<html dir="ltr"><head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style title="owaParaStyle">P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
</style>
</head>
<body ocsi="x">
<div dir="ltr"><font face="Lucida Console" color="#000000" size="2">So I posted a couple of message about how my nsupdates</font></div>
<div dir="ltr"><font face="lucida console" size="2">were failing intermittenly when attempting to update a signed zone.</font></div>
<div dir="ltr"><font face="lucida console" size="2"></font> </div>
<div dir="ltr"><font face="lucida console" size="2">The only error I get in the log is:</font></div>
<div dir="ltr">14-May-2009 13:17:09.077 client 127.0.0.1#10277: view external: updating zone 'test.net/IN': prerequisites are OK<br>
14-May-2009 13:17:09.077 client 127.0.0.1#10277: view external: signer "update.test.net" approved<br>
14-May-2009 13:17:09.077 client 127.0.0.1#10277: view external: update 'test.net/IN' approved<br>
14-May-2009 13:17:09.077 client 127.0.0.1#10277: view external: updating zone 'test.net/IN': update section prescan OK<br>
14-May-2009 13:17:09.077 client 127.0.0.1#10277: view external: updating zone 'test.net/IN': adding an RR at 'newest4.test.net' A<br>
14-May-2009 13:17:09.084 client 127.0.0.1#10277: view external: updating zone 'test.net/IN': RRSIG/NSEC/NSEC3 update failed: failure<br>
14-May-2009 13:17:09.084 client 127.0.0.1#10277: view external: updating zone 'test.net/IN': rolling back<br>
</div>
<div dir="ltr"><font face="times new roman">The keys are generated with RSASHA1 and use -r /dev/urandom
</font></div>
<div dir="ltr"><font face="times new roman"></font> </div>
<div dir="ltr"><font face="times new roman">I run named in chroot jail, at /var/named</font></div>
<div dir="ltr"><font face="times new roman">I created /var/named/dev/random with </font>
</div>
<div dir="ltr"><font face="times new roman"></font> </div>
mknod -m644 /var/named/dev/random c 1 8<br>
<div dir="ltr"><font face="times new roman"></font> </div>
<div dir="ltr"><font face="times new roman">which mimics the major and minor number from the system</font></div>
<div dir="ltr"><font face="times new roman">ls -lL /dev/random</font></div>
<div dir="ltr"><font face="times new roman"></font> </div>
<div dir="ltr"><font face="times new roman">crw-r--r-- 1 root root 1, 8 May 13 03:27 /dev/random<br>
</font></div>
<div dir="ltr"><font face="times new roman"><font face="times new roman">The nsupdates fail, seemingly randomly.</font></font></div>
<div dir="ltr"><font face="times new roman"><font face="times new roman"></font></font> </div>
<div dir="ltr"><font face="times new roman"><font face="times new roman">When I delete this /dev/random from the chroot, they work.
</font></font></div>
<div dir="ltr"><font face="times new roman"><font face="times new roman"></font></font> </div>
<div dir="ltr"><font face="times new roman"><font face="times new roman">So my question is:</font></font></div>
<div dir="ltr"><font face="times new roman"><font face="times new roman">am I setting up the /dev/random incorrectly?</font></font></div>
<div dir="ltr"><font face="times new roman">should I not be creating /dev/random? (the how-tos I have seen all talk about</font></div>
<div dir="ltr"><font face="times new roman">re-creating /dev/null and /dev/random etc)</font></div>
<div dir="ltr"><font face="times new roman"></font> </div>
<div dir="ltr"><font face="times new roman">Note:</font></div>
<div dir="ltr"><font face="times new roman">I also tried generating the keys not using /dev/urandom, and have the same</font></div>
<div dir="ltr"><font face="times new roman">inconsistent behavior with the chroot /dev/random present.</font></div>
<div dir="ltr"><font face="times new roman"></font> </div>
<div dir="ltr"><font face="times new roman"><font face="times new roman"></font> </div>
</font>
<div dir="ltr"><font face="times new roman"></font> </div>
<div><font face="Tahoma" size="2">
<div dir="ltr" align="left"><font face="Lucida Console" size="2">--</font></div>
<div dir="ltr" align="left"><font face="Lucida Console" size="2">Jack Tavares</font></div>
<div dir="ltr" align="left"><font face="Lucida Console" size="2"></font> </div>
</font></div>
<div><font face="Lucida Console" size="2"></font> </div>
<div><font face="Lucida Console"></font> </div>
</body>
</html>