[Opendnssec-user] CRITICAL: failed to sign zone example.com: General error

[Michael Grimm]

Michael Grimm <trashcan at ellael.org> wrote:

>> Since increasing the verbosity doesn't seem to work for you?
> 
> Is there a way to fetch error massages into a file?

My bad. Sure, there is a local logfile (ods.log) in addition which holds much more infos than syslog. 

Here's a snipett of example.com:

Jan 18 17:10:17 dns2 ods-enforcerd: Zone example.com found.
Jan 18 17:10:17 dns2 ods-enforcerd: Policy for example.com set to default.
Jan 18 17:10:17 dns2 ods-enforcerd: Config will be output to /usr/local/var/opendnssec/signconf/example.com.xml.
Jan 18 17:10:17 dns2 ods-enforcerd: Not enough keys to satisfy zsk policy for zone: example.com. keys_to_allocate(1) = keys_needed(1) - (keys_available(1) - keys_pending_retirement(1))
Jan 18 17:10:17 dns2 ods-enforcerd: Tried to allocate 1 keys, failed on allocating key number 1
Jan 18 17:10:17 dns2 ods-enforcerd: ods-enforcerd will create some more keys on its next run
Jan 18 17:10:17 dns2 ods-enforcerd: Error allocating zsks to zone example.com
Jan 18 17:10:17 dns2 ods-enforcerd: Disconnecting from Database...
Jan 18 17:10:17 dns2 ods-enforcerd: Sleeping for 3600 seconds.

Jan 18 17:11:26 dns2 ods-signerd: [worker[4]] report for duty
Jan 18 17:11:26 dns2 ods-signerd: [scheduler] pop task for zone example.com
Jan 18 17:11:26 dns2 ods-signerd: [scheduler] unschedule task [configure] for zone example.com
Jan 18 17:11:26 dns2 ods-signerd: [worker[4]] start working on zone example.com
Jan 18 17:11:26 dns2 ods-signerd: [worker[4]] perform task [configure] for zone example.com at 1484755886
Jan 18 17:11:26 dns2 ods-signerd: [worker[4]] configure zone example.com
Jan 18 17:11:26 dns2 ods-signerd: [file] open file  file=/usr/local/var/opendnssec/signconf/example.com.xml mode=reading
Jan 18 17:11:26 dns2 ods-signerd: [file] unable to open file /usr/local/var/opendnssec/signconf/example.com.xml for reading: No such file or directory
Jan 18 17:11:26 dns2 ods-signerd: [file] unable to stat file /usr/local/var/opendnssec/signconf/example.com.xml: ods_fopen() failed
Jan 18 17:11:26 dns2 ods-signerd: [zone] zone example.com signconf file /usr/local/var/opendnssec/signconf/example.com.xml is unchanged since 2017-01-18 17:11:26
Jan 18 17:11:26 dns2 ods-signerd: [worker[4]] no signconf.xml for zone example.com yet
Jan 18 17:11:26 dns2 ods-signerd: [worker[4]] CRITICAL: failed to sign zone example.com: General error
Jan 18 17:11:26 dns2 ods-signerd: [worker[4]] backoff task [configure] for zone example.com with 3600 seconds
Jan 18 17:11:26 dns2 ods-signerd: [worker[4]] finished working on zone example.com
Jan 18 17:11:26 dns2 ods-signerd: [scheduler] schedule task [configure] for zone example.com
Jan 18 17:11:26 dns2 ods-signerd: [task] On Wed Jan 18 18:11:26 2017 I will [configure] zone example.com
Jan 18 17:11:26 dns2 ods-signerd: [worker[4]] report for duty
Jan 18 17:11:26 dns2 ods-signerd: [worker[4]] nothing to do

Please let me know if I do need to look for other entries.

Regards,
Michael