[Opendnssec-user] occluded data?

[Michael Braunoeder]

Hi,

I'm currently working on a test setup and I get the following error when 
I try to sign our .at-zone (with OpenDNSSEC 1.2.0rc1):

Nov 19 17:37:23 nssig1 openCryptokiModule[18565]: occluded data at 
ns9.univie.ac                                .at. (below ac.at. NS)
Nov 19 17:37:24 nssig1 openCryptokiModule[18565]: occluded data at 
d.nic.at. (be                                low nic.at. NS)
Nov 19 17:37:24 nssig1 openCryptokiModule[18565]: occluded data at 
j.nic.at. (be                                low nic.at. NS)
Nov 19 17:37:24 nssig1 openCryptokiModule[18565]: occluded data at 
n.nic.at. (below nic.at. NS)
Nov 19 17:37:24 nssig1 openCryptokiModule[18565]: occluded data at 
ns-uk.nic.at.                                 (below nic.at. NS)
Nov 19 17:37:24 nssig1 openCryptokiModule[18565]: update zone at failed: 
zone data contains errors
Nov 19 17:37:28 nssig1 openCryptokiModule[18565]: task [update zone at] 
failed

The zonefile looks like this:

at.     172800  IN      NS      d.nic.at.
at.     172800  IN      NS      j.nic.at.
at.     172800  IN      NS      n.nic.at.
at.     172800  IN      NS      ns1.univie.ac.at.
at.     172800  IN      NS      ns2.univie.ac.at.
at.     172800  IN      NS      ns9.univie.ac.at.
at.     172800  IN      NS      ns-uk.nic.at.

and contains the corresponding A and AAAA glue records.

 From my point of view, this is a valid setup or do I miss something?


Best,
Michael