[Opendnssec-user] Re: ods-enforcerd: Error creating key in repository SoftHSM-KSK

Jarno Huuskonen jarno.huuskonen at uef.fi
Sun Aug 31 14:32:57 UTC 2014


On Sun, Aug 31, Abdalmonem Tharwat Galila wrote:
> >> What do you have in softhsm.conf (/etc/softhsm.conf) ?
> 0:/var/softhsm/slot0.db
> 1:/var/softhsm/slot1.db
> 2:/var/softhsm/slot2.db
> >> Is the user account used for ods-enforcerd able to access the files defined in softhsm.conf (can change to the directory and read/write the files).
> How to get that user , you are talking about ?

What do you have in your opendnssec conf.xml

Do you have something like:

and something similar for <Signer> ?

So assuming you have <User>ods</User> can you try for example:
su - -s/bin/bash ods
and after su (as user ods)
cd /var/softhsm
ls -l slot*.db
ls -l .

Also after su can you check that your /var/named/zones/conf/ is
(ls -l /var/named/zones/conf)
cd /var/named/zones/conf # if you get permission denied then
check that /var/named, /var/named/zones and /var/named/zones/conf
permissions allow access (for example ls -l).


Jarno Huuskonen

More information about the Opendnssec-user mailing list