[Opendnssec-user] ods-enforcerd died

[Paul Wouters]

On my rhel6 machine, I had the enforcer die on me a week ago.
(1.4.0rc1 plus patches that should be the same as rc2)

I guess it's time to implement restart logic in the init scripts....

The logs show:

/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: HSM connection open.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Reading config "/etc/opendnssec/conf.xml"
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Reading config schema "/usr/share/opendnssec/conf.rng"
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Using 1 enforcer worker (multiple enforcer workers not supported with this database backend).
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Communication Interval: 3600
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No DS Submit command supplied
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SQLite database set to: /var/opendnssec/kasp.db
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Log User set to: local0
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Switched log facility to: local0
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Connecting to Database...
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy default found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: ERROR: error executing SQL - database is locked
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Error (71691) updating salt for default
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM: C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove successful: 9eb6b9c61d013daaf0406103f72067ae
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM: C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove successful: 0a0738bb5a34e755dacb08249ff7eb96
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM: C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove successful: d6db7099fe2d5fc8f0bf4a3c7deb26b7
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM: C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove successful: 96fdb01cdb09573e8ff67b5b5aef347b
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM: C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove successful: ecc1d3e449d596b55dc746df0084b7e2
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM: C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove successful: 9a8888adc8394865ef50ef16be7ebcbd
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM: C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove successful: 9e7511efb30f7bf6dc21b4c23a7878a7
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM: C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove successful: bc61331a2867c9fde15636dbd4295df9
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy nsec found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No zones on policy nsec, skipping...
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy migration found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy downgrade found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No zones on policy downgrade, skipping...
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy optout found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: zonelist filename set to /etc/opendnssec/zonelist.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone nohats.ca found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for nohats.ca set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy default found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/nohats.ca.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for nohats.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone 'nohats.ca' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: ERROR: error executing SQL - database is locked
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/nohats.ca.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone hacklab.ca found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for hacklab.ca set to migration.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy migration found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/hacklab.ca.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: ERROR: error executing SQL - SQL logic error or missing database
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: ERROR: database operation failed - SQL logic error or missing database
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: KsmRequestKeys returned: 71691
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Signconf not written for hacklab.ca
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone hacklab.to found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for hacklab.to set to migration.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/hacklab.to.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for hacklab.to and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone 'hacklab.to' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/hacklab.to.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone naomirae.com found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for naomirae.com set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy default found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/naomirae.com.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for naomirae.com and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone 'naomirae.com' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/naomirae.com.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone hippiesfromhell.org found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for hippiesfromhell.org set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/hippiesfromhell.org.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for hippiesfromhell.org and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone 'hippiesfromhell.org' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/hippiesfromhell.org.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone colah.ca found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for colah.ca set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/colah.ca.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for colah.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone 'colah.ca' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/colah.ca.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone 157.110.193.in-addr.arpa found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for 157.110.193.in-addr.arpa set to migration.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy migration found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/157.110.193.in-addr.arpa.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for 157.110.193.in-addr.arpa and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone '157.110.193.in-addr.arpa' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/157.110.193.in-addr.arpa.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone libreswan.org found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for libreswan.org set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy default found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.org.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.org and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone 'libreswan.org' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/libreswan.org.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone libreswan.net found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for libreswan.net set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.net.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.net and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone 'libreswan.net' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/libreswan.net.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone libreswan.com found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for libreswan.com set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.com.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.com and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone 'libreswan.com' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/libreswan.com.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone valleymedia.net found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for valleymedia.net set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/valleymedia.net.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for valleymedia.net and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone 'valleymedia.net' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/valleymedia.net.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone implicitcad.org found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for implicitcad.org set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/implicitcad.org.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for implicitcad.org and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone 'implicitcad.org' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/implicitcad.org.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone 64/28.157.10.76.in-addr.arpa found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for 64/28.157.10.76.in-addr.arpa set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/64-28.157.10.76.in-addr.arpa.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for 64/28.157.10.76.in-addr.arpa and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone '64/28.157.10.76.in-addr.arpa' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/64-28.157.10.76.in-addr.arpa.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone optout.nohats.ca found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for optout.nohats.ca set to optout.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy optout found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/optout.nohats.ca.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for optout.nohats.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone 'optout.nohats.ca' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/optout.nohats.ca.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone libreswan.ca found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for libreswan.ca set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy default found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.ca.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone 'libreswan.ca' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/libreswan.ca.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone xn--nohts-5qa.ca found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for xn--nohts-5qa.ca set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/xn--nohts-5qa.ca.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for xn--nohts-5qa.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK rollover for zone 'xn--nohts-5qa.ca' not completed as there are no keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/xn--nohts-5qa.ca.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Disconnecting from Database...
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Sleeping for 3600 seconds.
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: HSM connection open.
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Reading config "/etc/opendnssec/conf.xml"
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Reading config schema "/usr/share/opendnssec/conf.rng"
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Using 1 enforcer worker (multiple enforcer workers not supported with this database backend).
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Communication Interval: 3600
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: No DS Submit command supplied
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: SQLite database set to: /var/opendnssec/kasp.db
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Log User set to: local0
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Switched log facility to: local0
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Connecting to Database...
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: ERROR: error executing SQL - database is locked


