Commit graph

8425 commits

Author SHA1 Message Date
Automatic Updater
e87f494810 update copyright notice 2011-10-17 23:46:33 +00:00
Mark Andrews
ca890c0aa8 sleep 1 # allow lwresd to finish starting. 2011-10-17 05:40:11 +00:00
Mark Andrews
2da036f231 The notify system test was using a dynamic zone for reload testing
so it was just a plain fluke that it ever succeeded.
* use a normal (non-dynamic) zone.
* check that reloads of the master zone actually occur.
* remove example3 test from tests.sh as it wasn't testing notify.
* add a "sleep 1" so that the copied file will have a newer timestamp.
* improve system test logging.
* using seperate output files for each test so that it is possible
  to work out what went wrong if the system test fails.
2011-10-17 01:33:28 +00:00
Mark Andrews
020c4484fe 3173. [port] Correctly validate root DS responses. [RT #25726] 2011-10-15 05:00:15 +00:00
Automatic Updater
2d45eb7acb update copyright notice 2011-10-14 23:46:34 +00:00
Mark Andrews
baabfdc0d9 wait for test zones to have loaded 2011-10-14 12:02:12 +00:00
Mark Andrews
0a1009ae64 3171. [bug] Exclusively lock the task when adding a zone using
'rndc addzone'.  [RT #25600]
2011-10-14 05:38:50 +00:00
Mark Andrews
298452f671 update for clientinfo support 2011-10-14 00:52:32 +00:00
Automatic Updater
304a539c59 update copyright notice 2011-10-13 22:48:24 +00:00
Mark Andrews
c28bc44028 waiting for servers to be ready for testing 2011-10-13 22:18:05 +00:00
Mark Andrews
88112d5fcb 'test -e' is not portable, use 'test -f' 2011-10-13 13:03:51 +00:00
Mark Andrews
abea1710a7 new 2011-10-13 04:53:07 +00:00
Mark Andrews
24ae404aca 'grep' -> 'grep -w' when checking for keyids 2011-10-13 03:55:01 +00:00
Mark Andrews
89d7808786 'grep' -> 'grep -w' when checking for keyids 2011-10-13 03:46:41 +00:00
Vernon Schryver
9fee08f655 Commit rt25172 changes to HEAD including
- fix precedence among competing rules
  - improve ARM text including documenting rule precedence
  - try to rewrite CNAME chains until first hit
  - new "rpz" logging channel
  - same fix for "NS ." as in RT 24985
2011-10-13 01:32:34 +00:00
Automatic Updater
ea68e8eba9 update copyright notice 2011-10-12 23:46:34 +00:00
Mark Andrews
af850c4120 3168. [bug] Nxdomain redirection could trigger a assert with
a ANY query. [RT #26017]
2011-10-12 23:09:35 +00:00
Mark Andrews
dc2e627239 3167. [bug] Negative answers from forwarders were not being
correctly tagged making them appear to not be cached.
                        [RT #25380]
2011-10-12 00:18:11 +00:00
Mark Andrews
02286522fb 3166. [bug] Upgrading a zone to support inline-signing failed. [RT #26014] 2011-10-12 00:10:20 +00:00
Automatic Updater
0e11ca0f0b update copyright notice 2011-10-11 23:46:45 +00:00
Evan Hunt
653a78de95 3165. [bug] dnssec-signzone could generate new signatures when
resigning, even when valid signatures were already
			present. [RT #26025]
2011-10-11 19:26:06 +00:00
Mark Andrews
25500a1d9f add missing break; 2011-10-11 13:36:12 +00:00
Mark Andrews
f730d7bdc2 fix builtin_lookup to match new prototype 2011-10-11 02:39:03 +00:00
Mark Andrews
be7772a59c #include <isc/print.h> 2011-10-11 00:53:15 +00:00
Evan Hunt
793814f807 3164. [func] Enable DLZ modules to retrieve client information,
so that responses can be changed depending on the
			source address of the query. [RT #25768]
2011-10-11 00:09:03 +00:00
Scott Mann
07dc62785b Change s/\R//g to chomp(). 2011-10-10 23:18:17 +00:00
Evan Hunt
b2086d798b 3163. [bug] Use finer-grained locking in client.c to address
concurrency problems with large numbers of threads.
			[RT #26044]
2011-10-10 22:57:14 +00:00
Scott Mann
db715e6d83 fix directory path for subdirs 2011-10-10 19:06:05 +00:00
Mark Andrews
d60fb3a58c use index rather than match as it is more portable 2011-10-10 00:34:57 +00:00
Scott Mann
aab0b9cd3b added ability to set named params through "named.args" file 2011-10-09 22:47:15 +00:00
Mark Andrews
17dfbab847 handle getline errors/eof 2011-10-07 21:32:35 +00:00
Mark Andrews
dc2cbfdafe handle multi-line NSEC3 record better 2011-10-06 22:11:39 +00:00
Evan Hunt
a6c74da2b0 3159. [bug] On some platforms, named could assert on startup
when running in a chrooted environment without
			/proc. [RT #25863]

3158.	[bug]		Recursive servers would prefer a particular UDP
			socket instead of using all available sockets.
			[RT #26038]
2011-10-04 16:04:22 +00:00
Evan Hunt
1219f8d194 3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
the config file before pausing the server. [RT #21373]
2011-09-23 18:08:01 +00:00
Automatic Updater
65df0ad698 update copyright notice 2011-09-07 23:46:28 +00:00
Mark Andrews
35540d8b32 add missing files from request-ixfr test 2011-09-07 01:30:13 +00:00
Automatic Updater
eea6be913f regen HEAD 2011-09-07 01:14:44 +00:00
Automatic Updater
cb3168cec7 update copyright notice 2011-09-06 23:46:27 +00:00
Scott Mann
fad5116b3d Remove the ixfr-from-differences side-effect which causes an AXFR and extend
request-ixfr to the zone level.
2011-09-06 22:29:33 +00:00
Automatic Updater
b3d6edf7cf update copyright notice 2011-09-05 23:46:54 +00:00
Evan Hunt
76a7d4e152 3152. [cleanup] Some versions of gcc and clang failed due to
incorrect use of __builtin_expect. [RT #25183]
2011-09-05 18:00:22 +00:00
Evan Hunt
6010c10f1f add time.h to silence compiler warning 2011-09-05 17:39:37 +00:00
Evan Hunt
ab6c20f978 fix whitespace 2011-09-03 05:51:29 +00:00
Automatic Updater
ca894e53b5 update copyright notice 2011-09-02 23:46:33 +00:00
Evan Hunt
9e4afc9b39 3151. [bug] Queries for type RRSIG or SIG could be handled
incorrectly.  [RT #21050]
2011-09-02 21:55:16 +00:00
Evan Hunt
8a2ab2b920 3150. [func] Improved startup and reconfiguration time by
enabling zones to load in multiple threads. [RT #25333]
2011-09-02 21:15:39 +00:00
Mark Andrews
56a520ef3a don't use a expired slave zone 2011-09-02 02:25:07 +00:00
Mark Andrews
cd49e1ec2f handle flushing of entries just before a second ticks over, speed up priming of the cache 2011-09-01 05:28:14 +00:00
Automatic Updater
a6ab2774bc update copyright notice 2011-08-31 23:46:44 +00:00
Mark Andrews
2c35c68236 3148. [bug] Processing of normal queries could be stalled when
forwarding a UPDATE message. [RT #24711]
2011-08-31 06:49:10 +00:00
Automatic Updater
4e68c7c87c update copyright notice 2011-08-30 23:46:53 +00:00
Mark Andrews
74f4130f41 report the result of dns_adb_createfind 2011-08-30 21:51:34 +00:00
Mark Andrews
837633db56 report the result of dns_adb_createfind 2011-08-30 21:50:34 +00:00
Mark Andrews
29f4de85ed remove unused variables 2011-08-30 12:45:43 +00:00
Mark Andrews
9198ab377b 3147. [func] Initial inline signing support. [RT #23657] 2011-08-30 05:16:15 +00:00
Automatic Updater
d0dce4d839 update copyright notice 2011-08-29 23:46:44 +00:00
Mark Andrews
90306774dc query could be tested uninitialised, check the result of dns_message_create 2011-08-29 23:21:48 +00:00
Mark Andrews
31ad3f3aa4 split out subtests of 'another leaf node, with both positive and negative cache entries' 2011-08-29 03:31:29 +00:00
Mark Andrews
787b0c87b7 add POST, len is not needed 2011-08-28 23:53:59 +00:00
Mark Andrews
281c57e2c1 add POST 2011-08-28 23:46:51 +00:00
Automatic Updater
b5217f1647 update copyright notice 2011-08-28 23:46:41 +00:00
Mark Andrews
9a770b4476 add missing check_result 2011-08-28 23:35:57 +00:00
Mark Andrews
a15f930626 silence 'never read' warning 2011-08-28 09:22:45 +00:00
Mark Andrews
f6b0ccf76a report if dns_rdata{class,type}_totext failed 2011-08-28 09:10:41 +00:00
Mark Andrews
9cbad6c4c0 t3 is not used 2011-08-28 08:10:13 +00:00
Automatic Updater
6e3afdcced update copyright notice 2011-08-25 23:46:42 +00:00
Mark Andrews
db2a90f6ea simplify flag printing, protect first with #ifdef USEINITALWS 2011-08-25 13:28:00 +00:00
Evan Hunt
5a75f61dd4 3144. [bug] dns_dbiterator_seek() could trigger an assert when
used with a nonexistent database node. [RT #25358]
2011-08-23 00:59:23 +00:00
Mark Andrews
3a63259484 3143. [bug] Silence clang compiler warnings. [RT #25174] 2011-08-18 04:52:35 +00:00
Mark Andrews
ab8d150e91 3142. [bug] NAPTR is class agnostic. [RT #25429] 2011-08-16 03:00:02 +00:00
Automatic Updater
17d33346d7 update copyright notice 2011-08-09 04:12:25 +00:00
Mark Andrews
772dfb90be 3141. [bug] Silence spurious "zone serial (0) unchanged" messages
associated with empty zones. [RT #25079]
2011-08-09 02:24:28 +00:00
Automatic Updater
cb3c295308 regen HEAD 2011-08-09 01:14:54 +00:00
Automatic Updater
4fc2b43e69 update copyright notice 2011-08-08 23:46:41 +00:00
Mark Andrews
f81e8340fc rt25400 s/domainname/filename/ 2011-08-08 03:28:15 +00:00
Automatic Updater
44931133ff update copyright notice 2011-08-03 23:47:48 +00:00
Evan Hunt
64c66c801f Missed an added file when merging rt19770. 2011-08-03 05:37:59 +00:00
Automatic Updater
adbc177194 update copyright notice 2011-08-02 23:47:52 +00:00
Evan Hunt
0127993480 3140. [func] New command "rndc flushtree <name>" clears the
specified name from the server cache along with
			all names under it. [RT #19970]
2011-08-02 20:36:13 +00:00
Automatic Updater
2f17ad4545 update copyright notice 2011-07-28 23:47:59 +00:00
Mark Andrews
16f3aeab3c move declaration to start of function 2011-07-28 11:16:04 +00:00
Mark Andrews
31f46f1869 3138. [bug] Address memory leaks and out-of-order operations when
shutting named down. [RT #25210]
2011-07-28 04:27:27 +00:00
Evan Hunt
f07b2fccaf 3137. [func] Improve hardware scalability by allowing multiple
worker threads to process incoming UDP packets.
			This can significantly increase query throughput
			on some systems.  [RT #22992]
2011-07-28 04:04:37 +00:00
Mark Andrews
011080d64a add ${ISC_INCLUDES} 2011-07-28 03:20:45 +00:00
Evan Hunt
cf63d32d55 3136. [func] Add RFC 1918 reverse zones to the list of built-in
empty zones switched on by the 'empty-zones-enable'
			option. [RT #24990]
2011-07-28 03:18:17 +00:00
Mark Andrews
062ddb1981 use UNUSED() 2011-07-27 23:38:21 +00:00
Mark Andrews
8bd2b6923c silence 'expression result unused' from clang 2011-07-27 07:45:55 +00:00
Mark Andrews
56e85a97bb use UNUSED(x) not 'x = x' 2011-07-27 07:02:21 +00:00
Mark Andrews
f96ba7c746 remove check for oldid as named may have already deleted it 2011-07-26 04:42:20 +00:00
Mark Andrews
acf34e66a8 id was not being properly set 2011-07-26 04:28:35 +00:00
Automatic Updater
3d73f493d0 update copyright notice 2011-07-19 23:47:48 +00:00
Mark Andrews
96ade2bc52 3134. [bug] Improve the accuracy of dnssec-signzone's signing
statistics. [RT #16030]
2011-07-19 04:09:27 +00:00
Evan Hunt
b47c020d5c 3133. [bug] Change #3114 was incomplete. [RT #24577] 2011-07-08 01:43:26 +00:00
Automatic Updater
2a36d8ca40 update copyright notice 2011-07-07 23:47:50 +00:00
Automatic Updater
69f5c36b39 update copyright notice 2011-07-06 23:47:43 +00:00
Evan Hunt
c46ce2d79b 3131. [func] Improve scalability by allocating one zone task
per 100 zones at startup time, rather than using a
			fixed-size task table. [RT #24406]
2011-07-06 05:05:52 +00:00
Evan Hunt
42cf2ff7ba 3131. [func] Improve scalability by allocating one zone task
per 100 zones at startup time, rather than using a
			fixed-size task table. [RT #24406]
2011-07-06 01:36:32 +00:00
Mark Andrews
a69070d8fa 3130. [func] Support alternate methods for managing a dynamic
zone's serial number.  Two methods are currently
                        defined using serial-update-method, "increment"
                        (default) and "unixtime".  [RT #23849]
2011-07-01 02:25:48 +00:00
Evan Hunt
cba23be7ba Add the newly discovered PoD to the nsupdate test. (No CHANGES note.) 2011-06-21 22:15:05 +00:00
Automatic Updater
313b4dc3b2 update copyright notice 2011-06-17 23:47:49 +00:00
Evan Hunt
e7220c9b84 3129. [bug] Named could crash on 'rndc reconfig' when
allow-new-zones was set to yes and named ACLs
			were used, [RT #22739]
2011-06-17 07:05:02 +00:00
Automatic Updater
0f467ed4d4 update copyright notice 2011-06-10 23:47:32 +00:00
Evan Hunt
79ce3a9e82 3128. [func] Inserting an NSEC3PARAM via dynamic update in an
auto-dnssec zone that has not been signed yet
			will cause it to be signed with the specified NSEC3
			parameters when keys are activated.  The
			NSEC3PARAM record will not appear in the zone until
			it is signed, but the parameters will be stored.
			[RT #23684]
2011-06-10 01:51:09 +00:00
Evan Hunt
5e3affc6a0 3127. [bug] 'rndc thaw' will now remove a zone's journal file
if the zone serial number has been changed and
			ixfr-from-differences is not in use.  [RT #24687]
2011-06-10 01:32:38 +00:00
Mark Andrews
475b1ed9cc 3126. [security] Using DNAME record to generate replacements caused
RPZ to exit with a assertion failure. [RT #23766]
2011-06-09 03:10:17 +00:00
Mark Andrews
b64e3b8358 3125. [security] Using wildcard CNAME records as a replacement with
RPZ caused named to exit with a assertion failure.
                        [RT #24715]
2011-06-09 00:42:51 +00:00
Evan Hunt
2a6d60615c Fixed an nsupdate test error 2011-06-09 00:15:05 +00:00
Evan Hunt
6de9744cf9 3124. [bug] Use an rdataset attribute flag to indicate
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
2011-06-08 22:13:51 +00:00
Scott Mann
07797bfb1f fix RT 24561 2011-06-07 01:45:38 +00:00
Evan Hunt
6b95b91c61 3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664] 2011-06-02 20:24:45 +00:00
Mark Andrews
ec564e401a add debugging output on test failure 2011-05-31 13:52:06 +00:00
Mark Andrews
ae0691566a date +%s is not portable, use perl -e 'print time();', Adjust messages 2011-05-30 22:32:06 +00:00
Scott Mann
5588b32695 This is a workaround fix for a problem in Solaris 10 (specifically on thing1)
for which a root cause has not yet been found. RT #24561.
2011-05-30 15:13:49 +00:00
Mark Andrews
fe8572e116 The old active key could be deleted before the "former standby key has now
signed fully" ran causing it to fail.  Delay the deletion by 10 seconds.
2011-05-30 07:25:19 +00:00
Automatic Updater
6406d6507a update copyright notice 2011-05-26 23:47:28 +00:00
Mark Andrews
ea82782532 3120. [bug] Named could fail to validate zones list in a DLV
that validated insecure without using DLV and had
                        DS records in the parent zone. [RT #24631]
2011-05-26 04:35:02 +00:00
Evan Hunt
0245f7725c 3118. [bug] When rolling to a new DNSSEC key, a private-type
record could be created and never marked complete.
			[RT #23253]
2011-05-26 04:25:47 +00:00
Automatic Updater
00678e367d update copyright notice 2011-05-25 23:47:16 +00:00
Mark Andrews
021bc5b3cc add DRUZ zone with DS records 2011-05-25 01:06:56 +00:00
Evan Hunt
47e70d820e 3118. [bug] nsupdate could dump core on shutdown when using
SIG(0) keys. [RT #24604]
2011-05-23 22:25:32 +00:00
Evan Hunt
bfe32d08c5 3116. [func] New 'dnssec-update-mode' option controls updates
of DNSSEC records in signed dynamic zones.  Set to
			'no-resign' to disable automatic RRSIG regeneration
			while retaining the ability to sign new or changed
			data. [RT #24533]
2011-05-23 20:10:03 +00:00
Evan Hunt
fc6364bf24 expiring.example.db.in was left out when committing rt23136 to HEAD 2011-05-21 15:07:10 +00:00
Mark Andrews
c0984ac8bd 3115. [bug] Named could fail to return requested data when
following a CNAME that points into the same zone.
                        [RT #2445]
2011-05-20 05:09:30 +00:00
Scott Mann
a50ce0f80b Fix for RT #23136 task 1. 2011-05-19 00:31:57 +00:00
Automatic Updater
d9c707589a regen HEAD 2011-05-09 01:14:47 +00:00
Mark Andrews
789875a1bd named.conf copyrights 2011-05-08 07:12:48 +00:00
Automatic Updater
25db028666 update copyright notice 2011-05-07 23:47:28 +00:00
Evan Hunt
de7df3e56f 3111. [bug] Improved consistency checks for dnssec-enable and
dnssec-validation, added test cases to the
                        checkconf system test. [RT #24398]
2011-05-07 05:55:17 +00:00
Evan Hunt
be84733145 3110. [bug] dnssec-signzone: Wrong error message could appear
when attempting to sign with no KSK. [RT #24369]
2011-05-07 00:31:13 +00:00
Automatic Updater
40717638fa update copyright notice 2011-05-06 23:47:29 +00:00
Evan Hunt
ac21f918f2 3109. [func] The also-notify option now uses the same syntax
as a zone's masters clause.  This means it is
			now possible to specify a TSIG key to use when
			sending notifies to a given server, or to include
			an explicit named masters list in an also-notfiy
			statement.  [RT #23508]
2011-05-06 21:23:51 +00:00
Evan Hunt
485522d7e1 3108. [cleanup] dnssec-signzone: Clarified some error and
warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
			code (use -P instead). [RT #20852]

3107.	[bug]		dnssec-signzone: Report the correct number of ZSKs
			when using -x. [RT #20852]
2011-05-06 21:08:33 +00:00
Automatic Updater
a30e1b26b4 update copyright notice 2011-05-05 23:47:17 +00:00
Mark Andrews
fe646be4b7 set/reset client->signer. change 3106 used it before it was set 2011-05-05 23:44:52 +00:00
Scott Mann
b2b3209149 added g 2011-05-05 23:15:56 +00:00
Scott Mann
101e493844 remove trailing whitespace from pid (RT 24388) 2011-05-05 23:10:24 +00:00
Scott Mann
58d7c91b65 remove trailing newline from pid (RT #24388) 2011-05-05 22:56:55 +00:00
Evan Hunt
9eea4c5cbd 3106. [func] When logging client requests, include the name of
the TSIG key if any. [RT #23619]
2011-05-05 20:04:24 +00:00
Evan Hunt
d454a60f56 3103. [bug] Configuring 'dnssec-validation auto' in a view
instead of in the options statement could trigger
			an assertion failure in named-checkconf. [RT #24382]
2011-05-05 16:13:35 +00:00
Mark Andrews
83bf223210 explictly kill the process if the server fails to start, check for a non zero length pid file 2011-05-05 04:47:45 +00:00
Mark Andrews
46d3c6cf40 grep was not precise enough leading to test failure 2011-05-03 16:07:44 +00:00
Mark Andrews
f1d4986b83 treat asb(x) < 500ms as 0 2011-05-02 23:56:59 +00:00
Mark Andrews
65043f48f2 force numeric comparision 2011-05-02 05:05:05 +00:00
Mark Andrews
07907fa31a handle end of day 2011-05-02 01:35:04 +00:00
Mark Andrews
bbf46f1aa2 fix expression 2011-05-01 21:36:33 +00:00
Mark Andrews
f83682f368 awk -v is not portable, add floating point arithmetic effects 2011-05-01 11:29:20 +00:00
Automatic Updater
54968ae88e update copyright notice 2011-04-29 23:47:18 +00:00
Evan Hunt
39f2d1a96a 3102. [func] New 'dnssec-loadkeys-interval' option configures
how often, in minutes, to check the key repository
			for updates when using automatic key maintenance.
			Default is every 60 minutes (formerly hard-coded
			to 12 hours). [RT #23744]

3101.	[bug]		Zones using automatic key maintenance could fail
			to check the key repository for updates. [RT #23744]
2011-04-29 21:37:15 +00:00
Automatic Updater
46ce2f7b60 update copyright notice 2011-04-27 23:47:26 +00:00
Evan Hunt
76db58eb81 3100. [security] Certain response policy zone configurations could
trigger an INSIST when receiving a query of type
			RRSIG. [RT #24280]
2011-04-27 17:46:47 +00:00
Automatic Updater
7021f2faa0 update copyright notice 2011-04-19 23:47:52 +00:00
Evan Hunt
7a2173839c 3099. [test] "dlz" system test now runs but gives R:SKIPPED if
not compiled with --with-dlz-filesystem.  [RT #24146]

3098.	[bug]		DLZ zones were answering without setting the AA bit.
			[RT #24146]
2011-04-19 22:30:52 +00:00
Evan Hunt
c92122485d 3097. [test] Add a tool to test handling of malformed packets.
[RT #24096]
2011-04-15 01:02:08 +00:00
Scott Mann
c7e1812d02 a few more "--with-gssapi" as default fixes to correct problems on test
systems
2011-04-05 19:16:54 +00:00
Scott Mann
80593d9802 one character typo. 2011-04-05 16:10:39 +00:00
Evan Hunt
4e5fc672bc Corrected a bug in the dnssec test introduced in change #3046. 2011-03-31 15:58:51 +00:00
Automatic Updater
e2d4cd0ae4 update copyright notice 2011-03-30 23:47:12 +00:00
Scott Mann
761fa7d770 Fixes for various OS/environs for RT #23836 (--with-gssapi as default). 2011-03-30 15:48:41 +00:00
Mark Andrews
779c84fb32 style 2011-03-28 05:14:51 +00:00
Mark Andrews
4768c1d9a4 while (1) -> for (;;) 2011-03-28 05:11:43 +00:00
Automatic Updater
795a316ec5 regen HEAD 2011-03-28 01:14:35 +00:00
Mark Andrews
2ae23f7fc6 </para> -> <para> 2011-03-27 06:39:59 +00:00
Evan Hunt
eb08f01b96 Forgot to add a data file for the autosign test. 2011-03-26 01:19:03 +00:00
Evan Hunt
319b8a1488 3092. [bug] Signatures for records at the zone apex could go
stale due to an incorrect timer setting. [RT #23769]

