[Opendnssec-user] OpenDNSSEC in ISP environment (lots of small zones)?

Tim Dykes ttdykes at gmail.com
Mon Jan 31 12:37:44 UTC 2011


Set signer verbosity as high as possible and might see the reason the zone
transfer is failing in syslog.
On 31/01/2011 11:34 PM, "Jan-Piet Mens" <jpmens at gmail.com> wrote:
> Hello Rickard,
>
> On 31.01.11 13:27 , Rickard Bellgrim wrote:
>>> Any idea why incoming zone transfers are having a problem since
>>> switching to MySQL ?
>>
>>
>> Does it work if you change the owner/group of the directory:
/tmp/o/unsigned to opendnssec?
>
> No, it doesn't. I've even got all directories in mode 0777 to make sure,
> but there is no difference.
>
> Jan 31 13:30:18 sign1 ods-signerd: cmdhandler: updating signer
> configuration (c1007.aa)
> Jan 31 13:30:18 sign1 ods-signerd: zone fetcher reloaded (pid=22209)
> Jan 31 13:30:18 sign1 ods-signerd: zone fetcher AXFR for c1007.aa failed
> Jan 31 13:30:18 sign1 ods-signerd: AXFR for new zone c1007.aa failed
> Jan 31 13:30:18 sign1 ods-signerd: zone fetcher reloaded (pid=22209)
> Jan 31 13:30:18 sign1 ods-signerd: unable to open file
> /tmp/o/unsigned/c1007.aa.axfr for reading: No such file or directory
> Jan 31 13:30:18 sign1 ods-signerd: unable to copy axfr file
> /tmp/o/unsigned/c1007.aa.axfr to /tmp/o/unsigned/c1007.aa
> Jan 31 13:30:18 sign1 ods-signerd: task [read zone c1007.aa] failed
> Jan 31 13:30:18 sign1 ods-enforcerd: Disconnecting from Database...
> Jan 31 13:30:18 sign1 ods-enforcerd: Sleeping for 3600 seconds.
>
> Regards,
>
> -JP
> _______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20110131/8919ad31/attachment.htm>


More information about the Opendnssec-user mailing list