Hi Tom,
>I have integrated ods backups in my regular backup scheme, dumping all
>keys every night, and marking them as backed up afterwards. This way,
>you don't need to monitor anything. Very practical, especially when
>you're using shortlived ZSK keys as you seem to do.
It's very useful. A regular backup scheme is helpful, I will think about it.
But how to set the specific rate, do you think backuping keys once per day does
not affect normal keyrollover? Can you share your policy configuration with me ?
>But it's not sure from your e-mail that RequireBackup was the actual
>culprit for your issue. If it was, you should find messages in your
>syslog from enforcerd telling you so:
>2012-07-17T07:11:55+02:00 christine ods-enforcerd: ERROR: Trying to make
>non-backed up ZSK active when RequireBackup flag is set
Yes, there are messages just like the above one, that's why I think the backup
work matters with keyrollover.
Regards,
Stuart
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
