From jerry at opendnssec.org  Mon Jun  4 06:38:25 2012
From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Mon, 4 Jun 2012 08:38:25 +0200
Subject: [Opendnssec-develop] Meeting 2012-05-22 minutes
In-Reply-To: <6818ADF9-52E3-4728-A0D9-6BDAA625CA82@sinodun.com>
References: <CAKFiofnQgW-J+utnp=_sahGAwe5BJkBR6i1XzVpJtxvjh+n_9A@mail.gmail.com>
	<6818ADF9-52E3-4728-A0D9-6BDAA625CA82@sinodun.com>
Message-ID: <CAGTFMNYkKbe8HjnOzFTmkRvjdCVjSS4EEwPWbZzzk42eMCS0-g@mail.gmail.com>

Hi,

On Tue, May 22, 2012 at 6:57 PM, Sara Dickinson <sara at sinodun.com> wrote:
> https://wiki.opendnssec.org/display/OpenDNSSEC/2012-05-22+Minutes
>
> Sion has reviewed the patch Jerry produced for 1.3.8 to improve the SQL query cache. However there is concern about committing this to trunk while Jerry is away in case there are many test failures as a result so this will be left until Jerry is back.

I'm back!

But I don't get this, is there a concern that tests might fail or that
they will all fail?

/Jerry


From rickard at opendnssec.org  Mon Jun  4 12:17:25 2012
From: rickard at opendnssec.org (Rickard Bellgrim)
Date: Mon, 4 Jun 2012 14:17:25 +0200
Subject: [Opendnssec-develop] Availability list
Message-ID: <CAKFiofnWkxtPyJTUtH1QOaT4poAV9dF2OnBvvbpm+4gw4sTgHw@mail.gmail.com>

Hi

During the last meeting we talked about creating an availability list
where you can state the time periods where you are not available for
the project. This will e.g. help when scheduling future meetings. The
page is restricted to the OpenDNSSEC developers.

https://wiki.opendnssec.org/display/OpenDNSSEC/Availability

Please add your information to the list.

// Rickard


From jerry at opendnssec.org  Mon Jun  4 12:44:24 2012
From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Mon, 4 Jun 2012 14:44:24 +0200
Subject: [Opendnssec-develop] Updating JIRA plugins,
	might be unavailable from time to time
Message-ID: <CAGTFMNY46_8TVJg3aUBJiHegZ4VNwZMOab+QdObi1f-K=+HCiw@mail.gmail.com>

Hi,

Just noticed that GreenHopper was disabled, think Prolocation did an
update that disabled it.

Updating plugins and trying to get it back running.

/Jerry


From jerry at opendnssec.org  Mon Jun  4 13:12:43 2012
From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Mon, 4 Jun 2012 15:12:43 +0200
Subject: [Opendnssec-develop] Re: Updating JIRA plugins,
	might be unavailable from time to time
In-Reply-To: <CAGTFMNY46_8TVJg3aUBJiHegZ4VNwZMOab+QdObi1f-K=+HCiw@mail.gmail.com>
References: <CAGTFMNY46_8TVJg3aUBJiHegZ4VNwZMOab+QdObi1f-K=+HCiw@mail.gmail.com>
Message-ID: <CAGTFMNZofrq2syZ14AQtPrhd4vQEQLce83x3PRTi5tmE0YTkMA@mail.gmail.com>

On Mon, Jun 4, 2012 at 2:44 PM, Jerry Lundstr?m <jerry at opendnssec.org> wrote:
> Updating plugins and trying to get it back running.

Its up and running, if you have it on your dashboard some project
might get an internal error. Just edit that part (top right corner,
drop down menu, Edit) and save it, you don't have to change anything
just re-save it.

/Jerry


From roland.vanrijswijk at surfnet.nl  Wed Jun  6 14:20:32 2012
From: roland.vanrijswijk at surfnet.nl (Roland van Rijswijk)
Date: Wed, 6 Jun 2012 16:20:32 +0200
Subject: [Opendnssec-develop] Reminder: Enforcer NG telecon next Monday,
	June 11th at 14:00h CEST
Message-ID: <9134FE68-8203-4FAF-AAFB-3E6CD956E12B@surfnet.nl>

Hi all,

Just a quick reminder: we have an Enforcer NG telecon next Monday, June 11th at 14:00h CEST. Also an apology beforehand: I may be 5 minutes late opening the conference room due to a meeting I have until 14:00h. So if you are put on hold by our conference system, please bear with me as I will try my best to open the room ASAP after my meeting.

Cheers,

Roland

-- Roland M. van Rijswijk
-- SURFnet Middleware Services
-- t: +31-30-2305388
-- e: roland.vanrijswijk at surfnet.nl



From jerry at opendnssec.org  Thu Jun  7 07:23:15 2012
From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Thu, 7 Jun 2012 09:23:15 +0200
Subject: [Opendnssec-develop] Enforcer NG now builds on all platforms
Message-ID: <CAGTFMNbnCUU8d3eeSj4JAVc+8DkN4G-hK8szpdZ+VSnOL+o2Rw@mail.gmail.com>

Hi,

Thanks to Rickard yesterday Enforcer NG now builds on all platforms.

Yuri, do you think Enforcer NG is ready enough to run the test cases?

/Jerry


From yuri at nlnetlabs.nl  Thu Jun  7 08:24:09 2012
From: yuri at nlnetlabs.nl (Yuri Schaeffer)
Date: Thu, 07 Jun 2012 10:24:09 +0200
Subject: [Opendnssec-develop] Re: Enforcer NG now builds on all platforms
In-Reply-To: <CAGTFMNbnCUU8d3eeSj4JAVc+8DkN4G-hK8szpdZ+VSnOL+o2Rw@mail.gmail.com>
References: <CAGTFMNbnCUU8d3eeSj4JAVc+8DkN4G-hK8szpdZ+VSnOL+o2Rw@mail.gmail.com>
Message-ID: <4FD06529.2080102@nlnetlabs.nl>

> Yuri, do you think Enforcer NG is ready enough to run the test cases?

It should be, lets find out!

//yuri


From jerry at opendnssec.org  Thu Jun  7 09:22:48 2012
From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Thu, 7 Jun 2012 11:22:48 +0200
Subject: [Opendnssec-develop] Re: Enforcer NG now builds on all platforms
In-Reply-To: <4FD06529.2080102@nlnetlabs.nl>
References: <CAGTFMNbnCUU8d3eeSj4JAVc+8DkN4G-hK8szpdZ+VSnOL+o2Rw@mail.gmail.com>
	<4FD06529.2080102@nlnetlabs.nl>
Message-ID: <CAGTFMNa2GgO3wVsgx3y3=b0FDHiFagkA4FCRo0pN8B6WT6C8hQ@mail.gmail.com>

No ods-ksmutil in NG?

On Thu, Jun 7, 2012 at 10:24 AM, Yuri Schaeffer <yuri at nlnetlabs.nl> wrote:
>> Yuri, do you think Enforcer NG is ready enough to run the test cases?
>
> It should be, lets find out!
>
> //yuri


From rickard at opendnssec.org  Thu Jun  7 09:32:15 2012
From: rickard at opendnssec.org (Rickard Bellgrim)
Date: Thu, 7 Jun 2012 11:32:15 +0200
Subject: [Opendnssec-develop] Re: Enforcer NG now builds on all platforms
In-Reply-To: <CAGTFMNa2GgO3wVsgx3y3=b0FDHiFagkA4FCRo0pN8B6WT6C8hQ@mail.gmail.com>
References: <CAGTFMNbnCUU8d3eeSj4JAVc+8DkN4G-hK8szpdZ+VSnOL+o2Rw@mail.gmail.com>
	<4FD06529.2080102@nlnetlabs.nl>
	<CAGTFMNa2GgO3wVsgx3y3=b0FDHiFagkA4FCRo0pN8B6WT6C8hQ@mail.gmail.com>
Message-ID: <CAKFiofnD7+Dg+AcNPm6u8p6mV-mQAcNCEFj_zjUJUJZfm+U3vA@mail.gmail.com>

On Thu, Jun 7, 2012 at 11:22 AM, Jerry Lundstr?m <jerry at opendnssec.org> wrote:
> No ods-ksmutil in NG?

It is now renamed to ods-enforcer. Just to match the ods-signer.

