[Opendnssec-user] ods-signerd warning instead of failure on occluded data

[Matthijs Mekking]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Dave,

We are going to make it warnings.

Best regards,
  Matthijs

On 03/02/2011 04:51 PM, Dave Knight wrote:
> 
> On 2011-01-31, at 6:42 AM, Billy Glynn wrote:
> 
>> Hi,
>>
>> We're testing OpenDNSSEC signer engine version 1.3.0-trunk
>>
>> We're receiving occluded data errors for the ie zone as follows:
>>
>> Jan 31 11:22:20 ods-test ods-signerd: occluded data at
>> banba.domainregistry.ie. (below domainregistry.ie. NS)
>> Jan 31 11:22:20 ods-test ods-signerd: occluded data at
>> gns1.domainregistry.ie. (below domainregistry.ie. NS)
>> Jan 31 11:22:20 ods-test ods-signerd: occluded data at
>> gns2.domainregistry.ie. (below domainregistry.ie. NS)
>> Jan 31 11:22:20 ods-test ods-signerd: occluded data at b.iedr.ie. (below
>> iedr.ie. NS)
>> Jan 31 11:22:20 ods-test ods-signerd: update zone ie failed: zone data
>> contains errors
>> Jan 31 11:22:20 ods-test ods-signerd: task [update zone ie] failed
>>
>> Ideally, we would prefer to not have to change the glue in our TLD zone.
>>
>> Would it be possible to warn about occluded data and continue signing,
>> instead of failing the process?
> 
> I didn't see an answer to this on-list, am also interested in to see if there will be an easier way to apply this local policy than modifying the source code. Alternatively an explanation of why this shouldn't be possible would be good.
> 
> dave_______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJNbm7GAAoJEA8yVCPsQCW5fkwH/2Nfk72L9MtVy09SmSg8iYI6
bkm3wgg5H1L/v8zfj7xkufsPbkGYC6vpAywsH/vG5M4weITKNbkrjDdMOfyd0SGf
Wz2douxCscNYqW/x4PQLMo0HE3YxbJb/dHQodiroNoYTY/+z5X0IFtjygaT2gifI
A3H0lMhrD+FWoUvmgbYqsFD+c7GV+cYCI78Dmm9qUidB3G6AlwPeBisfZ5QSBC/R
50haJhxNhoylttwHaPBzo+qi1KiNkUddDMFCdUuzpQSwNwu0o7RZLbmjQKfLUVCM
32tkXTmTdx66aTPvatLle17XViNAoWqAnemO/oRSZefHYJc8qSo1AwpWkgE1ZSo=
=0b5o
-----END PGP SIGNATURE-----