Ok so I ran it in gdb: (gdb) run Starting program: /usr/local/sbin/ods-enforcerd -1 -d [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". [New Thread 0x7ffff5258700 (LWP 17342)] [Thread 0x7ffff5258700 (LWP 17342) exited] 22:05:39 ERROR: cannot create kmdata file (/opt/nfast/kmdata/local/key_pkcs11_ucdc94a5e38242625f0283dbeab01ffa0a0338c875-18135fcd02d0f7a5b34c45477880561c5114eda5.new): Permission denied NFKM_recordkey failed 86 13
Seems to be a permission problem obscured. "adduser opendnssec nfast” seems to have fixed the problem. Regards — David Peall On 28 May 2014, at 8:05 PM, Jerry Lundström <[email protected]> wrote: > Hi Mark and David, > > On ons, 2014-05-28 at 14:40 +0200, David Peall wrote: >> kernel: [688550.164139] ods-enforcerd[15772]: segfault at 0 ip >> 00007ffb985ceb14 sp 00007fff31d272e0 error 4 in >> libcknfast.so[7ffb98525000+1ee000] > > All your reports indicates that the segfault happens in the > libcknfast.so and since there has been almost no change to the code that > talks to the HSM, we got no other reports and are not seeing this in our > test environment it looks more like a problem with Thales then with > OpenDNSSEC, hopefully your already talking with them about this. > > It would be very good if you can compile OpenDNSSEC with debug symbols > and then get a detailed backtrace (gdb bt full) from the core dump. This > will help us narrow down where things went wrong. > > You could also try running your setup with SoftHSM to just verify that > the platform, OS and setup works. > > Cheers, > Jerry > > -- > Jerry Lundström - OpenDNSSEC Developer > http://www.opendnssec.org/ >
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