3091.	[bug]		Fixed a bug in which zone keys that were published
			and then subsequently activated could fail to trigger
			automatic signing. [RT #22991]
2011-03-25 23:53:02 +00:00
Mark Andrews
fdc2d31c00 </para>-><para> 2011-03-25 03:08:44 +00:00
Automatic Updater
06140f733a update copyright notice 2011-03-24 23:47:48 +00:00
Mark Andrews
0a82492610 3089. [func] dnssec-dsfromkey now supports reading keys from
standard input "dnssec-dsfromkey -f -". [RT# 20662]
2011-03-24 02:10:23 +00:00
Automatic Updater
4f06155c8f update copyright notice 2011-03-22 23:47:30 +00:00
Scott Mann
1760d5e5f2 For some reason, this didn't get removed before (RT #23687) 2011-03-22 17:20:03 +00:00
Scott Mann
95759de490 Remove bin/tests/system/logfileconfig/ns1/named.conf and add setup.sh
in order to resolve changing named.conf issue.  [RT #23687]
2011-03-22 16:51:50 +00:00
Evan Hunt
c2255e8614 Fixed a bug that was exposed by change #3085. 2011-03-22 03:19:38 +00:00
Automatic Updater
7717ec7a6a regen HEAD 2011-03-22 01:14:27 +00:00
Mark Andrews
e706901292 add test numbers 2011-03-22 00:41:53 +00:00
Automatic Updater
6333ba02a5 update copyright notice 2011-03-21 23:47:21 +00:00
Mark Andrews
c2265bd341 adjust rt23702 test to take less time 2011-03-21 20:31:22 +00:00
Evan Hunt
0994d3a21b 3087. [bug] DDNS updates using SIG(0) with update-policy match
type "external" could cause a crash. [RT #23735]
2011-03-21 19:54:03 +00:00
Evan Hunt
1063914c30 Fixed some problems from change #3084 that turned up after committing it;
"freeze" and "thaw" weren't working quite right when used without a
specific zone name.
2011-03-21 18:38:40 +00:00
Evan Hunt
cf0d508b1e Forgot to add rndc test dir when committing "rndc sync" change to HEAD 2011-03-21 18:06:07 +00:00
Evan Hunt
36b2d5f93c use "rndc sync" instead of freeze/thaw cycle to dump zones, now that it's
available.
2011-03-21 16:53:44 +00:00
Evan Hunt
dff7e38491 initialize delset 2011-03-21 16:17:57 +00:00
Evan Hunt
10a759cee6 3086. [bug] Running dnssec-settime -f on an old-style key will
now force an update to the new key format even if no
			other change has been specified, using "-P now -A now"
			as default values.  [RT #22474]
2011-03-21 15:56:35 +00:00
Evan Hunt
d965c91f95 clarify "rndc sync" logging, add it to "rndc -h" output, per francis
review comments in rt22473.
2011-03-21 15:39:05 +00:00
Evan Hunt
35f1a4fc93 3085. [func] New '-R' option in dnssec-signzone forces removal
of signatures which have not yet expired but
			were generated by a key that no longer exists.
			[RT #22471]
2011-03-21 07:26:47 +00:00
Evan Hunt
7cb226ec34 3084. [func] A new command "rndc sync" dumps pending changes in
a dynamic zone to disk; "rndc sync -clean" also
			removes the journal file after syncing.  Also,
			"rndc freeze" no longer removes journal files.
			[RT #22473]
2011-03-21 07:22:14 +00:00
Mark Andrews
5f49da42fe wait longer for the nsec3chain generation to complete 2011-03-21 03:30:48 +00:00
Mark Andrews
5095e72ac3 3083. [bug] NOTIFY messages were not being sent when generating
a NSEC3 chain incrementally. [RT #23702]
2011-03-21 01:02:39 +00:00
Mark Andrews
653cad790b 3082. [port] strtok_r is threads only. [RT #23747] 2011-03-21 00:30:18 +00:00
Mark Andrews
7dc5273a3e skip not untested 2011-03-20 09:03:47 +00:00
Automatic Updater
7885190562 update copyright notice 2011-03-18 23:47:36 +00:00
Francis Dupont
f3bb08a519 add 23591 no-regression 2011-03-18 21:14:20 +00:00
Francis Dupont
a8e6a8cd6c fix too long with dname error 2011-03-18 21:12:19 +00:00
Mark Andrews
cbf59e5887 3079. [bug] Handle isc_event_allocate failures in t_tasks.
[RT #23572]
2011-03-18 07:40:25 +00:00
Evan Hunt
1853c5eaf7 ignore SIGPIPE in ans.pl; this is needed for debian. 2011-03-18 04:41:15 +00:00
Mark Andrews
f79a36eeed silence: 'ttl' might be used uninitialized 2011-03-18 02:16:43 +00:00
Evan Hunt
ea5334a36e fixed a missing / in /dev/null 2011-03-18 02:08:45 +00:00
Automatic Updater
a3f8c8e207 regen HEAD 2011-03-18 01:14:34 +00:00
Automatic Updater
207cee019e update copyright notice 2011-03-17 23:47:30 +00:00
Francis Dupont
50f64cf0e5 silent compiler warnings for DLZ exernal driver support and example 2011-03-17 09:25:54 +00:00
Evan Hunt
61bcc23203 3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
dnssec-keyfromlabel sets the default TTL of the
			key.  When possible, automatic signing will use that
			TTL when the key is published.  [RT #23304]
2011-03-17 01:40:40 +00:00
Francis Dupont
92f2688155 silent clang analyzer 2011-03-14 14:13:10 +00:00
Automatic Updater
71d0d898fb update copyright notice 2011-03-13 23:47:36 +00:00
Mark Andrews
26b49e8459 3074. [bug] Make the adb cache read through for zone data and
glue learn for zone named is authoritative for.
                        [RT #22842]
2011-03-13 02:49:28 +00:00
Automatic Updater
8ac903147f update copyright notice 2011-03-12 23:47:42 +00:00
Mark Andrews
69e617cf88 test for Net::DNS 2011-03-12 21:24:52 +00:00
Automatic Updater
c1aef54e14 update copyright notice 2011-03-12 04:59:49 +00:00
Mark Andrews
4f587beb8e 3071. [bug] has_nsec could be used unintialised in
update.c:next_active. [RT #20256]
2011-03-11 12:51:40 +00:00
Mark Andrews
6494526350 3070. [bug] dnssec-signzone potential NULL pointer dereference.
[RT #20256]
2011-03-11 12:37:01 +00:00
Evan Hunt
4fbaf0202b link driver.so from the .o file instead of the .lo file when building
with libtool.
2011-03-11 07:11:07 +00:00
Mark Andrews
0874abad14 3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
2011-03-11 06:11:27 +00:00
Mark Andrews
2d96b63d31 3067. [bug] ixfr-from-differences {master|slave}; failed to
select the master/slave zones.  [RT #23580]
2011-03-11 00:43:54 +00:00
Automatic Updater
cf786a52ce update copyright notice 2011-03-10 23:47:50 +00:00
Francis Dupont
cf39976b89 while(1) -> for(;;) (cf 23588) 2011-03-10 13:37:21 +00:00
Evan Hunt
422009fe5b 3066. [func] The DLZ "dlopen" driver is now built by default,
no longer requiring a configure option.  To
			disable it, use "configure --without-dlopen".
                        Driver also supported on win32.  [RT #23467]
2011-03-10 04:36:16 +00:00
Francis Dupont
228bddfc12 update do_authors_lookup() 2011-03-07 15:29:32 +00:00
Mark Andrews
198be130e2 remove exit 2011-03-07 14:03:49 +00:00
Automatic Updater
be6c1c5061 regen HEAD 2011-03-06 01:14:21 +00:00
Automatic Updater
0e27506ce3 update copyright notice 2011-03-05 23:52:31 +00:00
Evan Hunt
9a859983d7 3062. [func] Made several changes to enhance human readability
of DNSSEC data in dig output and in generated
			zone files:
			 - DNSKEY record comments are more verbose, no
			   longer used in multiline mode only
			 - multiline RRSIG records reformatted
			 - multiline output mode for NSEC3PARAM records
			 - "dig +norrcomments" suppresses DNSKEY comments
			 - "dig +split=X" breaks hex/base64 records into
			   fields of width X; "dig +nosplit" disables this.
			[RT #22820]
2011-03-05 19:39:07 +00:00
Mark Andrews
eff7f78bc6 3061. [func] New option "dnssec-signzone -D", only write out
generated DNSSEC records. [RT #22896]
2011-03-05 06:35:41 +00:00
Mark Andrews
7d09a0190b add #include <isc/file.h> 2011-03-05 03:03:57 +00:00
Automatic Updater
60a900e83b regen HEAD 2011-03-05 01:14:22 +00:00
Automatic Updater
26a7306397 update copyright notice 2011-03-04 23:47:47 +00:00
Evan Hunt
61271cdee6 3060. [func] New option "dnssec-signzone -X <date>" allows
specification of a separate expiration date
			for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
2011-03-04 22:20:21 +00:00
Evan Hunt
c2f051aaaa 3059. [test] Added a regression test for change #3023. 2011-03-04 22:01:01 +00:00
Scott Mann
be59d1eb72 Adding missing files for RT22771. 2011-03-04 14:43:58 +00:00
Scott Mann
32babe43eb Ensure that log files are plain files. (RT #22771) 2011-03-04 14:07:03 +00:00
Automatic Updater
7d9d170dbb update copyright notice 2011-03-03 23:47:32 +00:00
Evan Hunt
f385bac3b9 3057. [bug] "rndc secroots" would abort after the first error
and so could miss some views. [RT #23488]
2011-03-03 16:16:47 +00:00
Francis Dupont
9fe8cca065 add URI support 2011-03-03 14:10:27 +00:00
Evan Hunt
70c7f4fb4f 3053. [bug] Under a sustained high query load with a finite
max-cache-size, it was possible for cache memory
			to be exhausted and not recovered. [RT #23371]
2011-03-03 04:42:25 +00:00
Francis Dupont
624664e504 Fixed last autosign test report [RT #23256] 2011-03-02 09:03:45 +00:00
Mark Andrews
be789bc7eb 3045. [removed] Replaced by change #3050. 2011-03-02 04:52:25 +00:00
Mark Andrews
d819823fee 3051. [bug] NS records obsure DS records at the bottom of the
zone if both are present. [RT #23035]
2011-03-02 04:49:05 +00:00
Mark Andrews
c1ced49662 3051. [bug] NS records obsure DS records at the bottom of the
zone if both are present. [RT #23035]
2011-03-02 04:20:34 +00:00
Mark Andrews
ba88bcf08b 3050. [bug] The autosign system test was timing dependent.
Wait for the initial autosigning to complete
                        before running the rest of the test. [RT #23035]
2011-03-02 04:08:58 +00:00
Mark Andrews
88c63fe9c7 3039. [bug] Save and restore the gid when creating creating
named.pid at startup. [RT #23290]
2011-03-02 00:02:54 +00:00
Automatic Updater
c8175ece69 update copyright notice 2011-03-01 23:48:07 +00:00
Mark Andrews
4c05f9a6a3 3048. [bug] Fully seperate view key mangement. [RT #23419] 2011-03-01 22:44:04 +00:00
Scott Mann
d31740ce28 Fixed DNSKEY NODATA responses not cached (RT #22908). 2011-03-01 14:40:39 +00:00
Automatic Updater
bc171df6ca update copyright notice 2011-02-28 23:47:39 +00:00
Automatic Updater
ddc163d532 regen 2011-02-28 23:31:05 +00:00
Francis Dupont
664917beda Use RRSIG original TTL in validated RRset TTL [RT #23332] 2011-02-28 14:21:35 +00:00
Francis Dupont
17bc56e321 ove the testsock.pl sleep to autosign test suite [RT #23400] 2011-02-28 14:08:36 +00:00
Automatic Updater
1c743aa176 regen 2011-02-27 23:30:42 +00:00
Evan Hunt
7cc5632595 3042. [bug] dig +trace could fail attempting to use IPv6
addresses on systems with only IPv4 connectivity.
			[RT #23797]
2011-02-25 23:11:13 +00:00
Mark Andrews
2f09e7c3fc 3041. [bug] dnssec-signzone failed to generate new signatures on
ttl changes. [RT #23330]
2011-02-24 03:04:43 +00:00
Automatic Updater
8a8d38eb8e regen HEAD 2011-02-24 01:14:22 +00:00
Automatic Updater
45caada8cb update copyright notice 2011-02-23 23:47:20 +00:00
Mark Andrews
4f07b2b00c 3040. [bug] Named failed to validate insecure zones where a node
with a CNAME existed between the trust anchor and the
                        top of the zone. [RT #23338]
2011-02-23 11:30:35 +00:00
Mark Andrews
0e507dbb81 2039. [func] Redirect on NXDOMAIN support. [RT #23146] 2011-02-23 03:08:11 +00:00
Scott Mann
3b46648b02 Revert the previous commit...made on wrong branch. 2011-02-22 22:57:23 +00:00
Scott Mann
44b49a34b1 Added some comments. 2011-02-22 22:50:45 +00:00
Mark Andrews
b795de862b 2036. [bug] Check built-in zone arguments to see if the zone
is re-usable or not. [RT #21914]
2011-02-22 04:14:30 +00:00
Automatic Updater
b01d422daf update copyright notice 2011-02-21 23:47:45 +00:00
Mark Andrews
c12904ec53 3035. [cleanup] Simplify by using strlcpy. [RT #22521] 2011-02-21 07:34:57 +00:00
Mark Andrews
0a92db42c6 3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521] 2011-02-21 07:22:21 +00:00
Mark Andrews
a360461b34 check for snprintf failure 2011-02-21 07:14:43 +00:00
Scott Mann
57b403c1e9 Fix prz SERVFAILs after failed zone transfers (RT23246). 2011-02-18 15:18:30 +00:00
Evan Hunt
29bd52e4ee 3021. [bug] Change #3010 was incomplete. [RT #22296] 2011-02-16 19:48:12 +00:00
Automatic Updater
c41b2924a5 update copyright notice 2011-02-15 23:47:36 +00:00
Mark Andrews
b1b42b03b7 3020. [bug] auto-dnssec failed to correctly update the zone when changing the DNSKEY RRset. [RT #23232] 2011-02-15 22:02:36 +00:00
Francis Dupont
931814de4a typo in comment 2011-02-15 18:23:34 +00:00
Mark Andrews
c5fa370695 3019. [func] Test: check apex NSEC3 records after adding DNSKEY
record via UPDATE. [RT #23229]
2011-02-14 23:53:44 +00:00
Automatic Updater
56748bc3d1 update copyright notice 2011-02-08 23:10:07 +00:00
Mark Andrews
37b017f2ca Regression test for:
3018.   [bug]           Named failed to check for the "none;" acl when deciding
                        if a zone may need to be re-signed. [RT #23120]
2011-02-08 03:47:02 +00:00
Automatic Updater
79cf9524b1 regen HEAD 2011-02-04 01:14:16 +00:00
Automatic Updater
784a904bd0 update copyright notice 2011-02-03 12:18:12 +00:00
Mark Andrews
5cfe4bcb0a 3017. [doc] dnssec-keyfromlabel -I was not properly documented.
[RT #22887]
2011-02-03 12:01:44 +00:00
Mark Andrews
5b79d15401 3016. [bug] rndc usage missing '-b'. [RT #22937] 2011-02-03 11:46:17 +00:00
Mark Andrews
c1ee8bb4ba 3013. [bug] The DNS64 ttl was not always being set as expected.
[RT #23034]
2011-02-03 07:35:56 +00:00
Mark Andrews
16cc4a1f56 3012. [bug] Remove DNSKEY TTL change pairs before generating
signing records for any remaing DNSKEY changes.
                        [RT #22590]
2011-02-03 06:03:15 +00:00
Mark Andrews
000a8970f8 3011. [func] Change the default query timeout from 30 seconds
to 10.  Allow setting this in named.conf using the new
                        'resolver-query-timeout' option, which specifies a max
                        time in seconds.  0 means 'default' and anything longer
                        than 30 will be silently set to 30. [RT #22852]
2011-02-03 05:41:55 +00:00
Evan Hunt
903b3c84e2 3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
for refreshing managed-keys. [RT #22296]
2011-02-03 00:21:55 +00:00
Evan Hunt
439a6b2fbf created cvsignore 2011-02-01 20:12:16 +00:00
Automatic Updater
a09fff7051 update copyright notice 2011-01-14 00:51:43 +00:00
Mark Andrews
638614fe02 silence: warning: format not a string literal and no format arguments 2011-01-14 00:44:53 +00:00
Mark Andrews
cc5e0baaef arguements out of order 2011-01-13 23:16:06 +00:00
Evan Hunt
5645e0c82a Automatically-added copyright text was breaking the RPZ test. 2011-01-13 19:30:41 +00:00
Automatic Updater
2352050890 update copyright notice 2011-01-13 08:50:29 +00:00
Mark Andrews
16ae8f12c2 add -V to foreground flags 2011-01-13 08:46:34 +00:00
Mark Andrews
6767b5b544 openssl include path 2011-01-13 08:15:30 +00:00
Mark Andrews
0a24e3a8ae openssl include path 2011-01-13 07:51:06 +00:00
Mark Andrews
fd7b3477c3 openssl include path 2011-01-13 07:25:35 +00:00
Automatic Updater
9cee5bb028 update copyright notice 2011-01-13 04:59:26 +00:00
Mark Andrews
9d53927aa8 zone = NULL 2011-01-13 03:57:50 +00:00
Mark Andrews
87708bde16 3008. [func] Response policy zones (RPZ) support. [RT #21726] 2011-01-13 01:59:28 +00:00
Automatic Updater
135bcc2e42 update copyright notice 2011-01-11 23:47:14 +00:00
Michael Graff
59b600ae73 commit Makefile.in, not Makefile 2011-01-11 21:40:35 +00:00
Michael Graff
beb52a4b18 add tests for isc_atomic_xadd() and isc_atomic_xaddq() since there is some suspicion that they may not be working properly on all platforms. This is committed direclty to the mainline as it's only a test. I did not regenerate configure from configure.in, but just added the one Makefile line. Evan will take a quick look at this after it's committed. 2011-01-11 21:36:22 +00:00
Mark Andrews
b053854c20 call dns_tsigkeyring_detach(&ring) 2011-01-10 13:09:49 +00:00
Mark Andrews
433e06a25c 3006. [func] Allow dynamically generated TSIG keys to be preserved
across restarts of named.  Initially this is for
                        TSIG keys generated using GSSAPI. [RT #22639]
2011-01-10 05:32:04 +00:00
Mark Andrews
fc5e97963d Check that ::1 is configured 2011-01-10 05:08:49 +00:00
Automatic Updater
0e0be796a7 update copyright notice 2011-01-08 23:47:01 +00:00
Evan Hunt
b156001ec1 Oops, omitted some commits from change #3005. 2011-01-08 01:26:01 +00:00
Automatic Updater
65ad89971e regen HEAD 2011-01-08 01:15:44 +00:00
Evan Hunt
8a743600dd 3005. [port] Solaris: Work around the lack of
gsskrb5_register_acceptor_identity() by setting
			the KRB5_KTNAME environment variable to the
			contents of tkey-gssapi-keytab.  Also fixed
			test errors on MacOSX.  [RT #22853]
2011-01-08 00:33:12 +00:00
Automatic Updater
93235c1cba update copyright notice 2011-01-07 23:47:07 +00:00
Evan Hunt
a727690e8b HPUX: silence compiler warnings about signed/unsigned comparisons 2011-01-07 21:42:03 +00:00
Evan Hunt
f686c5d700 Added missing .cvsignore entries 2011-01-07 07:10:34 +00:00
Evan Hunt
c23a9eed3e - Missed out authsock.pl when committing 3003.
- Remove auth.sock in clean.sh.
2011-01-07 07:01:58 +00:00
Mark Andrews
dc4fa197dd 3004. [func] DNS64 reverse support. [RT #22769] 2011-01-07 04:31:39 +00:00
Evan Hunt
5a87f3439e Initialize a pointer to NULL in order to to silence a compiler warning.
Committing without review because the change is trivial.
2011-01-07 00:50:06 +00:00
Automatic Updater
db69d5d53c update copyright notice 2011-01-06 23:47:00 +00:00
Evan Hunt
3916872f37 3003. [experimental] Added update-policy match type "external",
enabliing named to defer the decision of whether to
			allow a dynamic update to an external daemon.
			(Contributed by Andrew Tridgell.) [RT #22758]
2011-01-06 23:24:39 +00:00
Automatic Updater
9412850a75 regen 2011-01-05 23:30:46 +00:00
Automatic Updater
1da9dbcf48 update copyright notice 2011-01-04 23:47:14 +00:00
Automatic Updater
a184761e52 regen 2011-01-04 23:30:37 +00:00
Evan Hunt
79bf7c874b 3001. [func] Added a default trust anchor for the root zone, which
can be switched on by setting "dnssec-validation auto;"
			in the named.conf options. [RT #21727]
2011-01-03 23:45:08 +00:00
Mark Andrews
ac78c47210 ! test -n -> test -z 2010-12-27 13:38:43 +00:00
Mark Andrews
c2f37a77cc #include ISC_PLATFORM_KRB5HEADER [RT #22798] 2010-12-26 23:24:18 +00:00
Automatic Updater
6764a1403a update copyright notice 2010-12-24 23:47:05 +00:00
Mark Andrews
cd86950664 exit 255 2010-12-24 07:27:15 +00:00
Evan Hunt
d9ad0a55bb 3000. [bug] More TKEY/GSS fixes:
- nsupdate can now get the default realm from
			   the user's Kerberos principal
			 - corrected gsstest compilation flags
			 - improved documentation
			 - fixed some NULL dereferences
			[RT #22795]
2010-12-24 02:20:47 +00:00
Automatic Updater
0e9e255d16 regen HEAD 2010-12-24 01:14:21 +00:00
Automatic Updater
a094c46640 update copyright notice 2010-12-23 23:47:08 +00:00
Mark Andrews
37dee1ff94 2999. [func] Add GOST support (RFC 5933). [RT #20639] 2010-12-23 04:08:00 +00:00
Mark Andrews
10e018f66d s/ISC_OPENSSL_INC/DST_OPENSSL_INC 2010-12-22 09:00:40 +00:00
Mark Andrews
643935ac11 2997. [func] named -V now reports the OpenSSL and libxml2 verions
it was compiled against. [RT #22687]
2010-12-22 03:59:02 +00:00
Automatic Updater
ca103999e6 update copyright notice 2010-12-20 23:47:21 +00:00
Evan Hunt
950aa1d752 When a prereq.sh file determines that a test can't run because the feature
to be tested was not configured in at build time, it can now return 255,
and run.sh will print "R:SKIPPED" instead of "R:UNTESTED".  Robie will be
able to flag this as green rather than yellow.
2010-12-20 21:35:45 +00:00
Evan Hunt
8fda09fc85 Changed $(command) to command in tests.sh for compatibility with
older bourne shells.
2010-12-20 18:37:07 +00:00
Mark Andrews
e11d10bbcc example.nil.zone -> example.nil.db 2010-12-19 23:39:28 +00:00
Evan Hunt
584ad7dedd 2990. [bug] 'dnssec-settime -S' no longer tests prepublication
interval validity when the interval is set to 0.
			[RT #22761]
2010-12-19 07:29:36 +00:00
Automatic Updater
517ae3de96 regen HEAD 2010-12-19 01:14:08 +00:00
Automatic Updater
941c0792f2 update copyright notice 2010-12-18 23:47:11 +00:00
Evan Hunt
6c3eff861d tsiggss test needed a prereq.sh file. (Committing without review because
the script is simple, no one is available, and I want to shut robie up.)
2010-12-18 16:48:41 +00:00
Mark Andrews
0faa11ab77 clean first 2010-12-18 11:45:01 +00:00
Evan Hunt
af903e5008 Added files to clean.sh scripts that have been left around after tests run.
Skipping the ticket/review steps because the change is trivial.
2010-12-18 02:12:44 +00:00
Evan Hunt
71bd858d8e 2989. [func] Added support for writable DLZ zones. (Contributed
by Andrew Tridgell of the Samba project.) [RT #22629]