Upon restarting ods-enforcerd:


/var/log/messages:Feb 19 16:40:18 nohats ods-enforcerd: opendnssec starting...
/var/log/messages:Feb 19 16:40:18 nohats ods-enforcerd: opendnssec Parent exiting...
/var/log/messages:Feb 19 16:40:18 nohats ods-enforcerd: opendnssec forked OK...
/var/log/messages:Feb 19 16:40:18 nohats ods-enforcerd: group set to: ods (494)
/var/log/messages:Feb 19 16:40:18 nohats ods-enforcerd: user set to: ods (495)
/var/log/messages:Feb 19 16:40:18 nohats ods-enforcerd: opendnssec started (version 1.4.0rc1), pid 13313
/var/log/messages:Feb 19 16:40:19 nohats ods-enforcerd: HSM opened successfully.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Checking database connection...
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Database connection ok.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Reading config "/etc/opendnssec/conf.xml"
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Reading config schema "/usr/share/opendnssec/conf.rng"
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Using 1 enforcer worker (multiple enforcer workers not supported with this database backend).
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Communication Interval: 3600
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: No DS Submit command supplied
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: SQLite database set to: /var/opendnssec/kasp.db
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Log User set to: local0
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Switched log facility to: local0
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Connecting to Database...
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy default found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Key not found: 9eb6b9c61d013daaf0406103f72067ae
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy nsec found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: No zones on policy nsec, skipping...
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy migration found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy downgrade found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: No zones on policy downgrade, skipping...
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy optout found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: zonelist filename set to /etc/opendnssec/zonelist.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone nohats.ca found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for nohats.ca set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy default found in DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/nohats.ca.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for nohats.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for nohats.ca 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Could not call signer engine
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Will continue: call '/usr/sbin/ods-signer update nohats.ca' to manually update the zone
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone hacklab.ca found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for hacklab.ca set to migration.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy migration found in DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/hacklab.ca.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for hacklab.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for hacklab.ca 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone hacklab.to found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for hacklab.to set to migration.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/hacklab.to.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for hacklab.to and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for hacklab.to 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone naomirae.com found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for naomirae.com set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy default found in DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/naomirae.com.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for naomirae.com and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for naomirae.com 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone hippiesfromhell.org found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for hippiesfromhell.org set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/hippiesfromhell.org.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for hippiesfromhell.org and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for hippiesfromhell.org 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone colah.ca found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for colah.ca set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/colah.ca.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for colah.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for colah.ca 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone 157.110.193.in-addr.arpa found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for 157.110.193.in-addr.arpa set to migration.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy migration found in DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/157.110.193.in-addr.arpa.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for 157.110.193.in-addr.arpa and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for 157.110.193.in-addr.arpa 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone libreswan.org found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for libreswan.org set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy default found in DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.org.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.org and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for libreswan.org 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone libreswan.net found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for libreswan.net set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.net.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.net and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for libreswan.net 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone libreswan.com found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for libreswan.com set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.com.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.com and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for libreswan.com 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone valleymedia.net found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for valleymedia.net set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/valleymedia.net.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for valleymedia.net and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for valleymedia.net 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone implicitcad.org found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for implicitcad.org set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/implicitcad.org.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for implicitcad.org and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for implicitcad.org 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone 64/28.157.10.76.in-addr.arpa found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for 64/28.157.10.76.in-addr.arpa set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/64-28.157.10.76.in-addr.arpa.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for 64/28.157.10.76.in-addr.arpa and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for 64/28.157.10.76.in-addr.arpa 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone optout.nohats.ca found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for optout.nohats.ca set to optout.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy optout found in DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/optout.nohats.ca.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for optout.nohats.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for optout.nohats.ca 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone libreswan.ca found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for libreswan.ca set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy default found in DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.ca.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for libreswan.ca 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone xn--nohts-5qa.ca found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for xn--nohts-5qa.ca set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/xn--nohts-5qa.ca.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for xn--nohts-5qa.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for xn--nohts-5qa.ca 
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Disconnecting from Database...
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Sleeping for 3600 seconds.
[root at nohats nsd]#