// Rickard


From jerry at opendnssec.org  Thu Jun  7 10:03:08 2012
From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Thu, 7 Jun 2012 12:03:08 +0200
Subject: [Opendnssec-develop] Re: Enforcer NG now builds on all platforms
In-Reply-To: <CAKFiofnD7+Dg+AcNPm6u8p6mV-mQAcNCEFj_zjUJUJZfm+U3vA@mail.gmail.com>
References: <CAGTFMNbnCUU8d3eeSj4JAVc+8DkN4G-hK8szpdZ+VSnOL+o2Rw@mail.gmail.com>
	<4FD06529.2080102@nlnetlabs.nl>
	<CAGTFMNa2GgO3wVsgx3y3=b0FDHiFagkA4FCRo0pN8B6WT6C8hQ@mail.gmail.com>
	<CAKFiofnD7+Dg+AcNPm6u8p6mV-mQAcNCEFj_zjUJUJZfm+U3vA@mail.gmail.com>
Message-ID: <CAGTFMNZekMf6bP1qEgHdCsGBNNPTpWoS3dSRHONzf6J-HLPGWQ@mail.gmail.com>

On Thu, Jun 7, 2012 at 11:32 AM, Rickard Bellgrim
<rickard at opendnssec.org> wrote:
>
> It is now renamed to ods-enforcer. Just to match the ods-signer.

Ehm, ods-enforcer setup needs to connect to the enforcerd?

How do you setup the system before running it?

/Jerry

$ ods-enforcer setup
Unable to connect to engine: connect() failed: No such file or directory


From yuri at nlnetlabs.nl  Thu Jun  7 10:33:49 2012
From: yuri at nlnetlabs.nl (Yuri Schaeffer)
Date: Thu, 07 Jun 2012 12:33:49 +0200
Subject: [Opendnssec-develop] Re: Enforcer NG now builds on all platforms
In-Reply-To: <CAGTFMNZekMf6bP1qEgHdCsGBNNPTpWoS3dSRHONzf6J-HLPGWQ@mail.gmail.com>
References: <CAGTFMNbnCUU8d3eeSj4JAVc+8DkN4G-hK8szpdZ+VSnOL+o2Rw@mail.gmail.com>
	<4FD06529.2080102@nlnetlabs.nl>
	<CAGTFMNa2GgO3wVsgx3y3=b0FDHiFagkA4FCRo0pN8B6WT6C8hQ@mail.gmail.com>
	<CAKFiofnD7+Dg+AcNPm6u8p6mV-mQAcNCEFj_zjUJUJZfm+U3vA@mail.gmail.com>
	<CAGTFMNZekMf6bP1qEgHdCsGBNNPTpWoS3dSRHONzf6J-HLPGWQ@mail.gmail.com>
Message-ID: <4FD0838D.40408@nlnetlabs.nl>

> How do you setup the system before running it?
> $ ods-enforcer setup
> Unable to connect to engine: connect() failed: No such file or
> directory

You don't. The daemon is performing the setup. So start ods-enforcerd
and run ods-enforcer setup.

//yuri


From jerry at opendnssec.org  Fri Jun  8 09:27:49 2012
From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Fri, 8 Jun 2012 11:27:49 +0200
Subject: [Opendnssec-develop] Re: Enforcer NG now builds on all platforms
In-Reply-To: <4FD0838D.40408@nlnetlabs.nl>
References: <CAGTFMNbnCUU8d3eeSj4JAVc+8DkN4G-hK8szpdZ+VSnOL+o2Rw@mail.gmail.com>
	<4FD06529.2080102@nlnetlabs.nl>
	<CAGTFMNa2GgO3wVsgx3y3=b0FDHiFagkA4FCRo0pN8B6WT6C8hQ@mail.gmail.com>
	<CAKFiofnD7+Dg+AcNPm6u8p6mV-mQAcNCEFj_zjUJUJZfm+U3vA@mail.gmail.com>
	<CAGTFMNZekMf6bP1qEgHdCsGBNNPTpWoS3dSRHONzf6J-HLPGWQ@mail.gmail.com>
	<4FD0838D.40408@nlnetlabs.nl>
Message-ID: <292446425064398237@unknownmsgid>

Hi all,

It didnt go that well, all tests needs to be redesigned.

In the spirit of spreading information, would anyone else like to work
on getting the tests to run Enforcer NG?

I will help ofc.

/Jerry

On 7 jun 2012, at 12:33, Yuri Schaeffer <yuri at nlnetlabs.nl> wrote:

>> How do you setup the system before running it?
>> $ ods-enforcer setup
>> Unable to connect to engine: connect() failed: No such file or
>> directory
>
> You don't. The daemon is performing the setup. So start ods-enforcerd
> and run ods-enforcer setup.
>
> //yuri


From jerry at opendnssec.org  Fri Jun  8 09:32:40 2012
From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Fri, 8 Jun 2012 11:32:40 +0200
Subject: [Opendnssec-develop] Enforcer NG / Signer code duplicated rather
	then shared
Message-ID: <9111024609990409057@unknownmsgid>

Hi,

I noticed yesterday that some of the Signer code had been duplicated
into the Enforcer NG rather then shared between them
(engine/log/etc...).

Is this by design or is it something that will be merged later on?

I am in favor of merging to not have duplicated code.

/Jerry


From rickard at opendnssec.org  Fri Jun  8 11:01:34 2012
From: rickard at opendnssec.org (Rickard Bellgrim)
Date: Fri, 8 Jun 2012 13:01:34 +0200
Subject: [Opendnssec-develop] Enforcer NG / Signer code duplicated rather
	then shared
In-Reply-To: <9111024609990409057@unknownmsgid>
References: <9111024609990409057@unknownmsgid>
Message-ID: <CAKFiofm3UKAVbgS2zN1vYybsPw_iNzwansopQd1+C1EFz5hxEQ@mail.gmail.com>

> Is this by design or is it something that will be merged later on?
>
> I am in favor of merging to not have duplicated code.

I think the idea was to merge it later on. Once the code is in trunk.

// Rickard


From sion at nominet.org.uk  Fri Jun  8 11:28:43 2012
From: sion at nominet.org.uk (=?ISO-8859-1?Q?Si=F4n_Lloyd?=)
Date: Fri, 8 Jun 2012 12:28:43 +0100
Subject: [Opendnssec-develop] Re: Adapter configuration
In-Reply-To: <15FA2570-A647-4243-8133-2B3E0F5AA51D@sinodun.com>
References: <4FBF8116.2000900@nic.cz> <4FC5CCF4.30801@nlnetlabs.nl>
	<15FA2570-A647-4243-8133-2B3E0F5AA51D@sinodun.com>
Message-ID: <4FD1E1EB.3040803@nominet.org.uk>

On 31/05/12 11:26, Sara Dickinson wrote:
> On 30 May 2012, at 08:32, Matthijs Mekking wrote:
>
>>> - ods-kaspcheck can check adapter files.
>> I agree, that might be useful too.
>
> +1
>
> But would this make it more of an 'ods-configcheck' tool i.e. more general than just kasp? Have their been any thoughts of doing this (since it is being re-written in 1.4)? Then it could be extended in future to include the other xml files.

There are two sorts of checks that could be done:

1) does the xml validate against the rng schema
2) does the xml make sense (e.g. are options consistent)

(1) is straightforward
(2) will depend on the adapter in question

The new code is in enforcer/utils/kaspcheck.c and 
enforcer/utils/kc_helper.c if anyone wants to add to it.

Sion


From sara at sinodun.com  Fri Jun  8 12:53:25 2012
From: sara at sinodun.com (Sara Dickinson)
Date: Fri, 8 Jun 2012 13:53:25 +0100
Subject: [Opendnssec-develop] RE: Meeting 2012-06-12
Message-ID: <72508447-FD3E-4C9A-A7C2-13E0CB4BB462@sinodun.com>

Hi All,

We have a scheduled meeting next week:

Date: Tuesday 12 June 2012
Time: 14:00-15:00 CEST, 13:00-14:00 BST

The agenda can be found here:
https://wiki.opendnssec.org/display/OpenDNSSEC/2012-06-12+Meeting


My best guesses at the status of the action points from the last meeting are:

Patrik                   Conduct a survey on the user's list, perhaps with voting. (What platforms are the users using?)               OPEN
Sion                     Do additional testing on the multi-threaded enforcer patch.                                                                    OPEN
Rickard/Jakob       Go ahead with alpha 2 release of 1.4.                                                                                                  DONE
Matthijs                Ensure that all user reported issues fixed or under investigation in 1.4 are tracked with a Jira issue.        DONE
Rickard                Set up a wiki page where people can record there availability to help with scheduling meetings.               DONE
Sara                     Produce agenda and chair the next team meeting                                                                                IN PROGRESS


Regards

Sara.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20120608/fa89b144/attachment.htm>

From jerry at opendnssec.org  Fri Jun  8 13:17:35 2012
From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Fri, 8 Jun 2012 15:17:35 +0200
Subject: [Opendnssec-develop] Workspaces missing in Jenkins?
Message-ID: <123B5D15-4CD9-432C-AF33-2C8EDA8F111F@opendnssec.org>

Have someone wiped workspaces from Jenkins in the last week or so?