2988.	[experimental]	Added a "dlopen" DLZ driver, allowing the creation
			of external DLZ drivers that can be loaded as
			shared objects at runtime rather than linked with
			named.  Currently this is switched on via a
			compile-time option, "configure --with-dlz-dlopen".
			Note: the syntax for configuring DLZ zones
			is likely to be refined in future releases.
			(Contributed by Andrew Tridgell of the Samba
			project.) [RT #22629]

2987.	[func]		Improve ease of configuring TKEY/GSS updates by
			adding a "tkey-gssapi-keytab" option.  If set,
			updates will be allowed with any key matching
			a principal in the specified keytab file.
			"tkey-gssapi-credential" is no longer required
			and is expected to be deprecated.  (Contributed
			by Andrew Tridgell of the Samba project.)
			[RT #22629]
2010-12-18 01:56:23 +00:00
Mark Andrews
273757406a .zone -> .db 2010-12-17 00:57:39 +00:00
Automatic Updater
0ccd663a83 update copyright notice 2010-12-16 23:47:08 +00:00
Tatuya JINMEI 神明達哉
743bbdc18f 2947. [func] Add new zone type "static-stub". It's like a stub
zone, but the nameserver names and/or their IP
			addresses are statically configured. [RT #21474]

(for 9.8.0)
2010-12-16 09:51:30 +00:00
Evan Hunt
bbedadf76a 2985. [bug] Add a regression test for change #2896. [RT #21324] 2010-12-15 18:44:37 +00:00
johnd
7659fdb3aa Include "loadkeys" in rndc help output. [RT #22493] 2010-12-10 19:20:47 +00:00
Mark Andrews
cf5770e7b1 remove semi-colon 2010-12-09 06:17:33 +00:00
Automatic Updater
fd6a9d688c update copyright notice 2010-12-09 04:31:57 +00:00
Mark Andrews
9f9b7f0e8d 2982. [bug] Reference count dst keys. dst_key_attach() can be used
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
2010-12-09 00:54:34 +00:00
Automatic Updater
b8a9a7bef2 update copyright notice 2010-12-08 23:51:56 +00:00
Mark Andrews
b9f2d007c5 2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991] 2010-12-08 05:01:00 +00:00
Mark Andrews
e334405421 2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991] 2010-12-08 02:46:17 +00:00
Automatic Updater
a4b8846651 update copyright notice 2010-12-07 23:47:02 +00:00
Mark Andrews
8aee18709f 2980. [bug] named didn't properly handle UPDATES that changed the
TTL of the NSEC3PARAM RRset. [RT #22363]
2010-12-07 02:53:34 +00:00
Evan Hunt
e78c2b856b 2979. [bug] named could deadlock during shutdown if two
"rndc stop" commands were issued at the same
			time. [RT #22108]
2010-12-03 22:05:19 +00:00
Mark Andrews
82f0630bae 2977. [bug] 'nsupdate -l' report if the session key is missing.
[RT #21670]
2010-12-03 00:37:33 +00:00
Automatic Updater
326a702a35 update copyright notice 2010-12-02 23:46:56 +00:00
Mark Andrews
c87f15dac8 2976. [bug] named die on exit after negotiating a GSS-TSIG key. [RT #3415] 2010-12-02 23:22:42 +00:00
Automatic Updater
e085624e0f update copyright notice 2010-11-30 23:46:55 +00:00
Evan Hunt
b5b934a0bb 2974. [bug] Some vaild UPDATE requests could fail due to a
consistency check examining the existing version
			of the zone rather than the new version resulting
			from the UPDATE. [RT #22413]
2010-11-30 02:27:08 +00:00
Mark Andrews
5af195d1db 2973. [bug] bind.keys.h was being removed by the "make clean"
at the end of configure resulting in build failures
                        where there is very old version of perl installed.
                        Move it to "make maintainer-clean". [RT #22230]
2010-11-18 23:20:15 +00:00
Automatic Updater
33cc94f04c update copyright notice 2010-11-17 23:47:09 +00:00
Mark Andrews
d48730a446 2970. [security] Adding a NO DATA negative cache entry failed to clear
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
2010-11-16 06:46:44 +00:00
Mark Andrews
cd9d825a71 remove accidental commit 2010-11-16 05:38:31 +00:00
Shawn Routhier
380c874925 Fix acl type processing so that allow-query works in options and view
statements.  Also add a new set of tests to verify proper functioning.
[RT #22418]
2010-11-16 01:37:39 +00:00
Mark Andrews
a27b3757fd 2968. [security] Named could fail to prove a data set was insecure
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
2010-11-16 01:14:51 +00:00
Mark Andrews
f85281de08 check for snprintf failure 2010-11-16 00:47:48 +00:00
Mark Andrews
73b1b8a6f1 safecpy -> strlcpy 2010-11-16 00:46:39 +00:00
Mark Andrews
2bd3a6e266 strncpy + array[end] = 0 -> strlcpy 2010-11-16 00:46:00 +00:00
Automatic Updater
4071d667be update copyright notice 2010-10-19 23:47:10 +00:00
Mark Andrews
c9c2ffe729 2967. [bug] 'host -D' now turns on debugging messages earlier.
[RT #22361]
2010-10-19 02:48:17 +00:00
Mark Andrews
13dae6ff58 silence 'Null terminator in string initializer ignored.' warning 2010-10-04 22:27:41 +00:00
Automatic Updater
9b367fcfe6 update copyright notice 2010-09-29 23:47:05 +00:00
Mark Andrews
34f010449c #include <isc/print.h> 2010-09-29 04:30:13 +00:00
Mark Andrews
2015023399 2965. [func] Test HMAC functions using test data from RFC 2104 and RFC 4634. [RT #21702] 2010-09-29 04:00:16 +00:00
Automatic Updater
7041e86986 update copyright notice 2010-09-24 08:31:23 +00:00
Mark Andrews
ed83fa75f5 2963. [security] The allow-query acl was being applied instead of the
allow-query-cache acl to cache lookups. [RT #22114]
2010-09-24 05:09:03 +00:00
Mark Andrews
165501a801 simplify grep 2010-09-15 23:22:02 +00:00
Evan Hunt
cff5da57d6 The "resolver" test was failing on systems with old versions of "grep". 2010-09-15 15:45:07 +00:00
Automatic Updater
3255640981 update copyright notice 2010-09-15 12:38:36 +00:00
Mark Andrews
082f42dcf2 2960. [func] Check that named accepts non-authoritative answers.
[RT #21594]
2010-09-15 12:07:56 +00:00
Mark Andrews
c75523bcb3 2959. [func] Check that named starts with a missing masterfile.
[RT #22076]

2958.   [bug]           named failed to start with a missing master file.
                        [RT #22076]
2010-09-15 03:32:34 +00:00
Automatic Updater
dc9fa0be37 update copyright notice 2010-09-13 23:46:58 +00:00
Mark Andrews
3f9f14055b 2955. [func] Provide more detail in the recursing log. [RT #22043] 2010-09-13 03:37:43 +00:00
Automatic Updater
7306e8e4ee update copyright notice 2010-09-07 23:46:59 +00:00
Mark Andrews
8fb412590e 2953. [bug] Silence spurious "expected covering NSEC3, got an
exact match" message when returning a wildcard
                        no data response. [RT #21744]
2010-09-07 02:28:17 +00:00
Mark Andrews
1b42401954 2952. [port] win32: named-checkzone and named-checkconf failed
to initialise winsock. [RT #21932]
2010-09-07 01:49:08 +00:00
Mark Andrews
240a7dc59d 2951. [bug] named failed to generate a correct signed response
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
2010-09-07 00:58:36 +00:00
Automatic Updater
dac2623103 update copyright notice 2010-08-25 23:46:37 +00:00
Mark Andrews
17be07ab81 2948. [port] MacOS: provide a mechanism to configure the test
interfaces at reboot. See bin/tests/system/README
                        for details.
2010-08-25 04:51:51 +00:00
Mark Andrews
b5fd149e7e silence signed/unsigned warning hpux 2010-08-24 01:00:31 +00:00
Mark Andrews
38abdbf816 2945. [doc] Update empty-zones list in ARM. [RT #21772]
2944.   [maint]         Remove ORCHID prefix from built in empty zones.
                        [RT #21772]
2010-08-20 00:13:26 +00:00
Automatic Updater
7202b5cf66 update copyright notice 2010-08-17 23:46:46 +00:00
Mark Andrews
e0c50ca36a update default id range to match that used (1..7) 2010-08-17 04:08:57 +00:00
Automatic Updater
3acf5eb97c regen HEAD 2010-08-17 01:15:38 +00:00
Automatic Updater
f428e385a4 update copyright notice 2010-08-16 23:46:52 +00:00
Mark Andrews
c6f4972c74 2943. [func] Add support to load new keys into managed zones
without signing immediately with "rndc loadkeys".
                        Add support to link keys with "dnssec-keygen -S"
                        and "dnssec-settime -S".  [RT #21351]
2010-08-16 22:21:07 +00:00
Mark Andrews
8bc194b266 2941. [bug] sdb and sdlz (dlz's zone database) failed to support
DNAME at the zone apex.  [RT #21610]
2010-08-16 04:49:14 +00:00
Automatic Updater
2b43d1d8c5 update copyright notice 2010-08-13 23:47:04 +00:00
Francis Dupont
7641867b4c fix win32 build 2010-08-13 14:33:31 +00:00
Mark Andrews
c73d8c1b72 2938. [bug] When skipping NSEC3 records that don't match the
current NSEC3PARAM record in use for zone named
                        could dereference a uninitialised pointer attempting
                        to obtain a lock. [RT# 21868]
2010-08-13 06:46:25 +00:00
Francis Dupont
bf22bad528 removing unused 2010-08-12 09:52:35 +00:00
Francis Dupont
13f0ecd037 re-indent 2010-08-12 09:31:50 +00:00
Mark Andrews
bde46569f3 .orig -> .in as .orig is used by patch 2010-08-12 01:31:36 +00:00
Evan Hunt
cfd262045c 2936. [func] Improved configuration syntax and multiple-view
support for addzone/delzone feature (see change
			#2930).  Removed "new-zone-file" option, replaced
			with "allow-new-zones (yes|no)".  The new-zone-file
			for each view is now created automatically, with
			a filename generated from a hash of the view name.
			It is no longer necessary to "include" the
			new-zone-file in named.conf; this happens
			automatically.  Zones that were not added via
			"rndc addzone" can no longer be removed with
			"rndc delzone". [RT #19447]
2010-08-11 18:14:20 +00:00
Automatic Updater
548317f929 update copyright notice 2010-08-10 23:48:19 +00:00
Mark Andrews
4b6cb8d09e 2935. [bug] nsupdate: improve 'file not found' error message.
[RT #21871]
2010-08-10 09:51:47 +00:00
Mark Andrews
f083530138 2933. [bug] 'dig +nsid' used stack memory after it went out of
scope.  This could potentially result in a unknown,
                        potentially malformed, EDNS option being sent instead
                        of the desired NSID option. [RT #21781]
2010-08-10 08:39:15 +00:00
Evan Hunt
cb933b69ff 2932. [cleanup] Corrected a numbering error in the "dnssec" test.
[RT #21597]
2010-08-09 22:34:56 +00:00
Automatic Updater
8ac1f6a48c update copyright notice 2010-08-03 23:46:39 +00:00
Tatuya JINMEI 神明達哉
dbae1499ba added me to authors. approved by Evan. 2010-08-03 16:40:45 +00:00
Mark Andrews
7b830cb17f while (1) -> for (;;) to silence compiler warning 2010-07-20 04:52:21 +00:00
Mark Andrews
0ddcd0c0ce format/arg mismatch solaris 2010-07-20 04:46:49 +00:00
Mark Andrews
7a8d1e1e2e 0 -> 0U 2010-07-19 06:13:28 +00:00
Mark Andrews
dfbda37366 silence compiler warnings about (char) as index to array 2010-07-19 04:13:38 +00:00
Tatuya JINMEI 神明達哉
f1f39b7e07 2931. [bug] Temporarily and partially disable change 2864
because it would cause inifinite attempts of RRSIG
			queries.  This is an urgent care fix; we'll
			revisit the issue and complete the fix later.
			[RT #21710]
2010-07-15 01:17:45 +00:00
Automatic Updater
a90aca78aa update copyright notice 2010-07-11 23:46:54 +00:00
Evan Hunt
5312c2ffbe dnssec and dlv tests included master zones whose master files were missing.
this was a bug that hadn't been noticed before, but 19447 added a test for
that condition and it caused test failures.
2010-07-11 01:18:24 +00:00
Evan Hunt
86dcc40058 2930. [experimental] New "rndc addzone" and "rndc delzone" commads
allow dynamic addition and deletion of zones.
			To enable this feature, specify a "new-zone-file"
			option at the view or options level in named.conf.
			Zone configuration information for the new zones
			will be written into that file.  To make the new
			zones persist after a restart, "include" the file
			into named.conf in the appropriate view.  (Note:
			This feature is not yet documented, and its syntax
			is expected to change.) [RT #19447]
2010-07-11 00:12:57 +00:00
Automatic Updater
7c6b9b2638 regen HEAD 2010-07-10 01:14:20 +00:00
Automatic Updater
1b892cf691 update copyright notice 2010-07-09 23:46:51 +00:00
Evan Hunt
bf9b852c3e 2929. [bug] Improved handling of GSS security contexts:
- added LRU expiration for generated TSIGs
			 - added the ability to use a non-default realm
                         - added new "realm" keyword in nsupdate
			 - limited lifetime of generated keys to 1 hour
			   or the lifetime of the context (whichever is
			   smaller)
			[RT #19737]
2010-07-09 05:13:15 +00:00
Mark Andrews
a7d2b922ee match the dig.out.ns#.$n to the nameserver 2010-06-28 01:34:11 +00:00
Mark Andrews
8fa6ca58b6 check that we have non-cachable answers to test against 2010-06-28 01:31:49 +00:00
Automatic Updater
1b67d9b719 update copyright notice 2010-06-26 23:46:49 +00:00
Mark Andrews
73134bd1c7 add /* NOT DOCUMENTED */ 2010-06-26 00:20:33 +00:00
Mark Andrews
810656a187 2925. [bug] Named failed to accept uncachable negative responses
from insecure zones. [RT# 21555]
2010-06-25 23:50:13 +00:00
Automatic Updater
cf309ffeee update copyright notice 2010-06-25 23:46:51 +00:00
Mark Andrews
f35a87f58f remove leading zeros on keyid
account for trusted keys not applying to _bind anymore
2010-06-25 07:28:46 +00:00
Mark Andrews
bf13e709db 2924. [func] 'rndc secroots' dump a combined summary of the
current managed keys combined with trusted keys.
                        [RT #20904]
2010-06-25 03:24:05 +00:00
Mark Andrews
43888c2315 2922. [bug] 'dig +trace' could drop core after "connection
timeout". [RT #21514]
2010-06-24 07:22:18 +00:00
Automatic Updater
b8d4e96e95 update copyright notice 2010-06-23 23:46:58 +00:00
Automatic Updater
b61690dbad update copyright notice 2010-06-22 23:46:52 +00:00
Mark Andrews
48dfee7150 2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
to IPv4 clients.  New acl 'filter-aaaa' (default any).
2010-06-22 04:03:38 +00:00
Automatic Updater
c7c7ba3977 update copyright notice 2010-06-21 23:46:48 +00:00
Automatic Updater
cc2adcaa10 regen 2010-06-21 23:30:33 +00:00
Mark Andrews
718c4becc5 2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
[RT #20840]
2010-06-21 02:31:46 +00:00
Automatic Updater
673ed6391e update copyright notice 2010-06-20 23:46:45 +00:00
Automatic Updater
d5289b74fe regen 2010-06-20 23:30:40 +00:00
Mark Andrews
be28cc55c5 regen 2010-06-20 07:19:18 +00:00
Mark Andrews
ea7760e72a report bind.keys and bindkeys.pl versions in output 2010-06-20 07:18:30 +00:00
Mark Andrews
56b9fb463c add bind.keys.h dependancy on ${srcdir}/bindkeys.pl 2010-06-20 07:17:02 +00:00
Automatic Updater
efa460418c update copyright notice 2010-06-18 23:46:43 +00:00
Mark Andrews
43c770b998 2917. [func] Virtual time test framework. [RT #20801] 2010-06-17 05:39:19 +00:00
Automatic Updater
263874836b update copyright notice 2010-06-11 23:46:49 +00:00
Mark Andrews
96fae19c97 restore export of PERL PK11GEN PK11LIST PK11DEL 2010-06-11 01:57:36 +00:00
Mark Andrews
9a56f03c4c 2916. [func] Add framework to use IPv6 in tests.
fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
2010-06-10 06:19:52 +00:00
Automatic Updater
ad0471f93b update copyright notice 2010-06-08 23:50:24 +00:00
Mark Andrews
e24ccb512c 2914. [bug] Make the "autosign" system test more portable.
[RT #20997]
2010-06-07 04:45:43 +00:00
Mark Andrews
63af1a646a 2913. [func] Add pkcs#11 system tests. [RT #20784] 2010-06-07 03:42:37 +00:00
Mark Andrews
5ee4d3f2ee iterations is -H 2010-06-04 00:04:39 +00:00
Automatic Updater
6e13ffa218 update copyright notice 2010-06-03 23:51:05 +00:00
Mark Andrews
e74c3a0f59 specify NSEC3 iterations 2010-06-03 21:44:49 +00:00
Mark Andrews
10acc63770 2911. [bug] dnssec-signzone didn't handle out of zone records well.
[RT #21367]
2010-06-03 06:29:03 +00:00
Mark Andrews
675cc80975 2911. [bug] dnssec-signzone didn't handle out of zone records well.
[RT #21367]
2010-06-03 03:13:32 +00:00
Automatic Updater
a2d2fc17b0 update copyright notice 2010-06-02 01:28:40 +00:00
Mark Andrews
a27bbd21cf 2909. [bug] named-checkzone -p could die if "update-policy local;"
was specified in named.conf. [RT #21416]
2010-06-02 01:07:47 +00:00
Automatic Updater
248b9ab0b0 update copyright notice 2010-05-27 23:51:08 +00:00
Mark Andrews
2f34efede1 line length 2010-05-27 03:23:56 +00:00
Automatic Updater
051dec6fb7 update copyright notice 2010-05-26 23:50:47 +00:00
Mark Andrews
b4c6ce22d0 call sign.sh robustly 2010-05-26 07:00:37 +00:00
Mark Andrews
e27d55e3ee 2904. [bug] When using DLV, sub-zones of the zones in the DLV,
could be incorrectly marked as insecure instead of
                        secure leading to negative proofs failing.  This was
                        a unintended outcome from change 2890. [RT# 21392]
2010-05-26 06:28:00 +00:00
Automatic Updater
15c961a1dd update copyright notice 2010-05-19 09:33:50 +00:00
Mark Andrews
5ae2eac4c1 2902. [func] Add regression test for change 2897. [RT #21040] 2010-05-19 07:45:38 +00:00
Mark Andrews
b667946fa5 2900. [bug] The placeholder negative caching element was not
properly constructed triggering a INSIST in
                        dns_ncache_towire(). [RT #21346]
2010-05-19 06:39:50 +00:00
Automatic Updater
bef75d63d7 regen HEAD 2010-05-19 01:14:14 +00:00
Mark Andrews
6ffc3748d9 wrong rdataset disassociated. reviewed by each 2010-05-18 06:18:23 +00:00
Automatic Updater
4dd3ec797d update copyright notice 2010-05-18 02:38:10 +00:00
Mark Andrews
98744b5111 2898. [bug] nslookup leaked memory when -domain=value was
specified. [RT #21301]
2010-05-18 01:48:13 +00:00
Mark Andrews
8d31dd9ab6 2897. [bug] NSEC3 chains could be left behind when transitioning
to insecure. [RT #21040]
2010-05-18 01:39:41 +00:00
Automatic Updater
e1263b4b9c regen HEAD 2010-05-18 01:14:20 +00:00
Mark Andrews
7ac162ea7e silence compiler warning 2010-05-18 00:28:40 +00:00
Automatic Updater
bd5842db3d update copyright notice 2010-05-17 23:51:05 +00:00
Mark Andrews
c9c7fc6a01 #include <isc/print.h> 2010-05-17 05:31:43 +00:00
Mark Andrews
3ec79bbc03 2895. [func] genrandom: add support for the generation of multiple
files.  [RT #20917]
2010-05-17 04:38:45 +00:00
Automatic Updater
0284e57b9b regen HEAD 2010-05-15 01:14:25 +00:00
Automatic Updater
515c7f3c43 update copyright notice 2010-05-14 23:50:40 +00:00
Mark Andrews
778a01b1aa 2893. [bug] Improve managed keys support. New named.conf option
managed-keys-directory. [RT #20924]
2010-05-14 04:48:28 +00:00
Mark Andrews
44f175a90a 2892. [bug] Handle REVOKED keys better. [RT #20961] 2010-05-14 04:38:52 +00:00
Mark Andrews
21991bd14e 2891. [maint] Update empty-zones list to match
draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
2010-05-14 03:24:24 +00:00
Mark Andrews
e18c62b1da 2888. [bug] Only the first EDNS option was displayed. [RT #21273] 2010-05-13 00:40:46 +00:00
Mark Andrews
108300f7f1 2883. [bug] 'dig +short' failed to handle really large datasets.
[RT #21113]
2010-05-12 01:31:37 +00:00
Automatic Updater
d3798f2bff update copyright notice 2010-05-06 23:50:56 +00:00
Mark Andrews
f2ae969065 handle revoke changes 2010-05-06 11:28:20 +00:00
Mark Andrews
707d9fbd86 2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
consistent. [RT #21078]
2010-05-06 05:31:19 +00:00
Automatic Updater
230987e819 update copyright notice 2010-03-12 23:51:11 +00:00
Mark Andrews
c19f322914 2866. [bug] Windows does not like the TSIG name being compressed.
[RT #20986]
2010-03-12 03:34:56 +00:00
Mark Andrews
fa2cb8d61d 2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
[RT #21050]
2010-03-12 01:48:35 +00:00
Mark Andrews
9537e40e79 cast isc_buffer_usedlength() to (int) 2010-03-10 02:17:52 +00:00
Automatic Updater
83f43b00a5 regen HEAD 2010-03-10 01:14:18 +00:00
Automatic Updater
3767befe3a update copyright notice 2010-03-09 23:51:06 +00:00
Mark Andrews
64c43af4f4 2862. [bug] nsupdate didn't default to the parent zone when
updating DS records. [RT #20896]
2010-03-09 03:46:12 +00:00
Mark Andrews
c5259c013b 2861. [doc] dnssec-settime man pages didn't correctly document the
inactivation time. [RT #21039]

