opendnssec-enforcer for Debian ------------------------------ This package is part of OpenDNSSEC suite, and is probably useless without the other parts (unless you really know, what you're doing), so you may want to install opendnssec meta package which pulls all necessary dependencies to run OpenDNSSEC system. If you are going to use softhsm, you need to allow opendnssec user to access /var/lib/softhsm (or another place where you keep your softHSM database). On standard debian system, it should be sufficient to add opendnssec user to softhsm group by issuing: # adduser opendnssec softhsm -- Ondřej Surý , Fri, 13 Jun 2014 13:56:02 +0200 Previous versions of OpenDNSSEC had an invalid foreign key in the MySQL database, which causes issues when deleting --all zones from KASP database. If you have created your database in version 1.3.9, you should run following statement in your OpenDNSSEC MySQL database: alter table dnsseckeys drop foreign key dnsseckeys_ibfk_1; For more information see: https://issues.opendnssec.org/browse/OPENDNSSEC-338 -- Ondřej Surý , Tue, 27 Nov 2012 14:26:47 +0100