--
Jerry Lundstr?m - OpenDNSSEC Developer
http://www.opendnssec.org/



From sara at sinodun.com  Fri Jun  8 15:24:22 2012
From: sara at sinodun.com (Sara Dickinson)
Date: Fri, 8 Jun 2012 16:24:22 +0100
Subject: [Opendnssec-develop] RE: Project versions in JIRA
Message-ID: <A1ECF5CA-F2AC-4A66-A8D2-95AA4B89C1B5@sinodun.com>

Hi All, 

Looking at JIRA today I can see there there is both a 1.4.0 and 1.4.0b1 version both with unresolved issues. (And a version 1.4.0a2 but with no issues against it.) I don't know how project (sub)versions were handled in the past with PT but I have seen the following type of approach work well in JIRA:

 - at the start of a new release create a version called e.g. 1.4.0a1 and use this throughout the development phase
 - when it is time to release the first alpha, create a version for the next release (e.g. 1.4.0.a2). Move all unresolved issue from 1.4.0a1 to 1.4.0a2 and release 1.4.0a1
 - repeat through beta and release candidates. 
 - if needed create (sub)versions in advance for issues that are allocated to those versions
 - when the full release is made then JIRA has the option of merging all the sub-versions into a 1.4.0 version to tidy things up.

This would mean that it would be way easier to use the built in functionality of JIRA in terms of generating change logs (completed issues to compare to the NEWS file) and roadmaps (lists of outstanding issues for a particular version) as we go through 'pre-releases'. It also makes it very easy to distinguish between released and development versions.

But... there are *many* other ways to do version management so all comments and suggestions welcome! I did read a little about using version hierarchies with greenhopper but it looks like this has some bugs and limitations and I like the simplicity of the above approach.

Regards

Sara.

From jerry at opendnssec.org  Fri Jun  8 18:24:15 2012
From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Fri, 8 Jun 2012 20:24:15 +0200
Subject: [Opendnssec-develop] RE: Project versions in JIRA
In-Reply-To: <A1ECF5CA-F2AC-4A66-A8D2-95AA4B89C1B5@sinodun.com>
References: <A1ECF5CA-F2AC-4A66-A8D2-95AA4B89C1B5@sinodun.com>
Message-ID: <8564426557613725026@unknownmsgid>

On 8 jun 2012, at 17:24, Sara Dickinson <sara at sinodun.com> wrote:

> Looking at JIRA today I can see there there is both a 1.4.0 and 1.4.0b1 version both with unresolved issues. (And a version 1.4.0a2 but with no issues against it.) I don't know how project (sub)versions were handled in the past with PT but I have seen the following type of approach work well in JIRA:

> - if needed create (sub)versions in advance for issues that are allocated to those versions

You have described why we have advanced versions :)

There is no difference to how we have work and what you described, but
we might be more lose on the rules around it all right now.

Versions without issues are placed holders for new/next issues.

What would be nice and missing right now is road maps and to deside
what issues goes into a release and stick to that to push out more
releases with fewer changes (ie scrum).

Cheers,
Jerry


From rickard at opendnssec.org  Mon Jun 11 05:47:25 2012
From: rickard at opendnssec.org (Rickard Bellgrim)
Date: Mon, 11 Jun 2012 07:47:25 +0200
Subject: [Opendnssec-develop] RE: Project versions in JIRA
In-Reply-To: <A1ECF5CA-F2AC-4A66-A8D2-95AA4B89C1B5@sinodun.com>
References: <A1ECF5CA-F2AC-4A66-A8D2-95AA4B89C1B5@sinodun.com>
Message-ID: <CAKFiofnA61wOXBC8hauAm0LYtvHBKN82jBUehNgksF5US95whw@mail.gmail.com>

> ?- at the start of a new release create a version called e.g. 1.4.0a1 and use this throughout the development phase
> ?- when it is time to release the first alpha, create a version for the next release (e.g. 1.4.0.a2). Move all unresolved issue from 1.4.0a1 to 1.4.0a2 and release 1.4.0a1
> ?- repeat through beta and release candidates.
> ?- if needed create (sub)versions in advance for issues that are allocated to those versions
> ?- when the full release is made then JIRA has the option of merging all the sub-versions into a 1.4.0 version to tidy things up.

+1


From rickard at opendnssec.org  Mon Jun 11 06:19:30 2012
From: rickard at opendnssec.org (Rickard Bellgrim)
Date: Mon, 11 Jun 2012 08:19:30 +0200
Subject: [Opendnssec-develop] Proposal: View-based Maintenance Support
In-Reply-To: <20120529105939.GB15435@newphantom.local>
References: <20120529105939.GB15435@newphantom.local>
Message-ID: <CAKFiofmksQfYp=nONgNrav4EBGNKh-nqCxgvKHrcV92gXrccRQ@mail.gmail.com>

On Tue, May 29, 2012 at 12:59 PM, Rick van Rein <rick at openfortress.nl> wrote:
> Hello,
>
> A while back I proposed an approach to views [1] in OpenDNSSEC that was
> appreciated. ?I'd like to add a few ideas that I think would make
> OpenDNSSEC much easier to handle for admins, without adding a lot of
> complexity to it. ?It's a set, so this is a somewhat long email.

I like the ideas of the basic operations. It is only that the more
advanced operations, migration and merging, would be difficult to
implement.

// Rickard


From jakob at kirei.se  Mon Jun 11 06:44:56 2012
From: jakob at kirei.se (Jakob Schlyter)
Date: Mon, 11 Jun 2012 08:44:56 +0200
Subject: [Opendnssec-develop] Project versions in JIRA
In-Reply-To: <A1ECF5CA-F2AC-4A66-A8D2-95AA4B89C1B5@sinodun.com>
References: <A1ECF5CA-F2AC-4A66-A8D2-95AA4B89C1B5@sinodun.com>
Message-ID: <0F87CE3F-10AE-42CC-B6CB-AFDCBB72B0E6@kirei.se>

On 8 jun 2012, at 17:24, Sara Dickinson wrote:

> - at the start of a new release create a version called e.g. 1.4.0a1 and use this throughout the development phase

I like this, although I propose to use a0 until a1 is released.

	jakob



From matthijs at nlnetlabs.nl  Mon Jun 11 08:00:02 2012
From: matthijs at nlnetlabs.nl (Matthijs Mekking)
Date: Mon, 11 Jun 2012 10:00:02 +0200
Subject: [Opendnssec-develop] Enforcer NG / Signer code duplicated rather
	then shared
In-Reply-To: <CAKFiofm3UKAVbgS2zN1vYybsPw_iNzwansopQd1+C1EFz5hxEQ@mail.gmail.com>
References: <9111024609990409057@unknownmsgid>
	<CAKFiofm3UKAVbgS2zN1vYybsPw_iNzwansopQd1+C1EFz5hxEQ@mail.gmail.com>
Message-ID: <4FD5A582.4070900@nlnetlabs.nl>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yes

On 06/08/2012 01:01 PM, Rickard Bellgrim wrote:
>> Is this by design or is it something that will be merged later
>> on?
>> 
>> I am in favor of merging to not have duplicated code.
> 
> I think the idea was to merge it later on. Once the code is in
> trunk.
> 
> // Rickard _______________________________________________ 
> Opendnssec-develop mailing list 
> Opendnssec-develop at lists.opendnssec.org 
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJP1aWBAAoJEA8yVCPsQCW5pXIH/0pwX/Q/k9FeQIWjHpf6ZT2F
reLdQkOHg4bKwEXDpTjTWjK+hqrR2RyO9H2ZOd58TbDsfag5sXdN00349iMnVMhI
RbZ/YOVf6GOHbw3s4xI8Xt1R5ZvTPfuTg2ZA9a0cMqkmjVRqq6Ui+MKJIdPytKvC
5s4LUq3r5tzIsAEhRf48JKGCew2jq98V6oZQ1DOftwXZK2bv7+/VQf9KFKFy14d+
OU/o/yowk6YTh5Wz1Ip4TCpGxL26s44VxncxQ9o+ySOfYcGcKZE7fF3b/QTbXmGc
d95qr2DaRUotpv2SywrWgw/42QiO7VVrlUMRlYwYltye1JIjjGszRZApVbNrM+U=
=uPvD
-----END PGP SIGNATURE-----


From sara at sinodun.com  Mon Jun 11 09:35:56 2012
From: sara at sinodun.com (Sara Dickinson)
Date: Mon, 11 Jun 2012 10:35:56 +0100
Subject: [Opendnssec-develop] Project versions in JIRA
In-Reply-To: <0F87CE3F-10AE-42CC-B6CB-AFDCBB72B0E6@kirei.se>
References: <A1ECF5CA-F2AC-4A66-A8D2-95AA4B89C1B5@sinodun.com>
	<0F87CE3F-10AE-42CC-B6CB-AFDCBB72B0E6@kirei.se>
Message-ID: <A88235C0-AB34-4FD3-B02E-533CDC141EB4@sinodun.com>


> 
>> - at the start of a new release create a version called e.g. 1.4.0a1 and use this throughout the development phase
> 
> I like this, although I propose to use a0 until a1 is released.
> 
> 	jakob
> 

Yes - this would be better. 



