[Opendnssec-user] time issues

Rickard Bellgrim rickard at opendnssec.org
Mon Jan 9 10:25:19 UTC 2012


> This SOA drift started to occur again then auditor don't like the zone due to ldns bug affected zone.

This is not the previous ldns bug and the Auditor does not give an
error. This line is just an info message.

It is indeed a strange behavior of the SOA serial. Could you tell us
more about your setup? Is the system only signing a single zone? Are
you signing multiple zones, but only a single zone have the problem?

> Jan  4 20:48:53 hidden-master ods-auditor[9934]: SOA differs : from 2012010402 to 2012010404
> Jan  5 12:56:07 hidden-master ods-auditor[10443]: SOA differs : from 2012010402 to 2012010500
> Jan  5 12:56:08 hidden-master ods-auditor[8937]: SOA differs : from 2012010402 to 2012010500
> Jan  5 12:56:08 hidden-master ods-auditor[19982]: SOA differs : from 2012010402 to 2012010500
> Jan  5 13:06:02 hidden-master ods-auditor[19565]: SOA differs : from 2012010402 to 2012010500
> Jan  6 20:49:32 hidden-master ods-auditor[13302]: SOA differs : from 2011121300 to 2012010600
> Jan  6 20:49:32 hidden-master ods-auditor[11034]: SOA differs : from 2011121302 to 2012010600
> Jan  6 20:49:32 hidden-master ods-auditor[22569]: SOA differs : from 2011121300 to 2012010600

The inbound serial was decreased. How come? It is also strange that
the outbound serial is the same in some cases. Aren't these log
messages from multiple zones?

The Auditor does not log an audit in a single line. Each audit
produces multiple lines, which can be mixed up since they are not
tagged with the zone name. Only the first message is tagged.

> Jan  8 00:14:33 hidden-master ods-auditor[14179]: SOA differs : from 2012010402 to 2012011197
> Jan  8 00:16:38 hidden-master ods-auditor[25128]: SOA differs : from 2012010402 to 2012011594
> Jan  8 00:20:33 hidden-master ods-auditor[16118]: SOA differs : from 2012010402 to 2012011991
> Jan  8 00:28:33 hidden-master ods-auditor[17482]: SOA differs : from 2012010402 to 2012012388
> Jan  8 00:44:33 hidden-master ods-auditor[28203]: SOA differs : from 2012010402 to 2012012785
> Jan  8 01:16:34 hidden-master ods-auditor[14082]: SOA differs : from 2012010402 to 2012013182
> Jan  8 02:16:39 hidden-master ods-auditor[8155]: SOA differs : from 2012010402 to 2012013579
> Jan  8 03:16:40 hidden-master ods-auditor[27955]: SOA differs : from 2012010402 to 2012013976
> Jan  8 04:16:39 hidden-master ods-auditor[12804]: SOA differs : from 2012010402 to 2012014373
> Jan  8 05:16:41 hidden-master ods-auditor[25100]: SOA differs : from 2012010402 to 2012014770
> Jan  8 06:16:43 hidden-master ods-auditor[15671]: SOA differs : from 2012010402 to 2012015167
> Jan  8 07:16:46 hidden-master ods-auditor[9411]: SOA differs : from 2012010402 to 2012015564
> Jan  8 08:16:48 hidden-master ods-auditor[15142]: SOA differs : from 2012010402 to 2012015961
> Jan  8 09:16:50 hidden-master ods-auditor[15927]: SOA differs : from 2012010402 to 2012016358
> Jan  8 10:16:52 hidden-master ods-auditor[29363]: SOA differs : from 2012010402 to 2012016755
> Jan  8 11:16:55 hidden-master ods-auditor[6845]: SOA differs : from 2012010402 to 2012017152
> Jan  8 12:16:56 hidden-master ods-auditor[7580]: SOA differs : from 2012010402 to 2012017549
> Jan  8 13:16:58 hidden-master ods-auditor[23128]: SOA differs : from 2012010402 to 2012017946
> Jan  8 14:13:58 hidden-master ods-auditor[9620]: SOA differs : from 2012010402 to 2012018343
> Jan  8 14:14:00 hidden-master ods-auditor[16325]: SOA differs : from 2012010402 to 2012010801
> Jan  8 14:14:59 hidden-master ods-auditor[171]: SOA differs : from 2012010402 to 2012018740
> Jan  8 14:17:02 hidden-master ods-auditor[1802]: SOA differs : from 2012010402 to 2012019137
> Jan  8 14:21:03 hidden-master ods-auditor[16026]: SOA differs : from 2012010402 to 2012019534
> Jan  8 14:29:03 hidden-master ods-auditor[18635]: SOA differs : from 2012010402 to 2012019931
> Jan  8 14:45:04 hidden-master ods-auditor[27469]: SOA differs : from 2012010402 to 2012020328
> Jan  8 15:17:05 hidden-master ods-auditor[12833]: SOA differs : from 2012010402 to 2012020725
> Jan  8 16:17:05 hidden-master ods-auditor[28069]: SOA differs : from 2012010402 to 2012021122
> Jan  8 17:17:03 hidden-master ods-auditor[15089]: SOA differs : from 2012010402 to 2012021519
> Jan  8 18:17:06 hidden-master ods-auditor[9696]: SOA differs : from 2012010402 to 2012021916
> Jan  8 19:17:08 hidden-master ods-auditor[24329]: SOA differs : from 2012010402 to 2012022313
> Jan  8 20:17:08 hidden-master ods-auditor[10180]: SOA differs : from 2012010402 to 2012022710

These values are really strange.

// Rickard



More information about the Opendnssec-user mailing list