[Opendnssec-user] 'Error allocating ksks' problem
Rickard Bellgrim
rickard.bellgrim at iis.se
Wed Jun 2 14:07:07 UTC 2010
> Have you heard about this problem before? If not, what can I provide for
> you to be able to help me with this issue?
I see this when sharing keys between the zones. It appears when I try to add more zones after the system have started and assigned the shared keys to current set of zones. The Enforcer fails to copy the set of shared keys to the new zone.
>From the KNOWN_ISSUES:
Issue with sharing keys and adding zones
----------------------------------------
Due to a limitation in the way we keep track of key states, adding zones to a
system that shares keys results in the new zone not getting copies of the
standby KSKs.
In general when sharing keys the user must be aware that any key will be in the
same state for all zones.
// Rickard
More information about the Opendnssec-user
mailing list