From sara at sinodun.com  Mon Jun 11 10:13:35 2012
From: sara at sinodun.com (Sara Dickinson)
Date: Mon, 11 Jun 2012 11:13:35 +0100
Subject: [Opendnssec-develop] RE: Project versions in JIRA
In-Reply-To: <8564426557613725026@unknownmsgid>
References: <A1ECF5CA-F2AC-4A66-A8D2-95AA4B89C1B5@sinodun.com>
	<8564426557613725026@unknownmsgid>
Message-ID: <637CE395-6F2A-4E72-8FBB-6BC78019D4B5@sinodun.com>


> What would be nice and missing right now is road maps and to deside
> what issues goes into a release and stick to that to push out more
> releases with fewer changes (ie scrum).
> 
> Cheers,
> Jerry


I'm wondering if it might be useful at some point to have a call to go over some 
ideas on aspects of agile (or any other options) that could be adopted for ODS?

I was thinking that I could write up a wiki page as a starting point for others to 
comment on and then perhaps after a team meeting any interested parties 
could stay on the line and we could talk it through?

Sara.

From jerry at opendnssec.org  Mon Jun 11 10:38:14 2012
From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Mon, 11 Jun 2012 12:38:14 +0200
Subject: [Opendnssec-develop] Project versions in JIRA
In-Reply-To: <637CE395-6F2A-4E72-8FBB-6BC78019D4B5@sinodun.com>
References: <A1ECF5CA-F2AC-4A66-A8D2-95AA4B89C1B5@sinodun.com>
	<8564426557613725026@unknownmsgid>
	<637CE395-6F2A-4E72-8FBB-6BC78019D4B5@sinodun.com>
Message-ID: <DDBABB4B-F817-4DF4-89AA-21D3C43EF3AA@opendnssec.org>

On Jun 11, 2012, at 12:13 , Sara Dickinson wrote:
> I was thinking that I could write up a wiki page as a starting point for others to 
> comment on and then perhaps after a team meeting any interested parties 
> could stay on the line and we could talk it through?


+1

--
Jerry Lundstr?m - OpenDNSSEC Developer
http://www.opendnssec.org/



From roland.vanrijswijk at surfnet.nl  Mon Jun 11 13:53:41 2012
From: roland.vanrijswijk at surfnet.nl (Roland van Rijswijk)
Date: Mon, 11 Jun 2012 15:53:41 +0200
Subject: [Opendnssec-develop] Meeting minutes for Enforcer NG call online
Message-ID: <C392676E-3A40-41C2-8E59-A771BBA3AEC4@surfnet.nl>

Hi all,

The meeting minutes for today's Enforcer NG call are online on the Wiki.

https://wiki.opendnssec.org/display/OpenDNSSEC/2012-06-11+-+Enforcer+NG+telecon

Cheers,

Roland

-- Roland M. van Rijswijk
-- SURFnet Middleware Services
-- t: +31-30-2305388
-- e: roland.vanrijswijk at surfnet.nl



From jerry at opendnssec.org  Tue Jun 12 05:31:33 2012
From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Tue, 12 Jun 2012 07:31:33 +0200
Subject: [Opendnssec-develop] A nice sight!
Message-ID: <-1635837698627322202@unknownmsgid>

I hope this last! :)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: photo.PNG
Type: image/png
Size: 194115 bytes
Desc: not available
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20120612/325ccb7b/attachment.png>

From rickard at opendnssec.org  Tue Jun 12 06:05:09 2012
From: rickard at opendnssec.org (Rickard Bellgrim)
Date: Tue, 12 Jun 2012 08:05:09 +0200
Subject: [Opendnssec-develop] A nice sight!
In-Reply-To: <-1635837698627322202@unknownmsgid>
References: <-1635837698627322202@unknownmsgid>
Message-ID: <CAKFiofmBeC1WagFLvQMpGQ8EptdrhKG-uQj=MCJT=zYZLJZ=iQ@mail.gmail.com>

On Tue, Jun 12, 2012 at 7:31 AM, Jerry Lundstr?m <jerry at opendnssec.org> wrote:
> I hope this last! :)

Nice!


From rickard at opendnssec.org  Tue Jun 12 10:52:27 2012
From: rickard at opendnssec.org (Rickard Bellgrim)
Date: Tue, 12 Jun 2012 12:52:27 +0200
Subject: [Opendnssec-develop] RE: Meeting 2012-06-12
In-Reply-To: <72508447-FD3E-4C9A-A7C2-13E0CB4BB462@sinodun.com>
References: <72508447-FD3E-4C9A-A7C2-13E0CB4BB462@sinodun.com>
Message-ID: <CAKFiof=aNvHxPp0cMYetxqP8W-K9YZ_0v1VW5p+fb9F7Ae_Qaw@mail.gmail.com>

> We have a scheduled meeting next week:

I have a meeting that ends just before this meeting. I might join you
a little bit late.

// Rickard


From sion at nominet.org.uk  Tue Jun 12 14:24:48 2012
From: sion at nominet.org.uk (=?ISO-8859-1?Q?Si=F4n_Lloyd?=)
Date: Tue, 12 Jun 2012 15:24:48 +0100
Subject: [Opendnssec-develop] RE: Meeting 2012-06-12
In-Reply-To: <72508447-FD3E-4C9A-A7C2-13E0CB4BB462@sinodun.com>
References: <72508447-FD3E-4C9A-A7C2-13E0CB4BB462@sinodun.com>
Message-ID: <4FD75130.3030704@nominet.org.uk>

On 08/06/12 13:53, Sara Dickinson wrote:
> Hi All,
>
> We have a scheduled meeting next week:
>
> Date: Tuesday 12 June 2012
> Time: 14:00-15:00 CEST, 13:00-14:00 BST
>
> The agenda can be found here:
> https://wiki.opendnssec.org/display/OpenDNSSEC/2012-06-12+Meeting
>

I've put notes up at the same URL... In blue to show which bits were not 
in the agenda.
What do people think of adding the minutes like that? I'll undo it and 
add a new page if there is a general feeling that that would be better.

Sion
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20120612/07b4dfc1/attachment.htm>

From sara at sinodun.com  Tue Jun 12 15:48:01 2012
From: sara at sinodun.com (Sara Dickinson)
Date: Tue, 12 Jun 2012 16:48:01 +0100
Subject: [Opendnssec-develop] RE: Meeting 2012-06-12
In-Reply-To: <4FD75130.3030704@nominet.org.uk>
References: <72508447-FD3E-4C9A-A7C2-13E0CB4BB462@sinodun.com>
	<4FD75130.3030704@nominet.org.uk>
Message-ID: <483A957C-49CE-4048-8F1E-164EAB5C1632@sinodun.com>


> I've put notes up at the same URL... In blue to show which bits were not in the agenda.
> What do people think of adding the minutes like that? I'll undo it and add a new page if there is a general feeling that that would be better.
> 
> Sion

I like it :-)

From matthijs at nlnetlabs.nl  Wed Jun 13 06:54:18 2012
From: matthijs at nlnetlabs.nl (Matthijs Mekking)
Date: Wed, 13 Jun 2012 08:54:18 +0200
Subject: [Opendnssec-develop] RE: Meeting 2012-06-12
In-Reply-To: <4FD75130.3030704@nominet.org.uk>
References: <72508447-FD3E-4C9A-A7C2-13E0CB4BB462@sinodun.com>
	<4FD75130.3030704@nominet.org.uk>
Message-ID: <4FD8391A.4010202@nlnetlabs.nl>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I like it too, it gives a better oversight.

One other remark: I would like to keep a list or other expressive way
to explicitly (font-weight bold or something) denote the action points.

I think they are:

AP: Matthijs and Jerry work on DNS Adapter tests
AP: Release 1.3.9
AP: Matthijs and Sara will discuss off-line about the 1.4.0 release
AP: Release 2.0.0a3
AP: Sion adds an issue to JIRA about the kasp.db lock report (which I
saw was already been done).

