error log entry

[Mark Andrews]

In message <AANLkTim4bpeQM7Gg0Hyeo8eTm1cMS9sV1o5sJrxBAcP8 at mail.gmail.com>, Emil Natan writes:
> Hello,
> 
> I have BIND 9.6 (BIND 9.6.2-P2 built with '--prefix=/chroot/named'
> '--enable-threads' '--with-openssl' '--enable-ipv6'
> 'CFLAGS=-DDIG_SIGCHASE=1') in a test environment serving a signed zone. I
> see the following error in the log, repeated every 5 minutes. I understand
> it indicates permissions problem, but I do not understand what is the action
> named is trying to perform that leads to this error.
> 
> Jul  4 15:38:19 kvm-dns2 named[12751]: general: error: zone stest.org/IN:
> zone_resigninc:find_zone_keys -> permission denied
> Jul  4 15:43:19 kvm-dns2 named[12751]: general: error: zone stest.org/IN:
> zone_resigninc:find_zone_keys -> permission denied
> Jul  4 15:48:19 kvm-dns2 named[12751]: general: error: zone stest.org/IN:
> zone_resigninc:find_zone_keys -> permission denied
> 
> Any help would be appreciated.
> 
> ena

The K* files are not readable by named.

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org