[Opendnssec-user] Date of next transition: now

Yuri Schaeffer yuri at nlnetlabs.nl
Mon Jan 8 14:48:24 UTC 2018


> All worker threads idle.
> There is 1 task scheduled.
> It is now Mon Jan  8 14:01:54 2018 (1515416514 seconds since epoch)
> Next task scheduled Wed Mar 28 15:49:26 2018 (1522244966 seconds since
> epoch)
> On Wed Mar 28 15:49:26 2018 I will resalt zone default

At this point I do not know how this have happened but the problem is
clear. The enforce tasks for the zones are no longer scheduled. I
believe you can do 'ods-enforcer enforce --all' to get them back in the
queue. Alternatively restarting ods-enforcerd will work as well.

In normal operation this will only happen when the enforcer concludes no
more (automated) work needs to be done for a zone -ever-. This means
zones are only re-evaluated on user input. This should only be possible
if you configured manual rollover for both KSK and ZSK. In that case the
timestamp thing is a fluke (which we need to address). Can that be the case?

//Yuri

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20180108/e91617a3/attachment.bin>


More information about the Opendnssec-user mailing list