Best regards,
  Matthijs

On 06/12/2012 04:24 PM, Si?n Lloyd wrote:
> On 08/06/12 13:53, Sara Dickinson wrote:
>> Hi All,
>> 
>> We have a scheduled meeting next week:
>> 
>> Date: Tuesday 12 June 2012 Time: 14:00-15:00 CEST, 13:00-14:00
>> BST
>> 
>> The agenda can be found here: 
>> https://wiki.opendnssec.org/display/OpenDNSSEC/2012-06-12+Meeting
>>
>
>> 
> I've put notes up at the same URL... In blue to show which bits
> were not in the agenda. What do people think of adding the minutes
> like that? I'll undo it and add a new page if there is a general
> feeling that that would be better.
> 
> Sion
> 
> 
> _______________________________________________ Opendnssec-develop
> mailing list Opendnssec-develop at lists.opendnssec.org 
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJP2DkaAAoJEA8yVCPsQCW5EpIIALSizDaqnCFj0VidTpMROVlz
NcrFXdxOERva9Np6VHnO6OXyTShmx4bOC7TrZfv+rlbeleL9ee+ehFFoA/b2oTqC
OUF2UuuNGC4BBlWyMayltdQD9SvWatODD0ySu5LBO94O+VPt6fKOCOeTO7hCA/x4
f9EGHWvcyVxnG8Z4Zn5MKoI44JBh6aUnD1529UiKRsPD838UTddw574X/pSLLgpM
BmFdBoWjKb8zOHMCKijHiAHnI2+DElYpmziIHbtu50jYS0yp6fsU5teJzwu1pNMQ
mS8ggx1NsAC56bIuWvDcT2w1GZUl49mZyYw7ZJiZbulX36qA4QxRctT0FGu45mQ=
=9ADz
-----END PGP SIGNATURE-----


From sion at nominet.org.uk  Wed Jun 13 08:04:04 2012
From: sion at nominet.org.uk (=?ISO-8859-1?Q?Si=F4n_Lloyd?=)
Date: Wed, 13 Jun 2012 09:04:04 +0100
Subject: [Opendnssec-develop] RE: Meeting 2012-06-12
In-Reply-To: <4FD8391A.4010202@nlnetlabs.nl>
References: <72508447-FD3E-4C9A-A7C2-13E0CB4BB462@sinodun.com>
	<4FD75130.3030704@nominet.org.uk> <4FD8391A.4010202@nlnetlabs.nl>
Message-ID: <4FD84974.7040906@nominet.org.uk>

On 13/06/12 07:54, Matthijs Mekking wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I like it too, it gives a better oversight.
>
> One other remark: I would like to keep a list or other expressive way
> to explicitly (font-weight bold or something) denote the action points.
>
> I think they are:
>
> AP: Matthijs and Jerry work on DNS Adapter tests
> AP: Release 1.3.9
> AP: Matthijs and Sara will discuss off-line about the 1.4.0 release
> AP: Release 2.0.0a3
> AP: Sion adds an issue to JIRA about the kasp.db lock report (which I
> saw was already been done).

Good idea. I have added a section at the end with the new action points. 
In addition to the ones above there were:

-Sara and Jerry to discuss the changes to the tests needed for the 
enforcer-ng
-Jerry to update support issue for OPENDNSSEC-214 to prompt user for input
-Create a ticket for the sql parameter cache fix


Sion

> Best regards,
>    Matthijs
>
> On 06/12/2012 04:24 PM, Si?n Lloyd wrote:
>> On 08/06/12 13:53, Sara Dickinson wrote:
>>> Hi All,
>>>
>>> We have a scheduled meeting next week:
>>>
>>> Date: Tuesday 12 June 2012 Time: 14:00-15:00 CEST, 13:00-14:00
>>> BST
>>>
>>> The agenda can be found here:
>>> https://wiki.opendnssec.org/display/OpenDNSSEC/2012-06-12+Meeting
>>>
>> I've put notes up at the same URL... In blue to show which bits
>> were not in the agenda. What do people think of adding the minutes
>> like that? I'll undo it and add a new page if there is a general
>> feeling that that would be better.
>>
>> Sion
>>
>>
>> _______________________________________________ Opendnssec-develop
>> mailing list Opendnssec-develop at lists.opendnssec.org
>> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQEcBAEBAgAGBQJP2DkaAAoJEA8yVCPsQCW5EpIIALSizDaqnCFj0VidTpMROVlz
> NcrFXdxOERva9Np6VHnO6OXyTShmx4bOC7TrZfv+rlbeleL9ee+ehFFoA/b2oTqC
> OUF2UuuNGC4BBlWyMayltdQD9SvWatODD0ySu5LBO94O+VPt6fKOCOeTO7hCA/x4
> f9EGHWvcyVxnG8Z4Zn5MKoI44JBh6aUnD1529UiKRsPD838UTddw574X/pSLLgpM
> BmFdBoWjKb8zOHMCKijHiAHnI2+DElYpmziIHbtu50jYS0yp6fsU5teJzwu1pNMQ
> mS8ggx1NsAC56bIuWvDcT2w1GZUl49mZyYw7ZJiZbulX36qA4QxRctT0FGu45mQ=
> =9ADz
> -----END PGP SIGNATURE-----
> _______________________________________________
> Opendnssec-develop mailing list
> Opendnssec-develop at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20120613/de7bc5de/attachment.htm>

From sara at sinodun.com  Wed Jun 13 10:16:24 2012
From: sara at sinodun.com (Sara Dickinson)
Date: Wed, 13 Jun 2012 11:16:24 +0100
Subject: [Opendnssec-develop] RE: Meeting 2012-06-12
In-Reply-To: <4FD84974.7040906@nominet.org.uk>
References: <72508447-FD3E-4C9A-A7C2-13E0CB4BB462@sinodun.com>
	<4FD75130.3030704@nominet.org.uk> <4FD8391A.4010202@nlnetlabs.nl>
	<4FD84974.7040906@nominet.org.uk>
Message-ID: <50880815-C096-4CD2-9808-BD79E2C609AE@sinodun.com>


>> One other remark: I would like to keep a list or other expressive way
>> to explicitly (font-weight bold or something) denote the action points.

+1

I quite like using a table with a status column then (in theory) people can
update it as they complete the actions.... 



From yuri at nlnetlabs.nl  Fri Jun 15 08:57:28 2012
From: yuri at nlnetlabs.nl (Yuri Schaeffer)
Date: Fri, 15 Jun 2012 10:57:28 +0200
Subject: [Opendnssec-develop] Automatically test 'interesting' rollovers.
In-Reply-To: <C392676E-3A40-41C2-8E59-A771BBA3AEC4@surfnet.nl>
References: <C392676E-3A40-41C2-8E59-A771BBA3AEC4@surfnet.nl>
Message-ID: <4FDAF8F8.5090107@nlnetlabs.nl>

At the enforcer-ng call we discussed if there is a way to perform
rollovers with more than 2 keys in an automated fashion so we could make
tests for it.

Yes there is. But it is limited. One could issue:
  ods-enforcer key rollover --zone example.com --keytype KSK

This is the behavior:

A) do I have a KSK configured in the kasp? no: ignore command
(This makes sense, we could be using a CSK. No configuration means we
dont even know what size or algorithm to use.)
yes:

B) Is the KSK configured as <Manual>? no: only do scheduled rolls.
yes: Start using a new KSK, mark other KSKs as old.


If we would lift check B this would be our emergency rollover function.
But I'm quite sure I was asked to implement current behavior (I think to
mimic current enforcer). Do we still think it should work like this? - I
don't and propose the following:

- Remove check B. (+1 yuri)
- Remove check B if --force is given.

//yuri


From sion at nominet.org.uk  Fri Jun 15 09:10:42 2012
From: sion at nominet.org.uk (=?ISO-8859-1?Q?Si=F4n_Lloyd?=)
Date: Fri, 15 Jun 2012 10:10:42 +0100
Subject: [Opendnssec-develop] Automatically test 'interesting' rollovers.
In-Reply-To: <4FDAF8F8.5090107@nlnetlabs.nl>
References: <C392676E-3A40-41C2-8E59-A771BBA3AEC4@surfnet.nl>
	<4FDAF8F8.5090107@nlnetlabs.nl>
Message-ID: <4FDAFC12.9000001@nominet.org.uk>

On 15/06/12 09:57, Yuri Schaeffer wrote:
> At the enforcer-ng call we discussed if there is a way to perform
> rollovers with more than 2 keys in an automated fashion so we could make
> tests for it.
>
> Yes there is. But it is limited. One could issue:
>    ods-enforcer key rollover --zone example.com --keytype KSK
>
> This is the behavior:
>
> A) do I have a KSK configured in the kasp? no: ignore command
> (This makes sense, we could be using a CSK. No configuration means we
> dont even know what size or algorithm to use.)
> yes:
>
> B) Is the KSK configured as<Manual>? no: only do scheduled rolls.
> yes: Start using a new KSK, mark other KSKs as old.
>
>
> If we would lift check B this would be our emergency rollover function.
> But I'm quite sure I was asked to implement current behavior (I think to
> mimic current enforcer). Do we still think it should work like this? - I
> don't and propose the following:
>
> - Remove check B. (+1 yuri)
> - Remove check B if --force is given.
>

I understand the <manual> tag to mean "don't do automatic rolls", but 
wouldn't assume the reverse.
So +1 for "Remove check B".

