[Opendnssec-user] signerd problem

[Matthijs Mekking]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/02/2012 03:55 PM, Mathieu Arnold wrote:
> Hi,
> 
> Today, I got :
> 
> Aug  2 12:31:03 ns1 ods-signerd: [STATS] 240.143.79.in-addr.arpa
> RR[count=0 time=0(sec)] NSEC[count=0 time=0(sec)] RRSIG[new=43
> reused=483 time=0(sec) avg=0(sig/sec)] AUDIT[time=7(sec)]
> TOTAL[time=7(sec)] Aug  2 12:31:09 ns1 ods-signerd: [hsm] idle
> libhsm connection, trying to reopen Aug  2 12:31:11 ns1
> ods-signerd: [hsm] libhsm connection opened succesfully Aug  2
> 12:31:11 ns1 ods-signerd: [drudger[1]] error creating libhsm
> context Aug  2 12:31:11 ns1 ods-signerd: [worker[2]] sign zone 
> 241.143.79.in-addr.arpa failed: 532 of 532 signatures failed Aug  2
> 12:31:11 ns1 ods-signerd: [worker[2]] backoff task [sign] for zone 
> 241.143.79.in-addr.arpa with 60 seconds Aug  2 12:31:11 ns1
> ods-signerd: [drudger[2]] error creating libhsm context Aug  2
> 12:31:16 ns1 ods-signerd: [worker[2]] sign zone 
> a.0.1.e.e.1.1.c.2.0.0.2.ip6.arpa failed: 14 of 14 signatures
> failed Aug  2 12:31:16 ns1 ods-signerd: [worker[2]] backoff task
> [sign] for zone a.0.1.e.e.1.1.c.2.0.0.2.ip6.arpa with 60 seconds 
> Aug  2 12:31:32 ns1 ods-signerd: [worker[2]] sign zone 
> 242.143.79.in-addr.arpa failed: 520 of 520 signatures failed Aug  2
> 12:31:32 ns1 ods-signerd: [worker[2]] backoff task [sign] for zone 
> 242.143.79.in-addr.arpa with 60 seconds
> 
> 
> And after that, it continued to backoff the signing process for all
> the zones, I had to stop/start the signer to get it working
> again...

Would it perhaps complain: "unable to drudge: no zone reference" ?

I have applied Jerry's idea to move the creating context within the
while loop, so that if creating the context failed, it will retry when
the backed off task is retried.

Best regards,
  Matthijs


> 
> opendnssec 1.3.9 softhsm 1.3.3 freebsd 8.2
> 
> 


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJQH3cpAAoJEA8yVCPsQCW5E5wIAK4x8YqJg98r71ZLk2Y+7P7R
TLFqtvsTIoO4wqImAnBz3Q59jxdRkFgvGknBBseEtU6lG4QBnvUo2cT0ZtItKNoz
g/q0L+6WFnqX5UWjJNAODmjSn7IwKbDI9U/D8jhBuDYQW8nT9hYA8FIKK66ny/bY
iJlW4pHOG0jvgjFyYjoWA6qL87Ny2EmTK6JufYQsaaa0xkI7vB5NI7sD+pKJlt6R
0Mo2TMK2CVan5374Wo3ZXP7X6EA2aHVT4WIfvew490gV3UyHESFzFOqWyFs/P7hi
F+BIzaqYXHvstICpbo1+aFTIMV5ZQU527PN6top93Q35dbBVGu4B1sYS0zwk4XE=
=hWkx
-----END PGP SIGNATURE-----