[Opendnssec-user] NotifyCommand not executed

Matthijs Mekking matthijs at NLnetLabs.nl
Wed Dec 1 11:12:56 CET 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Thanks for your report. This is now fixed in trunk, r4238.

Best regards,

Matthijs

On 11/30/2010 10:46 AM, Simon Mittelberger wrote:
> Hello,
> 
> on the enforcers first run the NotifyCommand is not executed.
> 
> I was able to reproduce the following on versions: OpenDNSSEC 1.2.0 rc2
> and trunk:
> 
> * the package is started with ods-control start
> * a zone gets added: ods-control ksm zone add -z $domain -p $policy -i
> $unsigned_zonefile -o $signed_zonefile -s $signconf_file
> * kick the enforcer: ods-control enforcer notify
> * the zone is signed and output correctly
> * after signing the zone, when the method tools_write_output(zone_type*
> zone) is called, the part of the code, where the notify command for the
> nameserver should be executed is not processed, because zone->notify_ns
> is NULL.
> 
> If the signer is restarted it works:
> 
> - ods-signer stop
> - ods-signer start
> - ods-signer sign domain.tld
> 
> It seems like the NotifyCommand is only set for zones when the signer
> engine is recovered from backup. On freshly added zones it is not set.
> 
> 
> All the best,
> Simon
> 
> 
> 
> 
> _______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJM9h+oAAoJEA8yVCPsQCW57IMIANFbsBsUJr25SyfrK9SZ7IrX
zJ0uKSXvX/ia4RaJ2s1WF/Tjj5FqLd6jCQjYobKRG3TtK6z8BP2cyiWLdPx41mjI
sXo7/VuE9jiPSEOknhJIUOkGxauIUEXvw9CtK1aTGtAfqe7Dei7CncKBLhdzZ4Hn
uJpBF2zkKsnmBk+hjXBVASFgaBWlsV/LrPCX9DTvbDznaqAEVom5IdIgUFhf7/zn
8P8gZ878kbKpDmKJc89ujN3XXxGDiNSrBliNMki+pyOsWODgh3yHUGuDUm3hPNQv
mUqJ2VkN1bwESZzp9/FUzr26mvAOeV68lMWBmLvBiZS4OIrvP46mNfMNrEoHIzg=
=XVlV
-----END PGP SIGNATURE-----



More information about the Opendnssec-user mailing list