[Opendnssec-user] problem with the auditor when upgrading from 1.1.1 to 1.2.1

[Alex Dalitz]

Can you please try svn r5144?

Thanks!


Alex.

On 18 May 2011, at 12:24, Mathieu Arnold wrote:

> Hi,
> 
> I have a mostly delegation zone (notaires.fr) with the following excerpt
> (all that concerns paris.notaires.fr is in there) :
> 
> paris.notaires.fr.                            86400 IN MX       50
> mta1a.mail.zscaler.net.
> paris.notaires.fr.                            86400 IN MX       50
> mta1b.mail.zscaler.net.
> paris.notaires.fr.                            86400 IN MX       100
> mta1c.mail.zscaler.net.
> adl.paris.notaires.fr.                        86400 IN NS
> ns0.coltfrance.com.
> adl.paris.notaires.fr.                        86400 IN NS
> ns1.coltfrance.com.
> casagrande-labrousse.paris.notaires.fr.       86400 IN NS
> ns1.lerelaisinternet.com.
> casagrande-labrousse.paris.notaires.fr.       86400 IN NS
> ns2.lerelaisinternet.com.
> certif.paris.notaires.fr.                     86400 IN A
> 193.149.96.242
> cridon.paris.notaires.fr.                     86400 IN A
> 193.149.97.197
> eternis.paris.notaires.fr.                    86400 IN A
> 193.149.119.161
> glm.paris.notaires.fr.                        86400 IN NS
> ns2.domicile.fr.
> glm.paris.notaires.fr.                        86400 IN NS
> ns3.domicile.fr.
> intranot.paris.notaires.fr.                   86400 IN A
> 212.121.182.58
> ldap.paris.notaires.fr.                       86400 IN A
> 212.121.182.57
> mail.paris.notaires.fr.                       86400 IN NS
> ns1.francenet.fr.
> mail.paris.notaires.fr.                       86400 IN NS
> ns2.francenet.fr.
> mail.paris.notaires.fr.                       86400 IN NS
> ns3.francenet.fr.monassier-et-associes.paris.notaires.fr.      86400 IN NS
> ns1.lsv.fr.
> monassier-et-associes.paris.notaires.fr.      86400 IN NS
> ns3.proximit.fr.
> moreldarleux-duboys-hurel.paris.notaires.fr.  86400 IN NS       ns1.lsv.fr.
> moreldarleux-duboys-hurel.paris.notaires.fr.  86400 IN NS
> ns3.proximit.fr.
> transfert.paris.notaires.fr.                  86400 IN A
> 193.149.97.194
> urn.paris.notaires.fr.                        86400 IN A
> 193.149.97.194
> www.paris.notaires.fr.                        86400 IN A
> 193.149.119.186
> 
> 
> which is fine as far as I can tell. (It was generated through
> named-compilezone.)
> 
> but the auditor seems to think otherwise :
> $ /usr/local/bin/ods-auditor -z notaires.fr
> Auditor started
> Auditor starting on notaires.fr
> 6: SOA differs : from 1305712977 to 1305649900
> 6: Auditing notaires.fr zone : NSEC3 SIGNED
> 3: Glue should not be signed : eternis.paris.notaires.fr, A
> 3: Glue should not be signed : ldap.paris.notaires.fr, A
> 6: Finished auditing notaires.fr zone
> Auditor found errors - check log for details
> *** Error code 3
> 
> I don't really understand why it believes that those are glues (they are
> not referenced anywhere else in the zone) and I don't really understand why
> those two are the only ones considered bad as they are not the only A under
> paris.notaires.fr.
> 
> Have I uncovered a bug, or is there something wrong I can't see ?
> 
> Regards,
> 
> -- 
> Mathieu Arnold
> _______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user