[Opendnssec-user] Signing large zone and .tmp file issue

Tue Jul 24 07:41:44 UTC 2012

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

This has been fixed just now (r6490). Thanks Stuart for the debug logs.

Best regards,
  Matthijs

On 07/24/2012 05:44 AM, 刘硕 wrote:
> Hi Jerry,
> 
> I'm using the code from your trunk, and I have tested example4(20Mb
> as described many times), and there is still a .tmp suffix and the
> adapter failed error. Bellow is the log extracted from syslog about
> example4: [root at CST-BJ-103 signed]# tail -n100
> /var/log/messages|grep example4 Jul 24 11:22:55 CST-BJ-103
> ods-signerd: [worker[4]] sign zone example4 Jul 24 11:25:49
> CST-BJ-103 ods-signerd: [worker[4]] write zone example4 Jul 24
> 11:25:49 CST-BJ-103 ods-signerd: [adapter] write zone example4
> serial 1343099951 to output file adapter
> /var/opendnssec/signed/example4 Jul 24 11:26:34 CST-BJ-103
> ods-signerd: [tools] unable to write zone example4: adapter failed
> (Assertion error) Jul 24 11:26:34 CST-BJ-103 ods-signerd:
> [worker[4]] backoff task [configure] for zone example4 with 60
> seconds Jul 24 11:27:34 CST-BJ-103 ods-signerd: [worker[4]]
> configure zone example4 Jul 24 11:27:34 CST-BJ-103 ods-signerd:
> [zone] zone example4 signconf file
> /var/opendnssec/signconf/example4.xml is unchanged since 2012-07-24
> 11:19:11 Jul 24 11:27:34 CST-BJ-103 ods-signerd: [worker[4]] read
> zone example4 Jul 24 11:27:34 CST-BJ-103 ods-signerd: [adapter]
> read zone example4 from file input adapter
> /var/opendnssec/unsigned/example4 Jul 24 11:27:34 CST-BJ-103
> ods-signerd: [adapter] zone example4 set soa ttl to 300 Jul 24
> 11:27:34 CST-BJ-103 ods-signerd: [adapter] zone example4 set soa
> minimum to 300 Jul 24 11:27:34 CST-BJ-103 ods-signerd: [adapter]
> zone example4 set soa serial to 1343100454 Jul 24 11:29:02
> CST-BJ-103 ods-signerd: [worker[4]] sign zone example4 Jul 24
> 11:29:34 CST-BJ-103 ods-signerd: [worker[4]] write zone example4 
> Jul 24 11:29:34 CST-BJ-103 ods-signerd: [adapter] write zone
> example4 serial 1343100454 to output file adapter
> /var/opendnssec/signed/example4 Jul 24 11:30:19 CST-BJ-103
> ods-signerd: [tools] unable to write zone example4: adapter failed
> (Assertion error) Jul 24 11:30:19 CST-BJ-103 ods-signerd:
> [worker[4]] backoff task [configure] for zone example4 with 120
> seconds Jul 24 11:32:19 CST-BJ-103 ods-signerd: [worker[4]]
> configure zone example4 Jul 24 11:32:19 CST-BJ-103 ods-signerd:
> [zone] zone example4 signconf file
> /var/opendnssec/signconf/example4.xml is unchanged since 2012-07-24
> 11:19:11 Jul 24 11:32:19 CST-BJ-103 ods-signerd: [worker[4]] read
> zone example4 Jul 24 11:32:19 CST-BJ-103 ods-signerd: [adapter]
> read zone example4 from file input adapter
> /var/opendnssec/unsigned/example4 Jul 24 11:32:19 CST-BJ-103
> ods-signerd: [adapter] zone example4 set soa ttl to 300 Jul 24
> 11:32:19 CST-BJ-103 ods-signerd: [adapter] zone example4 set soa
> minimum to 300 Jul 24 11:32:19 CST-BJ-103 ods-signerd: [adapter]
> zone example4 set soa serial to 1343100739 Jul 24 11:33:54
> CST-BJ-103 ods-signerd: [worker[4]] sign zone example4 Jul 24
> 11:34:25 CST-BJ-103 ods-signerd: [worker[4]] write zone example4 
> Jul 24 11:34:25 CST-BJ-103 ods-signerd: [adapter] write zone
> example4 serial 1343100739 to output file adapter
> /var/opendnssec/signed/example4 Jul 24 11:35:12 CST-BJ-103