Sion


From Roland.vanRijswijk at surfnet.nl  Fri Jun 15 12:48:18 2012
From: Roland.vanRijswijk at surfnet.nl (Roland van Rijswijk)
Date: Fri, 15 Jun 2012 14:48:18 +0200
Subject: [Opendnssec-develop] Automatically test 'interesting' rollovers.
In-Reply-To: <4FDAFC12.9000001@nominet.org.uk>
References: <C392676E-3A40-41C2-8E59-A771BBA3AEC4@surfnet.nl>
	<4FDAF8F8.5090107@nlnetlabs.nl> <4FDAFC12.9000001@nominet.org.uk>
Message-ID: <684F48FA-6F34-46DE-B271-77D956A0F37D@surfnet.nl>


On 15 jun. 2012, at 11:10, Si?n Lloyd wrote:

> On 15/06/12 09:57, Yuri Schaeffer wrote:
>> At the enforcer-ng call we discussed if there is a way to perform
>> rollovers with more than 2 keys in an automated fashion so we could make
>> tests for it.
>> 
>> Yes there is. But it is limited. One could issue:
>>   ods-enforcer key rollover --zone example.com --keytype KSK
>> 
>> This is the behavior:
>> 
>> A) do I have a KSK configured in the kasp? no: ignore command
>> (This makes sense, we could be using a CSK. No configuration means we
>> dont even know what size or algorithm to use.)
>> yes:
>> 
>> B) Is the KSK configured as<Manual>? no: only do scheduled rolls.
>> yes: Start using a new KSK, mark other KSKs as old.
>> 
>> 
>> If we would lift check B this would be our emergency rollover function.
>> But I'm quite sure I was asked to implement current behavior (I think to
>> mimic current enforcer). Do we still think it should work like this? - I
>> don't and propose the following:
>> 
>> - Remove check B. (+1 yuri)
>> - Remove check B if --force is given.
>> 
> 
> I understand the <manual> tag to mean "don't do automatic rolls", but wouldn't assume the reverse.
> So +1 for "Remove check B".


^^^^^^
What he said, so +1 ;-)

Cheers,

Roland

-- Roland M. van Rijswijk
-- SURFnet Middleware Services
-- t: +31-30-2305388
-- e: roland.vanrijswijk at surfnet.nl



From jerry.lundstrom at iis.se  Tue Jun 19 10:50:31 2012
From: jerry.lundstrom at iis.se (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Tue, 19 Jun 2012 12:50:31 +0200
Subject: [Opendnssec-develop] syslog_r() on platforms that have it
Message-ID: <92E8A1F7-2288-497D-87F1-5B31583EB3C1@iis.se>

Hi,

Even tho it didn't solved the problem currently on NetBSD/OpenBSD for the EnforcerNG, is anyone against having it in?

http://fisheye.opendnssec.org/changelog/opendnssec?cs=6436

In short, openlog_r()/syslog_r()/closelog_r() is thread safe functions on platforms where the normal functions aren't thread safe. It does not mean that the normal function does not work in threaded environments but you should use the _r() ones.

If no one is against it I'd like to push it to trunk and 1.3 also.

/Jerry

--
Jerry Lundstr?m - Software Engineer
.SE - The Internet Infrastructure Foundation
http://www.iis.se/



From jerry at opendnssec.org  Tue Jun 19 10:57:18 2012
From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Tue, 19 Jun 2012 12:57:18 +0200
Subject: [Opendnssec-develop] syslog_r() on platforms that have it
In-Reply-To: <92E8A1F7-2288-497D-87F1-5B31583EB3C1@iis.se>
References: <92E8A1F7-2288-497D-87F1-5B31583EB3C1@iis.se>
Message-ID: <E1EC3A07-24A7-4E5B-9B8C-BFCCD53934F3@opendnssec.org>

On Jun 19, 2012, at 12:50 , Jerry Lundstr?m wrote:
> Even tho it didn't solved the problem currently on NetBSD/OpenBSD for the EnforcerNG, is anyone against having it in?
> 
> http://fisheye.opendnssec.org/changelog/opendnssec?cs=6436
> 
> In short, openlog_r()/syslog_r()/closelog_r() is thread safe functions on platforms where the normal functions aren't thread safe. It does not mean that the normal function does not work in threaded environments but you should use the _r() ones.
> 
> If no one is against it I'd like to push it to trunk and 1.3 also.


Sent from the wrong account, reply to this one :)

--
Jerry Lundstr?m - OpenDNSSEC Developer
http://www.opendnssec.org/




From sion at nominet.org.uk  Tue Jun 19 11:21:30 2012
From: sion at nominet.org.uk (=?ISO-8859-1?Q?Si=F4n_Lloyd?=)
Date: Tue, 19 Jun 2012 12:21:30 +0100
Subject: [Opendnssec-develop] syslog_r() on platforms that have it
In-Reply-To: <E1EC3A07-24A7-4E5B-9B8C-BFCCD53934F3@opendnssec.org>
References: <92E8A1F7-2288-497D-87F1-5B31583EB3C1@iis.se>
	<E1EC3A07-24A7-4E5B-9B8C-BFCCD53934F3@opendnssec.org>
Message-ID: <4FE060BA.2010902@nominet.org.uk>

On 19/06/12 11:57, Jerry Lundstr?m wrote:
> On Jun 19, 2012, at 12:50 , Jerry Lundstr?m wrote:
>> Even tho it didn't solved the problem currently on NetBSD/OpenBSD for the EnforcerNG, is anyone against having it in?
>>
>> http://fisheye.opendnssec.org/changelog/opendnssec?cs=6436
>>
>> In short, openlog_r()/syslog_r()/closelog_r() is thread safe functions on platforms where the normal functions aren't thread safe. It does not mean that the normal function does not work in threaded environments but you should use the _r() ones.
>>
>> If no one is against it I'd like to push it to trunk and 1.3 also.
>

Seems okay to me, especially when the multi-threaded enforcer code goes in.


From matthijs at nlnetlabs.nl  Tue Jun 19 12:07:11 2012
From: matthijs at nlnetlabs.nl (Matthijs Mekking)
Date: Tue, 19 Jun 2012 14:07:11 +0200
Subject: [Opendnssec-develop] syslog_r() on platforms that have it
In-Reply-To: <4FE060BA.2010902@nominet.org.uk>
References: <92E8A1F7-2288-497D-87F1-5B31583EB3C1@iis.se>
	<E1EC3A07-24A7-4E5B-9B8C-BFCCD53934F3@opendnssec.org>
	<4FE060BA.2010902@nominet.org.uk>
Message-ID: <4FE06B6F.3070008@nlnetlabs.nl>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Seems okay to me to.

On 06/19/2012 01:21 PM, Si?n Lloyd wrote:
> On 19/06/12 11:57, Jerry Lundstr?m wrote:
>> On Jun 19, 2012, at 12:50 , Jerry Lundstr?m wrote:
>>> Even tho it didn't solved the problem currently on
>>> NetBSD/OpenBSD for the EnforcerNG, is anyone against having it
>>> in?
>>> 
>>> http://fisheye.opendnssec.org/changelog/opendnssec?cs=6436
>>> 
>>> In short, openlog_r()/syslog_r()/closelog_r() is thread safe 
>>> functions on platforms where the normal functions aren't thread
>>> safe. It does not mean that the normal function does not work
>>> in threaded environments but you should use the _r() ones.
>>> 
>>> If no one is against it I'd like to push it to trunk and 1.3
>>> also.
>> 
> 
> Seems okay to me, especially when the multi-threaded enforcer code
> goes in. _______________________________________________ 
> Opendnssec-develop mailing list 
> Opendnssec-develop at lists.opendnssec.org 
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJP4GtvAAoJEA8yVCPsQCW5vvcIAJyhmEtGNUZKvvOnwXOH/7+z
v9YxFhoRC4cz+qtUO/sc5WS2RCW7JHocwHJd+sbrjG5BApPGKp9dlrsNCcCDuNtK
TQANWrBpe2d6iKoP9ebINLCcVLfiF4BD82QNExaiSe7dSUdV1IebqHOZPgwnBeSl
DBChL4aJW2xexYco+FdL8RxfRk2+DahOq5yrxA+Qco1x/38uBZWBQ3Yiat1o/ope
wVPOo/1SXuCLK+fbMMB5u/LUaN7QRE9joRRrlzRAEE9e7ukx8pJERNC3SvAdhqow
4Jep8hoxVTo8XKsUe5rftd94RQBIiQb0UECdF/Ce4Rb+6aPsIEXcSltGX3+l/s4=
=SSpk
-----END PGP SIGNATURE-----


