[Opendnssec-user] OpenDNSSEC AXFR question

Volker Janzen voja at voja.de
Fri Jun 25 10:39:03 UTC 2010


Hi Matthijs,

> - - Is the zone fetcher actually running? (you can check with ps). If not,
> it might be that it could not open the socket for listening (perhaps due
> to privileges). The syslog should tell you why it failed.

now I was able to find the problem. During my setup I needed to disable
TSIG, otherwise AXFR from bind failed. I messed up the XML comments and so
there was no syntactic correct XML in the file:

zone fetcher failed to parse config file /etc/opendnssec/zonefetch.xml

Haven't seen this before. :-( Now it's fixed and the process is running.

Thank you.

Next I need to have a look at Bind views to have the same bind serving
unsigned and signed zones for me.


Best regards,
   Volker






More information about the Opendnssec-user mailing list