Hi guys.
I wonder if you guys have seen something like here below?
Starting OpenDNSSEC Enforcer daemon...
[engine] running as pid 5470
[engine] enforcer started
Configuration.cpp(96): Missing log.level in configuration.
Using default value: INFO
Configuration.cpp(96): Missing slots.mechanisms in
configuration. Using default value: ALL
Configuration.cpp(124): Missing slots.removable in
configuration. Using default value: false
[engine] hsm_get_slot_id(): could not find token with the
name OpenDNSSEC
setup failed: HSM error
[engine] enforcer shutdown
[engine] enforcerd (pid: 5470) stopped with exitcode 3
[engine] fail to start enforcerd completely
OpenDNSSEC key and signing policy enforcer version 2.1.10
hsm_get_slot_id(): could not find token with the name
OpenDNSSEC
ods-enforcerd.service: Control process exited, code=exited,
status=1/FAILURE
ods-enforcerd.service: Failed with result 'exit-code'.
Failed to start OpenDNSSEC Enforcer daemon.
I've upgraded my OS, this is IPA in a container, certainly
along with with update many binaries & envs are different
now. I did remove & recreate the container but still cannot
start this one 'ods-enforcerd.service'
and then some more verbosity:
ipaserver.dnssec.keysyncer: INFO Initial LDAP dump is
done, sychronizing with ODS and BIND
Traceback (most recent call last):
File "/usr/libexec/ipa/ipa-dnskeysyncd", line 130, in
<module>
while ldap_connection.syncrepl_poll(all=1,
msgid=ldap_search):
File
"/usr/lib64/python3.9/site-packages/ldap/syncrepl.py", line
464, in syncrepl_poll
self.syncrepl_refreshdone()
File
"/usr/lib/python3.9/site-packages/ipaserver/dnssec/keysyncer.py",
line 125, in syncrepl_refreshdone
self.ods_sync()
File
"/usr/lib/python3.9/site-packages/ipaserver/dnssec/keysyncer.py",
line 183, in ods_sync
self.odsmgr.sync()
File
"/usr/lib/python3.9/site-packages/ipaserver/dnssec/odsmgr.py",
line 221, in sync
zl_ods = self.get_ods_zonelist()
File
"/usr/lib/python3.9/site-packages/ipaserver/dnssec/odsmgr.py",
line 143, in get_ods_zonelist
stdout = self.ksmutil(['zonelist', 'export'])
File
"/usr/lib/python3.9/site-packages/ipaserver/dnssec/odsmgr.py",
line 139, in ksmutil
result = tasks.run_ods_manager(params,
capture_output=True)
File
"/usr/lib/python3.9/site-packages/ipaserver/dnssec/_ods21.py",
line 121, in run_ods_manager
return ipautil.run(cmd, **kwargs)
File
"/usr/lib/python3.9/site-packages/ipapython/ipautil.py",
line 612, in run
raise CalledProcessError(
ipapython.ipautil.CalledProcessError:
CalledProcessError(Command ['/usr/sbin/ods-enforcer',
'zonelist', 'export'] returned non-zero exit status 201:
'Unable to connect to engine. connect() failed: Connection
refused ("/var/run/opendnssec/enforcer.sock")\n')
All & any thought how to troubleshoot it are much appreciated.
thanks, L.