2860.   [bug]           named-checkconf's usage was out of date. [RT #21039]
2010-03-09 03:38:18 +00:00
Automatic Updater
6c8a888822 regen HEAD 2010-03-05 01:14:15 +00:00
Automatic Updater
4d42b714be update copyright notice 2010-03-04 23:50:34 +00:00
Mark Andrews
56c2c3835f 10.53.0.1 through 10.53.0.5 -> 10.53.0.1 through 10.53.0.7 2010-03-04 20:34:16 +00:00
Mark Andrews
92348098eb 2956. [bug] named-checkconf did not fail on a bad trusted key.
[RT #20705]
2010-03-04 06:17:01 +00:00
Mark Andrews
2e20dea9fc 2854. [func] nsupdate will now preserve the entered case of domain
names in update requests it sends. [RT #20928]
2010-03-04 05:24:56 +00:00
Mark Andrews
13396661f4 2854. [func] dig: allow the final soa record in a axfr response to
be suppressed, dig +onesoa. [RT #20929]
2010-03-04 05:18:04 +00:00
Automatic Updater
cc9ed75dd9 update copyright notice 2010-02-26 23:50:59 +00:00
Mark Andrews
64f8608ed6 2853. [bug] add_sigs() could run out of scratch space. [RT #21015] 2010-02-26 01:39:49 +00:00
Mark Andrews
0cae66577c 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] 2010-02-25 04:39:13 +00:00
Automatic Updater
680033ce4d regen HEAD 2010-02-23 01:14:31 +00:00
Automatic Updater
8077efca7d update copyright notice 2010-02-22 23:49:11 +00:00
Mark Andrews
d3cbd6b05c 2851. [doc] nslookup.1, removed <informalexample> from the docbook
source as it produced bad nroff.  [RT #21007]
2010-02-22 20:48:56 +00:00
Automatic Updater
6f1b350c3a update copyright notice 2010-02-04 23:49:13 +00:00
Automatic Updater
44d0f0256f regen 2010-02-04 01:14:17 +00:00
Mark Andrews
8ac908b38a 2849. [bug] Don't treat errors from the xml2 library as fatal.
[RT #20945]
2010-02-04 00:57:25 +00:00
Automatic Updater
f1c89cb4f5 update copyright notice 2010-02-03 23:49:07 +00:00
Evan Hunt
dcfca6f18d 2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921] 2010-02-03 01:02:37 +00:00
Evan Hunt
6bb16fca28 rename "ischmacfix" files to "ischmacfixup" so win32 build will work 2010-01-22 00:55:46 +00:00
Automatic Updater
a3416b0a1b regen 2010-01-20 01:14:19 +00:00
Automatic Updater
ca4e44ebe8 update copyright notice 2010-01-19 23:48:56 +00:00
Evan Hunt
8a198fa776 2842. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
creating key files if there is a chance that the new
			key ID will collide with an existing one after
			either of the keys has been revoked.  (To override
			this in the case of dnssec-keyfromlabel, use the -y
			option.  dnssec-keygen will simply create a
			different, noncolliding key, so an override is
			not necessary.) [RT #20838]
2010-01-19 20:26:07 +00:00
Evan Hunt
ecde9a1cd5 smartsign fails on slow machines. delay the timing-sensitive
dnssec-settime call as long as possible.
2010-01-19 15:54:45 +00:00
Automatic Updater
6bb1560124 update copyright notice 2010-01-18 23:48:40 +00:00
Evan Hunt
e11a0c114c 2841. [func] Added "smartsign" and improved "autosign" and
"dnssec" regression tests. [RT #20865]
2010-01-18 19:19:31 +00:00
Automatic Updater
4dea9e5971 regen 2010-01-17 01:14:02 +00:00
Automatic Updater
20f2d1d74b update copyright notice 2010-01-16 23:48:15 +00:00
Francis Dupont
4025076ca2 move -o in synopsis to the right place 2010-01-16 14:04:47 +00:00
Automatic Updater
5bdf8cd3c2 update copyright notice 2010-01-13 23:48:59 +00:00
Francis Dupont
6ff7cd9fa5 Temporary fixed pkcs11-destroy usage check. [RT #20760] 2010-01-13 21:19:52 +00:00
Evan Hunt
20624f43c3 removed lines inadvertently committed 2010-01-13 19:29:38 +00:00
Francis Dupont
b3990d04da fix built-in view comment 2010-01-13 08:29:11 +00:00
Automatic Updater
65d1486535 update copyright notice 2010-01-11 23:48:37 +00:00
Francis Dupont
a91029a00e Prevent Linux spurious warnings about fwrite(). [RT #20812] 2010-01-11 10:49:14 +00:00
Automatic Updater
fdd80e9a55 regen 2010-01-08 01:14:09 +00:00
Automatic Updater
a30c7003af update copyright notice 2010-01-07 23:48:54 +00:00
Evan Hunt
0f66aced26 2834. [bug] HMAC-SHA* keys that were longer than the algorithm
digest length were used incorrectly, leading to
			interoperability problems with other DNS
			implementations.  This has been corrected.
			(Note: If an oversize key is in use, and
			compatibility is needed with an older release of
			BIND, the new tool "isc-hmac-fixup" can convert
			the key secret to a form that will work with all
			versions.) [RT #20751]
2010-01-07 21:52:12 +00:00
Evan Hunt
8ebf67b7f0 2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
[RT #20851]
2010-01-07 19:13:59 +00:00
Evan Hunt
597642c0ba 2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
2010-01-07 16:48:23 +00:00
Automatic Updater
247f299fb0 update copyright notice 2010-01-06 23:48:47 +00:00
Evan Hunt
b1fbf2a4db fix spacing 2010-01-06 00:53:45 +00:00
Automatic Updater
3ee1371212 update copyright notice 2010-01-05 23:48:37 +00:00
Evan Hunt
564d687132 missing newline in dnssec-signzone usage 2010-01-05 15:31:58 +00:00
Tatuya JINMEI 神明達哉
d8680445d6 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:02:23 +00:00
Mark Andrews
57fb4f7bbe 2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
was in the process of being created was not properly
                        recorded in the zone. [RT #20786]
2009-12-30 02:43:09 +00:00
Mark Andrews
5b77627c09 2824. [bug] "rndc sign" was not being run by the correct task.
[RT #20759]
2009-12-29 22:20:33 +00:00
Automatic Updater
d856585f5f regen 2009-12-29 01:14:03 +00:00
Evan Hunt
85c5ed3577 2821. [doc] Add note that named-checkconf doesn't automatically
read rndc.key and bind.keys [RT #20758]
2009-12-28 23:21:16 +00:00
Francis Dupont
0faf1492c7 non-readable openssl.cnf [20668] 2009-12-24 17:49:39 +00:00
Evan Hunt
1361014b02 2818. [cleanup] rndc could return an incorrect error code
when a zone was not found. [RT #20767]
2009-12-24 00:14:20 +00:00
Evan Hunt
40ad4ed01b 2817. [cleanup] Removed unnecessary isc_tasc_endexclusive() calls.
[RT #20768]
2009-12-23 23:59:42 +00:00
Evan Hunt
aa3415ba49 2815. [bug] Exclusively lock the task when freezing a zone.
[RT #19838]
2009-12-23 23:33:09 +00:00
Evan Hunt
f766024a27 change all keys from rsasha1 to nsec3rsasha1 so that the nsec->nsec3
transitions work correctly.  (they worked before, but weren't supposed
to; when that bug was fixed, the test broke.)
2009-12-19 17:30:31 +00:00
Automatic Updater
928e12ccdc update copyright notice 2009-12-18 23:49:03 +00:00
Evan Hunt
4e55893d30 2813. [bug] Better handling of unreadable DNSSEC key files.
[RT #20710]

2812.	[bug]		Make sure updates can't result in a zone with
			NSEC-only keys and NSEC3 records. [RT 20748]
2009-12-18 22:16:49 +00:00
Evan Hunt
0da859c5a7 2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
output. [RT #20733]
2009-12-18 07:59:43 +00:00
Evan Hunt
9de98fbbbe 2809. [cleanup] Restored accidentally-deleted text in usage output
in dnssec-settime and dnssec-revoke [RT #20739]
2009-12-18 07:49:42 +00:00
Automatic Updater
90c38ab4e6 regen 2009-12-17 01:13:46 +00:00
Evan Hunt
535bc8112a s/ddns.key/session.key/ 2009-12-16 07:13:02 +00:00
Automatic Updater
8b82c01d74 update copyright notice 2009-12-06 23:48:29 +00:00
Evan Hunt
3cd574df2f s/journalprint/named-journalprint/ 2009-12-06 03:06:16 +00:00
Evan Hunt
0d796b1aaa improve cleanup and add named.run to .cvsignore files 2009-12-06 03:04:39 +00:00
Evan Hunt
12178c8652 2805. [bug] Fixed namespace problems encountered when building
external programs using non-exported BIND9 libraries
			(i.e., built without --enable-exportlib). [RT #20679]
2009-12-05 23:31:41 +00:00
Evan Hunt
d4d836350f add .cvsignore files 2009-12-05 05:36:03 +00:00
Automatic Updater
e2e4d32199 regen 2009-12-04 22:22:27 +00:00
Automatic Updater
4b6dc226f7 update copyright notice 2009-12-04 22:06:37 +00:00
Mark Andrews
71ba75c604 2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
and genrandom under windows. [RT #20670]

2802.   [cleanup]       Rename journalprint to named-journalprint. [RT #20670]
2009-12-04 21:59:24 +00:00
Mark Andrews
3d17a3ba61 2801. [func] Detect and report records that are different according
to DNSSEC but are sematically equal according to plain
                        DNS.  Apply plain DNS comparisons rather than DNSSEC
                        comparisons when processing UPDATE requests.
                        dnssec-signzone now removes such semantically duplicate
                        records prior to signing the RRset.

                        named-checkzone -r {ignore|warn|fail} (default warn)
                        named-compilezone -r {ignore|warn|fail} (default warn)

                        named.conf: check-dup-records {ignore|warn|fail};
2009-12-04 21:09:34 +00:00
Evan Hunt
e438e29354 claried log message when no active private keys are found to use for
signing. [rt20690]
2009-12-04 20:32:07 +00:00
Mark Andrews
5d850024cb 2800. [func] Reject zones which have NS records which refer to
CNAMEs, DNAMEs or don't have address record (class IN
                        only).  Reject UPDATEs which would cause the zone
                        to fail the above checks if committed. [RT #20678]
2009-12-04 03:33:15 +00:00
Automatic Updater
089c63b69c regen 2009-12-04 01:13:45 +00:00
Automatic Updater
63aeaafd97 update copyright notice 2009-12-03 23:48:22 +00:00
Evan Hunt
8e4f3f1cbc 2799. [cleanup] Changed the "secure-to-insecure" option to
"dnssec-secure-to-insecure", and "dnskey-ksk-only"
			to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
2009-12-03 23:18:17 +00:00
Mark Andrews
ecbbb29519 add copyright 2009-12-03 04:51:41 +00:00
Evan Hunt
6a4d6e3379 adapted to the special needs of solaris's really old awk 2009-12-02 17:54:45 +00:00
Evan Hunt
095810f8cb fixed autosign/metadata brokenness on solaris [rt20685] 2009-12-02 05:42:15 +00:00
Automatic Updater
ffd297db79 update copyright notice 2009-11-30 23:48:02 +00:00
Evan Hunt
7511904837 add cvsignore files 2009-11-30 21:03:17 +00:00
Evan Hunt
75b8de8787 Create automatic tests "autosign" and "metadata". [rt19946] 2009-11-30 21:00:48 +00:00
Vernon Schryver
5d9922e86f Allow the optional filter-aaaa-on-v4 option in view statements to close #20635 2009-11-28 15:57:37 +00:00
Mark Andrews
4bf4beede2 silence compiler warnings 2009-11-25 23:00:32 +00:00
Evan Hunt
ce3b2c5189 2788. [bug] dnssec-signzone could sign with keys that were
not requested [RT #20625]
2009-11-25 03:17:11 +00:00
Mark Andrews
d0ca4e90e2 2786. [bug] Additional could be promoted to answer. [RT #20663] 2009-11-25 02:22:05 +00:00
Evan Hunt
d312bc5d81 2785. [bug] Revoked keys could fail to self-sign [RT #20652] 2009-11-24 03:42:32 +00:00
Mark Andrews
dc92707066 2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
buffer size of 512 or less.  [RT #20654]
2009-11-24 03:09:57 +00:00
Evan Hunt
cef109efa7 2780. [bug] dnssec-keygen -A none didn't properly unset the
activation date in all cases. [RT #20648]

2779.	[bug]		Dynamic key revokation could fail. [RT #20644]

2778.	[bug]		dnssec-signzone could fail when a key was revoked
			without deleting the unrevoked version. [RT #20638]
2009-11-23 02:55:41 +00:00
Francis Dupont
1cd538c051 20643: RSASHA2 NSEC3 compatible in dnssec-keyfromlabel 2009-11-21 17:54:09 +00:00
Evan Hunt
0088b45de5 2774. [bug] Existing cache DB wasn't being reused after
reconfiguration. [RT #20629]
2009-11-19 18:52:40 +00:00
Automatic Updater
fe2b9bf570 update copyright notice 2009-11-18 23:48:07 +00:00
Evan Hunt
b08325a7f3 2773. [bug] In autosigned zones, the SOA could be signed
with the KSK. [RT #20628]
2009-11-18 21:22:31 +00:00
Mark Andrews
a39a5f4d81 2772. [security] When validating, track whether pending data was from
the additional section or not and only return it if
                        validates as secure. [RT #20438]
2009-11-17 23:55:18 +00:00
Evan Hunt
00295e0650 2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568] 2009-11-16 04:27:44 +00:00
Mark Andrews
adb4211586 2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610] 2009-11-12 14:02:38 +00:00
Automatic Updater
3a5fe5abf0 regen 2009-11-11 01:14:42 +00:00
Evan Hunt
2e2a294b05 remove unnecessary braces around {-o filename} 2009-11-10 21:30:42 +00:00
Evan Hunt
3839749200 2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533] 2009-11-10 20:02:01 +00:00
Evan Hunt
7fe4b0447f 2757. [bug] dig: assertion failure could occur in connect
timeout. [RT #20599]
2009-11-10 17:27:40 +00:00
Evan Hunt
e2facd7af2 2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597] 2009-11-09 01:28:32 +00:00
Evan Hunt
cc3ed192b0 2754. [bug] Secure-to-insecure transitions failed when zone
was signed with NSEC3. [RT #20587]
2009-11-06 08:38:56 +00:00
Evan Hunt
aa2f010f13 Switch from OpenSSL 0.9.8k to 0.9.8l 2009-11-06 03:14:10 +00:00
Evan Hunt
6f6f08b7a4 2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588] 2009-11-06 01:06:38 +00:00
Mark Andrews
052e7083ac correct bind9.xsl.h dependancy 2009-11-05 02:59:04 +00:00
Evan Hunt
9a050780dc 2750. [bug] dig: assertion failure could occur when a server
didn't have an address. [RT #20579]
2009-11-05 01:57:49 +00:00
Mark Andrews
0a30185f80 2748. [func] Identify bad answers from GTLD servers and treat them
as referrals. [RT #18884]
2009-11-04 02:15:30 +00:00
Automatic Updater
64affc54f9 regen 2009-11-03 21:59:04 +00:00
Evan Hunt
f80b665135 fix typo: s/pcks11/pkcs11/ 2009-11-03 21:44:46 +00:00
Mark Andrews
9d856845d6 2744. [func] Log if a query was over TCP. [RT #19961] 2009-11-03 04:39:41 +00:00
Mark Andrews
2162c1ed3d add missing period 2009-11-03 01:31:17 +00:00
Automatic Updater
575e15fed9 regen 2009-10-28 01:14:38 +00:00
Mark Andrews
c6d2578fd6 2741. [func] Allow the dnssec-keygen progress messages to be
suppressed (dnssec-keygen -q).  Automatically
                        suppress the progress messages when stdin is not
                        a tty. [RT #20474]
2009-10-28 00:27:10 +00:00
Automatic Updater
990dca4605 update copyright notice 2009-10-27 23:47:45 +00:00
Evan Hunt
95f2377b4f 2739. [cleanup] Clean up API for initializing and clearing trust
anchors for a view. [RT #20211]
2009-10-27 22:46:13 +00:00
Mark Andrews
e09cdbac08 2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
test. [RT #20453]
2009-10-27 22:25:37 +00:00
Evan Hunt
e3b59e4af7 Minor cleanup in dnssec-* tools 2009-10-27 18:56:49 +00:00
Evan Hunt
312a00fb75 add named-symtbl.c to .cvsignore 2009-10-27 06:06:46 +00:00
Evan Hunt
72cfcb48a7 cleanup ddns.key after nsupdate test 2009-10-27 05:57:06 +00:00
Evan Hunt
0ce9fba8f0 cleanup DLV test 2009-10-27 05:49:50 +00:00
Mark Andrews
9e9e7112f9 2737. [func] UPDATE requests can leak existance information.
[RT #17261]
2009-10-27 05:42:25 +00:00
Mark Andrews
63d5a6f680 2736. [func] Improve the performance of NSEC signed zones with
more than a normal amount of glue below a delegation.
                        [RT #20191]
2009-10-27 04:46:58 +00:00
Evan Hunt
e8831e51c1 2735. [bug] dnssec-signzone could fail to read keys
that were specified on the command line with
			full paths, but weren't in the current
			directory. [RT #20421]
2009-10-27 03:59:45 +00:00
Mark Andrews
af30180834 2734. [port] cygwin: arpaname did not compile. [RT #20473] 2009-10-27 03:05:33 +00:00
Automatic Updater
5f744ebbdc update copyright notice 2009-10-26 23:47:35 +00:00
Evan Hunt
6f9c93a885 2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355] 2009-10-26 23:36:53 +00:00
Evan Hunt
c8aa7ce70d 2732. [func] Add optional filter-aaaa-on-v4 option, available
if built with './configure --enable-filter-aaaa'.
			Filters out AAAA answers to clients connecting
			via IPv4.  (This is NOT recommended for general
			use.) [RT #20339]
2009-10-26 23:14:54 +00:00
Evan Hunt
c021499604 2731. [func] Additional work on change 2709. The key parser
will now ignore unrecognized fields when the
			minor version number of the private key format
			has been increased.  It will reject any key with
			the major version number increased. [RT #20310]
2009-10-26 21:18:24 +00:00
Francis Dupont
775a8d86d9 keygen progress indication [RT #20284] 2009-10-24 09:46:19 +00:00
Mark Andrews
c07236a635 2729. [func] When constructing a CNAME from a DNAME use the DNAME
TTL. [RT #20451]
2009-10-24 04:38:19 +00:00
Evan Hunt
8f0502e922 2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
dnssec-signzone now warn immediately if asked to
			write into a nonexistent directory. [RT #20278]
2009-10-24 00:00:06 +00:00
Automatic Updater
8e821eea5f regen 2009-10-23 01:14:48 +00:00
Automatic Updater
510032fdf4 update copyright notice 2009-10-22 23:48:07 +00:00
Evan Hunt
f10a8fa034 2727. [func] The 'key-directory' option can now specify a relative
path. [RT #20154]
2009-10-22 03:43:16 +00:00
Evan Hunt
cc6cddfd94 2726. [func] Added support for SHA-2 DNSSEC algorithms,
RSASHA256 and RSASHA512. [RT #20023]
2009-10-22 02:21:31 +00:00
Mark Andrews
d2a8d00228 2724. [bug] Updates to a existing node in secure zone using NSEC
were failing. [RT #20448]
2009-10-22 01:55:55 +00:00
Mark Andrews
859cfb24bf silence compiler warnings. [RT #20412] 2009-10-20 03:30:07 +00:00
Mark Andrews
06e7340198 2719. [func] Skip trusted/managed keys for unsupported algorithms.
[RT #20392]
2009-10-20 03:15:06 +00:00
Mark Andrews
4b30598fb9 2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414] 2009-10-20 01:04:03 +00:00
Automatic Updater
5a24d24c8f regen 2009-10-17 01:14:35 +00:00
Jeremy Reed
eec29cfd40 Fix typo as reported by SUN Guonian <sun@cnnic.cn>.
This was seen in 9.7.0a3.
No CHANGES entry as is too minor.
2009-10-16 15:37:01 +00:00
Automatic Updater
d060d8669f regen 2009-10-16 04:20:49 +00:00
Evan Hunt
8f7de3db7e Respinning to fix memory leak in dnssec-signzone. (Also adopting doc changes.) 2009-10-16 02:59:41 +00:00
Mark Andrews
1ed01b3390 silence compiler warning 2009-10-14 22:07:13 +00:00
Automatic Updater
ef9ee92543 update copyright notice 2009-10-13 23:48:12 +00:00
Evan Hunt
5c0fd37335 changes needed for win32 build 2009-10-13 02:39:38 +00:00
Evan Hunt
19ac4707ee changes needed for win32 build 2009-10-13 00:55:51 +00:00
Automatic Updater
97639003b0 update copyright notice 2009-10-12 23:48:02 +00:00
Automatic Updater
3b2c6af63e regen 2009-10-12 23:16:15 +00:00
Evan Hunt
c00929ed9f additional doc improvement 2009-10-12 23:02:32 +00:00
Evan Hunt
77b8f88f14 2712. [func] New 'auto-dnssec' zone option allows zone signing
to be fully automated in zones configured for
			dynamic DNS.  'auto-dnssec allow;' permits a zone
			to be signed by creating keys for it in the
			key-directory and using 'rndc sign <zone>'.
			'auto-dnssec maintain;' allows that too, plus it
			also keeps the zone's DNSSEC keys up to date
			according to their timing metadata. [RT #19943]
2009-10-12 20:48:12 +00:00
Automatic Updater
8de0d8a690 regen 2009-10-11 01:14:49 +00:00
Automatic Updater
8667770ad2 update copyright notice 2009-10-10 23:47:58 +00:00
Evan Hunt
3727725bb7 2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
zone option cause a zone to be signed with only KSKs
			signing the DNSKEY RRset, not ZSKs.  This reduces
			the size of a DNSKEY answer.  [RT #20340]
2009-10-10 01:48:00 +00:00
Evan Hunt
315a1514a5 2709. [func] Added some data fields, currently unused, to the
private key file format, to allow implementation
			of explicit key rollover in a future release
			without impairing backward or forward compatibility.
			[RT #20310]
2009-10-09 06:09:21 +00:00
Automatic Updater
b05106c7e6 regen 2009-10-09 01:14:47 +00:00
Automatic Updater
15bbb8a129 update copyright notice 2009-10-08 23:48:10 +00:00
Mark Andrews
2847930722 2708. [func] Insecure to secure and NSEC3 parameter changes via
update are now fully supported and no longer require
                        defines to enable.  We now no longer overload the
                        NSEC3PARAM flag field, nor the NSEC OPT bit at the
                        apex.  Secure to insecure changes are controlled by
                        by the named.conf option 'secure-to-insecure'.