> ods-signerd: [tools] unable to write zone example4: adapter failed
> (Assertion error) Jul 24 11:35:12 CST-BJ-103 ods-signerd:
> [worker[4]] backoff task [configure] for zone example4 with 240
> seconds Jul 24 11:39:12 CST-BJ-103 ods-signerd: [worker[4]]
> configure zone example4 Jul 24 11:39:12 CST-BJ-103 ods-signerd:
> [zone] zone example4 signconf file
> /var/opendnssec/signconf/example4.xml is unchanged since 2012-07-24
> 11:19:11 Jul 24 11:39:12 CST-BJ-103 ods-signerd: [worker[4]] read
> zone example4 Jul 24 11:39:12 CST-BJ-103 ods-signerd: [adapter]
> read zone example4 from file input adapter
> /var/opendnssec/unsigned/example4 Jul 24 11:39:12 CST-BJ-103
> ods-signerd: [adapter] zone example4 set soa ttl to 300 Jul 24
> 11:39:12 CST-BJ-103 ods-signerd: [adapter] zone example4 set soa
> minimum to 300 Jul 24 11:39:12 CST-BJ-103 ods-signerd: [adapter]
> zone example4 set soa serial to 1343101152 Jul 24 11:40:15
> CST-BJ-103 ods-signerd: [worker[4]] sign zone example4 Jul 24
> 11:40:44 CST-BJ-103 ods-signerd: [worker[4]] write zone example4 
> Jul 24 11:40:44 CST-BJ-103 ods-signerd: [adapter] write zone
> example4 serial 1343101152 to output file adapter
> /var/opendnssec/signed/example4 Jul 24 11:41:19 CST-BJ-103
> ods-signerd: [tools] unable to write zone example4: adapter failed
> (Assertion error) Jul 24 11:41:19 CST-BJ-103 ods-signerd:
> [worker[4]] backoff task [configure] for zone example4 with 480
> seconds
> 
> -rw-r--r-- 1 root root 40265912 Jul 24 11:41 example4.tmp
> 
> And I can see a lot of "Jul 24 11:29:53 CST-BJ-103 ods-signerd:
> [denial] unable to print denial: denial of fd missing " messages.
> 
> 
> Best regards, Stuart *From:* Jerry Lundstr鰉
> <mailto:jerry at opendnssec.org> *Date:* 2012-07-23 14:48 *To:*
> shuoleo <mailto:shuoleo at 126.com> *CC:* opendnssec-user
> <mailto:opendnssec-user at lists.opendnssec.org>; Matthijs Mekking
> <mailto:matthijs at nlnetlabs.nl>; Paul Wouters 
> <mailto:paul at nohats.ca> *Subject:* Re: [Opendnssec-user] Signing
> large zone and .tmp file issue Hi Stuart,
> 
> On Fri, Jul 20, 2012 at 7:31 AM, 刘硕 <shuoleo at 126.com> wrote:
>> Jul 20 11:44:51 CST-BJ-104 ods-signerd: [adapter] read zone
>> example4 from file input adapter /var/opendnsse
> 
> This log line looks strange, was it cut off?
> 
>> And When I run ods-signer sign --all command, the other three
>> small zones are signed and transfer to BIND successfully,but
>> example4 zone file which is 20Mb seemed not signed and
>> transferred at all Jul 20 11:58:13 CST-BJ-104 ods-signerd:
>> [tools] unable to write zone example4: adapter failed (Assertion
>> error)
> 
> As the log says there was an Assertion Error when trying to write
> the zone and there for it was not transfered.
> 
> There have been a lot of fixes done for 1.4 branch, maybe you
> could try our trunk? $ svn checkout
> https://svn.opendnssec.org/trunk OpenDNSSEC-trunk
> 
> /Jerry

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJQDlG4AAoJEA8yVCPsQCW5jWUIANqOyFnPozBqyo4TrXilEBds
7LjjBxD8Oo/skUUgLePIqyAXcbBxM5uYlDeWAwBS6MDn+AQ2XhPEkU53u+ty0Dlr
houbDjjeNNVbz0v9XDb5VHW0eQL+xI/o9i5YrMzPrJptpXsP+WQluBCjnrfMehzI
mSX+EE7T1+egrbuxO0nfkYwS4+OGl1ET02wrCSccbn1n0AT+rjNK5F3jNeA6Oceu
lzrhYw1npGhF6J1u9iAxiiF63Xe3bbXFg1Vlv/QjoX6JMIxfqpdsC//one4mAF+k
3bdswMaOJAkyMd6OtXu0fTUMr7v4LVopc7GLWZdhEgoXRq75wzhoq1n8x7RRFpA=
=1uld
-----END PGP SIGNATURE-----