On 05/16/2014 09:55 PM, Fred Zwarts, KVI, Groningen wrote: > Hi, > > In the zonelist.xml I only specify the location of the adapter config > file, not the location of the unsigned zones. > (The location for the unsigned zones is specified if no zone transfers > are used for the input zones.) > Also, in the adapter config, I do not specify a location of the incoming > zones. > In the config.xml a workingdirectory /var/opendnssec/tmp is specified > for the signer. > That is all I can find.
If you use the DNS input adapter, indeed the zone will not be stored in the /unsigned directory, but in the /tmp working directory. There are some files, for example the zone example.com: Generic: example.com.backup2: contains the full backup of signer configuration, signed and unsigned zone data. For DNS Input Adapters: example.com.xfrd: contains the to be read zone transfers. example.com.xfrd-state: contains the state of the zone transfer (last serial, last time transferred, which name server to query next, etc). For DNS Output Adapters: example.com.ixfr: contains a zone transfer journal for IXFR queries. example.com.axfr: contains the full zone transfer for AXFR queries and fallback. Hope this helps. Best regards, Matthijs > > Fred.Zwarts. > > -----Oorspronkelijk bericht----- From: Rick van Rein > Sent: Friday, May 16, 2014 9:36 PM > To: Fred Zwarts, KVI, Groningen > Cc: opendnssec-user@lists.opendnssec.org > Subject: Re: [Opendnssec-user] Notify debugging > > Hi, > >> Although I found a work-around already, I looked in the >> /var/opendnssec/unsigned directory. This directory is completely >> empty. Apparently, the received zones are stored somewhere else. > > The actual directory is configured in /etc/opendnssec (usually). > >> In the /var/opendnssec/tmp directory there are some rug.nl* files >> (among which a rug.nl.axfr), but they contain signed zone information. > > That’s the working location for the signer, indeed. There’ll be some > comment-carried settings that it uses to be able to iterate over the > zone faster than for a full run — it will spread signatures over time to > release the burden of crypto processing. > >> It also contains the earlier mentioned rug.nl.xfrd-state. I have no >> idea where the unsigned zone information is stored. > > Look in /etc/opendnssec (or whetever is configured as the directory for > config files on your system) for the actual location. > > https://wiki.opendnssec.org/display/DOCS/conf.xml#conf.xml-Configuration > (ZoneListFile) > https://wiki.opendnssec.org/display/DOCS/zonelist.xml#zonelist.xml-Zones > (Adapters) > > -Rick > _______________________________________________ > Opendnssec-user mailing list > Opendnssec-user@lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-user > _______________________________________________ Opendnssec-user mailing list Opendnssec-user@lists.opendnssec.org https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