                        Warning: If you had previously enabled support by
                        adding defines at compile time to BIND 9.6 you should
                        ensure that all changes that are in progress have
                        completed prior to upgrading to BIND 9.7.  BIND 9.7
                        is not backwards compatible.
2009-10-08 23:13:07 +00:00
Automatic Updater
2a6d4c9948 regen 2009-10-07 01:14:42 +00:00
Evan Hunt
22b23fb59d tbox wants an #include <isc/print.h>... 2009-10-06 23:22:51 +00:00
Evan Hunt
d1f39121a6 2707. [func] dnssec-keyfromlabel no longer require engine name
to be specified in the label if there is a default
			engine or the -E option has been used.  Also, it
			now uses default algorithms as dnssec-keygen does
			(i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
			[RT #20371]
2009-10-06 22:58:45 +00:00
Evan Hunt
ca60f7ba75 Add pkcs11 tools to standard windows BIND 9 build. 2009-10-06 22:14:13 +00:00
Evan Hunt
246c504f90 2706. [bug] Loading a zone with a very large NSEC3 salt could
trigger an assert. [RT #20368]
2009-10-06 21:20:45 +00:00
Evan Hunt
95b41985f7 - build pkcs11 tools when compiling --with-pkcs11=yes
- add PKCS11_PROVIDER environment variable as a method for specifying
  the provider.
2009-10-06 20:27:55 +00:00
Automatic Updater
e74245134d update copyright notice 2009-10-06 04:40:14 +00:00
Automatic Updater
8ec3c08523 regen 2009-10-06 01:14:42 +00:00
Evan Hunt
3ff75c89eb 2704. [bug] Serial of dynamic and stub zones could be inconsistent
with their SOA serial.  [RT #19387]
2009-10-05 19:39:20 +00:00
Francis Dupont
8b78c993cb explicit engine rt20230a 2009-10-05 17:30:49 +00:00
Francis Dupont
e853728477 update OpenSSL PKCS#11 patch (rt19910) 2009-10-05 13:20:06 +00:00
Francis Dupont
d220cab39d pkcs11 rt20229 2009-10-05 13:02:31 +00:00
Francis Dupont
247806c820 regen 2009-10-05 12:25:29 +00:00
Francis Dupont
f89a9bcf1c pkcs11 rt20236 2009-10-05 12:23:11 +00:00
Francis Dupont
b091b4bb80 regen 2009-10-05 12:13:15 +00:00
Francis Dupont
a631b30b1d pkcs11 rt20225 2009-10-05 12:07:08 +00:00
Francis Dupont
78e0199a39 update OpenSSL PKCS#11 patch (19143) 2009-10-05 11:12:45 +00:00
Evan Hunt
1210799345 Add /* NOTREACHED */ comments 2009-10-03 18:03:54 +00:00
Automatic Updater
66fec05962 regen 2009-09-30 01:14:47 +00:00
Automatic Updater
61dd99bfae update copyright notice 2009-09-29 23:48:04 +00:00
Evan Hunt
a93a66f618 2794. [bug] Reduce default NSEC3 iterations from 100 to 10.
[RT #19970]
2009-09-29 22:17:34 +00:00
Francis Dupont
debd489a44 noreturn RT #20257 2009-09-29 15:06:07 +00:00
Mark Andrews
1e733ffc11 2792. [port] win32: 32/64 bit cleanups. [RT #128244] 2009-09-29 04:38:23 +00:00
Automatic Updater
f3d1a0ba52 regen 2009-09-26 01:14:51 +00:00
Automatic Updater
627f3e0805 update copyright notice 2009-09-25 23:48:13 +00:00
Evan Hunt
1e3c9961bb Move dns_rdataset_init() call earlier so "goto cleanup" won't trigger
an assert in dns_rdataset_isassociated().  (This is trivial, I'm going
to commit without review.)
2009-09-25 14:30:10 +00:00
Evan Hunt
fb596cc9af 2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
chain when re-signing a previously-signed zone.
			Use -u to modify NSEC3 parameters or switch
			between NSEC and NSEC3. [RT #20304]
2009-09-25 06:47:50 +00:00
Francis Dupont
c59a7b0629 missing updates in recent changes 2009-09-24 14:39:17 +00:00
Evan Hunt
63a1800105 Fix several problems introduced by rt19943 2009-09-24 04:36:28 +00:00
Automatic Updater
d48690af7a update copyright notice 2009-09-23 23:47:56 +00:00
Evan Hunt
53c22b8e0d 2685. [bug] Fixed dnssec-signzone -S handling of revoked keys.
Also, added warnings when revoking a ZSK, as this is
			not defined by protocol (but is legal).  [RT #19943]
2009-09-23 16:01:57 +00:00
Mark Andrews
4d0e2cf9b9 2684. [bug] dnssec-signzone should clean the old NSEC chain when
signing with NSEC3 and vica versa. [RT #20301]
2009-09-23 14:05:11 +00:00
Francis Dupont
e25451b66c pkcs11 tools were moved (20067) 2009-09-23 10:54:46 +00:00
Evan Hunt
8436cc14ba 2684. [cleanup] dig: formalize +ad and +cd as synonyms for
+adflag and +cdflag.  [RT #19305]
2009-09-23 06:21:36 +00:00
Mark Andrews
011d0b7dc8 2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
the NSEC3 parameters used to sign the zone change.
                        [RT #20246]
2009-09-23 04:30:16 +00:00
Francis Dupont
2f4d747a26 "configure --enable-symtable=all" failed to build. [RT #20282] 2009-09-22 08:47:55 +00:00
Automatic Updater
d2ebd5d5fb regen 2009-09-19 01:14:52 +00:00
Francis Dupont
b67b58ebe7 small improvement (rt20291) 2009-09-18 22:08:55 +00:00
Francis Dupont
b0dafbb309 spelling 2009-09-18 13:14:47 +00:00
Francis Dupont
1def913211 config.h issue is fixed: cleanup 2009-09-18 11:07:04 +00:00
Evan Hunt
0e32dda176 add include <config.h>, and update comments to use the new names 2009-09-17 23:46:34 +00:00
Francis Dupont
be728633c1 init .cvsignore 2009-09-17 22:55:59 +00:00
Francis Dupont
8b5a11217c from contrib/pkcs11-keygen 2009-09-17 22:51:59 +00:00
Automatic Updater
4765fc7c3f update copyright notice 2009-09-15 23:48:09 +00:00
Evan Hunt
d514c0dc9b 2679. [func] dig -k can now accept TSIG keys in named.conf
format.  [RT #20031]
2009-09-15 03:13:44 +00:00
Automatic Updater
f8e3e03cac regen 2009-09-15 01:14:42 +00:00
Mark Andrews
a12c8549d6 2678. [func] Treat DS queries as if "minimal-response yes;"
was set. [RT #20258]
2009-09-14 23:13:37 +00:00
Evan Hunt
b843f577bb 2677. [func] Changes to key metadata behavior:
- Keys without "publish" or "active" dates set will
			  no longer be used for smart signing.  However,
			  those dates will be set to "now" by default when
			  a key is created; to generate a key but not use
			  it yet, use dnssec-keygen -G.
			- New "inactive" date (dnssec-keygen/settime -I)
			  sets the time when a key is no longer used for
			  signing but is still published.
			- The "unpublished" date (-U) is deprecated in
			  favor of "deleted" (-D).
			[rt20247]
2009-09-14 18:45:45 +00:00
Evan Hunt
a457576b58 "dnssec-lookaside auto" crashed if named was built without openssl [rt20231] 2009-09-10 01:49:29 +00:00
Automatic Updater
31f1c9a241 regen 2009-09-09 23:30:30 +00:00
Mark Andrews
14cd8ac04c 2672. [bug] Don't enable searching in 'host' when doing reverse
lookups. [RT #20218]
2009-09-08 23:23:22 +00:00
Automatic Updater
c7d32c0b0f regen 2009-09-08 01:14:42 +00:00
Francis Dupont
210970a248 two votes for keys -> key pair 2009-09-07 23:11:48 +00:00
Francis Dupont
1f821c1058 merge rt19294 2009-09-07 12:58:33 +00:00
Evan Hunt
30a60d2aff On some slower systems the startup is delayed and this causes an
apparent transfer failure on the initial calls to dig.  Adding a test
here to make sure the zones are fully loaded before attempting to query
them.
2009-09-04 17:14:58 +00:00
Evan Hunt
8d0a1ede2f RT #20213:
- correctly use -K option in dnssec-keygen
- fix an improper free() in dnssec-revoke
- fix grammar in dnssec-settime
2009-09-04 16:57:22 +00:00
Mark Andrews
06eb464ae2 ALG_FORMATSIZE -> 20 2009-09-04 02:31:29 +00:00
Mark Andrews
2d13af354a isc_resourcevalue_t is unsigned. use %ISC_PRINT_QUADFORMATu 2009-09-04 00:49:50 +00:00
Francis Dupont
9916d13704 oldkey must be initialized to NULL 2009-09-03 13:43:52 +00:00
Automatic Updater
2895f101b5 regen 2009-09-03 01:14:42 +00:00
Evan Hunt
9f8d002a66 silence win32 compiler warnings 2009-09-03 00:12:23 +00:00
Automatic Updater
d7201de09b update copyright notice 2009-09-02 23:48:03 +00:00
Evan Hunt
eab9975bcf 2668. [func] Several improvements to dnssec-* tools, including:
- dnssec-keygen and dnssec-settime can now set key
			  metadata fields 0 (to unset a value, use "none")
			- dnssec-revoke sets the revocation date in
			  addition to the revoke bit
			- dnssec-settime can now print individual metadata
			  fields instead of always printing all of them,
			  and can print them in unix epoch time format for
			  use by scripts
			[RT #19942]
2009-09-02 06:29:01 +00:00
Automatic Updater
823ca3c14f update copyright notice 2009-09-01 23:47:45 +00:00
Tatuya JINMEI 神明達哉
ee537376ad avoid using @< (which some make don't seem to understand) for portability 2009-09-01 22:30:28 +00:00
Evan Hunt
93ebf0fc08 - add .cvsignore files
- silence tinderbox warnings about missing config.h in a few files.
2009-09-01 20:13:44 +00:00
Tatuya JINMEI 神明達哉
a27fe4c990 2667. [func] Add support for logging stack backtrace on assertion
failure (not available for all platforms). [RT #19780]
9.7.0
2009-09-01 18:40:25 +00:00
Tatuya JINMEI 神明達哉
44de0b1f7d 2666. [func] Added an 'options' argument to dns_name_fromstring()
(API change from 9.7.0a2). [RT #20196]
2009-09-01 17:36:51 +00:00
Evan Hunt
85be60e3c8 2665. [func] Clarify syntax for managed-keys {} statement, add
ARM documentation about RFC 5011 support. [RT #19874]
2009-09-01 07:14:26 +00:00
Mark Andrews
479b80d4d7 2663. [func] win32: allow named to run as a service using
"NT AUTHORITY\LocalService" as the account. [RT #19977]
2009-09-01 06:51:47 +00:00
Tatuya JINMEI 神明達哉
307d208450 2660. [func] Add a new set of DNS libraries for non-BIND9
applications.  See README.libdns. [RT #19369]
2009-09-01 00:22:28 +00:00
Automatic Updater
ad671240d6 regen 2009-08-29 01:14:37 +00:00
Automatic Updater
5ac9ef9448 update copyright notice 2009-08-28 23:48:02 +00:00
Evan Hunt
41eeb37b51 2659. [doc] Clarify dnssec-keygen doc: key name must match zone
name for DNSSEC keys. [RT #19938]
2009-08-28 21:47:02 +00:00
Evan Hunt
747abb4993 2658. [bug] dnssec-settime and dnssec-revoke didn't process
key file paths correctly. [RT #20078]
2009-08-28 03:13:08 +00:00
Automatic Updater
163af735c2 regen 2009-08-27 01:14:39 +00:00
Jeremy Reed
35490da615 Update date for manpage.
Add -l to synopsis sections. (It is already documented.)
Mention the RFC number for DLV.
Not adding a CHANGES entry. No official release since this was added.
The previous CHANGES entries for this are 2611 and 2636.
2009-08-26 21:56:05 +00:00
Jeremy Reed
de10c46b2a Add -l to synopsis. For RT BUG 20147.
Not adding a CHANGES entry as is so minor and the -l addition is
in 2630 which is not in any official release.
Also update the date for the manual page.
2009-08-26 21:34:44 +00:00
Automatic Updater
da035d9f44 update copyright notice 2009-08-25 23:47:51 +00:00
Mark Andrews
2bee3c2e70 CHANGES 2009-08-25 06:47:06 +00:00
Mark Andrews
18114698b4 2654. [bug] Improve error reporting on duplicated names for
deny-answer-xxx. [RT #20164]
2009-08-25 02:42:46 +00:00
Mark Andrews
88471538d6 2652. [func] Provide more detail about what record is being
deleted. [RT #20061]
2009-08-17 07:18:41 +00:00
Evan Hunt
813b34ebec 2650. [bug] Assertion failure in dnssec-signzone when trying
to read keyset-* files. [RT #20075]
2009-08-14 01:07:00 +00:00
Mark Andrews
de3200acf4 silence format warnings: treat uid/gid as longs when printing 2009-08-13 07:04:38 +00:00
Mark Andrews
50eab6c2aa silence compiler warnings 2009-08-13 04:13:58 +00:00
Automatic Updater
0a7e3c7d09 update copyright notice 2009-08-05 23:47:43 +00:00
Evan Hunt
2ac8f58412 needed fixes for windows build 2009-08-05 18:43:37 +00:00
Evan Hunt
3a87540047 2644. [bug] Change #2628 caused a regression on some systems;
named was unable to write the PID file and would
                        fail on startup. [RT #20001]
2009-08-05 17:35:33 +00:00
Mark Andrews
6beee732e4 2643. [bug] Stub zones interacted badly with NSEC3 support.
[RT #19777]
2009-08-05 02:09:04 +00:00
Evan Hunt
4103d428a9 use genrandom to produce random data for input to ddns-confgen 2009-07-30 15:11:41 +00:00
Automatic Updater
0282f038eb update copyright notice 2009-07-29 23:47:43 +00:00
Evan Hunt
9069215eac 2641. [bug] Fixed an error in parsing update-policy syntax,
added a regression test to check it. [RT #20007]
2009-07-29 17:52:00 +00:00
Mark Andrews
bd190a40a8 2640. [security] A specially crafted update packet will cause named
to exit. [RT #20000]
2009-07-28 15:45:43 +00:00
Mark Andrews
99a0cd0236 fix comment 2009-07-21 03:27:38 +00:00
Tatuya JINMEI 神明達哉
2847ddeaf1 misc. bug fixes including null pointer dereference and memory leak.
[RT #19953]

I don't update CHANGES as this code has never been publicly released.
2009-07-21 02:57:39 +00:00
Mark Andrews
97725b410a 2628. [bug] Install arpaname. [RT #19957] 2009-07-21 02:41:01 +00:00
Mark Andrews
520cea04a2 2627. [func] Rationalize dnssec-signzone's signwithkey() calling.
[RT #19959]
2009-07-21 01:22:27 +00:00
Automatic Updater
fd0b768f4c regen 2009-07-21 01:13:24 +00:00
Francis Dupont
938dfe6dcd re-indent (to be finished) 2009-07-20 12:11:58 +00:00
Francis Dupont
85f5bb5274 fix extra space after now- in now-revoked 2009-07-20 11:56:35 +00:00
Automatic Updater
52c1cac19a regen 2009-07-20 01:13:18 +00:00
Automatic Updater
26d8ffe715 update copyright notice 2009-07-19 23:47:55 +00:00
Evan Hunt
f73695f9bd fix a merge error from rebasing dnssec-settime (an assignment was left in
place that was supposed to have been removed--this was already reviewed, I
just merged the fix wrong)
2009-07-19 16:11:53 +00:00
Evan Hunt
dba9901bb7 update cvsignore 2009-07-19 05:33:10 +00:00
Evan Hunt
2a3574f8d4 windows portability fix (review by mgraff) 2009-07-19 05:26:05 +00:00
Evan Hunt
9edd523c22 more win32 build fixes 2009-07-19 05:06:48 +00:00
Evan Hunt
da520bccdd add settime project files for win32 build 2009-07-19 04:56:47 +00:00
Automatic Updater
0a7ed88633 regen 2009-07-19 04:27:56 +00:00
Evan Hunt
553ead32ff 2636. [func] Simplify zone signing and key maintenance with the
dnssec-* tools.  Major changes:
			- all dnssec-* tools now take a -K option to
			  specify a directory in which key files will be
			  stored
			- DNSSEC can now store metadata indicating when
			  they are scheduled to be published, acttivated,
			  revoked or removed; these values can be set by
			  dnssec-keygen or overwritten by the new
			  dnssec-settime command
			- dnssec-signzone -S (for "smart") option reads key
			  metadata and uses it to determine automatically
			  which keys to publish to the zone, use for
			  signing, revoke, or remove from the zone
			[RT #19816]
2009-07-19 04:18:05 +00:00
Automatic Updater
4a979d3577 update copyright notice 2009-07-17 23:47:41 +00:00
Evan Hunt
aeff7de836 2634. [port] win32: Add support for libxml2, enable
statschannel. [RT #19773]
2009-07-17 06:25:45 +00:00
Automatic Updater
3cddb2c552 regen 2009-07-15 01:13:11 +00:00
Mark Andrews
fb8db7fc3f 2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
[RT #19926 ]
2009-07-15 00:36:37 +00:00
Automatic Updater
3e12c54de2 update copyright notice 2009-07-14 23:47:54 +00:00
Evan Hunt
08f860f800 2630. [func] Improved syntax for DDNS autoconfiguration: use
"update-policy local;" to switch on local DDNS in a
			zone.  [RT #19875]
2009-07-14 22:54:57 +00:00
Evan Hunt
38cd4d14cc 2629. [port] Check for seteuid()/setegid(), use setresuid()/
setresgid() if not present. [RT #19932]
2009-07-14 22:39:30 +00:00
Mark Andrews
a4463732ad 2628. [port] linux: Allow /var/run/named/named.pid to be opened
at startup with reduced capabilities in operation.
                        [RT #19884]
2009-07-14 05:15:00 +00:00
Automatic Updater
d85c83c414 regen 2009-07-14 01:13:07 +00:00
Automatic Updater
fd4dcaddae update copyright notice 2009-07-13 23:47:42 +00:00
Mark Andrews
3bc4221346 2624. [func] 'named-checkconf -p' will print out the parsed
configuration. [RT #18871]
2009-07-13 06:57:21 +00:00
Automatic Updater
4a14ce5ba0 regen 2009-07-11 01:12:47 +00:00
Automatic Updater
2cbb4ab757 regen 2009-07-04 01:13:19 +00:00
Automatic Updater
c8da39c6c7 update copyright notice 2009-07-02 23:47:26 +00:00
Tatuya JINMEI 神明達哉
6493425eaa the update-policy template doesn't match the implementation. [RT #19877]
for 9.7.0a2.
2009-07-02 22:50:24 +00:00
Mark Andrews
109580e7e5 2920. [bug] Delay thawing the zone until the reload of it has
completed successfully.  [RT #19750]
2009-07-02 07:39:03 +00:00
Automatic Updater
c6fb85f950 update copyright notice 2009-07-01 23:47:36 +00:00
Automatic Updater
f66c8eed51 update copyright notice 2009-06-30 23:48:01 +00:00
Automatic Updater
0ae35ecf05 regen 2009-06-30 03:32:58 +00:00
Evan Hunt
1bc5499c2a dnssec-revoke docbook fix 2009-06-30 03:20:26 +00:00
Evan Hunt
6210cd4970 update 2009-06-30 02:56:09 +00:00
Evan Hunt
cfb1587eb9 2619. [func] Add support for RFC 5011, automatic trust anchor
maintenance.  The new "managed-keys" statement can
			be used in place of "trusted-keys" for zones which
			support this protocol.  (Note: this syntax is
			expected to change prior to 9.7.0 final.) [RT #19248]
2009-06-30 02:53:46 +00:00
Automatic Updater
6815ef40df update copyright notice 2009-06-26 23:47:58 +00:00
Tatuya JINMEI 神明達哉
e47809ad55 cleanup: removed redundant initialization [RT #19866] 2009-06-26 08:02:57 +00:00
Mark Andrews
870332fb6d 2617. [bug] ifconfig.sh failed to emit an error message when
run from the wrong location. [RT #19375]
2009-06-26 06:08:40 +00:00
Mark Andrews
d8f118f4a0 2616. [bug] The nameserver argument to 'host' was being ignored.
[RT #19852]
2009-06-24 02:51:29 +00:00
Mark Andrews
ce773a54f9 missing unsigned 2009-06-24 01:27:06 +00:00
Automatic Updater
0382130cdc update copyright notice 2009-06-23 23:47:44 +00:00
Mark Andrews
0f00ee4327 2615. [port] win32: 'named -v' should automatically be executed
in the foreground. [RT #19844]
2009-06-23 07:43:48 +00:00
Evan Hunt
31a6411712 - fix windows build of ddns-confgen
- fix unix build of arpaname
2009-06-18 16:02:25 +00:00
Automatic Updater
80383d0360 regen 2009-06-18 01:13:02 +00:00
Automatic Updater
dde8659175 update copyright notice 2009-06-17 23:53:04 +00:00
Automatic Updater
ca67ebfe9e regen 2009-06-17 23:12:09 +00:00
Evan Hunt
13f7f63deb windows build fixes 2009-06-17 20:21:50 +00:00
Tatuya JINMEI 神明達哉
90ca8e224d an editorial nit for the usage() 2009-06-17 19:18:37 +00:00
Evan Hunt
245b4fe655 changes needed for windows build 2009-06-17 07:55:59 +00:00
Evan Hunt
b272d38cc5 2612. [func] Add default values for the arguments to
dnssec-keygen.  Without arguments, it will now
			generate a 1024-bit RSASHA1 zone-signing key,
			or with the -f KSK option, a 2048-bit RSASHA1
			key-signing key. [RT #19300]

2611.	[func]		Add -l option to dnssec-dsfromkey to generate
			DLV records instead of DS records. [RT #19300]
2009-06-17 06:51:44 +00:00
Automatic Updater
7ae7246a63 regen 2009-06-17 01:12:48 +00:00
Tatuya JINMEI 神明達哉
45d4d69a8d minor additional improvements to ddns-confgen (see rt#19825) 2009-06-16 22:36:53 +00:00
Automatic Updater
9210d8796e regen 2009-06-16 01:12:45 +00:00
Automatic Updater
bfeb2af9cf update copyright notice 2009-06-15 23:47:59 +00:00
Evan Hunt
76786c2904 - assorted changes needed for windows build
- began versioning for 9.7.0a1
2009-06-12 02:33:21 +00:00
Automatic Updater
156d095d86 regen 2009-06-12 01:12:50 +00:00
Automatic Updater
754cb8a2b3 update copyright notice 2009-06-11 23:47:56 +00:00
Tatuya JINMEI 神明達哉
6a122cef16 missing break in a case block (rt#19812) 2009-06-11 20:01:22 +00:00
Automatic Updater
8655537825 regen 2009-06-11 01:12:49 +00:00
Automatic Updater
b6306ef56e update copyright notice 2009-06-10 23:47:47 +00:00
Evan Hunt
18ad4708eb commit windows build changes needed for DDNS patch 2009-06-10 23:36:57 +00:00
Evan Hunt
8c091f4733 add #include <isc/print.h> 2009-06-10 01:44:53 +00:00
Automatic Updater
852ccdd42a regen 2009-06-10 01:12:51 +00:00
Evan Hunt
68d766400e added .cvsignore files 2009-06-10 00:56:15 +00:00
Evan Hunt
f8c3dfee69 added missing file 2009-06-10 00:55:02 +00:00
Evan Hunt
351b62535d 2609. [func] Simplify the configuration of dynamic zones:
- add ddns-confgen command to generate
			  configuration text for named.conf
			- add zone option "ddns-autoconf yes;", which
			  causes named to generate a TSIG session key
			  and allow updates to the zone using that key
			- add '-l' (localhost) option to nsupdate, which
			  causes nsupdate to connect to a locally-running
			  named process using the session key generated
			  by named
			[RT #19284]
2009-06-10 00:27:22 +00:00
Mark Andrews
996b4d8982 fix bad test to determine if both ksk's and zsk's are present. [RT #19802] 2009-06-09 22:54:21 +00:00
Automatic Updater
1c51f79aba regen 2009-06-06 01:12:32 +00:00
Jeremy Reed
6a550cb83c Please bump date on manpage. So we know we aren't using 2000 docs.
For -P: clean up sentence and clarify that the option skips the tests.

(This is for RT19653. No CHANGES entry added for this minor fix.)
2009-06-05 21:59:43 +00:00
Mark Andrews
988023d8bc missing unsigned 2009-06-05 06:59:03 +00:00
Automatic Updater
6283056805 regen 2009-06-05 01:12:33 +00:00
Automatic Updater
9f4702d025 update copyright notice 2009-06-04 23:47:53 +00:00
Mark Andrews
97573334cb fix up bad merge 2009-06-04 04:33:11 +00:00
Automatic Updater
39844d4710 update copyright notice 2009-06-04 02:56:47 +00:00
Mark Andrews
2534a73a59 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-04 02:13:37 +00:00
Automatic Updater
e6ada020f5 update copyright notice 2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉
40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
2009-05-29 22:22:37 +00:00
Mark Andrews
fc7ecc628d 2603. [port] win32: handle .exe extension of named-checkzone and
named-comilezone argv[0] names under windows.
                        [RT #19767]
2009-05-29 02:14:31 +00:00
Automatic Updater
a9a054302d regen 2009-05-22 01:14:49 +00:00
Automatic Updater
bbe20aa62c update copyright notice 2009-05-21 23:47:28 +00:00
Jeremy Reed
5d924e398e 2601. [doc] Mention file creation mode mask in the
named manual page.

