[Opendnssec-user] ods-enforcerd died

[Paul Wouters]

On Tue, 19 Feb 2013, Paul Wouters wrote:

> On my rhel6 machine, I had the enforcer die on me a week ago.
> (1.4.0rc1 plus patches that should be the same as rc2)

and again :/

It ran for a few hours then died again. Last successful run and crash
attached below.

Paul


Feb 19 17:40:21 nohats ods-enforcerd: HSM connection open.
Feb 19 17:40:21 nohats ods-enforcerd: Reading config "/etc/opendnssec/conf.xml"
Feb 19 17:40:21 nohats ods-enforcerd: Reading config schema "/usr/share/opendnssec/conf.rng"
Feb 19 17:40:21 nohats ods-enforcerd: Using 1 enforcer worker (multiple enforcer workers not supported with this database backend).
Feb 19 17:40:21 nohats ods-enforcerd: Communication Interval: 3600
Feb 19 17:40:21 nohats ods-enforcerd: No DS Submit command supplied
Feb 19 17:40:21 nohats ods-enforcerd: SQLite database set to: /var/opendnssec/kasp.db
Feb 19 17:40:21 nohats ods-enforcerd: Log User set to: local0
Feb 19 17:40:21 nohats ods-enforcerd: Switched log facility to: local0
Feb 19 17:40:21 nohats ods-enforcerd: Connecting to Database...
Feb 19 17:40:21 nohats ods-enforcerd: Policy default found.
Feb 19 17:40:21 nohats ods-enforcerd: ERROR: error executing SQL - database is locked
Feb 19 17:40:21 nohats ods-enforcerd: Error (71691) updating salt for default
Feb 19 17:40:21 nohats ods-enforcerd: Key sharing is Off.
Feb 19 17:40:21 nohats ods-enforcerd: Key not found: 0a0738bb5a34e755dacb08249ff7eb96
Feb 19 17:40:21 nohats ods-enforcerd: Policy nsec found.
Feb 19 17:40:21 nohats ods-enforcerd: Key sharing is Off.
Feb 19 17:40:21 nohats ods-enforcerd: No zones on policy nsec, skipping...
Feb 19 17:40:21 nohats ods-enforcerd: Policy migration found.
Feb 19 17:40:21 nohats ods-enforcerd: Key sharing is Off.
Feb 19 17:40:21 nohats ods-enforcerd: Policy downgrade found.
Feb 19 17:40:21 nohats ods-enforcerd: Key sharing is Off.
Feb 19 17:40:21 nohats ods-enforcerd: No zones on policy downgrade, skipping...
Feb 19 17:40:21 nohats ods-enforcerd: Policy optout found.
Feb 19 17:40:21 nohats ods-enforcerd: Key sharing is Off.
Feb 19 17:40:21 nohats ods-enforcerd: zonelist filename set to /etc/opendnssec/zonelist.xml.
Feb 19 17:40:21 nohats ods-enforcerd: Zone nohats.ca found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for nohats.ca set to default.
Feb 19 17:40:21 nohats ods-enforcerd: Policy default found in DB.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/nohats.ca.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for nohats.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: ERROR: error executing SQL - database is locked
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/nohats.ca.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone hacklab.ca found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for hacklab.ca set to migration.
Feb 19 17:40:21 nohats ods-enforcerd: Policy migration found in DB.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/hacklab.ca.xml.
Feb 19 17:40:21 nohats ods-enforcerd: ERROR: error executing SQL - SQL logic error or missing database
Feb 19 17:40:21 nohats ods-enforcerd: ERROR: database operation failed - SQL logic error or missing database
Feb 19 17:40:21 nohats ods-enforcerd: KsmRequestKeys returned: 71691
Feb 19 17:40:21 nohats ods-enforcerd: Signconf not written for hacklab.ca
Feb 19 17:40:21 nohats ods-enforcerd: Zone hacklab.to found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for hacklab.to set to migration.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/hacklab.to.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for hacklab.to and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/hacklab.to.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone naomirae.com found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for naomirae.com set to default.
Feb 19 17:40:21 nohats ods-enforcerd: Policy default found in DB.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/naomirae.com.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for naomirae.com and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/naomirae.com.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone hippiesfromhell.org found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for hippiesfromhell.org set to default.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/hippiesfromhell.org.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for hippiesfromhell.org and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/hippiesfromhell.org.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone colah.ca found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for colah.ca set to default.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/colah.ca.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for colah.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/colah.ca.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone 157.110.193.in-addr.arpa found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for 157.110.193.in-addr.arpa set to migration.
