-enforcerd: Policy for ods set to default.
May  6 16:51:30 signer1 ods-enforcerd: Config will be output to /var/opendnssec/signconf/ods.xml.
May  6 16:51:30 signer1 ods-enforcerd: INFO: Promoting ZSK from publish to active as this is the first pass for the zone
May  6 16:51:30 signer1 ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
May  6 16:51:30 signer1 ods-signerd: Received command: 'update ods'
May  6 16:51:30 signer1 ods-signerd: Scheduling task to sign zone ods at 1273157488.15 with resign time 600
May  6 16:51:30 signer1 ods-signerd: Scheduling task to sign zone ods at 1273157488.15 with resign time 600
May  6 16:51:30 signer1 ods-signerd: Zone action to perform: 3
May  6 16:51:30 signer1 ods-enforcerd: Could not call signer engine
May  6 16:51:30 signer1 ods-enforcerd: Will continue: call 'ods-signer update' to manually update zones
May  6 16:51:30 signer1 ods-enforcerd: Disconnecting from Database...
May  6 16:51:30 signer1 ods-enforcerd: Sleeping for 3600 seconds.
May  6 16:51:30 signer1 ods-signerd: Client socket shut down
May  6 16:51:30 signer1 ods-signerd: Preprocessing signed zone: ods
May  6 16:51:30 signer1 ods-signerd: No signed zone yet
May  6 16:51:30 signer1 ods-signerd: Sorting zone: ods
May  6 16:51:30 signer1 ods-signerd: Nseccing zone: ods
May  6 16:51:30 signer1 ods-signerd: No information yet for key eb57c8ad8ca6220932bdf15247351f19
May  6 16:51:30 signer1 ods-signerd: Generating DNSKEY RR for eb57c8ad8ca6220932bdf15247351f19
May  6 16:51:30 signer1 ods-signerd: Found key eb57c8ad8ca6220932bdf15247351f19
May  6 16:51:30 signer1 ods-signerd: No information yet for key ee47a4ad43b7db7d3d155781c6a94ee2
May  6 16:51:30 signer1 ods-signerd: Generating DNSKEY RR for ee47a4ad43b7db7d3d155781c6a94ee2
May  6 16:51:30 signer1 ods-signerd: Found key ee47a4ad43b7db7d3d155781c6a94ee2
May  6 16:51:30 signer1 ods-signerd: No information yet for key 357b7f1f5968385518e734dc3bc9850b
May  6 16:51:30 signer1 ods-signerd: Generating DNSKEY RR for 357b7f1f5968385518e734dc3bc9850b
May  6 16:51:30 signer1 ods-signerd: Found key 357b7f1f5968385518e734dc3bc9850b
May  6 16:51:30 signer1 ods-signerd: signer stderr: Warning: unable to open /var/opendnssec/tmp/ods.signed: No such file or directory, performing full zone sign
May  6 16:51:30 signer1 ods-signerd: signer stderr: signer: number of signatures created: 72 (within a second)
May  6 16:51:30 signer1 ods-signerd: Created 72 new signatures
May  6 16:51:30 signer1 ods-signerd: Running auditor on zone
May  6 16:51:31 signer1 ods-auditor[24448]: Auditor started
May  6 16:51:31 signer1 ods-auditor[24448]: Auditor starting on ods
May  6 16:51:31 signer1 ods-auditor[24448]: SOA differs : from 1000 to 1273157490
May  6 16:51:31 signer1 ods-auditor[24448]: Auditing ods zone : NSEC3 SIGNED
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns2.label21.ods (0500q2sct81770labmqd07qg58u9nf1h.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label17.ods (06ba5j2jegq44jfntoeaaej09n5jm6a8.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns4.label22.ods (0pgfld8lg2n0uh432q4q6ajd19uistqo.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns4.label14.ods (15igbgmrf4cla49bikads1tfqepnkl5u.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns5.label25.ods (16o5ithnkd0h2076590trkbd21bdf299.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label8.ods (1f458tjkcpk555ms7rgrr9f06nlg5hs0.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns1.label6.ods (1qpoohlmjoveluert9s26og50crurgh5.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns6.label11.ods (1u3jah5m0tnc7kq8usqrkmtf34v3j4pc.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns6.label13.ods (2a4velsj96qmuupcv6i6i9ll1r0ksjm7.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found domain (ns4.label29.ods) whose hash (2s24haq50m31l4br2kcdl5jopp508ef8.ods) is between owner (2m05mung7vu3n9qtdh3vmu0b585pdl2b.ods) and next_hashed (3v5ieqoqrk1qnl5uft39sh4lfuqsegcj.ods)for non-optout NSEC3
May  6 16:51:31 signer1 ods-auditor[24448]: ERROR : expected  at ns4.label29.ods (2m05mung7vu3n9qtdh3vmu0b585pdl2b.ods) but found  A
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns4.label9.ods (2scoild81jadchp0canf7sh9bedmc49k.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label18.ods (32dbcbfngc06qenimh6s1qij67kbuspt.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns1.label30.ods (34nj4k3fcbtpfnbt7l8bsm5uein0kdaf.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns2.label30.ods (3hs8tvtfbhm8bro055arpsg5ksf3l9ue.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns6.label30.ods (4040ubcevebghn5s7c1ogods8ue8aspm.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns2.label14.ods (439m51qiojp0gb4bbl19em529h6rfu5c.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns5.label4.ods (4ktt7ekohnh68vbpcll4k7di9p2ff84g.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns5.label21.ods (4smlu9arc4vvbd9f8tm2o9ihmufdrv3s.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns4.label32.ods (5985m4vgtrauoies0u5mjfl5frde4r0f.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label14.ods (5kascm0vmrlojane8q7ebv5hjrqi7cgn.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns2.label22.ods (5u4gqjhklhfcr03h1gr5fai2ar9pi0m2.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label4.ods (65urmqflp4r8lsfme7kfpb54b2v5qpma.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns1.label5.ods (6ct35gcbbsgh1j5sahsiisv1eit444u8.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns6.label4.ods (6e15lbkb0gujeh663tht6p8qjpv93cvn.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label22.ods (6u4kt6d91rsh89na32qp0vkg9968ejsa.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns6.label33.ods (6unkss61rm9e7pfp265uliqec0m6o4ll.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for some.ns.at.label7.ods (70mbpd0n8t6s7krbca8eq50d6oiu2vto.ods) which was not covered by an NSEC3 record
