[Opendnssec-user] signed zones are not appearing in "signed" directory

Tue Nov 3 23:14:01 UTC 2009

Hello Alex,

here is the listing of the /var/opendnssec/tmp
root at csmobile2:~# ls -la /var/opendnssec/tmp/
total 56
drwxr-xr-x 2 root root 4096 2009-11-04 00:11 .
drwxr-xr-x 6 root root 4096 2009-11-04 00:11 ..
-rw-r--r-- 1 root root 3624 2009-11-03 17:50 test2.example.finalized
-rw-r--r-- 1 root root 1667 2009-11-03 17:58 test2.example.nsecced
-rw-r--r-- 1 root root 1533 2009-11-03 17:58 test2.example.processed
-rw-r--r-- 1 root root 3592 2009-11-03 17:50 test2.example.signed
-rw-r--r-- 1 root root 1536 2009-11-03 17:58 test2.example.signed.sorted
-rw-r--r-- 1 root root  193 2009-11-03 17:58 test2.example.sorted
-rw-r--r-- 1 root root 2931 2009-11-03 17:59 test.example.finalized
-rw-r--r-- 1 root root 1551 2009-11-04 00:11 test.example.nsecced
-rw-r--r-- 1 root root 1484 2009-11-04 00:11 test.example.processed
-rw-r--r-- 1 root root 2899 2009-11-03 17:59 test.example.signed
-rw-r--r-- 1 root root 1487 2009-11-04 00:11 test.example.signed.sorted
-rw-r--r-- 1 root root  148 2009-11-04 00:11 test.example.sorted
test.example.sorted

the last log entries:

