On my rhel6 machine, I had the enforcer die on me a week ago.
(1.4.0rc1 plus patches that should be the same as rc2)
I guess it's time to implement restart logic in the init scripts....
The logs show:
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: HSM connection
open.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Reading config
"/etc/opendnssec/conf.xml"
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Reading config schema
"/usr/share/opendnssec/conf.rng"
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Using 1
enforcer worker (multiple enforcer workers not supported with this database
backend).
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Communication
Interval: 3600
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No DS Submit
command supplied
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SQLite
database set to: /var/opendnssec/kasp.db
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Log User set
to: local0
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Switched log
facility to: local0
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Connecting to
Database...
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy default
found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: ERROR: error
executing SQL - database is locked
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Error (71691)
updating salt for default
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key sharing is
Off.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM:
C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove
successful: 9eb6b9c61d013daaf0406103f72067ae
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM:
C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove
successful: 0a0738bb5a34e755dacb08249ff7eb96
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM:
C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove
successful: d6db7099fe2d5fc8f0bf4a3c7deb26b7
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM:
C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove
successful: 96fdb01cdb09573e8ff67b5b5aef347b
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM:
C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove
successful: ecc1d3e449d596b55dc746df0084b7e2
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM:
C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove
successful: 9a8888adc8394865ef50ef16be7ebcbd
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM:
C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove
successful: 9e7511efb30f7bf6dc21b4c23a7878a7
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: SoftHSM:
C_DestroyObject: An object has been destroyed
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key remove
successful: bc61331a2867c9fde15636dbd4295df9
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy nsec
found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key sharing is
Off.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No zones on
policy nsec, skipping...
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy
migration found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key sharing is
Off.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy
downgrade found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key sharing is
Off.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No zones on
policy downgrade, skipping...
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy optout
found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Key sharing is
Off.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: zonelist
filename set to /etc/opendnssec/zonelist.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone nohats.ca
found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
nohats.ca set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy default
found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/nohats.ca.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for nohats.ca and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone 'nohats.ca' not completed as there are no keys in the 'ready'
state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: ERROR: error
executing SQL - database is locked
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/nohats.ca.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
hacklab.ca found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
hacklab.ca set to migration.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy
migration found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/hacklab.ca.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: ERROR: error
executing SQL - SQL logic error or missing database
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: ERROR:
database operation failed - SQL logic error or missing database
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: KsmRequestKeys
returned: 71691
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Signconf not
written for hacklab.ca
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
hacklab.to found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
hacklab.to set to migration.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/hacklab.to.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for hacklab.to and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone 'hacklab.to' not completed as there are no keys in the
'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/hacklab.to.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
naomirae.com found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
naomirae.com set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy default
found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/naomirae.com.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for naomirae.com and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone 'naomirae.com' not completed as there are no keys in the
'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/naomirae.com.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
hippiesfromhell.org found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
hippiesfromhell.org set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/hippiesfromhell.org.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for hippiesfromhell.org
and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone 'hippiesfromhell.org' not completed as there are no keys in
the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/hippiesfromhell.org.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone colah.ca
found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
colah.ca set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/colah.ca.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for colah.ca and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone 'colah.ca' not completed as there are no keys in the 'ready'
state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/colah.ca.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
157.110.193.in-addr.arpa found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
157.110.193.in-addr.arpa set to migration.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy
migration found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/157.110.193.in-addr.arpa.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for
157.110.193.in-addr.arpa and use ods-ksmutil key ds-seen when the DS appears in
the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone '157.110.193.in-addr.arpa' not completed as there are no keys
in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/157.110.193.in-addr.arpa.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
libreswan.org found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
libreswan.org set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy default
found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/libreswan.org.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for libreswan.org and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone 'libreswan.org' not completed as there are no keys in the
'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/libreswan.org.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
libreswan.net found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
libreswan.net set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/libreswan.net.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for libreswan.net and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone 'libreswan.net' not completed as there are no keys in the
'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/libreswan.net.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
libreswan.com found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
libreswan.com set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/libreswan.com.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for libreswan.com and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone 'libreswan.com' not completed as there are no keys in the
'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/libreswan.com.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
valleymedia.net found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
valleymedia.net set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/valleymedia.net.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for valleymedia.net and
use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone 'valleymedia.net' not completed as there are no keys in the
'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/valleymedia.net.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
implicitcad.org found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
implicitcad.org set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/implicitcad.org.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for implicitcad.org and
use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone 'implicitcad.org' not completed as there are no keys in the
'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/implicitcad.org.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
64/28.157.10.76.in-addr.arpa found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
64/28.157.10.76.in-addr.arpa set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/64-28.157.10.76.in-addr.arpa.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for
64/28.157.10.76.in-addr.arpa and use ods-ksmutil key ds-seen when the DS
appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone '64/28.157.10.76.in-addr.arpa' not completed as there are no
keys in the 'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/64-28.157.10.76.in-addr.arpa.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
optout.nohats.ca found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
optout.nohats.ca set to optout.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy optout
found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/optout.nohats.ca.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for optout.nohats.ca and
use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone 'optout.nohats.ca' not completed as there are no keys in the
'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/optout.nohats.ca.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
libreswan.ca found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
libreswan.ca set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy default
found in DB.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/libreswan.ca.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for libreswan.ca and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone 'libreswan.ca' not completed as there are no keys in the
'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/libreswan.ca.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Zone
xn--nohts-5qa.ca found.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Policy for
xn--nohts-5qa.ca set to default.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Config will be
output to /var/opendnssec/signconf/xn--nohts-5qa.ca.xml.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: New
KSK has reached the ready state; please submit the DS for xn--nohts-5qa.ca and
use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: WARNING: ZSK
rollover for zone 'xn--nohts-5qa.ca' not completed as there are no keys in the
'ready' state; ods-enforcerd will try again when it runs next
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: No change to:
/var/opendnssec/signconf/xn--nohts-5qa.ca.xml
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Disconnecting
from Database...