May  6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns2.label34.ods (7bq2ansdhctb00up3btett7lr9l2kup8.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label14.ods (7jrlt4kku7nc0bf0amhubr8hv2fkflsb.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label10.ods (7m047daqo4eiujds61s9t1qcr5sv2s1a.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label34.ods (7n8ef6dlqsck2jae9d132uvo3nu2rtjp.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label17.ods (7p0brl3i0vojkb2lm29t0m4mq5f2o90p.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label8.ods (7sbl2laio94tb9rmg367kpj0s3t6n9qo.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label10.ods (7vhhr0nrcufea2b367fti5qqo9cipi8s.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label25.ods (8pu2kvr2c513t606lc9rvv85q38gbvfg.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label9.ods (8r78m0tsfjgfk0vrtbqfpdj978gm0ri1.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label13.ods (8rmmclt46ief0csi6rhvh8miae8281a6.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label6.ods (9517n9q0ohaddftd9jgnb0hi1hoh3hml.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label33.ods (9gfku9lgt9ksp2enes7orlpb9ad581lj.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label21.ods (9l26ehlrjqfv059cipqs30to966l3ioe.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label10.ods (9p5tbff6k4iktts6eipfsfce1ili078j.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label13.ods (adabo19jemopvks1rcju794nq3npccrs.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label32.ods (besq4if7688o3rd1jb4jf7uf7t5r6dj0.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label30.ods (bje9l4b2jjes8v3og0r0r5vvo61jjskp.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label17.ods (bqd6aku51afcg5f3qpfaqu7hr6vqmb67.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label32.ods (buug5ukgu1q7d2dkqhh9iamrsr90ueb9.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label5.ods (cbc50kjttjlegij5e2qdbggcemj2a2e2.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label22.ods (cph6ad3nmj3ub8cjks30a4tj0l53grvr.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label32.ods (crff0fta791en33ajtok91ubv5li3jr5.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label11.ods (cuoilmom3rgbq42e3lnueg0hskq736rj.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label17.ods (d2pn32kv32pou650lfsoo7k4nq7eetn7.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label4.ods (dob2dgf2glfmohdagm2jfpkkgpdigd7i.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label5.ods (dpp69tnld7rc0510k5gtgikfr55m6svm.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label29.ods (e2husvlqtuot3qcltheeavcneopv4djs.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label18.ods (eqk1e45qf6ka8hs5ktkkqu17ll53tai9.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label34.ods (esgtngcslho8q44cljvlvnn0rkdh2359.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label18.ods (f3fih9dn1atrpkihbqollfv684h9r7m9.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label5.ods (fgokfk9ame3hinec6fqcqfmlr49l3jk8.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label25.ods (fldeg2bj2ie18n6mkcvacpoa9or1ta4o.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label8.ods (fq0hp42e1vutbsi72u3oifl6bmkdpvdf.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label13.ods (g406lbpft0po3dgjad4akqu34am8h1va.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found domain (ns4.label18.ods) whose hash (gliqlf2dsr3raeb5q4kp33ehmcfchk6c.ods) is between owner (gispjmo8f6ikpsgl5e3opvh400rd2e2b.ods) and next_hashed (hvggdmjnc74khi6lenmbjl69eijm9vr7.ods)for non-optout NSEC3
May  6 16:51:32 signer1 ods-auditor[24448]: ERROR : expected  at ns4.label18.ods (gispjmo8f6ikpsgl5e3opvh400rd2e2b.ods) but found  A
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label34.ods (hmng8eakfoo28s8gfb9mok3s719m07cs.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label9.ods (hq00uoahl4fgl473urf6s64e4i83cqt0.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label6.ods (i6jtvrh97r4ejg4a7vskt2npi30mrpe0.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label10.ods (i7q89egv792cqnh20sa7mo7m9e6b1ad1.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label33.ods (igs3bfm23c547spui06dg211ct59jjvq.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label11.ods (iheoe1ihamd13kd7joku1k0lmdv83eh5.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label11.ods (ir6r11kq3j7rlqbsar3o4fpthpdpdp8f.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label6.ods (iu689jck711kug4voj6fbo5ku66hqvv2.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label10.ods (j0ktpagkcatp1p7tak03mt9fs8ae1a42.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label18.ods (j19j0dqa8n0flaq8ofl41ft6sktct9r3.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label25.ods (j6a7n0eth8ensauo4ka3f2vi68vrj04v.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label29.ods (k1ll22l8v1ianvuffc76c83bcvhku9d3.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label9.ods (k3l51jbpc9541tfqn65cuc944quq9gdk.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label21.ods (k68eorm0emlmt5tm4sg83ah826b6sklo.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label6.ods (kioqei1vk5o52jreoubv9atvfc2p4n5d.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label11.ods (l9q0db2vocmvfs30lcibjdcqkf44b890.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label34.ods (lhlsenbs7di6uev2cblram47es6hknfh.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label18.ods (lrd8ujf9rhrphqe4kvufkkch52fos5qg.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label14.ods (lvdskfa9j3ttvfmt2mtu9g0qr0va99nc.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label17.ods (mvldnb4msovvh633nquntp7m4bmql0i4.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label30.ods (n6f0ovehd2jlfgl4ic6hhlmsomt7pgku.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label4.ods (n95hq28vmlqojnmbmrq39j0agav4km5q.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label13.ods (ngu2mf796q6dlniiu9764o8h94r2p7kg.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label4.ods (o2kifr82anr30ov65r9c509lmessse8r.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label10.ods (o2slm445gghnceep94v4f9bjlupl055m.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label29.ods (o3h9kor3tudvj6l8ml3ff7f6jdkr8ln5.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label22.ods (o52tg8p8as7r5p7094vigh8spshfsu72.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label9.ods (o8klvgip3r28v9u2h3h2huetnp2s8cto.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label21.ods (oaapfs5b5smc9t1r97jnm2c6a8tmbktm.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label14.ods (osq29se5r4sl9sfi1sfmkhmu915fmm8r.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label21.ods (ot114galqt8vteg0b49av79k99sbavf8.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label8.ods (pk89iv6jt1p120v1vrr496nu18u1k04v.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label34.ods (pneq2bqqla57r1u9t2rntha7e66bu3nj.ods) which was not covered by an NSEC3 record
May  6 16:51:32 signer1 ods-auditor[24448]: Too much output from auditor - suppressing for rest of run