From jerry at opendnssec.org  Tue Jun 19 14:15:23 2012
From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Tue, 19 Jun 2012 16:15:23 +0200
Subject: [Opendnssec-develop] syslog_r() on platforms that have it
In-Reply-To: <4FE06B6F.3070008@nlnetlabs.nl>
References: <92E8A1F7-2288-497D-87F1-5B31583EB3C1@iis.se>
	<E1EC3A07-24A7-4E5B-9B8C-BFCCD53934F3@opendnssec.org>
	<4FE060BA.2010902@nominet.org.uk> <4FE06B6F.3070008@nlnetlabs.nl>
Message-ID: <9CC12D23-7653-4ED6-B22E-A6985B39B2C4@opendnssec.org>

On Jun 19, 2012, at 14:07 , Matthijs Mekking wrote:
> Seems okay to me to.
> 
> On 06/19/2012 01:21 PM, Si?n Lloyd wrote:
> > Seems okay to me, especially when the multi-threaded enforcer code
> > goes in.

Committed.

--
Jerry Lundstr?m - OpenDNSSEC Developer
http://www.opendnssec.org/



From jerry at opendnssec.org  Wed Jun 20 09:41:11 2012
From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Wed, 20 Jun 2012 11:41:11 +0200
Subject: [Opendnssec-develop] Jenkins acting up, sorry for the spam!
Message-ID: <DFB3BA78-602F-4A1C-90E6-13F5064A007E@opendnssec.org>



--
Jerry Lundstr?m - OpenDNSSEC Developer
http://www.opendnssec.org/



From sara at sinodun.com  Thu Jun 21 12:22:11 2012
From: sara at sinodun.com (Sara Dickinson)
Date: Thu, 21 Jun 2012 13:22:11 +0100
Subject: [Opendnssec-develop] RE: Physical team meeting
Message-ID: <509E52D8-F468-4E24-B89C-A18A8556D4D8@sinodun.com>

Hi All, 

It seems it is that time of year again to think about a developer get together. September has been proposed as a good time so I have put together a doodle to see if we can find a date then: http://www.doodle.com/c36ztcse476hshww

I've assumed a 2 day meeting at either the start or the end of a week to make travelling easier. So on the doodle please vote for which sets of 2 days you could make. 

Note that RIPE 65 in Amsterdam starts on September 24th.

The location is still to be decided (one of Oxford, Amsterdam/Utrecht or Stockholm I imagine unless someone owns a small tropical island we could use?) and may depend on what date we settle on. 

Sara.




From matthijs at nlnetlabs.nl  Thu Jun 21 14:11:06 2012
From: matthijs at nlnetlabs.nl (Matthijs Mekking)
Date: Thu, 21 Jun 2012 16:11:06 +0200
Subject: [Opendnssec-develop] Re: Adapter configuration
In-Reply-To: <4FC5CCF4.30801@nlnetlabs.nl>
References: <4FBF8116.2000900@nic.cz> <4FC5CCF4.30801@nlnetlabs.nl>
Message-ID: <4FE32B7A.8000406@nlnetlabs.nl>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

On 05/30/2012 09:32 AM, Matthijs Mekking wrote:
> Hi Dan,
> 
> [cc'ing the OpenDNSSEC Developers]
> 
> 
> 
> On 05/25/2012 02:54 PM, Daniel Salzman wrote:
>> Hi Matthijs,
> 
>> I'm playing with ods again. It would be nice if: - Peer element 
>> needn't contain Prefix if Key is present.
> 
> I agree it would be nice to have ACL just on TSIG key.

I have fixed this in trunk (r6451), it is now possible to set an ACL
up just based on a <Key/>.

> 
>> - It doesn't depend on the order of items (Port after Key in 
>> Remote).
> 
> I agree, but I am not likely to change. This makes the XML file 
> structure complicated, and comparing to other configuration files
> it is no different: order of items is important.
> 
> We would like to have a different way to configure stuff, instead
> of using your favorite text editor.

We decided to not make the configuration unnecessary complex by
allowing all kinds of ordering.

> 
>> - ods-kaspcheck can check adapter files.
> 
> I agree, that might be useful too.

This will be likely be in the 1.4.0 or 1.4.1 too.

Please let me know how the ACL fix works for you.

Thanks,

Matthijs

> 
> 
>> Btw the link to OpenDNSSEC-1.4.0a2 doesn't work.
> 
> I believe that has been fixed a couple of days ago.
> 
> Best regards, Matthijs
> 
> 
> 
>> Regards, Dan
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJP4yt6AAoJEA8yVCPsQCW59dEIAJ42+mITzZwVhajEug2WNuct
ZqAhBbg99qQ2Y7cmYSwD/22i7TdqQ0Jfg63oHXsmL8SCjWyFioPCP+7SKzjKkchh
ogyRI6Qlr6thMuQE7MBVL/Up5wgxpADT84oTiwlInLnjZwa/cORrPIE7b5khxKR6
cN1hmLhClX3l26gx0E/JSu0U7S0ZUpaf7yRWZQgezt9lPGLWb5UkDH2ukopJQ0tD
Clrl3DEaRSjFbbCadpkltlr0xZhsJSsQC0NFdbzqW9EWy5AS0JJNtyoiiSaZjdq7
/jwekuwZiLRJnhgKFpb2E8JaQ2apFiZm68alb4Xg2LbLfuGOOEc4HE6sk2J+PCU=
=ypmn
-----END PGP SIGNATURE-----


From sara at sinodun.com  Fri Jun 22 14:57:49 2012
From: sara at sinodun.com (Sara Dickinson)
Date: Fri, 22 Jun 2012 15:57:49 +0100
Subject: [Opendnssec-develop] RE: Meeting 2012-06-26
Message-ID: <491548C9-1110-42CE-8787-40D866309B09@sinodun.com>

Hi All, 

We have a scheduled meeting next week:

Date: Tuesday 26 June 2012
Time: 14:00-15:00 CEST, 13:00-14:00 BST

The agenda and outstanding actions can be found here:

https://wiki.opendnssec.org/display/OpenDNSSEC/2012-06-26+Meeting

I plan to dial in from Skype so if anyone wants to send me their Skype details/add me as a contact I will attempt to conference them in (username: saradickinson)! Will try to set up an Adobe connect trial for the next meeting.

Sara.




From rick at openfortress.nl  Tue Jun 26 15:13:24 2012
From: rick at openfortress.nl (Rick van Rein)
Date: Tue, 26 Jun 2012 15:13:24 +0000
Subject: [Opendnssec-develop] Minutes of today's teleconf
Message-ID: <20120626151324.GB23487@newphantom.local>

Hello,

I wrote the minutes of today's teleconference and put them here:

https://wiki.opendnssec.org/display/OpenDNSSEC/Meeting+Notes+2012-06-26

As always, remarks and changes are welcome.

Cheers,
 -Rick


From jerry at opendnssec.org  Wed Jun 27 08:42:01 2012
From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Wed, 27 Jun 2012 10:42:01 +0200
Subject: [Opendnssec-develop] Minutes of today's teleconf
In-Reply-To: <20120626151324.GB23487@newphantom.local>
References: <20120626151324.GB23487@newphantom.local>
Message-ID: <1393246031884081801@unknownmsgid>

Hi,


   1. *Testing*
   SIDN is not present; no news.
   Rick suggests asking the testers to take in the platforms used according
   to the survey, specifically to be able to support old and new Ubuntu LTS
   versions with the overlap that these distro's have.
   ACTION Rick: Ask the testers at SIDN to make a proposal.


SIDN hasn't really anything to do with testing now days, atleast not
Jenkins and the VM platforms, its all me.

According to the survey all but one (NetBSD) unique platforms are used, in
this I mean Debian/RedHat/SLES/FreeBSD/OpenBSD/Solaris (if I remember
correctly).

What I mean about unique is that its not based on another dist.

I could see us change the list to:

Debian
Ubuntu (its based on debian but heavly modified)
RedHat
SLES
OpenSUSE (it shares code with SLES but they are not really based on each
other, kernel and software versions differ a lot)
FreeBSD
OpenBSD
NetBSD (even if most BSD shares they do have their own libc impl and it can
be good to test on them for portability and standard)
Solaris

That is 9 and we have a few as 32bit also so if we keep that
(Ubuntu/RedHat/SLES/FreeBSD) we have 2 left over VMs that we could use to
run next major dist version of the most used side by side.