/var/log/messages-20130217:Feb 11 01:22:48 nohats ods-enforcerd: Sleeping for
3600 seconds.
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: HSM connection
open.
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Reading config
"/etc/opendnssec/conf.xml"
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Reading config schema
"/usr/share/opendnssec/conf.rng"
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Using 1
enforcer worker (multiple enforcer workers not supported with this database
backend).
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Communication
Interval: 3600
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: No DS Submit
command supplied
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: SQLite
database set to: /var/opendnssec/kasp.db
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Log User set
to: local0
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Switched log
facility to: local0
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: Connecting to
Database...
/var/log/messages-20130217:Feb 11 02:22:49 nohats ods-enforcerd: ERROR: error
executing SQL - database is locked
Upon restarting ods-enforcerd:
/var/log/messages:Feb 19 16:40:18 nohats ods-enforcerd: opendnssec starting...
/var/log/messages:Feb 19 16:40:18 nohats ods-enforcerd: opendnssec Parent
exiting...
/var/log/messages:Feb 19 16:40:18 nohats ods-enforcerd: opendnssec forked OK...
/var/log/messages:Feb 19 16:40:18 nohats ods-enforcerd: group set to: ods (494)
/var/log/messages:Feb 19 16:40:18 nohats ods-enforcerd: user set to: ods (495)
/var/log/messages:Feb 19 16:40:18 nohats ods-enforcerd: opendnssec started
(version 1.4.0rc1), pid 13313
/var/log/messages:Feb 19 16:40:19 nohats ods-enforcerd: HSM opened successfully.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Checking database
connection...
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Database connection ok.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Reading config
"/etc/opendnssec/conf.xml"
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Reading config schema
"/usr/share/opendnssec/conf.rng"
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Using 1 enforcer worker
(multiple enforcer workers not supported with this database backend).
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Communication Interval:
3600
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: No DS Submit command
supplied
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: SQLite database set to:
/var/opendnssec/kasp.db
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Log User set to: local0
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Switched log facility
to: local0
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Connecting to
Database...
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy default found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Key not found:
9eb6b9c61d013daaf0406103f72067ae
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy nsec found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: No zones on policy
nsec, skipping...
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy migration found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy downgrade found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: No zones on policy
downgrade, skipping...
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy optout found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Key sharing is Off.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: zonelist filename set
to /etc/opendnssec/zonelist.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone nohats.ca found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for nohats.ca
set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy default found in
DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/nohats.ca.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for nohats.ca and use ods-ksmutil
key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for nohats.ca
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Could not call signer engine
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Will continue: call
'/usr/sbin/ods-signer update nohats.ca' to manually update the zone
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone hacklab.ca found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for hacklab.ca
set to migration.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy migration found
in DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/hacklab.ca.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for hacklab.ca and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for hacklab.ca
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone hacklab.to found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for hacklab.to
set to migration.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/hacklab.to.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for hacklab.to and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for hacklab.to
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone naomirae.com found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for naomirae.com
set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy default found in
DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/naomirae.com.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for naomirae.com and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for naomirae.com
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone hippiesfromhell.org found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for
hippiesfromhell.org set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/hippiesfromhell.org.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for hippiesfromhell.org and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for hippiesfromhell.org
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone colah.ca found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for colah.ca set
to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/colah.ca.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for colah.ca and use ods-ksmutil
key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for colah.ca
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone 157.110.193.in-addr.arpa found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for
157.110.193.in-addr.arpa set to migration.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy migration found
in DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/157.110.193.in-addr.arpa.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for 157.110.193.in-addr.arpa and
use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for 157.110.193.in-addr.arpa
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone libreswan.org found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for
libreswan.org set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy default found in
DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/libreswan.org.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for libreswan.org and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for libreswan.org
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone libreswan.net found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for
libreswan.net set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/libreswan.net.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for libreswan.net and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for libreswan.net
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone libreswan.com found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for
libreswan.com set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/libreswan.com.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for libreswan.com and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for libreswan.com
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone valleymedia.net found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for
valleymedia.net set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/valleymedia.net.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for valleymedia.net and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for valleymedia.net
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone implicitcad.org found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for
implicitcad.org set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/implicitcad.org.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for implicitcad.org and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for implicitcad.org
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone 64/28.157.10.76.in-addr.arpa found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for
64/28.157.10.76.in-addr.arpa set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/64-28.157.10.76.in-addr.arpa.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for 64/28.157.10.76.in-addr.arpa
and use ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for 64/28.157.10.76.in-addr.arpa
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone optout.nohats.ca found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for
optout.nohats.ca set to optout.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy optout found in
DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/optout.nohats.ca.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for optout.nohats.ca and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for optout.nohats.ca
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone libreswan.ca found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for libreswan.ca
set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy default found in
DB.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/libreswan.ca.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for libreswan.ca and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for libreswan.ca
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Zone xn--nohts-5qa.ca found.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Policy for
xn--nohts-5qa.ca set to default.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Config will be output
to /var/opendnssec/signconf/xn--nohts-5qa.ca.xml.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: New KSK has
reached the ready state; please submit the DS for xn--nohts-5qa.ca and use
ods-ksmutil key ds-seen when the DS appears in the DNS.
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: WARNING: Making
non-backed up ZSK active, PLEASE make sure that you know the potential problems
of using keys which are not recoverable
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: INFO: ZSK has been rolled for xn--nohts-5qa.ca
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Disconnecting from Database...
/var/log/messages:Feb 19 16:40:20 nohats ods-enforcerd: Sleeping for 3600
seconds.
[root@nohats nsd]#
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