Similar to what is also in the migration document.
Also see Support ticket 862.
2009-05-21 19:54:28 +00:00
Automatic Updater
54cdd2b307 update copyright notice 2009-05-07 23:47:44 +00:00
Francis Dupont
ff380b05fe comment fixes (rt19624) 2009-05-07 09:41:23 +00:00
Francis Dupont
ddac1a2b98 reserve -F 2009-05-07 09:33:52 +00:00
Automatic Updater
7a272c6b0d update copyright notice 2009-05-06 23:47:50 +00:00
Francis Dupont
0e77d33686 add isc/print.h 2009-05-06 11:41:07 +00:00
Francis Dupont
d302a620e0 Fix unknown extended rcodes in dig 2009-05-06 10:16:32 +00:00
Jeremy Reed
4144efb390 2594. [func] Have rndc warn if using its default configuration file
when the key file also exists. [RT #19424]
2009-05-04 17:38:56 +00:00
Francis Dupont
cc620f9fdb Improve a corner source of SERVFAILs [RT #19632] 2009-04-30 11:45:10 +00:00
Mark Andrews
3836f447ee 2592. [bug] Treat "any" as a type in nsupdate. [RT #19455] 2009-04-30 07:10:09 +00:00
Mark Andrews
47323be2af 2591. [bug] named could die when processing a update in
removed_orphaned_ds(). [RT #19507]
2009-04-30 06:59:11 +00:00
Mark Andrews
b9636a8e43 2583. [port] netbsd: provide a control to not add the compile
date to the version string, -DNO_VERSION_DATE.
2009-04-03 19:55:59 +00:00
Evan Hunt
8c5482b3ea Corrected install rule to install arpaname.1 not arpaname.8 2009-03-23 21:59:56 +00:00
Tatuya JINMEI 神明達哉
3af7cd2661 2580. [bug] UpdateRej statistics counter could be incremented twice
for one rejection. [RT #19476]
2009-03-18 22:17:24 +00:00
Evan Hunt
ca23cf7e28 2578. [bug] Changed default sig-signing-type to 65534, because
65535 turns out to be reserved.  [RT #19477]
2009-03-16 23:41:21 +00:00
Mark Andrews
56708c6fb4 2576. [bug] NSEC record were not being correctly signed when
a zone transitions from insecure to secure.
                        Handle such incorrectly signed zones. [RET #19114]
2009-03-13 01:35:18 +00:00
Automatic Updater
ed4475f3f5 regen 2009-03-10 01:12:31 +00:00
Mark Andrews
b98225ff8a 2574. [doc] Document nsupdate -g and -o. [RT #19351] 2009-03-09 04:18:51 +00:00
Automatic Updater
2919fef5d1 update copyright notice 2009-03-07 23:47:45 +00:00
Automatic Updater
7a7a44400d regen 2009-03-06 01:12:33 +00:00
Automatic Updater
2464bd58eb update copyright notice 2009-03-05 23:47:36 +00:00
Mark Andrews
f605647060 Undocumented firewall test hook. [RT #19398] 2009-03-05 03:13:55 +00:00
Automatic Updater
e61db954bf update copyright notice 2009-03-04 23:48:02 +00:00
Mark Andrews
1559511ada don't use a implied source in a direct rule 2009-03-04 05:48:32 +00:00
Evan Hunt
3a30493983 2572. [func] Simplify DLV configuration, with a new option
"dnssec-lookaside auto;"  This is the equivalent
			of "dnssec-lookaside . trust-anchor dlv.isc.org;"
			plus setting a trusted-key for dlv.isc.org.

			Note: The trusted key is hard-coded into named,
			but is also stored in (and can be overridden
			by) $sysconfdir/bind.keys.  As the ISC DLV key
			rolls over it can be kept up to date by replacing
			the bind.keys file with a key downloaded from
			https://www.isc.org/solutions/dlv. [RT #18685]
2009-03-04 02:42:31 +00:00
Mark Andrews
ffcd068f87 add config.h 2009-03-04 02:23:36 +00:00
Evan Hunt
6201345ba9 Added .cvsignore for bin/tools 2009-03-04 01:55:32 +00:00
Mark Andrews
620508359f 2571. [func] Add a new tool "arpaname" which translates IP addresses
to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
                        [RT #18976]
2009-03-04 01:30:27 +00:00
Automatic Updater
cd83ba4484 update copyright notice 2009-03-03 23:48:02 +00:00
Mark Andrews
d36ba0f0ca 2570. [func] Log the destination address the query was sent to.
[RT #19209]
2009-03-03 01:36:17 +00:00
Automatic Updater
bd537d750f regen 2009-03-03 01:12:26 +00:00
Automatic Updater
4f91bcae43 update copyright notice 2009-03-02 23:47:43 +00:00
Evan Hunt
ca42dcc068 2569. [func] Move journalprint, nsec3hash, and genrandom
commands from bin/tests into bin/tools;
                        "make install" will put them in $sbindir. [RT #19301]
2009-03-02 03:54:10 +00:00
Mark Andrews
dfa3ca995c 2568. [bug] Report when the write to indicate a otherwise
successful start fails. [RT #19360]
2009-03-02 03:08:22 +00:00
Mark Andrews
98b2be76fc 2567. [bug] dst__privstruct_writefile() could miss write errors.
write_public_key() could miss write errors.
                        dnssec-dsfromkey could miss write errors.
                        [RT #19360]
2009-03-02 03:01:04 +00:00
Mark Andrews
1cac6c196f report and abort on getcwd() failures 2009-03-02 02:48:02 +00:00
Mark Andrews
56fe846d21 report write error. [RT #19360] 2009-03-02 02:42:50 +00:00
Evan Hunt
bfe0517fdc Clarify logged message when an insecure DNSSEC response arrives from a zone
thought to be secure: "insecurity proof failed" instead of "not insecure".
[RT #19400]
2009-03-01 02:45:38 +00:00
Mark Andrews
e4c6491bbf 2565. [func] Add support for HIP record. Includes new functions
dns_rdata_hip_first(), dns_rdata_hip_next()
                        and dns_rdata_hip_current().  [RT #19384]
2009-02-26 06:09:19 +00:00
Mark Andrews
967a70944d 2563. [bug] Dig could leak a socket causing it to wait forever
to exit. [RT #19359]
2009-02-25 02:34:21 +00:00
Automatic Updater
87a58323be update copyright notice 2009-02-18 23:47:48 +00:00
Jeremy Reed
f8aafe8286 Add myself to builtin authors. Hope my middle initial is okay. 2009-02-18 22:41:57 +00:00
Automatic Updater
389d1c1cb9 update copyright notice 2009-02-17 23:47:46 +00:00
Mark Andrews
eab2fb739e silence compiler warnings [RT #17079] 2009-02-17 03:40:28 +00:00
Mark Andrews
52dec6996a 2559. [bug] dnssec-dsfromkey could compute bad DS records when
reading from a K* files.  [RT #19357]
2009-02-17 00:16:45 +00:00
Automatic Updater
bf33eb0b52 update copyright notice 2009-02-16 23:48:04 +00:00
Mark Andrews
8f196ee82b 2558. [func] Set the ownership of missing directories created
for pid-file if -u has been specified on the command
                        line. [RT #19328]
2009-02-16 05:08:43 +00:00
Mark Andrews
e502b133d6 2556. [cleanup] PCI compliance:
* new libisc log module file
                        * isc_dir_chroot() now also changes the working
                          directory to "/".
                        * additional INSISTs
                        * additional logging when files can't be removed.
2009-02-16 02:01:16 +00:00
Mark Andrews
598da901ab 2555. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
error checks in the correct order resulting in the
                        wrong error code sometimes being returned. [RT #19249]
2009-02-16 00:13:02 +00:00
Mark Andrews
cac4576405 2554. [func] dig: when emitting a hex dump also display the
corresponding characters. [RT #19258]
2009-02-16 00:01:37 +00:00
Mark Andrews
692ce6c313 2551. [bug] Potential Reference leak on return. [RT #19341] 2009-02-15 23:04:38 +00:00
Automatic Updater
53f0234c3e update copyright notice 2009-02-06 23:47:42 +00:00
Francis Dupont
c1d7e0562f OpenSSL hashes 2009-02-06 12:26:23 +00:00
Automatic Updater
370c55dfcd regen 2009-02-03 01:11:46 +00:00
Mark Andrews
70f292a50f 2542. [doc] Update the description of dig +adflag. RT #19290] 2009-02-02 04:41:28 +00:00
Automatic Updater
8b835581b4 update copyright notice 2009-01-30 23:47:50 +00:00
Mark Andrews
14810640b7 2539. [security] Update the interaction between recursion, allow-query,
allow-query-cache and allow-recursion.  [RT #19198]
2009-01-30 08:19:00 +00:00
Mark Andrews
e80b693272 2539. [security] Update the interaction between recursion, allow-query,
allow-query-cache and allow-recursion.  [RT #19198]
2009-01-30 03:48:54 +00:00
Mark Andrews
e5d447be8c category is unused without HAVE_LIBXML2 2009-01-29 05:11:29 +00:00
Automatic Updater
c06bf2ff5c regen 2009-01-28 23:30:30 +00:00
Automatic Updater
39a8abdb83 update copyright notice 2009-01-27 23:47:54 +00:00
Automatic Updater
2ec317aee9 regen 2009-01-27 23:30:26 +00:00
Tatuya JINMEI 神明達哉
d9059b0c38 2537. [func] Added more statistics counters including those on socket
I/O events and query RTT histograms.  [RT #18802]
2009-01-27 22:30:00 +00:00
Automatic Updater
3319413a67 update copyright notice 2009-01-22 23:47:54 +00:00
Mark Andrews
f148f53794 2536. [cleanup] Silence some warnings when -Werror=format-security is
specified. [RT #19083]
2009-01-22 05:39:29 +00:00
Mark Andrews
00f8377316 2535. [bug] dig +showsearh and +trace interacted badly. [RT #19091] 2009-01-22 05:06:33 +00:00
Automatic Updater
83b86f3936 update copyright notice 2009-01-21 23:47:27 +00:00
Mark Andrews
31b7a2fed6 2534. [func] Check NAPTR records regular expressions and
replacement strings to ensure they are syntaxically
                        valid and consistant. [RT #18168]
2009-01-21 05:37:55 +00:00
Automatic Updater
9fbbfb5757 regen 2009-01-21 01:12:08 +00:00
Automatic Updater
d60212e03f update copyright notice 2009-01-20 23:47:56 +00:00
Jeremy Reed
f9f11eb54b Add missing commas. Makes it more consistent with rest of docs
(even in same document).
2009-01-20 20:06:29 +00:00
Mark Andrews
ed4efb0805 2532. [bug] dig: check the question section of the response to
see if it matches the asked question. [RT #18495]
2009-01-20 04:39:29 +00:00
Mark Andrews
13f4bdc9b4 2531. [bug] Change #2207 was incomplete. [RT #19098] 2009-01-20 02:01:11 +00:00
Mark Andrews
3efa3f07d5 2530. [bug] named failed to reject insecure to secure transitions
via UPDATE. [RT #19101]
2009-01-20 01:40:04 +00:00
Automatic Updater
d362465c77 update copyright notice 2009-01-17 23:47:43 +00:00
Francis Dupont
b9d4899121 spelling 2009-01-17 11:35:11 +00:00
Francis Dupont
7f1785d0de spelling 2009-01-17 11:23:46 +00:00
Francis Dupont
d2a94a51a1 spelling 2009-01-17 11:12:10 +00:00
Francis Dupont
482b24c9a4 spelling 2009-01-17 11:04:25 +00:00
Francis Dupont
287910778c spelling 2009-01-17 10:39:26 +00:00
Francis Dupont
06d145cbf8 spelling 2009-01-17 10:31:25 +00:00
Francis Dupont
86e018c2bc spelling 2009-01-17 10:26:17 +00:00
Francis Dupont
a9435a8871 spelling 2009-01-17 10:15:38 +00:00
Francis Dupont
db874a7b5c spelling 2009-01-17 09:58:29 +00:00
Automatic Updater
9e0d0a279b update copyright notice 2009-01-09 23:47:46 +00:00
Tatuya JINMEI 神明達哉
7781f25078 2526. [func] New named option "attach-cache" that allows multiple
views to share a single cache to save memory and
			improve lookup efficiency. [RT 18905]
2009-01-09 22:24:37 +00:00
Automatic Updater
d7845fc5ba update copyright notice 2009-01-07 23:47:47 +00:00
Tatuya JINMEI 神明達哉
609f86163a 2525. [func] New logging category "query-errors" to provide detailed
internal information about query failures, especially
			about server failures. [RT #19027]
2009-01-07 01:46:40 +00:00
Automatic Updater
0cfbb9285a update copyright notice 2009-01-06 23:47:57 +00:00
Francis Dupont
1879dbe0d9 dnssec-signzone needs strtoul() - 19129 2009-01-06 09:14:03 +00:00
Automatic Updater
5569e7de51 update copyright notice 2009-01-05 23:47:54 +00:00
Tatuya JINMEI 神明達哉
3fb1637c92 trivial comment cleanups (RT#19118) 2009-01-05 23:20:22 +00:00
Tatuya JINMEI 神明達哉
726d737626 removed a duplicate line 2008-12-25 02:02:39 +00:00
Tatuya JINMEI 神明達哉
d7e2f1d572 comment update 2008-12-25 02:00:49 +00:00
Mark Andrews
09d7358c48 2520. [bug] Update xml statistics version number to 2.0.
[RT #19080]
2008-12-18 02:23:27 +00:00
Tatuya JINMEI 神明達哉
10a6f640ed 2519. [bug] dig/host with -4 or -6 didn't work if more than two
nameserver addresses of the excluded address family
			preceded in resolv.conf. [RT #19081]
2008-12-17 19:19:29 +00:00
Automatic Updater
96eeb9496c update copyright notice 2008-12-16 23:47:57 +00:00
Tatuya JINMEI 神明達哉
7f65860391 2517. [bug] dig +trace with -4 or -6 failed when it chose a
nameserver address of the unsupported address.
			[RT #18843]
2008-12-16 02:57:24 +00:00
Tatuya JINMEI 神明達哉
cb30636abd 2516. [bug] glue sort for responses was performed even when not
needed. [RT #19039]
2008-12-16 02:19:46 +00:00
Automatic Updater
a4cd1c315a update copyright notice 2008-12-14 21:33:25 +00:00
Mark Andrews
96ec50549a 2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
[RT #19063]
2008-12-14 21:27:24 +00:00
Mark Andrews
8bf0c05627 2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
[RT #19063]
2008-12-14 21:14:54 +00:00
Tatuya JINMEI 神明達哉
96465858fa 2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
a nameserver of the unsupported address family.
			[RT #18848]
2008-12-13 02:43:25 +00:00
Mark Andrews
8684cd3a6f 2510. [bug] dig +sigchase could trigger REQUIREs. [RT #19033] 2008-12-10 22:33:54 +00:00
Mark Andrews
69f0cf898e 2507. [func] Log the recursion quota values when killing the
oldest query or refusing to recurse due to quota.
                        [RT #19022]
2008-12-08 06:39:42 +00:00
Mark Andrews
c4c6e5094b dnssec-dsfromkey 2008-12-01 04:20:22 +00:00
Mark Andrews
9935447b51 2503. [port] linux: improve compatibility with Linux Standard
Base. [RT #18793]
2008-12-01 03:53:32 +00:00
Mark Andrews
515a537cd1 silence compiler 2008-11-19 06:21:45 +00:00
Mark Andrews
cb98b2c207 windows: complain if -t is set 2008-11-17 05:41:10 +00:00
Mark Andrews
a435080fb8 fix for windows compiler 2008-11-16 22:49:18 +00:00
Mark Andrews
81e5de1741 2496. [bug] Add sanity length checks to NSID option. [RT #18813] 2008-11-16 20:57:55 +00:00
Automatic Updater
49960a74b5 update copyright notice 2008-11-14 23:47:33 +00:00
Mark Andrews
50df1ec60a 2495. [bug] Tighten RRSIG checks. [RT #18795] 2008-11-14 22:53:46 +00:00
Mark Andrews
ef4eed2a2a 2493. [bug] The linux capabilites code was not correctly cleaning
up after itself. [RT #18767]
2008-11-14 05:08:48 +00:00
Mark Andrews
7d89c53f6e 2492. [func] Rndc status new reports the number of cpus discovered
and the number of worker threads when running
                        multi-threaded. [RT #18273]
2008-11-14 04:57:04 +00:00
Automatic Updater
b27ce68bae regen 2008-11-08 01:11:47 +00:00
Automatic Updater
9807318c04 update copyright notice 2008-11-07 23:47:18 +00:00
Jeremy Reed
cf58feee56 Capitalize month name (since this is English and to be consistent)
for the date of the document.
2008-11-07 13:54:11 +00:00
Jeremy Reed
832fb12cfe Put RR in parentheses in the description.
Add missing "d" for "generated".
2008-11-07 13:50:15 +00:00
Automatic Updater
922312472e regen 2008-11-07 04:08:43 +00:00
Automatic Updater
59a4c9c6b4 close comment 2008-11-07 03:58:25 +00:00
Mark Andrews
e17cb80d7c remove second copy 2008-11-07 03:43:20 +00:00
Mark Andrews
582f8b9a8d 2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
from keyset and .key files. [RT #18694]
2008-11-07 02:28:49 +00:00
Automatic Updater
18fa75b694 regen 2008-11-07 01:11:20 +00:00
Automatic Updater
7f950d7cb7 update copyright notice 2008-11-06 23:47:06 +00:00
Mark Andrews
f6f1672b4e 2486. [func] The default locations for named.pid and lwresd.pid
are now /var/run/named/named.pid and
                        /var/run/lwresd/lwresd.pid respectively.

                        This allows the owner of the containing directory
                        to be set, for "named -u" support, and allows there
                        to be a permanent symbolic link in the path, for
                        "named -t" support.  [RT #18306]
2008-11-06 05:30:24 +00:00
Mark Andrews
1f3e0508c2 2485. [bug] Change update's the handling of obscured RRSIG
records.  Not all orphand DS records were being
                        removed. [RT #18828]
2008-11-06 02:31:41 +00:00
Mark Andrews
a14aff6984 2484. [bug] It was possible to trigger a REQUIRE failure when
adding NSEC3 proofs to the response in
                        query_addwildcardproof().  [RT #18828]
2008-11-03 23:57:22 +00:00
Francis Dupont
7b1a7a098b no chroot() in Win32 API 2008-11-02 12:48:39 +00:00
Mark Andrews
e597f9f376 2479. [bug] xfrout:covers was not properly initalized. [RT 18801] 2008-10-29 02:54:20 +00:00
Automatic Updater
14c86fa67a update copyright notice 2008-10-28 23:47:06 +00:00
Mark Andrews
9d02618ca6 2478. [bug] 'addresses' could be used uninitalized in
configure_forward(). [RT 18800]
2008-10-28 05:17:40 +00:00
Mark Andrews
a21884ae7b 2477 [bug] dig: the global option to print the command line is
+cmd not print_cmd.  Update the output to reflect
                        this. [RT #17008]
2008-10-28 03:32:59 +00:00
Automatic Updater
be40453080 update copyright notice 2008-10-24 01:44:48 +00:00
Mark Andrews
6d54a6fc18 2473. [port] linux: raise the limit on open files to the possible
maximum value before spawning threads; 'files'
                        specified in named.conf doesn't seem to work with
                        threads as expected. [RT #18784]
2008-10-24 01:24:54 +00:00
Mark Andrews
7ca0cdd7ec 2472. [port] linux: check the number of available cpu's before
calling chroot as it depends of "/proc". [RT #16923]
2008-10-24 01:08:21 +00:00
Mark Andrews
7cc9019283 update usage 2008-10-24 00:56:32 +00:00
Mark Andrews
455ada05af 2471. [bug] named-checkzone was not reporting missing manditory
glue when sibling checks were disabled. [RT #18768]
2008-10-24 00:28:00 +00:00
Automatic Updater
87ecfd734c update copyright notice 2008-10-15 23:47:31 +00:00
Mark Andrews
88674be665 2464. [port] linux: check that a capability is present before
trying to set it. [RT #18135]
2008-10-15 05:00:57 +00:00
Mark Andrews
7318a964ec constistant declaration of progname 2008-10-15 03:03:57 +00:00
Mark Andrews
24a56e15f7 silence compiler warning 2008-10-15 02:37:11 +00:00
Mark Andrews
7ca1016560 make the arrays rcodetext and opcodetext readonly 2008-10-15 02:16:51 +00:00
Automatic Updater
c6c78f699b regen 2008-10-15 01:11:35 +00:00
Jeremy Reed
733531b6d5 Change SEE ALSO reference from obsolete 2535 to 4033.
(Also order these numerically.)
2008-10-14 14:32:50 +00:00
Jeremy Reed
e164806329 Change the SEE ALSO from obsolete 2535 to 4033. 2008-10-14 14:28:25 +00:00
Automatic Updater
1c09d68dfd regen 2008-10-14 01:11:36 +00:00
Jeremy Reed
0db6bf459f Document -m (enable memory usage debugging) option for dig. [RT #18757] 2008-10-13 21:18:56 +00:00
Evan Hunt
95de316a5d suppress an error message on solaris. [rt18253] 2008-10-09 21:27:52 +00:00
Automatic Updater
b49958b502 regen 2008-10-03 01:11:33 +00:00
Jeremy Reed
d4f032db53 Minor grammar and punctuation changes.
[RT #18703]
2008-10-03 00:55:33 +00:00
Mark Andrews
e6c5224571 2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
[RT #18697]
2008-10-02 20:35:39 +00:00
Tatuya JINMEI 神明達哉
2be6798f93 2457. [tuning] max-cache-size is reverted to 0, the previous
default.  It should be safe because expired cache
			entries are also purged.
2008-09-27 23:35:31 +00:00
Mark Andrews
6edc665a3d return rather than exit from main 2008-09-26 01:31:19 +00:00
Mark Andrews
dd14c953a8 unsigned constants 2008-09-26 01:27:08 +00:00
Automatic Updater
731cc132f2 regen 2008-09-25 04:45:05 +00:00
Automatic Updater
3398334b3a update copyright notice 2008-09-25 04:02:39 +00:00
Mark Andrews
21d493fc39 2454. [func] nsupdate: you can now set a default ttl. [RT #18317] 2008-09-25 02:20:27 +00:00
Mark Andrews
5737b74d34 2453. [bug] Remove NULL pointer dereference in dns_journal_print().
[RT #18316]

2452.   [func]          Improve bin/test/journalprint. [RT #18316]
2008-09-25 02:01:45 +00:00
Jeremy Reed
48a866144e 2450. [doc] Fix lwresd docbook problem for manual page.
[RT #18672]

Note: I am not committing to other branches since they are in
betas -- please let me know if this should be done.

