Uploaded image for project: 'OpenDNSSEC'
  1. OpenDNSSEC
  2. OPENDNSSEC-187

Not rescheduling after ds-seen

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.0.0
    • Component/s: Enforcer NG
    • Labels:

      Description

      Once the Enforcer had done all its work for the first KSK and ZSL, it schedules itself some hour later (think that is the next key rollover). It is also waiting for the DS-seen for the KSK. Nothing happens after that command. As you can see below, the task is still scheduled at the same time. The DS gets omnipresent once you do a manual enforcement.

      user@ubuntu:/var/opendnssec$ sudo ods-enforcer queue
      I have 2 tasks scheduled.
      It is now Fri Dec 2 20:00:31 2011
      On Fri Dec 2 20:28:28 2011 I will [resalt] policies
      On Fri Dec 2 23:31:59 2011 I will [enforce] bellgrim.se

      user@ubuntu:/var/opendnssec$ sudo ods-enforcer key ds-seen --zone bellgrim.se --id 8fae5ca569901c4c2bc58dd9b82ab2f4
      update of key states completed.
      key ds-seen completed in 0 seconds.

      user@ubuntu:/var/opendnssec$ sudo ods-enforcer key list
      Database set to: /var/opendnssec/kasp.db
      Keys:
      Zone: Key role: DS: DNSKEY: RRSIGDNSKEY: RRSIG: Pub: Act: Id:
      bellgrim.se KSK rumoured omnipresent omnipresent NA 1 1 8fae5ca569901c4c2bc58dd9b82ab2f4
      bellgrim.se ZSK NA omnipresent NA omnipresent 1 1 74b6485dc4f3e1ea95f16055eab753a0
      key list completed in 0 seconds.

      user@ubuntu:/var/opendnssec$ sudo ods-enforcer queue
      I have 2 tasks scheduled.
      It is now Fri Dec 2 20:00:49 2011
      On Fri Dec 2 20:28:28 2011 I will [resalt] policies
      On Fri Dec 2 23:31:59 2011 I will [enforce] bellgrim.se

      user@ubuntu:/var/opendnssec$ sudo ods-enforcer enforce
      Next update for zone bellgrim.se scheduled at Fri Dec 2 23:31:59 2011
      update of key states completed.
      update of HSM keys completed.
      Scheduled signconf task.
      enforce completed in 0 seconds.

      user@ubuntu:/var/opendnssec$ sudo ods-enforcer queue
      I have 2 tasks scheduled.
      It is now Fri Dec 2 20:03:37 2011
      On Fri Dec 2 20:28:28 2011 I will [resalt] policies
      On Fri Dec 2 23:31:59 2011 I will [enforce] bellgrim.se

      user@ubuntu:/var/opendnssec$ sudo ods-enforcer key list
      Database set to: /var/opendnssec/kasp.db
      Keys:
      Zone: Key role: DS: DNSKEY: RRSIGDNSKEY: RRSIG: Pub: Act: Id:
      bellgrim.se KSK omnipresent omnipresent omnipresent NA 1 1 8fae5ca569901c4c2bc58dd9b82ab2f4
      bellgrim.se ZSK NA omnipresent NA omnipresent 1 1 74b6485dc4f3e1ea95f16055eab753a0
      key list completed in 0 seconds.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              yuri Yuri Schaeffer
              Reporter:
              rickard Rickard Bellgrim
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: