> We never had this problem with 1.4. From our /etc/opendnssec/kasp.xml:
> <Zone>
>        <PropagationDelay>PT15H</PropagationDelay>
>        <SOA>
>                <TTL>PT86400S</TTL>
>                <Minimum>PT10800S</Minimum>
>                <Serial>datecounter</Serial>
>        </SOA>
> </Zone>
> The kasp.xml has not been touched since December 2015.
> So, there must be something else. Could it be that the migration of the
> database changed it from datacounter to keep?
> Should I update the configuration after the migration?

The log message really seem to suggest 'keep' is used. Can you check the
SOA section of /var/opendnssec/signconf/kvi.nl (or similar path)?

If it says 'keep' in the signconf you should make sure the enforcerd
reads the kasp.xml from the correct location. If it does -something odd
has happend during conversion- you can issue a 'ods-enforcer policy
import' to have the enforcer reread the kasp.xml.


Attachment: signature.asc
Description: OpenPGP digital signature

Opendnssec-user mailing list

Reply via email to