On Tue, 19 Feb 2013, Paul Wouters wrote:
On my rhel6 machine, I had the enforcer die on me a week ago. (1.4.0rc1 plus patches that should be the same as rc2)
and again :/ It ran for a few hours then died again. Last successful run and crash attached below. Paul Feb 19 17:40:21 nohats ods-enforcerd: HSM connection open. Feb 19 17:40:21 nohats ods-enforcerd: Reading config "/etc/opendnssec/conf.xml" Feb 19 17:40:21 nohats ods-enforcerd: Reading config schema "/usr/share/opendnssec/conf.rng" Feb 19 17:40:21 nohats ods-enforcerd: Using 1 enforcer worker (multiple enforcer workers not supported with this database backend). Feb 19 17:40:21 nohats ods-enforcerd: Communication Interval: 3600 Feb 19 17:40:21 nohats ods-enforcerd: No DS Submit command supplied Feb 19 17:40:21 nohats ods-enforcerd: SQLite database set to: /var/opendnssec/kasp.db Feb 19 17:40:21 nohats ods-enforcerd: Log User set to: local0 Feb 19 17:40:21 nohats ods-enforcerd: Switched log facility to: local0 Feb 19 17:40:21 nohats ods-enforcerd: Connecting to Database... Feb 19 17:40:21 nohats ods-enforcerd: Policy default found. Feb 19 17:40:21 nohats ods-enforcerd: ERROR: error executing SQL - database is locked Feb 19 17:40:21 nohats ods-enforcerd: Error (71691) updating salt for default Feb 19 17:40:21 nohats ods-enforcerd: Key sharing is Off. Feb 19 17:40:21 nohats ods-enforcerd: Key not found: 0a0738bb5a34e755dacb08249ff7eb96 Feb 19 17:40:21 nohats ods-enforcerd: Policy nsec found. Feb 19 17:40:21 nohats ods-enforcerd: Key sharing is Off. Feb 19 17:40:21 nohats ods-enforcerd: No zones on policy nsec, skipping... Feb 19 17:40:21 nohats ods-enforcerd: Policy migration found. Feb 19 17:40:21 nohats ods-enforcerd: Key sharing is Off. Feb 19 17:40:21 nohats ods-enforcerd: Policy downgrade found. Feb 19 17:40:21 nohats ods-enforcerd: Key sharing is Off. Feb 19 17:40:21 nohats ods-enforcerd: No zones on policy downgrade, skipping... Feb 19 17:40:21 nohats ods-enforcerd: Policy optout found. Feb 19 17:40:21 nohats ods-enforcerd: Key sharing is Off. Feb 19 17:40:21 nohats ods-enforcerd: zonelist filename set to /etc/opendnssec/zonelist.xml. Feb 19 17:40:21 nohats ods-enforcerd: Zone nohats.ca found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for nohats.ca set to default. Feb 19 17:40:21 nohats ods-enforcerd: Policy default found in DB. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/nohats.ca.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for nohats.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: ERROR: error executing SQL - database is locked Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/nohats.ca.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone hacklab.ca found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for hacklab.ca set to migration. Feb 19 17:40:21 nohats ods-enforcerd: Policy migration found in DB. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/hacklab.ca.xml. Feb 19 17:40:21 nohats ods-enforcerd: ERROR: error executing SQL - SQL logic error or missing database Feb 19 17:40:21 nohats ods-enforcerd: ERROR: database operation failed - SQL logic error or missing database Feb 19 17:40:21 nohats ods-enforcerd: KsmRequestKeys returned: 71691 Feb 19 17:40:21 nohats ods-enforcerd: Signconf not written for hacklab.ca Feb 19 17:40:21 nohats ods-enforcerd: Zone hacklab.to found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for hacklab.to set to migration. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/hacklab.to.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for hacklab.to and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/hacklab.to.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone naomirae.com found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for naomirae.com set to default. Feb 19 17:40:21 nohats ods-enforcerd: Policy default found in DB. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/naomirae.com.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for naomirae.com and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/naomirae.com.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone hippiesfromhell.org found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for hippiesfromhell.org set to default. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/hippiesfromhell.org.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for hippiesfromhell.org and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/hippiesfromhell.org.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone colah.ca found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for colah.ca set to default. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/colah.ca.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for colah.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/colah.ca.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone 157.110.193.in-addr.arpa found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for 157.110.193.in-addr.arpa set to migration. Feb 19 17:40:21 nohats ods-enforcerd: Policy migration found in DB. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/157.110.193.in-addr.arpa.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for 157.110.193.in-addr.arpa and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/157.110.193.in-addr.arpa.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone libreswan.org found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for libreswan.org set to default. Feb 19 17:40:21 nohats ods-enforcerd: Policy default found in DB. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.org.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.org and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/libreswan.org.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone libreswan.net found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for libreswan.net set to default. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.net.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.net and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/libreswan.net.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone libreswan.com found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for libreswan.com set to default. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.com.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.com and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/libreswan.com.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone valleymedia.net found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for valleymedia.net set to default. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/valleymedia.net.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for valleymedia.net and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/valleymedia.net.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone implicitcad.org found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for implicitcad.org set to default. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/implicitcad.org.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for implicitcad.org and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/implicitcad.org.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone 64/28.157.10.76.in-addr.arpa found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for 64/28.157.10.76.in-addr.arpa set to default. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/64-28.157.10.76.in-addr.arpa.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for 64/28.157.10.76.in-addr.arpa and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/64-28.157.10.76.in-addr.arpa.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone optout.nohats.ca found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for optout.nohats.ca set to optout. Feb 19 17:40:21 nohats ods-enforcerd: Policy optout found in DB. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/optout.nohats.ca.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for optout.nohats.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/optout.nohats.ca.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone libreswan.ca found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for libreswan.ca set to default. Feb 19 17:40:21 nohats ods-enforcerd: Policy default found in DB. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/libreswan.ca.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for libreswan.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/libreswan.ca.xml Feb 19 17:40:21 nohats ods-enforcerd: Zone xn--nohts-5qa.ca found. Feb 19 17:40:21 nohats ods-enforcerd: Policy for xn--nohts-5qa.ca set to default. Feb 19 17:40:21 nohats ods-enforcerd: Config will be output to /var/opendnssec/signconf/xn--nohts-5qa.ca.xml. Feb 19 17:40:21 nohats ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for xn--nohts-5qa.ca and use ods-ksmutil key ds-seen when the DS appears in the DNS. Feb 19 17:40:21 nohats ods-enforcerd: No change to: /var/opendnssec/signconf/xn--nohts-5qa.ca.xml Feb 19 17:40:21 nohats ods-enforcerd: Disconnecting from Database... Feb 19 17:40:21 nohats ods-enforcerd: Sleeping for 3600 seconds. Feb 19 18:40:21 nohats ods-enforcerd: HSM connection open. Feb 19 18:40:21 nohats ods-enforcerd: Reading config "/etc/opendnssec/conf.xml" Feb 19 18:40:21 nohats ods-enforcerd: Reading config schema "/usr/share/opendnssec/conf.rng" Feb 19 18:40:21 nohats ods-enforcerd: Using 1 enforcer worker (multiple enforcer workers not supported with this database backend). Feb 19 18:40:21 nohats ods-enforcerd: Communication Interval: 3600 Feb 19 18:40:21 nohats ods-enforcerd: No DS Submit command supplied Feb 19 18:40:21 nohats ods-enforcerd: SQLite database set to: /var/opendnssec/kasp.db Feb 19 18:40:21 nohats ods-enforcerd: Log User set to: local0 Feb 19 18:40:21 nohats ods-enforcerd: Switched log facility to: local0 Feb 19 18:40:21 nohats ods-enforcerd: Connecting to Database... Feb 19 18:40:21 nohats ods-enforcerd: ERROR: error executing SQL - database is locked [root@nohats ~]# _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
