[Opendnssec-user]ods-signer failed when ods-signerd is running

[刘硕]

Hi ,
I found an interesting thing that when the two processes is running, I mean ods-signerd and ods-enforcerd. I can not use ods-signer to sign zone manually, but the automatic signing seems works well.
Bellow are clues for you:
[root at CST-BJ-104:202.173.9.19 :/var/opendnssec/signed]$ps -aux|grep ods
Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.8/FAQ
root      3955  0.0  0.0  40660  5548 ?        SLs  Jul12   0:07 /usr/local/sbin/ods-enforcerd
root     12080  0.0  1.1 1022852 91780 ?       SLsl Jul13   1:35 ods-signerd
root     28509  0.0  0.0 103236   808 pts/2    S+   09:08   0:00 grep ods

[root at CST-BJ-104:202.173.9.19 :/var/opendnssec/signed]$ods-signer sign example
Unable to connect to engine: connect() failed: No such file or directory

[root at CST-BJ-104:202.173.9.19 :/var/opendnssec/signed]$tail /var/log/messages
Jul 17 08:59:17 CST-BJ-104 rsyslogd-2177: imuxsock lost 167 messages from pid 12080 due to rate-limiting
Jul 17 09:04:25 CST-BJ-104 ods-signerd: [worker[4]] sign zone example
Jul 17 09:04:25 CST-BJ-104 ods-signerd: [zone] zone example set soa serial to 1342487065
Jul 17 09:04:25 CST-BJ-104 ods-signerd: [worker[4]] write zone example
Jul 17 09:04:25 CST-BJ-104 ods-signerd: [STATS] example RR[count=0 time=0(sec)] NSEC3[count=0 time=0(sec)] RRSIG[new=8 reused=17 time=0(sec) avg=0(sig/sec)] TOTAL[time=0(sec)] 
Jul 17 09:04:25 CST-BJ-104 ods-signerd: [worker[4]] sign zone example2
Jul 17 09:04:25 CST-BJ-104 ods-signerd: [zone] zone example2 set soa serial to 1342487065
Jul 17 09:04:25 CST-BJ-104 ods-signerd: [worker[4]] write zone example2
Jul 17 09:04:25 CST-BJ-104 rsyslogd-2177: imuxsock begins to drop messages from pid 12080 due to rate-limiting
Jul 17 09:09:07 CST-BJ-104 rsyslogd-2177: imuxsock lost 179 messages from pid 12080 due to rate-limiting

[root at CST-BJ-104:202.173.9.19 :/var/opendnssec/signed]$dig @202.173.9.19 -p 5356 +short example soa
ns1.knet.cn. mail.knet.cn. 1342487065 10800 3600 60480 300

[root at CST-BJ-104:202.173.9.19 :/var/opendnssec/signed]$dig @202.173.9.19 -p 5356 +short example soa
ns1.knet.cn. mail.knet.cn. 1342488865 10800 3600 60480 300


Do ods-signer and ods-signerd have some relationship? Why can not I use ods-signer manually when ods-signerd is running?


Best regards,
Stuart



Stuart Lau
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20120717/26f45575/attachment.htm>