[Opendnssec-user] Re: ods-auditor running for ever?

Alexd at nominet.org.uk Alexd at nominet.org.uk
Tue Oct 27 15:30:16 UTC 2009


> > then the auditor will run. Again, this can take some time.
> 
> What I do not understand, is the fact that it takes much longer than
> the signing itself (now 41 minutes and running, while the signing with
> BIND's dnssec-signzone is only a few seconds).

The signing presumably took more than a few seconds the first time it was 
performed. The auditor is starting from scratch each run. If you are 
re-signing frequently, it may not be worth running the auditor for very 
large zones (until the partial auditor is implemented).

> What does the auditor
> do which is so long?

http://trac.opendnssec.org/wiki/Signer/AuditorRequirements

> How to do it? Suppressing the <Auditor> element in conf.xml?

Yes - remove the Audit element and the auditor will not be run.

Thanks,


Alex.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20091027/3dfc94d4/attachment.htm>


More information about the Opendnssec-user mailing list