What do people think?

/Jerry

On 26 jun 2012, at 17:13, Rick van Rein <rick at openfortress.nl> wrote:

Hello,

I wrote the minutes of today's teleconference and put them here:

https://wiki.opendnssec.org/display/OpenDNSSEC/Meeting+Notes+2012-06-26

As always, remarks and changes are welcome.

Cheers,
-Rick
_______________________________________________
Opendnssec-develop mailing list
Opendnssec-develop at lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20120627/cb154e8b/attachment.htm>

From rick at openfortress.nl  Wed Jun 27 08:53:43 2012
From: rick at openfortress.nl (Rick van Rein)
Date: Wed, 27 Jun 2012 08:53:43 +0000
Subject: [Opendnssec-develop] Minutes of today's teleconf
In-Reply-To: <1393246031884081801@unknownmsgid>
References: <20120626151324.GB23487@newphantom.local>
	<1393246031884081801@unknownmsgid>
Message-ID: <20120627085343.GD26332@newphantom.local>

Hello all,

> I could see us change the list to:
> 
> Debian
> Ubuntu (its based on debian but heavly modified)

My gut-feeling that Ubuntu is so popular that it would make sense
to support both active Ubuntu LTS versions is not warranted by
the survey, so I won't persue that suggestion any further.

> RedHat
> SLES
> OpenSUSE (it shares code with SLES but they are not really based on each
> other, kernel and software versions differ a lot)
> FreeBSD
> OpenBSD
> NetBSD (even if most BSD shares they do have their own libc impl and it can
> be good to test on them for portability and standard)
> Solaris
> 
> That is 9 and we have a few as 32bit also so if we keep that
> (Ubuntu/RedHat/SLES/FreeBSD) we have 2 left over VMs that we could use to
> run next major dist version of the most used side by side.
> 
> What do people think?

This looks like a solid list.


Cheers,
 -Rick


From jerry at opendnssec.org  Wed Jun 27 08:59:31 2012
From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Wed, 27 Jun 2012 10:59:31 +0200
Subject: [Opendnssec-develop] Minutes of today's teleconf
In-Reply-To: <20120627085343.GD26332@newphantom.local>
References: <20120626151324.GB23487@newphantom.local>
	<1393246031884081801@unknownmsgid>
	<20120627085343.GD26332@newphantom.local>
Message-ID: <EF356DEB-A748-4618-9552-F0B7880E8841@opendnssec.org>

On Jun 27, 2012, at 10:53 , Rick van Rein wrote:
> My gut-feeling that Ubuntu is so popular that it would make sense
> to support both active Ubuntu LTS versions is not warranted by
> the survey, so I won't persue that suggestion any further.

Surprise, 2 ubuntu and ~50% Red Hat (variants) in the survey. I also mixed up Open with Net, so there is one NetBSD and no OpenBSD.

--
Jerry Lundstr?m - OpenDNSSEC Developer
http://www.opendnssec.org/



From sion at nominet.org.uk  Thu Jun 28 08:23:04 2012
From: sion at nominet.org.uk (=?ISO-8859-1?Q?Si=F4n_Lloyd?=)
Date: Thu, 28 Jun 2012 09:23:04 +0100
Subject: [Opendnssec-develop] Minutes of today's teleconf
In-Reply-To: <20120627085343.GD26332@newphantom.local>
References: <20120626151324.GB23487@newphantom.local>
	<1393246031884081801@unknownmsgid>
	<20120627085343.GD26332@newphantom.local>
Message-ID: <4FEC1468.9030407@nominet.org.uk>

On 27/06/12 09:53, Rick van Rein wrote:
> Hello all,
>
>> I could see us change the list to:
>>
>> Debian
>> Ubuntu (its based on debian but heavly modified)
> My gut-feeling that Ubuntu is so popular that it would make sense
> to support both active Ubuntu LTS versions is not warranted by
> the survey, so I won't persue that suggestion any further.
>
>> RedHat
>> SLES
>> OpenSUSE (it shares code with SLES but they are not really based on each
>> other, kernel and software versions differ a lot)
>> FreeBSD
>> OpenBSD
>> NetBSD (even if most BSD shares they do have their own libc impl and it can
>> be good to test on them for portability and standard)
>> Solaris
>>
>> That is 9 and we have a few as 32bit also so if we keep that
>> (Ubuntu/RedHat/SLES/FreeBSD) we have 2 left over VMs that we could use to
>> run next major dist version of the most used side by side.
>>
>> What do people think?
> This looks like a solid list.
>
>
> Cheers,
>   -Rick
>

+1

Although there is no mention of version numbers.

Assuming that we consider RHEL and CentOS as a single distro I guess we 
are talking about running the current and previous versions of that... 
So the original desire to run both LTS versions of ubuntu uses up the 
remaining VM. Is that correct?

Sion


From jerry at opendnssec.org  Thu Jun 28 08:39:22 2012
From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Thu, 28 Jun 2012 10:39:22 +0200
Subject: [Opendnssec-develop] Minutes of today's teleconf
In-Reply-To: <4FEC1468.9030407@nominet.org.uk>
References: <20120626151324.GB23487@newphantom.local>
	<1393246031884081801@unknownmsgid>
	<20120627085343.GD26332@newphantom.local>
	<4FEC1468.9030407@nominet.org.uk>
Message-ID: <262615827753402204@unknownmsgid>

On 28 jun 2012, at 10:24, "Si?n Lloyd" <sion at nominet.org.uk> wrote:

> Although there is no mention of version numbers.

Same as now.

> Assuming that we consider RHEL and CentOS as a single distro I guess we are talking about running the current and previous versions of that... So the original desire to run both LTS versions of ubuntu uses up the remaining VM. Is that correct?

Yes. Whether not we would have both 32 and 64 bits is up for
discussion. Also a time limit would be nice, like 3-6 months then
delete old.
>

/Jerry


From sara at sinodun.com  Thu Jun 28 12:44:06 2012
From: sara at sinodun.com (Sara Dickinson)
Date: Thu, 28 Jun 2012 13:44:06 +0100
Subject: [Opendnssec-develop] RE: PIN deamon
Message-ID: <969075BE-D412-443C-9360-FD8A612C40E7@sinodun.com>

Hi All, 

One item that I should have raised in the call on Tuesday was the PIN daemon feature developed for 1.4. This has been implemented by Rickard (in a branch) but has not yet been tested or reviewed. Jakob was planning to do this but since he is away until mid-August (and we should have a beta for 1.4 before then!) I'm looking for a volunteer to test and review this. If anyone feels they have the time and knowledge to do this in the next few weeks please let me know. Otherwise it would seem we will have to postpone this to 1.4.1. 

Sara.

From sara at sinodun.com  Thu Jun 28 13:31:47 2012
From: sara at sinodun.com (Sara Dickinson)
Date: Thu, 28 Jun 2012 14:31:47 +0100
Subject: [Opendnssec-develop] Minutes of today's teleconf
In-Reply-To: <262615827753402204@unknownmsgid>
References: <20120626151324.GB23487@newphantom.local>
	<1393246031884081801@unknownmsgid>
	<20120627085343.GD26332@newphantom.local>
	<4FEC1468.9030407@nominet.org.uk> <262615827753402204@unknownmsgid>
Message-ID: <E786FBA3-39D6-4364-B09C-F27BA3C52CBF@sinodun.com>


> Yes. Whether not we would have both 32 and 64 bits is up for
> discussion.

Do we know what users are using?

> Also a time limit would be nice, like 3-6 months then
> delete old.

Agreed. 6 months if possible seems ok?

Otherwise list looks good.

Sara.




From jerry at opendnssec.org  Thu Jun 28 13:43:09 2012
From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=)
Date: Thu, 28 Jun 2012 15:43:09 +0200
Subject: [Opendnssec-develop] Minutes of today's teleconf
In-Reply-To: <E786FBA3-39D6-4364-B09C-F27BA3C52CBF@sinodun.com>
References: <20120626151324.GB23487@newphantom.local>
	<1393246031884081801@unknownmsgid>
	<20120627085343.GD26332@newphantom.local>
	<4FEC1468.9030407@nominet.org.uk> <262615827753402204@unknownmsgid>
	<E786FBA3-39D6-4364-B09C-F27BA3C52CBF@sinodun.com>
Message-ID: <99B24C85-61A7-4E92-86A1-E73FDCF9B1C6@opendnssec.org>

On Jun 28, 2012, at 15:31 , Sara Dickinson wrote:
> 
>> Yes. Whether not we would have both 32 and 64 bits is up for
>> discussion.
> 
> Do we know what users are using?


No, it was not in the survey.

--
Jerry Lundstr?m - OpenDNSSEC Developer
http://www.opendnssec.org/