[Opendnssec-user] confusing error messages
Miek Gieben
miek at miek.nl
Tue Aug 16 08:05:26 UTC 2011
[ Quoting Matthijs Mekking at 10:01 on August 16 in "Re: [Opendnssec-user] confusing err"... ]
> > But the setting is 'keep':
> >
> > $ ods-ksmutil policy export -p default | grep Serial
> > <Serial>keep</Serial>
> >
> > I'm I doing something wrong here?
>
> Hi Miek,
>
> The 'keep' value tells the signer that the operator manually updates the
> serial in the unsigned zone file.
>
> If the signer is triggered to sign, it should increment the outbound
> serial. However, with <Serial>keep</Serial> it MUST use the serial from
> the input zone to increment the outbound serial. If that value is not
> greater than the outbound serial, the signer is unable to sign the zone.
Ah, of course. I didn't completely wipe out the ods stats, so it still
knows what the prev serial is.
*more coffee*
Thanks for the quick reply.
grtz Miek
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20110816/bd86dae0/attachment.bin>
More information about the Opendnssec-user
mailing list