TODO: lwresd.8 needs to be regenerated and committed.
2008-09-24 21:40:58 +00:00
Automatic Updater
6e2871232f update copyright notice 2008-09-24 03:16:58 +00:00
Mark Andrews
6098d364b6 2448. [func] Add NSEC3 support. [RT #15452] 2008-09-24 02:46:23 +00:00
Automatic Updater
824f38c031 regen 2008-09-24 01:12:39 +00:00
Tatuya JINMEI 神明達哉
eeaa2277ea 2446. [func] Add a new log message about build options on startup.
A new command-line option '-V' for named is also
			provided to show this information. [RT# 18645]
2008-09-23 17:25:47 +00:00
Automatic Updater
4a71c59d2b regen 2008-09-05 01:12:06 +00:00
Automatic Updater
8306e43fcb update copyright notice 2008-09-04 23:47:13 +00:00
Mark Andrews
ed1251fa35 include order 2008-09-04 07:45:15 +00:00
Mark Andrews
0eeaaaf0ae 2398. [bug] Improve file descriptor management. New,
temporary, named.conf option reserved-sockets,
                        default 512. [RT #18344]
2008-09-04 05:56:43 +00:00
Automatic Updater
5d4460c9b5 regen 2008-09-01 01:44:30 +00:00
Automatic Updater
6ebd91a0c7 update copyright notice 2008-08-29 23:47:22 +00:00
Mark Andrews
a8f6b2aa46 2429. [doc] nsupdate should be in section 1 of the man pages.
[RT #18283]
2008-08-29 03:16:14 +00:00
Mark Andrews
1e02091371 2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
was set. [RT #18528]
2008-08-26 06:09:18 +00:00
Automatic Updater
7278318053 regen 2008-08-22 01:12:14 +00:00
Automatic Updater
5422929ca0 update copyright notice 2008-08-21 23:47:18 +00:00
Automatic Updater
c4d99a6240 regen 2008-08-21 01:12:04 +00:00
Tatuya JINMEI 神明達哉
13d9b8ce94 2420. [func] Add new command line option '-S' for named to specify
the max number of sockets. [RT #18493]
			Use caution: this option may not work for some
			operating systems without rebuilding named.
2008-08-20 23:57:59 +00:00
Tatuya JINMEI 神明達哉
b049b8ce6a 2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
[RT #18430]
2008-08-15 19:36:49 +00:00
Mark Andrews
dc842cdcb9 2412. [bug] win32: address a resourse leak. [RT #18374] 2008-08-08 05:06:49 +00:00
Mark Andrews
04115a59c1 2410. [bug] Correctly delete m_versionInfo. [RT #18432] 2008-08-07 01:21:12 +00:00
Francis Dupont
cbb8a1b7cb Support Solaris 2.11 and over. [RT #18362] 2008-07-25 20:40:07 +00:00
Mark Andrews
240e53b132 2396. [bug] Don't set SO_REUSEADDR for randomized ports.
[RT #18336]
part 2
2008-07-23 23:27:54 +00:00
Automatic Updater
1d16cf8bb8 update copyright notice 2008-07-22 23:47:04 +00:00
Mark Andrews
9de0f9b0ae 2396. [bug] Don't set SO_REUSEADDR for randomized ports.
[RT #18336]
2008-07-22 03:43:04 +00:00
Francis Dupont
07d0f86c8a "files unlimited" in code [rt18331] 2008-07-20 09:29:52 +00:00
Evan Hunt
7ed4399c65 remove 'grep -q' from acl test script, some platforms don't
support it. [rt18253]
2008-07-19 00:02:14 +00:00
Mark Andrews
efe34b8ddb 2389 [bug] Move the working directory writable to after the
ns_os_changeuser() call. [RT #18326]
2008-07-18 01:26:20 +00:00
Tatuya JINMEI 神明達哉
829f1b9a32 regen 2008-07-17 23:48:16 +00:00
Tatuya JINMEI 神明達哉
7c60401dbd 2388. [bug] Avoid using tables for layout purposes in
statistics XSL [RT #18159].
2008-07-17 23:43:26 +00:00
Mark Andrews
862015b91f cleanup 2008-07-17 01:15:34 +00:00
Tatuya JINMEI 神明達哉
fa77ca1069 removed redundant parenthesis (I don't know why it was included in the
previous commit..)
2008-07-12 05:58:08 +00:00
Tatuya JINMEI 神明達哉
158f256a14 2386. [bug] Add warning about too small 'open files' limit
[RT #18269].
2008-07-11 23:05:46 +00:00
Automatic Updater
fb1f902017 regen 2008-06-23 23:30:21 +00:00
Tatuya JINMEI 神明達哉
015fea0a27 removed a redundant tab 2008-06-23 23:15:59 +00:00
Tatuya JINMEI 神明達哉
386d3a99c1 2375. [security] Fully randomize UDP query ports to improve
forgery resilience. [RT #17949, #18098]
2008-06-23 19:41:20 +00:00
Automatic Updater
0c6ada0a81 regen 2008-06-18 01:12:17 +00:00
Automatic Updater
030aac3dbc update copyright notice 2008-06-17 23:47:02 +00:00
Jeremy Reed
072440df4f Also include the nsupdate manual page in the ARM appendix.
Make sure the refentry id is hardcoded and not some generated
filename.

Also use application tag but probably not needed.

All the generation for this is correct in the PDF other than some
formatting for custom arguments. Will improve that later.

This is for my bugs ticket 18185.
2008-06-17 20:59:25 +00:00
Automatic Updater
177bcb466b update copyright notice 2008-06-02 23:47:04 +00:00
Mark Andrews
d87ad693fc 2377. [bug] Address race condition in dnssec-signzone. [RT #18142] 2008-06-02 00:17:39 +00:00
Evan Hunt
3634531310 Switch "dnssec-validation" default from no to yes. [rt18121] 2008-05-28 21:02:45 +00:00
Automatic Updater
11156f82ba update copyright notice 2008-05-21 23:47:01 +00:00
Evan Hunt
5a17fe2916 Default values of zone ACLs were re-parsed each time a new zone was
configured, causing an overconsumption of memory. [rt18092]
2008-05-21 23:17:21 +00:00
Automatic Updater
ebce5dc2fe update copyright notice 2008-05-19 23:47:03 +00:00
Mark Andrews
b3ac666ce5 silence linker warning: add ${LDFLAGS} 2008-05-19 00:36:14 +00:00
Automatic Updater
232d4387e2 regen 2008-05-15 01:12:21 +00:00
Automatic Updater
7b8b5e34b6 update copyright notice 2008-05-14 23:47:03 +00:00
Automatic Updater
8dc5d5e460 regen 2008-05-14 01:12:08 +00:00
Evan Hunt
aed0e61611 add +nsid option to dig man page. [rt18039] 2008-05-13 23:59:18 +00:00
Evan Hunt
0415ca35ad Linux: use libcap for capability management if possible. [RT# 18026] 2008-05-06 01:31:11 +00:00
Tatuya JINMEI 神明達哉
5c024f7877 cleanups for LRU-caching code [RT #18018] 2008-05-01 18:23:07 +00:00
Mark Andrews
2294423014 2364. [bug] named could trigger a assertion when serving a
malformed signed zone. [RT #17828]
2008-04-29 00:54:28 +00:00
Automatic Updater
1dd754dcdf update copyright notice 2008-04-24 23:46:59 +00:00
Evan Hunt
66e50468dd Change rrsetorder test two ways:
1) only test "fixed" ordering if it was compiled in
2) test whether "cyclic" ordering is cyclic, but don't
   rely on the initial state being predictable
[rt17977]
2008-04-24 21:50:27 +00:00
Tatuya JINMEI 神明達哉
bf64a0d5d9 2361. [bug] "recursion" statistics counter could be counted
multiple times for a single query.  [RT #17990]
2008-04-23 01:14:24 +00:00
Automatic Updater
0c6681ddd5 update copyright notice 2008-04-09 22:53:36 +00:00
Automatic Updater
caa3ad8d57 regen 2008-04-09 22:51:24 +00:00
Tatuya JINMEI 神明達哉
2fff8b8280 bind8-compat statistics updates 2008-04-09 22:48:17 +00:00
Automatic Updater
070c022f10 regen 2008-04-05 01:09:34 +00:00
Automatic Updater
f052a01ff2 update copyright notice 2008-04-04 23:47:01 +00:00
Mark Andrews
52cb865cf0 2358. [doc] Update host's default query description. [RT #17934] 2008-04-04 23:23:33 +00:00
Automatic Updater
57442fd5ef regen 2008-04-03 23:30:22 +00:00
Tatuya JINMEI 神明達哉
eeb8892daa Global memory context had the wrong name (RT #17932) 2008-04-03 23:14:52 +00:00
Mark Andrews
1dd74a0744 silence warnings 2008-04-03 10:52:46 +00:00
Automatic Updater
ddad355529 update copyright notice 2008-04-03 06:09:05 +00:00
Automatic Updater
c9ea41d79f regen 2008-04-03 06:06:27 +00:00
Mark Andrews
8907d8fa04 2355. [func] Extend the number statistics counters available.
[RT #17590]
2008-04-03 05:55:52 +00:00
Mark Andrews
db30f4bdcb 2353. [func] Add support for Name Server ID (RFC 5001).
'dig +nsid' requests NSID from server.
                        'request-nsid yes;' causes recursive server to send
                        NSID requests to upstream servers.  Server responds
                        to NSID requests with the string configured by
                        'server-id' option.  [RT #17091]
2008-04-03 02:01:08 +00:00
Automatic Updater
aeb7938001 regen 2008-04-03 01:10:00 +00:00
Automatic Updater
a687db7ce8 update copyright notice 2008-04-02 23:46:58 +00:00
Automatic Updater
037b8b129d regen 2008-04-02 23:30:20 +00:00
Mark Andrews
6716d12cf8 add dnssec-keyfromlabel 2008-04-02 06:13:03 +00:00
Mark Andrews
420ed91d3e 2351. [bug] convertxsl.pl generated very long lines. [RT #17906] 2008-04-02 03:35:13 +00:00
Mark Andrews
3f42cf2f3e 2349. [func] Provide incremental re-signing support for secure
dynamic zones. [RT #1091]

back out incorrect branch rt1091 and apply correct branch rt1091a.
2008-04-02 02:37:42 +00:00
Mark Andrews
60318da786 don't ignore bind9.xsl.h 2008-04-02 02:35:06 +00:00
Automatic Updater
e672951ed2 update copyright notice 2008-04-01 23:47:10 +00:00
Mark Andrews
a76b380643 2349. [func] Provide incremental re-signing support for secure
dynamic zones. [RT #1091]
2008-04-01 01:37:25 +00:00
Automatic Updater
28b3569d62 regen 2008-04-01 01:11:50 +00:00
Automatic Updater
db0008c448 update copyright notice 2008-03-31 23:47:11 +00:00
Francis Dupont
90f35c2f2a regen 2008-03-31 15:05:25 +00:00
Francis Dupont
2a31bd5310 add EVP and PKCS11 2008-03-31 14:42:51 +00:00
Mark Andrews
3e072511de 2346. [func] Memory statistics now cover all active memory contexts
in increased detail. [RT #17580]
2008-03-31 05:09:52 +00:00
Mark Andrews
cffe96e267 2346. [func] Memory statistics now cover all active memory contexts
in increased detail. [RT #17580]
2008-03-31 05:00:30 +00:00
Automatic Updater
0a7e6db2db update copyright notice 2008-03-20 23:47:00 +00:00
Mark Andrews
ea8564f68a 2342. [func] Use getifaddrs() if available under Linux. [RT #17224] 2008-03-20 04:51:00 +00:00
Automatic Updater
f9760f7b6a update copyright notice 2008-03-03 23:47:02 +00:00
Mark Andrews
d9936b218d 2340. [port] openbsd: interface configuration. [RT #17700] 2008-03-03 01:20:03 +00:00
Mark Andrews
ce9c1558a6 2336. [func] If "named -6" is specified then listen on all IPv6
interfaces if there are not listen-on-v6 clauses in
                        named.conf.  [RT #17581]
2008-02-18 04:43:47 +00:00
Mark Andrews
c09c2bf800 2331. [bug] Failure to regenerate any signatures was not being reported
or past back to the UPDATE client. [RT #17570]
2008-02-07 03:12:15 +00:00
Automatic Updater
6b3c17b9b0 update copyright notice 2008-02-05 23:47:08 +00:00
Mark Andrews
4a5b30c24c 2329. [bug] Clearer help text for dig's '-x' and '-i' options. 2008-02-05 06:57:52 +00:00
Mark Andrews
dc2a0aa7aa 2325. [port] Linux: use capset() function if available. [RT #17557] 2008-01-30 04:50:00 +00:00
Tatuya JINMEI 神明達哉
1c3ed2a83d 2320. [func] Make statistics couters thread-safe for platforms
that support certain atomic operations. [RT #17466]
2008-01-24 02:00:44 +00:00
Mark Andrews
b356686ecb Fixes needed to compile on windows 2008-01-23 03:10:48 +00:00
Automatic Updater
f731b5d665 update copyright notice 2008-01-22 23:28:04 +00:00
Mark Andrews
4462e59079 2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518] 2008-01-22 22:50:10 +00:00
Mark Andrews
cef715b655 2314. [bug] Uninitialized memory use on error path in
bin/named/lwdnoop.c.  [RT #17476]
2008-01-22 01:51:16 +00:00
Tatuya JINMEI 神明達哉
95c5f1d17b noticed the default max-cache-size [RT #17515] 2008-01-22 00:29:03 +00:00
Evan Hunt
262c39b236 IPv6 addresses could match IPv4 ACL entries and vice versa. [RT #17462] 2008-01-21 20:38:54 +00:00
Automatic Updater
2f012d936b update copyright notice 2008-01-18 23:46:58 +00:00
Automatic Updater
2f99b54e8e update copyright notice 2008-01-17 23:47:00 +00:00
Mark Andrews
827572e191 2310 [bug] Flush stdout before emitting debug/fatal messages.
[RT #17501]
2008-01-17 21:46:33 +00:00
Tatuya JINMEI 神明達哉
b03bc0ce07 missing validity check for the reload case 2008-01-17 03:01:25 +00:00
Mark Andrews
546c2bf791 2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
[RT #17495]
2008-01-17 02:57:16 +00:00
Tatuya JINMEI 神明達哉
bfcc5ae79a 2294. [func] Allow the experimental statistics channels to have
multiple connections and ACL.
			Note: the stats-server and stats-server-v6 options
			available in the previous beta releases are replaced
			with the generic statistics-channels statment.
2008-01-17 00:15:14 +00:00
Automatic Updater
9d5ed744c4 update copyright notice 2008-01-14 23:46:56 +00:00
Mark Andrews
f1263d2aa4 2304. [bug] Check returns from all dns_rdata_tostruct() calls.
[RT #17460]
2008-01-14 23:24:24 +00:00
Mark Andrews
b1d21f6c93 2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
[RT #17471]
2008-01-14 12:55:40 +00:00
Mark Andrews
034f775ae1 2301. [bug] Remove resource leak and fix error messages in
bin/tests/system/lwresd/lwtest.c. [RT #17474]
2008-01-14 12:02:11 +00:00
Mark Andrews
80f20cb452 2300. [bug] Fixed failure to close open file in
bin/tests/names/t_names.c. [RT #17473]
2008-01-14 11:47:48 +00:00
Automatic Updater
c5d57a13ac update copyright notice 2008-01-12 23:47:13 +00:00
Mark Andrews
93ee06cbe3 2299. [bug] Remove unnecessary NULL check in
bin/nsupdate/nsupdate.c. [RT #17475]
2008-01-12 22:12:55 +00:00
Mark Andrews
494143860b 2298. [bug] isc_mutex_lock() failure not caught in
bin/tests/timers/t_timers.c. [RT #17468]
2008-01-12 21:58:25 +00:00
Mark Andrews
400a1b6604 2297. [bug] isc_entropy_createfilesource() failure not caught in
bin/tests/dst/t_dst.c. [RT #17467]
2008-01-12 21:48:37 +00:00
Automatic Updater
d36adf470f update copyright notice 2008-01-11 23:46:56 +00:00
Mark Andrews
48fa594028 2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
[RT #17459]
2008-01-11 03:01:28 +00:00
Automatic Updater
6f2e211d39 update copyright notice 2008-01-10 23:47:01 +00:00
Mark Andrews
1c9f629c18 2293. [func] Add ACL regression test. [RT #17375] 2008-01-10 01:10:01 +00:00
Automatic Updater
72d6be2c11 update copyright notice 2008-01-09 23:47:00 +00:00
Mark Andrews
f61a7c87bf 2292. [bug] Log if the working directory is not writable.
[RT #17312]

2291.   [bug]           PR_SET_DUMPABLE may be set too late.  Also report
                        failure to set PR_SET_DUMPABLE. [RT #17312]
2008-01-09 04:48:33 +00:00
Mark Andrews
2678fccde3 2290. [bug] Let AD in the query signal that the client wants AD
set in the response. [RT #17301]
2008-01-09 04:09:12 +00:00
Mark Andrews
562460463b 2289. [func] named-checkzone now reports the out-of-zone CNAME
found. [RT #17309]
2008-01-09 02:50:43 +00:00
Mark Andrews
577272cf79 2288. [port] win32: mark service as running when we have finished
loading.  [RT #17441]
2008-01-09 02:35:10 +00:00
Mark Andrews
297be37080 regen 2008-01-03 01:12:37 +00:00
Automatic Updater
1da14e066c update copyright notice 2008-01-02 23:47:02 +00:00
Mark Andrews
f4429c1c31 regen 2008-01-02 14:01:25 +00:00
Mark Andrews
92f60809e8 2286. [func] Allow a TCP connection to be used as a weak
authentication method for reverse zones.
                        New update-policy methods tcp-self and 6to4-self.
                        [RT #17378]
2008-01-02 05:13:42 +00:00
Mark Andrews
f5d0f49584 2285. [func] Test framework for client memory context management.
[RT #17377]
2008-01-02 05:03:07 +00:00
Mark Andrews
dc0ecf08db 2284. [bug] Memory leak in UPDATE prerequisite processing.
[RT #17377]
2008-01-02 04:26:26 +00:00
Mark Andrews
604419a812 2282. [bug] Acl code fixups. [RT #17346] 2007-12-20 01:48:29 +00:00
Mark Andrews
1d216bfaa7 regen 2007-12-14 22:37:22 +00:00
Mark Andrews
b39ee56af9 reference rndc-confgen 2007-12-14 20:39:14 +00:00
Mark Andrews
8c850a29ed 2280. [func] Allow the experimental http server to be reached
over IPv6 as well as IPv4. [RT #17332]
2007-12-14 04:01:20 +00:00
Mark Andrews
9e4b25fc3e 2275. [func] Add support to dig to perform IXFR queries over UDP.
[RT #17235]
2007-12-03 00:21:48 +00:00
Mark Andrews
c4dc5966e0 2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
list.
2007-12-02 18:56:03 +00:00
Mark Andrews
d2e440ca30 2266. [bug] client.c:get_clientmctx() returned the same mctx
once the pool of mctx's was filled. [RT #17218]
2007-11-26 04:47:17 +00:00
Mark Andrews
544d0efa38 2264. [bug] Server prefix length was being ignored. [RT #17308] 2007-11-26 02:43:53 +00:00
Mark Andrews
1f2635d3f7 2263. [bug] "named-checkconf -z" failed to set default value
for "check-integrity".  [RT #17306]
2007-11-26 02:12:45 +00:00
Mark Andrews
2cc262c093 2257. [bug] win32: Use the full path to vcredist_x86.exe when
calling it. [RT #17222]
2007-10-31 01:34:19 +00:00
Mark Andrews
76a378884f 2256. [bug] win32: Correctly register the installation location of
bindevt.dll. [RT #17159]
2007-10-31 00:05:36 +00:00
Mark Andrews
8b6418238d remove ns2/dlv.db when cleaning 2007-10-30 23:56:09 +00:00
Mark Andrews
276e28f813 regen 2007-10-21 22:15:34 +00:00
Michael Graff
b239c8294a commit lruttl to the mainline. A tag was set called skan_lruttl-mainline-base, and I will tag this as skan_lruttl-mainline-merge after this commit 2007-10-19 17:15:53 +00:00
Evan Hunt
873a2046fb Fix error in sortlist code -- was using the wrong nest level, which
caused the response-order ACL to be merged into a single iptable and
lose its ordering. [rt17216]
2007-10-18 01:37:49 +00:00
Mark Andrews
a1e2170ad5 2250. [func] New flag 'memstatistics' to state whether the
memory statistics file should be written or not.
                        Additionally named's -m option will cause the
                        statistics file to be written. [RT #17113]
2007-09-26 03:22:45 +00:00
Evan Hunt
05d2776f6f Only set Authentic Data bit if client wants DNSSEC, per RFC 3655. [RT #17175] 2007-09-26 03:04:45 +00:00
Mark Andrews
8c76634f88 2246. [bug] Make the startup of test servers (ans.pl) more
robust. [RT #17147]
2007-09-24 04:13:25 +00:00
Mark Andrews
7526edc767 regen 2007-09-18 02:40:48 +00:00
Mark Andrews
ca84283333 2244. [func] Allow the check of nameserver names against the
SOA MNAME field to be disabled by specifying
                        'notify-to-soa yes;'.  [RT #17073]
2007-09-18 00:22:31 +00:00
Mark Andrews
f02216f5b3 regen 2007-09-16 08:02:41 +00:00
Mark Andrews
edafc0c3db call setup_entropy with file NULL rathet than isc_commandline_argument 2007-09-16 02:37:12 +00:00
Mark Andrews
9a41f786b1 2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
library could require a source of random data.
                        [RT #17127]
2007-09-15 14:46:03 +00:00
Automatic Updater
f110daaa3d regen 2007-09-15 01:33:09 +00:00
Automatic Updater
41ea0390ba regen 2007-09-15 01:31:54 +00:00
Automatic Updater
dedf4ed091 update copyright notice 2007-09-14 23:46:45 +00:00
Automatic Updater
adc6ae37d8 regen 2007-09-14 23:30:20 +00:00
Mark Andrews
bf98702c19 2241. [func] nsupdate: add a interative 'help' command. [RT #17099]
2240.   [bug]           Cleanup nsupdates GSS-TSIG support.  Convert
                        a number of INSIST()s into plain fatal() errors
                        which report the triggering result code.
                        The 'key' command wasn't disabling GSS-TSIG.
                        [RT #17099]
2007-09-14 06:43:12 +00:00
Mark Andrews
65391557db 2239. [func] Ship a prebuilt bin/named/bind9.xsl.h. [RT #17114] 2007-09-14 06:15:07 +00:00
Mark Andrews
12e0477d4e Part 2 of:
2233.   [func]          Add support for O(1) ACL processing, based on
                        radix tree code originally written by kevin
                        brintnall. [RT #16288]
2007-09-14 01:46:06 +00:00
Evan Hunt
d468b1b7b2 Fix compiler warnings on SCO OSr5 2007-09-13 04:45:18 +00:00
Evan Hunt
c7e266b7e5 Add support for O(1) ACL processing, based on radix tree code originally
written by kevin brintnall. [RT #16288]
2007-09-12 01:09:08 +00:00
Automatic Updater
271c4c7ffa update copyright notice 2007-08-28 07:20:43 +00:00
Mark Andrews
d91df50b67 2219. [bug] Apply zone consistancy checks to additions, not
removals, when updating. [RT #17097]
2007-08-28 00:05:06 +00:00
Mark Andrews
c5adbd722d 2217. [func] Adjust update log levels. [RT #17092] 2007-08-27 04:31:42 +00:00
Mark Andrews
c0720b90ed 2213. [bug] SIG0 diagnostic failure messages were looking at the
wrong status code. [RT #17101]
2007-08-22 00:42:42 +00:00
Mark Andrews
763a2f8ca5 regen 2007-08-19 23:26:19 +00:00
Mark Andrews
982b1c2bf5 add masterfile-format 2007-08-17 06:10:44 +00:00
Mark Andrews
2f5baf12a4 2213. [func] 'host -m'now causes memory statistics and active
memory to be printed at exit. [RT 17028]
2007-08-15 04:40:30 +00:00
Mark Andrews
6e5e27c38d 2211. [func] Update "dynamic update temporarily disabled" message.
[RT #17065]
2007-08-14 00:36:43 +00:00
Mark Andrews
f408773d47 2207. [port] Some implementations of getaddrinfo() fail to set
ai_canonname correctly. [RT #17061]
2007-08-06 01:06:49 +00:00
Mark Andrews
69826a6a2f 2206. [security] "allow-query-cache" and "allow-recursion" now
cross inherit from each other.