Piece from the /var/opendnssec/tmp/ods.signed:

label21.ods.   3600    IN     NS      ns1.label21.ods.
label21.ods.   3600    IN     NS      ns2.label21.ods.
label21.ods.   3600    IN     NS      ns3.label21.ods.
label21.ods.   3600    IN     NS      ns4.label21.ods.
label21.ods.   3600    IN     NS      ns5.label21.ods.
label21.ods.   3600    IN     NS      ns6.label21.ods.
7kctrj4d4djg7p1trhmv1isaokun2ebi.ods.  1800    IN      NSEC3   1 0 5 6730d04f36602116  83us8o3j96vtapffs8ktm6gb3pu6v9t3 NS
7kctrj4d4djg7p1trhmv1isaokun2ebi.ods.  1800    IN      RRSIG   NSEC3 7 2 1800 20100506170422 20100506144630 59493 ods. KUbwz8kuGHlPeINluX5oW0zz1irsDCKkiufCwyk1SyqkavTpywuovyk1H9Ij92y0DjEth2hVLRB4LCmuMvoT46lb
LkvWf7O4hsWWw+4jwbjQE1yeKyArW6n7tOMhy8jl3iIVF2mwPTDZFE7BMgm8FnzfYUQgSBLuiUv9QAIrIxg= ;{id = 59493}


Cheers,
Rick





________________________________
_______________________________________________
Opendnssec-develop mailing list
Opendnssec-develop at lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20100513/47601c68/attachment.htm>

More information about the Opendnssec-develop mailing list