Nov  3 23:59:27 csmobile2 ods-enforcerd: Connecting to Database...
Nov  3 23:59:27 csmobile2 ods-enforcerd: Policy default found.
Nov  3 23:59:27 csmobile2 ods-enforcerd: Key sharing is Off.
Nov  3 23:59:27 csmobile2 ods-enforcerd: zonelist filename set to 
/etc/opendnssec/zonelist.xml.
Nov  3 23:59:27 csmobile2 ods-enforcerd: Zone test.example found.
Nov  3 23:59:27 csmobile2 ods-enforcerd: Policy for test.example set to 
default.
Nov  3 23:59:27 csmobile2 ods-enforcerd: Config will be output to 
/var/opendnssec/signconf/test.example.xml.
Nov  3 23:59:27 csmobile2 ods-enforcerd: No change to: 
/var/opendnssec/signconf/test.example.xml
Nov  3 23:59:27 csmobile2 ods-enforcerd: Disconnecting from Database...
Nov  3 23:59:27 csmobile2 ods-enforcerd: Sleeping for 3600 seconds.
Nov  4 00:11:20 csmobile2 ods-enforcerd: Received SIGTERM, exiting...
Nov  4 00:11:20 csmobile2 ods-enforcerd: all done! hsm_close result: 0
Nov  4 00:11:20 csmobile2 ods-signerd: Received command: 'stop'
Nov  4 00:11:20 csmobile2 ods-signerd: close syslog
Nov  4 00:11:25 csmobile2 ods-signerd: Scheduling task to sign zone 
test.example at 1257289885.05 with resign time 7200
Nov  4 00:11:25 csmobile2 ods-signerd: No output file found, seconds to 
resign: 0
Nov  4 00:11:25 csmobile2 ods-signerd: Scheduling task to sign zone 
test.example at 1257289885.05 with resign time 7200
Nov  4 00:11:25 csmobile2 ods-signerd: Zone test.example added
Nov  4 00:11:25 csmobile2 ods-signerd: opening socket: 
/var/run/opendnssec/engine.sock
Nov  4 00:11:25 csmobile2 ods-signerd: Engine running
Nov  4 00:11:25 csmobile2 ods-enforcerd: HSM opened successfully.
Nov  4 00:11:25 csmobile2 ods-enforcerd: Reading config 
"/etc/opendnssec/conf.xml"
Nov  4 00:11:25 csmobile2 ods-enforcerd: Reading config schema 
"/usr/local/share/opendnssec/conf.rng"
Nov  4 00:11:25 csmobile2 ods-enforcerd: Communication Interval: 3600
Nov  4 00:11:25 csmobile2 ods-enforcerd: SQLite database set to: 
/var/opendnssec/kasp.db
Nov  4 00:11:25 csmobile2 ods-enforcerd: Log User set to: local0
Nov  4 00:11:25 csmobile2 ods-enforcerd: Switched log facility to: local0
Nov  4 00:11:25 csmobile2 ods-enforcerd: Connecting to Database...
Nov  4 00:11:25 csmobile2 ods-enforcerd: Policy default found.
Nov  4 00:11:25 csmobile2 ods-enforcerd: Key sharing is Off.
Nov  4 00:11:25 csmobile2 ods-enforcerd: zonelist filename set to 
/etc/opendnssec/zonelist.xml.
Nov  4 00:11:25 csmobile2 ods-enforcerd: Zone test.example found.
Nov  4 00:11:25 csmobile2 ods-enforcerd: Policy for test.example set to 
default.
Nov  4 00:11:25 csmobile2 ods-enforcerd: Config will be output to 
/var/opendnssec/signconf/test.example.xml.
Nov  4 00:11:25 csmobile2 ods-signerd: Zone action to perform: 3
Nov  4 00:11:25 csmobile2 ods-signerd: Resorting signed zone: test.example
Nov  4 00:11:25 csmobile2 ods-signerd: Preprocessing signed zone: 
test.example
Nov  4 00:11:25 csmobile2 ods-signerd: No signed zone yet
Nov  4 00:11:25 csmobile2 ods-signerd: Sorting zone: test.example
Nov  4 00:11:25 csmobile2 ods-signerd: Preprocessing zone: test.example
Nov  4 00:11:25 csmobile2 ods-signerd: No information yet for key 
869913ef666c9d44b0b2552e25785f8c
Nov  4 00:11:25 csmobile2 ods-signerd: Generating DNSKEY RR for 
869913ef666c9d44b0b2552e25785f8c
Nov  4 00:11:25 csmobile2 ods-enforcerd: No change to: 
/var/opendnssec/signconf/test.example.xml
Nov  4 00:11:25 csmobile2 ods-enforcerd: Disconnecting from Database...
Nov  4 00:11:25 csmobile2 ods-enforcerd: Sleeping for 3600 seconds.
Nov  4 00:11:25 csmobile2 ods-signerd: Found key 
869913ef666c9d44b0b2552e25785f8c
Nov  4 00:11:25 csmobile2 ods-signerd: No information yet for key 
e403b6e496dd7035fda7d637fc9c276e
Nov  4 00:11:25 csmobile2 ods-signerd: Generating DNSKEY RR for 
e403b6e496dd7035fda7d637fc9c276e
Nov  4 00:11:25 csmobile2 ods-signerd: Found key 
e403b6e496dd7035fda7d637fc9c276e
Nov  4 00:11:25 csmobile2 ods-signerd: No information yet for key 
f49881f52efcd57b149def1f2881cf84
Nov  4 00:11:25 csmobile2 ods-signerd: Generating DNSKEY RR for 
f49881f52efcd57b149def1f2881cf84
Nov  4 00:11:25 csmobile2 ods-signerd: Found key 
f49881f52efcd57b149def1f2881cf84
Nov  4 00:11:25 csmobile2 ods-signerd: No information yet for key 
b0e21d09e6ff7661a65ba07551474599
Nov  4 00:11:25 csmobile2 ods-signerd: Generating DNSKEY RR for 
b0e21d09e6ff7661a65ba07551474599
Nov  4 00:11:25 csmobile2 ods-signerd: Found key 
b0e21d09e6ff7661a65ba07551474599
Nov  4 00:11:25 csmobile2 ods-signerd: NSEC(3)ing zone: test.example
Nov  4 00:11:26 csmobile2 ods-signerd: No new signatures, keeping zone

-- Carsten

On 11/3/09 6:08 PM, Alexd at nominet.org.uk wrote:
> Hi Carsten -
>
>  > the zones are signed nicely and all the files appear in the
>  > /var/opendnssec/tmp directory, but never in the final
>  > /var/opendnssec/signed directory.
>
> Can you please send me the listing of the tmp folder, and the last few
> entries in the log?
>
> Thanks,
>
>
> Alex.