Feb 19 17:40:21 nohats ods-enforcerd: Policy migration found in DB.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/157.110.193.in-addr.arpa.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for 157.110.193.in-addr.arpa and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/157.110.193.in-addr.arpa.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone libreswan.org found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for libreswan.org set to default.
Feb 19 17:40:21 nohats ods-enforcerd: Policy default found in DB.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.org.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.org and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/libreswan.org.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone libreswan.net found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for libreswan.net set to default.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.net.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.net and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/libreswan.net.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone libreswan.com found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for libreswan.com set to default.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.com.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.com and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/libreswan.com.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone valleymedia.net found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for valleymedia.net set to default.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/valleymedia.net.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for valleymedia.net and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/valleymedia.net.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone implicitcad.org found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for implicitcad.org set to default.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/implicitcad.org.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for implicitcad.org and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/implicitcad.org.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone 64/28.157.10.76.in-addr.arpa found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for 64/28.157.10.76.in-addr.arpa set to default.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/64-28.157.10.76.in-addr.arpa.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for 64/28.157.10.76.in-addr.arpa and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/64-28.157.10.76.in-addr.arpa.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone optout.nohats.ca found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for optout.nohats.ca set to optout.
Feb 19 17:40:21 nohats ods-enforcerd: Policy optout found in DB.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/optout.nohats.ca.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for optout.nohats.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/optout.nohats.ca.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone libreswan.ca found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for libreswan.ca set to default.
Feb 19 17:40:21 nohats ods-enforcerd: Policy default found in DB.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.ca.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/libreswan.ca.xml
Feb 19 17:40:21 nohats ods-enforcerd: Zone xn--nohts-5qa.ca found.
Feb 19 17:40:21 nohats ods-enforcerd: Policy for xn--nohts-5qa.ca set to default.
Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/xn--nohts-5qa.ca.xml.
Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for xn--nohts-5qa.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS.
Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/xn--nohts-5qa.ca.xml
Feb 19 17:40:21 nohats ods-enforcerd: Disconnecting from Database...
Feb 19 17:40:21 nohats ods-enforcerd: Sleeping for 3600 seconds.
Feb 19 18:40:21 nohats ods-enforcerd: HSM connection open.
Feb 19 18:40:21 nohats ods-enforcerd: Reading config "/etc/opendnssec/conf.xml"
Feb 19 18:40:21 nohats ods-enforcerd: Reading config schema "/usr/share/opendnssec/conf.rng"
Feb 19 18:40:21 nohats ods-enforcerd: Using 1 enforcer worker (multiple enforcer workers not supported with this database backend).
Feb 19 18:40:21 nohats ods-enforcerd: Communication Interval: 3600
Feb 19 18:40:21 nohats ods-enforcerd: No DS Submit command supplied
Feb 19 18:40:21 nohats ods-enforcerd: SQLite database set to: /var/opendnssec/kasp.db
Feb 19 18:40:21 nohats ods-enforcerd: Log User set to: local0
Feb 19 18:40:21 nohats ods-enforcerd: Switched log facility to: local0
Feb 19 18:40:21 nohats ods-enforcerd: Connecting to Database...
Feb 19 18:40:21 nohats ods-enforcerd: ERROR: error executing SQL - database is locked
[root at nohats ~]#