Hi Einar, On 2 mar 2012, at 17:53, "Einar Bjarni Halldórsson" <[email protected]> wrote:
> I had to turn on partial auditing to get ods to sign the zone at all. Is > there a workaround for segmented zone files or is the only choice to use one > complete zone file as input to ods? I am unsure if the Auditor can handle include but since it is deprecated and removed in next version (1.4) you might want to use a different software if you wish to validate your zone before pushing it out. > p.s. Every hour, at 25 minutes past the hour the signerd tries to resign the > zone, even though we did not call ods-signer, and fails since we're using > serial=keep and the serial hasn't changed. What could be causing this? It > introduces unnecessary output in the logs and we'd rather always call > ods-signer ourselves when the zone is updated. Have you set resalting to every 1 hour? It would help to ser the logs and the configure files (conf.xml / kasp.xml / zonelist.xml). You can send them offlist or make a support issue on our JIRA and we will take a look at it. https://wiki.opendnssec.org/display/DOCS/Reporting+bugs https://issues.opendnssec.org/ Cheers, Jerry _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
