[Opendnssec-user] ods-signerd not signing zone on schedule

[Rob Gallagher]

Hi all,

Running OpenDNSSEC 1.3.3 on Ubuntu 10.04.

I'd noticed that ods-signerd had not updated one of our zones in
several days, even though some of the signatures were approaching
expiration and others had indeed expired. 

As a test, I added a record to the zone in question and decided to wait
until the next scheduled run of the signer, rather than signing the zone
immediately with ods-signer.

Strangely, ods-signerd did not recognise that the zone had changed
when the scheduled signing time arrived, however I was able to update
and re-sign the zone manually with ods-signer from the command line.
 
Debug output from "ods-signerd -vvvvvv" is attached, both from the
failed (ods-signer-scheduled.txt) and successful (ods-signer-manual.txt)
signing attempts.

Any thoughts? Are there differences between invoking ods-signer from
the command line and the scheduled run of ods-signerd? (eg: tty
attached)

rg

-- 
Rob Gallagher | Public Key: 0x1DD13A78

HEAnet Limited, Ireland's Education and Research Network
1st Floor, 5 George's Dock, IFSC, Dublin 1.
Registered in Ireland, no 275301
T: (+353-1) 6609040  F: (+353-1) 6603666 WWW: http://www.heanet.ie/

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ods-signer-manual.txt
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20111207/bce24200/attachment.txt>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ods-signer-scheduled.txt
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20111207/bce24200/attachment-0001.txt>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20111207/bce24200/attachment.bin>