[Opendnssec-user] enforcerd dying silently

[Sebastian Castro]

Gilles Massen wrote:
> Hello,
> 
> It looks like my luck with OpenDNSSEC is running out: some days ago I
> noticed that enforcerd was dying silently. Taking it as an opportunity
> I've upgraded to 1.1.2 (from 1.1.1).
> 
> However, this didn't help. Currently I have:
> 
> - ods-control start starts all processes, enforcerd is running. It seems
> to perform it's first run correctly.
> - from the log, it looks like it comes back from sleep, goes through
> policies, and dies. The last logged line is:
> 
> Sep  8 10:29:20 opendnssec ods-enforcerd: Policy for dnssec.lu set to
> restena.
> 
> As the pid stays behind, ods-control stop fails (actually hangs) with
> sbin/ods-control: line 76: kill: (30939) - No such process
> 
> (I'm pretty sure that 1.1.1 wasn't that picky)
> 
> Any advice how to get more information on what is wrong with enforcerd?

There are two issues here.
One is enforcerd dying silently. In my case, when I updated from 1.1.1
to 1.1.2, there was a schema change in the KASP DB that enforcerd
detected, complained and exit.

The message I got was:
ERROR: database version number incompatible with software; require 2,
found 1. Please run the migration scripts

Once I updated the database the enforcerd worked well.

Two is why ods-control hangs when trying to run 'stop'. I raised that as
a ticket (http://trac.opendnssec.org/ticket/177) and it should be fixed
by now.


Cheers,

> 
> Regards,
> Gilles
> 


-- 
Sebastian Castro
DNS Specialist
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 495 2337
mobile: +64 21 400535