[Opendnssec-user] CRITICAL: failed to sign zone example.com: General error
PGNet Dev
pgnet.dev at gmail.com
Wed Jan 18 17:42:09 UTC 2017
I haven't followed this thread, sry if this Q's already been asked/answered.
I've seen this before
> Jan 18 17:11:26 dns2 ods-signerd: [file] open file file=/usr/local/var/opendnssec/signconf/example.com.xml mode=reading
> Jan 18 17:11:26 dns2 ods-signerd: [file] unable to open file /usr/local/var/opendnssec/signconf/example.com.xml for reading: No such file or directory
albeit with ods 2.1x ... here, it was perms.
Do user/group shown in
ps aux | grep ods
match perms on
/usr/local/var/opendnssec/signconf
/usr/local/var/opendnssec/signconf/example.com.xml
?
here, e.g.,
ps aux | grep ods
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
ods-signe 14141 opendnssec 7u IPv4 55794 0t0 UDP dns.example.net:12345
^^^^^^^^^^
...
cd /var/opendnssec
tree -ug
.
├── [opendnssec opendnssec 4096] enforcer
│ └── [opendnssec opendnssec 2032] zones.xml
├── [opendnssec opendnssec 98304] kasp.db
├── [opendnssec opendnssec 4096] raw
├── [opendnssec opendnssec 4096] signconf
│ ├── [opendnssec opendnssec 1517] example.com.xml
│ ├── [opendnssec opendnssec 1172] example.com.xml.ZONE_DELETED
...
├── [opendnssec opendnssec 4096] signed
├── [opendnssec opendnssec 4096] signer
│ ├── [opendnssec opendnssec 8242] example.com.axfr
│ ├── [opendnssec opendnssec 10186] example.com.backup2
│ ├── [opendnssec opendnssec 21442] example.com.ixfr
│ ├── [opendnssec opendnssec 345] example.com.xfrd-state
...
└── [opendnssec opendnssec 4096] unsigned
More information about the Opendnssec-user
mailing list