[Opendnssec-user] Notify debugging
Rick van Rein
rick at openfortress.nl
Thu May 15 22:43:06 CEST 2014
> The /var/opendnssec/tmp/rug.nl-xfrd-state file still shows the old soa serial 2014051506, where the unsigned system is already at 2014051520.
> To me it looks as if opendnssec receives the zone, but does not process it.
> Any other ideas to diagnose this problem?
Can you have a look at /var/opendnssec/unsigned/rug.nl* ?
If the zone changes arrive (I assume the mutliple arrivals are due to zone updates, each resulting in a NOTIFY) then you should find it there, probably as rug.nl.axfr.
That should help you distinguish if it is a transport problem or a signer-trigger problem.
You can manually trigger resigning to see if it is a matter of the new arrival not triggering the signer properly, with
ods-signer sign rug.nl
More information about the Opendnssec-user