[Opendnssec-user] signing process stops after NSEC3 step

Carsten Strotmann carsten at menandmice.com
Tue Oct 27 13:43:44 UTC 2009


Hi,

I have a zone where the signing process stops after the NSEC3ing step. 
Other zones are signed well.

The zone is a test zone, I have attached the original zone file 
(de.eu.com-hosts) and all temporary files from /var/opendnssec/tmp

the last file is "de.eu.com-signed2" which has been been created but is 
left empty.

the trace from /var/log/messages

Oct 27 14:07:55 csmobile2 ods-signerd: Received command: 'stop'
Oct 27 14:07:55 csmobile2 ods-signerd: close syslog
Oct 27 14:08:04 csmobile2 ods-signerd: Scheduling task to sign zone 
de.eu.com at 1256648884.22 with resign time 7200
Oct 27 14:08:04 csmobile2 ods-signerd: No output file found, seconds to 
resign: 0
Oct 27 14:08:04 csmobile2 ods-signerd: Scheduling task to sign zone 
de.eu.com at 1256648884.22 with resign time 7200
Oct 27 14:08:04 csmobile2 ods-signerd: Zone de.eu.com added
Oct 27 14:08:04 csmobile2 ods-signerd: Scheduling task to sign zone 
example.com at 1256648884.22 with resign time 7200
Oct 27 14:08:04 csmobile2 ods-signerd: No output file found, seconds to 
resign: 0
Oct 27 14:08:04 csmobile2 ods-signerd: Scheduling task to sign zone 
example.com at 1256648884.22 with resign time 7200
Oct 27 14:08:04 csmobile2 ods-signerd: Zone example.com added
Oct 27 14:08:04 csmobile2 ods-signerd: opening socket: 
/var/run/opendnssec/engine.sock
Oct 27 14:08:04 csmobile2 ods-signerd: Engine running
Oct 27 14:08:04 csmobile2 ods-signerd: Zone action to perform: 3
Oct 27 14:08:04 csmobile2 ods-signerd: Zone action to perform: 3
Oct 27 14:08:04 csmobile2 ods-signerd: Resorting signed zone: de.eu.com
Oct 27 14:08:04 csmobile2 ods-signerd: No signed zone yet
Oct 27 14:08:04 csmobile2 ods-signerd: Preprocessing signed zone: de.eu.com
Oct 27 14:08:04 csmobile2 ods-signerd: No signed zone yet
Oct 27 14:08:04 csmobile2 ods-signerd: Sorting zone: de.eu.com
Oct 27 14:08:04 csmobile2 ods-signerd: Preprocessing zone: de.eu.com
Oct 27 14:08:04 csmobile2 ods-signerd: No information yet for key 
05326fb9e612314411494402fa84681c
Oct 27 14:08:04 csmobile2 ods-signerd: Generating DNSKEY RR for 
05326fb9e612314411494402fa84681c
Oct 27 14:08:04 csmobile2 ods-signerd: No information yet for key 
a31438bb2f42a2e3e78091a79a4cd659
Oct 27 14:08:04 csmobile2 ods-signerd: Generating DNSKEY RR for 
a31438bb2f42a2e3e78091a79a4cd659
Oct 27 14:08:04 csmobile2 ods-signerd: No information yet for key 
9a6fe8784ecd5da93c9f259689fd5896
Oct 27 14:08:04 csmobile2 ods-signerd: Generating DNSKEY RR for 
9a6fe8784ecd5da93c9f259689fd5896
Oct 27 14:08:04 csmobile2 ods-signerd: No information yet for key 
57bb7a420e0975cf23f7da9ca6f4a0e7
Oct 27 14:08:04 csmobile2 ods-signerd: Generating DNSKEY RR for 
57bb7a420e0975cf23f7da9ca6f4a0e7
Oct 27 14:08:04 csmobile2 ods-signerd: NSEC(3)ing zone: de.eu.com
Oct 27 14:10:26 csmobile2 kernel: [  890.820357] Process accounting paused

Best regards

Carsten Strotmann
Men & Mice
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: de.eu.com.nsecced
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20091027/fb67a5a4/attachment.ksh>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: de.eu.com.processed
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20091027/fb67a5a4/attachment-0001.ksh>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: de.eu.com.signed2
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20091027/fb67a5a4/attachment-0002.ksh>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: de.eu.com.sorted
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20091027/fb67a5a4/attachment-0003.ksh>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: de.eu.com-hosts
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20091027/fb67a5a4/attachment-0004.ksh>


More information about the Opendnssec-user mailing list