<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi Benoit,</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Well that's great news - well done for working that out. Very pleased to hear you've finally been able to get it working.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Best,</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Richard.</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> bind-users <bind-users-bounces@lists.isc.org> on behalf of Benoît Panizzon <benoit.panizzon@imp.ch><br>
<b>Sent:</b> 17 April 2026 14:51<br>
<b>To:</b> Peter Davies <peterd@isc.org><br>
<b>Cc:</b> bind-users@lists.isc.org <bind-users@lists.isc.org><br>
<b>Subject:</b> Re: Bind 9.20 inline signing - not signing whole file, only dynamic updated entries.</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">17-Apr-2026 15:44:45.348 dnssec: debug 3: keymgr: 0-31.57.161.157.in-addr.arpa done<br>
17-Apr-2026 15:44:45.348 dnssec: error: zone 0-31.57.161.157.in-addr.arpa/IN (signed): zone_rekey:dns_keymgr_run failed: error occurred writing key to disk<br>
17-Apr-2026 15:44:45.348 dnssec: error: zone 0-31.57.161.157.in-addr.arpa/IN (signed): zone_rekey failure: error occurred writing key to disk (retry in 600 seconds)<br>
<br>
Ok - permissions!<br>
<br>
Wow, how could I miss /etc/bind/keys belonging to root:bind with group permissions s-x<br>
<br>
Keyfiles present.<br>
<br>
name: 0-31.57.161.157.in-addr.arpa<br>
type: primary<br>
files: woody.ch.rev<br>
serial: 2007126016<br>
signed serial: 2007126025<br>
nodes: 31<br>
last loaded: Fri, 17 Apr 2026 09:04:20 GMT<br>
secure: yes<br>
inline signing: yes<br>
key maintenance: automatic<br>
next key event: Fri, 17 Apr 2026 15:52:43 GMT<br>
next resign node: 20.0-31.57.161.157.in-addr.arpa/NSEC<br>
next resign time: Sun, 26 Apr 2026 04:20:25 GMT<br>
dynamic: yes<br>
frozen: no<br>
reconfigurable via modzone: no<br>
<br>
secondary has loaded signed enries.<br>
<br>
Thanks for your help and sorry that I missed something that obvious.<br>
<br>
-- <br>
Mit freundlichen Grüssen<br>
<br>
-Benoît Panizzon- @ HomeOffice und normal erreichbar<br>
-- <br>
I m p r o W a r e A G - Leiter Commerce Kunden<br>
______________________________________________________<br>
<br>
Zurlindenstrasse 29 Tel +41 61 826 93 00<br>
CH-4133 Pratteln Fax +41 61 826 93 01<br>
Schweiz Web <a href="http://www.imp.ch">http://www.imp.ch</a><br>
______________________________________________________<br>
-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list.<br>
</div>
</span></font></div>
</body>
</html>