[Pkg-dns-devel] Bug#868368: opendnssec: fails to start on unstable

[Julien Lesaint]

Package: opendnssec
Version: 1:2.0.4-3
Severity: important

Hello,

opendnssec fails to start on my Debian unstable. I'm not using systemd
and I have an initialized HSM store (to rule out that I would be hitting
#859419).

Thank you in advance.
Julien

Install log:

The following NEW packages will be installed:
  libhsm-bin opendnssec opendnssec-common opendnssec-enforcer
opendnssec-enforcer-sqlite3 opendnssec-signer
0 upgraded, 6 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/602 kB of archives.
After this operation, 1,922 kB of additional disk space will be used.
Do you want to continue? [Y/n] 
Preconfiguring packages ...
(Reading database ... 57802 files and directories currently installed.)
Preparing to unpack .../0-opendnssec-common_1%3a2.0.4-3_all.deb ...
Unpacking opendnssec-common (1:2.0.4-3) ...
Preparing to unpack .../1-libhsm-bin_1%3a2.0.4-3_amd64.deb ...
Unpacking libhsm-bin (1:2.0.4-3) ...
Preparing to unpack
.../2-opendnssec-enforcer-sqlite3_1%3a2.0.4-3_amd64.deb ...
Unpacking opendnssec-enforcer-sqlite3 (1:2.0.4-3) ...
Preparing to unpack .../3-opendnssec-enforcer_1%3a2.0.4-3_all.deb ...
Unpacking opendnssec-enforcer (1:2.0.4-3) ...
Preparing to unpack .../4-opendnssec-signer_1%3a2.0.4-3_amd64.deb ...
Unpacking opendnssec-signer (1:2.0.4-3) ...
Preparing to unpack .../5-opendnssec_1%3a2.0.4-3_all.deb ...
Unpacking opendnssec (1:2.0.4-3) ...
Setting up opendnssec-common (1:2.0.4-3) ...

Creating config file /etc/opendnssec/addns.xml with new version

Creating config file /etc/opendnssec/conf.xml with new version

Creating config file /etc/opendnssec/kasp.xml with new version

Creating config file /etc/opendnssec/zonelist.xml with new version
Setting up libhsm-bin (1:2.0.4-3) ...
Processing triggers for systemd (234-1) ...
Processing triggers for man-db (2.7.6.1-2) ...
Setting up opendnssec-enforcer-sqlite3 (1:2.0.4-3) ...
Setting up opendnssec-signer (1:2.0.4-3) ...
Created symlink
/etc/systemd/system/multi-user.target.wants/opendnssec-signer.service →
/lib/systemd/system/opendnssec-signer.service.
chown: invalid group: ‘opendnssec:opendnssec - -’
[....] Starting OpenDNSSEC Signer: opendnsec-signerstart-stop-daemon:
warning: this system is not able to track process names
longer than 15 characters, please use --exec instead of --name.
start-stop-daemon: warning: this system is not able to track process
names
longer than 15 characters, please use --exec instead of --name.
OpenDNSSEC signer engine version 2.0.4
. ok 
Setting up opendnssec-enforcer (1:2.0.4-3) ...
Created symlink
/etc/systemd/system/multi-user.target.wants/opendnssec-enforcer.service
→ /lib/systemd/system/opendnssec-enforcer.service.
chown: invalid group: ‘opendnssec:opendnssec - -’
[....] Starting OpenDNSSEC Enforcer:
opendnssec-enforcerstart-stop-daemon: warning: this system is not able
to track process names
longer than 15 characters, please use --exec instead of --name.
start-stop-daemon: warning: this system is not able to track process
names
longer than 15 characters, please use --exec instead of --name.
OpenDNSSEC key and signing policy enforcer version 2.0.4
enforcerd stopped with exitcode 3
 failed!
Setting up opendnssec (1:2.0.4-3) ...
Processing triggers for systemd (234-1) ...
Do you want to erase any previously downloaded .deb files? [Y/n] n





-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages opendnssec depends on:
ii  libhsm-bin           1:2.0.4-3
ii  opendnssec-enforcer  1:2.0.4-3
ii  opendnssec-signer    1:2.0.4-3

Versions of packages opendnssec recommends:
ii  softhsm2  2.2.0-3

Versions of packages opendnssec suggests:
pn  opendnssec-doc  <none>

-- debconf-show failed