                        If allow-query-cache is not set in named.conf then
                        allow-recursion is used if set, otherwise allow-query
                        is used if set, otherwise the default (localnets;
                        localhost;) is used.

                        If allow-recursion is not set in named.conf then
                        allow-query-cache is used if set, otherwise allow-query
                        is used if set, otherwise the default (localnets;
                        localhost;) is used.

                        [RT #16987]
2007-07-09 02:14:39 +00:00
Mark Andrews
fd23bc509d 2204 [bug] "rndc flushanme name unknown-view" caused named
to crash. [RT #16984]
2007-07-02 01:00:35 +00:00
Mark Andrews
39836315b6 add missing 1310 to "#elif _MSC_VER > 1200 && _MSC_VER < 1310" 2007-06-27 01:11:16 +00:00
Mark Andrews
07072c9456 2203. [security] Query id generation was cryptographically weak.
[RT # 16915]
2007-06-26 02:52:15 +00:00
Mark Andrews
afd002e89a 2202. [security] The default acls for allow-query-cache and
allow-recursion were not being applied. [RT #16960]
2007-06-25 02:37:25 +00:00
Mark Andrews
1224c3b69b regen 2007-06-20 02:27:33 +00:00
Automatic Updater
70e5a7403f update copyright notice 2007-06-19 23:47:24 +00:00
Mark Andrews
6043e41fcf documentation updates from Jeremy 2007-06-19 06:58:04 +00:00
Mark Andrews
ba5d2a97ee 2201. [bug] The build failed in a seperate object directory.
[RT #16943]
2007-06-19 06:49:18 +00:00
Automatic Updater
ec5347e2c7 update copyright notice 2007-06-18 23:47:57 +00:00
Mark Andrews
2f8d63983c regen 2007-06-18 23:37:20 +00:00
Mark Andrews
bf45f72ed3 2195. [func] dnssec-keygen now defaults to nametype "ZONE"
when generating DNSKEYs. [RT #16954]
2007-06-18 01:03:13 +00:00
Mark Andrews
7643153c58 spelling s/is/in/ 2007-06-17 23:52:28 +00:00
Mark Andrews
c247e3f281 regen 2007-05-31 23:28:55 +00:00
Mark Andrews
122c58bd11 update from jeremy 2007-05-31 22:28:35 +00:00
Mark Andrews
6dd9692f45 2193. [port] win32: BINDInstall.exe is now linked statically.
[RT #16906]
2007-05-24 01:04:51 +00:00
Mark Andrews
03e2010cbb win32 2007-05-21 05:52:21 +00:00
Mark Andrews
6d446ab8ff win32 2007-05-21 05:48:43 +00:00
Mark Andrews
5e4bd2736b win32 2007-05-21 05:23:50 +00:00
Mark Andrews
f7b41fd929 regen 2007-05-21 04:09:03 +00:00
Automatic Updater
feac7b8b38 update copyright notice 2007-05-21 03:46:42 +00:00
Mark Andrews
7c5dfcc60a 2192. [port] win32: use vcredist_x86.exe to install Visual
Studio's redistributable dlls if building with
                        Visual Stdio 2005 or later.
2007-05-21 03:42:00 +00:00
Mark Andrews
fc8197c3ce rndc now has -h for help. 2007-05-21 02:58:10 +00:00
Mark Andrews
0f8c9b5eed 2191. [func] named-checkzone now allows dumping to stdout (-).
named-checkconf now has -h for help.
                        named-checkzone now has -h for help.
                        Better handling of '-?' for usage summaries.
                        [RT #16707]
2007-05-21 02:47:25 +00:00
Automatic Updater
1415fce15f update copyright notice 2007-05-18 23:46:58 +00:00
Mark Andrews
f3139b9d76 2187. [bug] query_addds(), query_addwildcardproof() and
query_addnxrrsetnsec() should take a version
                        arguement. [RT #16368]
2007-05-18 06:53:01 +00:00
Mark Andrews
eea8cd8d1a 2184. [bug] bind9.xsl.h didn't build out of the source tree.
[RT #16830]
2007-05-18 06:12:51 +00:00
Mark Andrews
9860862ced 2183. [bug] dnssec-signzone didn't handle offline private keys
well.  [RT #16832]
2007-05-18 05:50:35 +00:00
Mark Andrews
a1b05dea35 regen 2007-05-16 06:12:02 +00:00
Mark Andrews
0f78f78064 minor changes from Jeremy [RT #16869] 2007-05-16 01:42:26 +00:00
Automatic Updater
db529702d0 update copyright notice 2007-05-15 23:46:57 +00:00
Mark Andrews
cb8c4d7a32 s/ENDS/EDNS/ 2007-05-15 21:54:08 +00:00
Mark Andrews
fe3220466e 2180. [cleanup] Remove bit test from 'compress_test' as they
are no longer needed. [RT #16497]
2007-05-15 05:39:59 +00:00
Mark Andrews
40aadb6a14 2179. [func] 'rndc command zone' will now find 'zone' if it is
unique to all the views. [RT #16821]
2007-05-15 02:38:34 +00:00
Mark Andrews
65b26a4dc8 2178. [bug] 'rndc reload' of a slave or stub zone resulted in
a reference leak. [RT #16867]
2007-05-15 02:28:27 +00:00
Mark Andrews
f6da30bb54 regen 2007-05-09 13:35:57 +00:00
Mark Andrews
8b9fc7617b minor changes from Jeremy [RT #16863] 2007-05-09 06:18:45 +00:00
Mark Andrews
d71e2e0c61 regen 2007-05-09 03:33:51 +00:00
Mark Andrews
561a29af8c minor man page updated from Jeremy [RT #16859] 2007-05-09 01:32:09 +00:00
Automatic Updater
3281665bd3 update copyright notice 2007-04-30 23:46:55 +00:00
Mark Andrews
e97a617861 checkpoint 2007-04-30 20:19:06 +00:00
Mark Andrews
cd1e58c339 2172. [bug] query_addsoa() was being called with a non zone db.
[RT #16834]
2007-04-30 01:02:53 +00:00
Automatic Updater
db100c22d6 update copyright notice 2007-04-26 23:46:52 +00:00
Mark Andrews
429e23d2f5 2170. [func] Add acache processing to test suite. [RT #16711] 2007-04-26 04:06:50 +00:00
Automatic Updater
c6a98f2a4b update copyright notice 2007-04-24 23:46:56 +00:00
Mark Andrews
aaa42824d2 2169. [bug] nslookup: when reporting NXDOMAIN report the given
name and not the last name searched for. [RT #16763]
2007-04-24 07:20:45 +00:00
Mark Andrews
43da756591 2168. [bug] nsupdate: in non-interactive mode treat syntax errors
as fatal errors. [RT #16785]
2007-04-24 07:02:31 +00:00
Mark Andrews
c1297b6025 2167. [bug] When re-using a automatic zone named failed to
attach it to the new view. [RT #16786]
2007-04-24 06:55:32 +00:00
Mark Andrews
a9c790c7dd 2166. [bug] When running in batch mode, dig could misinterpret
a server address as a name to be looked up, causing
                        unexpected output. [RT #16743]
(continued)
2007-04-03 23:06:39 +00:00
Mark Andrews
0a19afabe8 s/view->name/viewname/ 2007-04-02 23:46:47 +00:00
Mark Andrews
261a8854cc 2161. [bug] Fix which log messages are emitted for 'rndc flush'.
[RT #16698]
2007-04-02 23:17:52 +00:00
Automatic Updater
184d77489a update copyright notice 2007-03-30 23:46:45 +00:00
Evan Hunt
99cce386a4 When running in batch mode, dig could misinterpret a server address as
a name to be looked up, causing unexpected output. [RT #16743]
2007-03-30 03:46:13 +00:00
Automatic Updater
858ad8db23 update copyright notice 2007-03-29 23:47:04 +00:00
Mark Andrews
68b30890eb regen 2007-03-29 15:19:20 +00:00
Mark Andrews
819b98479e 2165. [func] Allow the destination address of a query to determine
if we will answer the query or recurse.
                        allow-query-on, allow-recursion-on and
                        allow-query-cache-on. [RT #16291]
2007-03-29 06:36:31 +00:00
Mark Andrews
113e0b7819 2164. [bug] The code to determine how named-checkzone /
named-compilezone was called failed under windows.
                        [RT #16764]
2007-03-29 04:39:07 +00:00
Mark Andrews
8cb6fd7cf8 build bind9.xsl.h for make depend 2007-03-28 23:24:00 +00:00
Mark Andrews
b5f690e161 2161. [bug] Fix which log messages are emitted for 'rndc flush'.
[RT #16698]
2007-03-13 04:30:17 +00:00
Automatic Updater
1b5a345334 update copyright notice 2007-03-06 02:12:39 +00:00
Mark Andrews
7a3c2d189e 2158. [bug] ns_client_isself() failed to initialise key
leading to a REQUIRE failure. [RT #16688]
2007-03-06 01:14:27 +00:00
Mark Andrews
a56f5ada43 2157. [func] dns_db_transfernode() created. [RT #16685]
2156.   [bug]           Fix node reference leaks in lookup.c:lookup_find(),
                        resolver.c:validated() and resolver.c:cache_name().
                        Fix a memory leak in rbtdb.c:free_noqname().
                        Make lookup.c:lookup_find() robust against
                        event leaks. [RT #16685]
2007-03-06 00:38:58 +00:00
Automatic Updater
45fd3ed42b update copyright notice 2007-03-01 23:46:42 +00:00
Mark Andrews
8c731c1219 2153. [bug] nsupdate could leak memory. [RT #16691] 2007-02-28 23:57:39 +00:00
Automatic Updater
3ee5ba2a22 update copyright notice 2007-02-27 23:46:48 +00:00
Mark Andrews
a630d60b8b 2152. [cleanup] Use sizeof(buf) instead of fixed number in
dighost.c:get_trusted_key(). [RT #16678]
2007-02-27 00:58:08 +00:00
Mark Andrews
b53871d859 2151. [bug] Missing newline in usage message for journalprint.
[RT #16679]
2007-02-27 00:39:37 +00:00
Automatic Updater
77ab862dca update copyright notice 2007-02-26 23:46:54 +00:00
Mark Andrews
bde20a0436 2148. [func] Add positive logging for rndc commands. [RT #14623] 2007-02-26 02:19:45 +00:00
Mark Andrews
4098271a81 2143. [bug] We failed to restart the IPv6 client when the
kernel failed to return the destination the
                        packet was sent to. [RT #16613]
2007-02-26 00:57:03 +00:00
Mark Andrews
5dcc67a0ff 2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
equivalent of LDH checks).  [RT #16609]
2007-02-26 00:27:09 +00:00
Mark Andrews
a9fe4f89d2 update copyright notice 2007-02-14 23:45:44 +00:00
Mark Andrews
1e70c9a366 2136. [bug] nslookup/host looped if there was no search list
and the host didn't exist. [RT #16657]
2007-02-14 01:19:52 +00:00
Mark Andrews
cdce8b88c6 update copyright notice 2007-02-14 00:27:27 +00:00
Mark Andrews
96ea716328 2134. [func] Additional statistics support. [RT #16666] 2007-02-13 02:49:08 +00:00
Mark Andrews
8943ff626f 2130. [func] Log if CD or DO were set. [RT #16640] 2007-02-06 04:00:21 +00:00
Mark Andrews
0b174d1243 update copyright notice 2007-02-06 00:01:23 +00:00
Mark Andrews
89bc48260b regen 2007-02-02 04:33:37 +00:00
Mark Andrews
281bab0f36 2129. [func] Provide a pool of UDP sockets for queries to be
made over. See use-queryport-pool, queryport-pool-ports
                        and queryport-pool-updateinterval.  [RT #16415]
2007-02-02 02:18:06 +00:00
Mark Andrews
b0e8629055 regen 2007-01-30 00:25:00 +00:00
Mark Andrews
c1a883f2e0 update copyright notice 2007-01-29 23:57:22 +00:00
Rob Austein
5cd4555ad4 2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635] 2007-01-29 22:16:02 +00:00
Mark Andrews
4abdfc917e regen 2007-01-26 23:29:04 +00:00
Mark Andrews
0c108de382 update copyright notice 2007-01-19 00:55:50 +00:00
Mark Andrews
19aca386f1 "make depend" didn't work 2007-01-17 23:43:24 +00:00
Mark Andrews
22390ee0d4 move copyright 2007-01-15 01:29:43 +00:00
Mark Andrews
00499ae65e update copyright notice 2007-01-12 00:14:51 +00:00
Michael Graff
de4f679a17 revert changes accidently committed to mainline 2007-01-10 18:56:20 +00:00
Michael Graff
1a79585fe2 display more info -- list of tasks, list of sockets 2007-01-10 15:18:24 +00:00
Mark Andrews
f8574167b2 update copyright notice 2007-01-09 23:49:38 +00:00
Mark Andrews
92f56936fb update copyright notice 2007-01-09 03:11:16 +00:00
Mark Andrews
7acb804e7f update copyright notice 2007-01-09 02:44:24 +00:00
Mark Andrews
f36c85c3ce update copyright notice 2007-01-08 02:45:04 +00:00
Mark Andrews
e7d32e57a5 2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
was defined. [RT #16574]
2007-01-08 00:54:15 +00:00
Mark Andrews
28b14c4e69 update copyright notice 2007-01-05 05:56:05 +00:00
Mark Andrews
7e09c16e0e move copyright 2007-01-05 04:45:05 +00:00
Mark Andrews
edf8e79280 update copyright notice 2007-01-04 00:01:13 +00:00
Michael Graff
68e2686f83 hook in socket and task info 2007-01-03 21:28:24 +00:00
Michael Graff
b015e6b3e1 make changes on HEAD, not on a branch. 2006-12-22 03:07:57 +00:00
Mark Andrews
148f27aee6 update copyright notice 2006-12-22 01:59:44 +00:00
Mark Andrews
29747dfe5e 2123. [func] Use Doxygen to generate internal documention.
[RT #11398]
2006-12-22 01:46:19 +00:00
Mark Andrews
9ea0cc836d fix server.o dependancy 2006-12-21 09:37:07 +00:00
Mark Andrews
8ede3bb42e static char msg[] 2006-12-21 06:11:43 +00:00
Mark Andrews
186e7f37c9 2122. [func] Experimental http server and statistics support
for named via xml.
2006-12-21 06:03:37 +00:00
Mark Andrews
b3cbb2f1ad regen 2006-12-19 01:35:50 +00:00
Mark Andrews
1f21a0f32f s/used/use/ 2006-12-18 23:38:05 +00:00
Mark Andrews
065c66d9bf add paragraph on CH/IN name space overlap 2006-12-18 23:26:10 +00:00
Mark Andrews
69f175fc57 regen 2006-12-17 04:54:22 +00:00
Rob Austein
8d709e3ee4 2120. [doc] Fix markup on nsupdate man page. [RT #16556] 2006-12-16 01:14:36 +00:00
Mark Andrews
e21a2904f0 regen 2006-12-12 01:45:21 +00:00
Mark Andrews
1814d2108d update copyright notice 2006-12-07 23:57:59 +00:00
Mark Andrews
d85db585c6 remove DNS_R_TOOMANYHOPS test 2006-12-07 13:23:14 +00:00
Mark Andrews
824cb65675 2114. [bug] dig/host/nslookup: searches for names with multiple
labels were failing. RT #16447]
2006-12-07 05:52:16 +00:00
Mark Andrews
bca16e31b4 2113. [bug] nsupdate: if a zone is specified it should be used
for server discover. [RT# 16455]
2006-12-07 05:39:41 +00:00
Mark Andrews
58ea8fb1df 2112. [security] Warn if weak RSA exponent is used. [RT #16460] 2006-12-07 05:05:10 +00:00
Mark Andrews
cfcb0881d1 2111. [bug] Fix a number of errors reported by Coverity.
[RT #16507]
2006-12-07 04:46:27 +00:00
Mark Andrews
1a8efeab76 2110. [bug] "minimal-response yes;" interacted badly with BIND 8
priming queries. [RT #16491]
2006-12-07 04:38:56 +00:00
Mark Andrews
92d2316593 2107. [bug] dighost.c: more cleanup of buffers. [RT #16499] 2006-12-07 01:21:04 +00:00
Mark Andrews
a8df4b078b specify libtool mode 2006-12-05 23:12:50 +00:00
Mark Andrews
377231eb95 update copyright notice 2006-12-05 00:13:48 +00:00
Mark Andrews
81a8c6c938 @DST_GSSAPI_INC@ should not be on a line by itself and it breaks some makes 2006-12-04 22:09:50 +00:00
Mark Andrews
08527676bf t_lib not needed 2006-12-04 05:54:16 +00:00
Mark Andrews
a7449c24fb handle eof 2006-12-04 05:53:49 +00:00
Mark Andrews
ea661eaf4e gsstest doesn't need t_libMakefile.in 2006-12-04 05:39:39 +00:00
Mark Andrews
1cbb3a4df3 2106. [func] 'rndc status' now reports named's version. [RT #16426] 2006-12-04 02:38:22 +00:00
Mark Andrews
289ae548d5 2105. [func] GSS-TSIG support (RFC 3645). 2006-12-04 01:54:53 +00:00
Michael Graff
20f1bc4434 somehow, new files got committed to mainline, and changes to my branch. Remove them from the mainline for now. 2006-11-13 20:38:06 +00:00
Michael Graff
ea964e3e20 update to mainline's bind9, and make a new branch for it. 2006-11-13 20:07:57 +00:00
Mark Andrews
4ccea866e6 2104. [port] Fix Solaris SMF error message. 2006-11-10 18:44:46 +00:00
Mark Andrews
ceea2a72d4 checkpoint 2006-11-07 22:34:06 +00:00
Mark Andrews
d9fd153d41 2099. [port] win32: more manifiest issues. 2006-11-07 21:49:55 +00:00
Mark Andrews
5de1ad6373 2099. [port] win32: more manifiest issues. 2006-11-03 23:40:47 +00:00
Mark Andrews
9e2789fd70 2093. [bug] named-checkzone -s was broken.
format was missing : for s
2006-10-05 05:22:34 +00:00
Mark Andrews
5bbaa0bf5b win32 2006-10-04 03:50:47 +00:00
Mark Andrews
df13009162 win32 2006-10-04 03:27:03 +00:00
Mark Andrews
65d86196e5 win32 2006-10-04 03:10:00 +00:00
Mark Andrews
9f53887aef win32 2006-10-04 03:04:29 +00:00
Mark Andrews
543d70c9df win32 2006-10-04 02:51:48 +00:00
Mark Andrews
3dfec9a8f2 win32 2006-10-04 02:44:37 +00:00
Mark Andrews
255e9bff6b win32 2006-10-04 02:08:33 +00:00
Mark Andrews
bc8711b148 win32 2006-10-02 07:03:05 +00:00
Mark Andrews
8af4bf165e 2091. [port] dighost.c: race condition on cleanup. [RT #16417] 2006-10-02 03:08:34 +00:00
Mark Andrews
5cf0c55948 2090. [port] win32: Visual C++ 2005 command line manifest support.
[RT #16417]
2006-10-02 02:27:41 +00:00
Mark Andrews
bf056b7184 regen 2006-09-29 08:34:55 +00:00
Mark Andrews
bfedbc0279 check-name -> check-names 2006-09-29 06:34:03 +00:00
Mark Andrews
7d5c3810ce Silence warnings 2006-09-25 07:31:27 +00:00
Mark Andrews
0ee15c9c98 update for VC 2005 2006-09-25 04:33:41 +00:00
Mark Andrews
22c71c7b86 regen 2006-09-13 02:57:21 +00:00
Mark Andrews
7c693bfdbe 2082. [doc] Document 'cache-file' as a test only option. 2006-09-13 00:18:27 +00:00
Mark Andrews
f34249bb28 2066. [security] Handle SIG queries gracefully. [RT #16300] 2006-08-31 03:56:36 +00:00
Mark Andrews
285254345c regen 2006-08-31 00:19:52 +00:00
Mark Andrews
2dafa707cc 2078. [bug] dnssec-checkzone output style "default" was badly
named.  It is now called "relative". [RT #16326]

2077.   [bug]           'dnssec-signzone -O raw' wasn't outputing the
                        complete signed zone. [RT #16326]
2006-08-30 22:57:16 +00:00
Mark Andrews
896e6a0e44 update copyright notice 2006-08-25 05:25:52 +00:00
Mark Andrews
c781727055 2076. [bug] Several files were missing #include <config.h>
causing build failures on OSF. [RT #16341]
2006-08-24 00:17:54 +00:00
Mark Andrews
458bcfaee0 update copyright notice 2006-08-16 23:54:35 +00:00
Mark Andrews
02ced31b6a 2072. [bug] We were not generating valid HMAC SHA digests.
[RT #16320]
2006-08-16 03:15:09 +00:00
Mark Andrews
f07fe5a1ac 2067. [bug] 'rndc' could close the socket too early triggering
a INSIST under Windows. [RT #16317]
2006-08-04 02:55:37 +00:00
Mark Andrews
431fd1b0b5 2061. [bug] 'dig +nssearch' was reusing a buffer before it had
been returned by the socket code. [RT #16307]
2006-08-01 00:49:02 +00:00
Mark Andrews
39ef7dddef 2060. [bug] Enabling DLZ support could leave views partially
configured. [RT #16295]
2006-07-24 05:51:22 +00:00
Mark Andrews
6953fd6e20 2057. [bug] Make setting "ra" dependent on both allow-query-cache
and allow-recursion. [RT #16290]
2006-07-22 01:00:04 +00:00
Mark Andrews
2b67af24fa 2056. [bug] dig: ixfr= was not being treated case insensitively
at all times. [RT #15955]
2006-07-21 23:50:15 +00:00
Mark Andrews
f02b985650 2055. [bug] Missing goto after dropping multicast query.
[RT #15944]
2006-07-21 23:38:16 +00:00
Mark Andrews
719d9230e4 add libisccfg.lib 2006-07-21 07:43:11 +00:00
Mark Andrews
f3902e428c add lib/isccfg/include 2006-07-21 07:11:56 +00:00
Mark Andrews
7ad89b5ecd update copyright notice 2006-07-21 02:05:58 +00:00
Mark Andrews
be515937fe 2054. [port] freebsd: do not explicitly link against -lpthread.
[RT #16170]
2006-07-20 05:42:09 +00:00
Mark Andrews
bcdf37e0ff 2052. [bug] 'rndc' improve connect failed message to report
the failing address. [RT #15978]
2006-07-20 03:41:57 +00:00
Mark Andrews
cd7812e4b1 update copyright notice 2006-07-20 01:10:31 +00:00
Mark Andrews
8626c376a0 2047. [bug] Failed to initialise the interface flags to zero.
[RT #16245]
2006-07-19 00:08:20 +00:00
Mark Andrews
71c66a876e regen 2006-06-29 13:03:32 +00:00
Mark Andrews
ae34d05b20 update copyright notice 2006-06-09 23:50:55 +00:00
Mark Andrews
08eadd404a 2043. [port] nsupdate/nslookup: Force the flushing of the prompt
for interactive sessions. [RT#16148]
2006-06-09 07:26:42 +00:00
Mark Andrews
c7efca8420 update copyright notice 2006-06-09 00:54:09 +00:00
Mark Andrews
c55dd77de4 2042. [bug] named-checkconf was incorrectly rejecting the
logging category "config". [RT #16117]
2006-06-07 02:28:28 +00:00
Mark Andrews
9a482d1fce 2039. [func] Check that all buffers passed to the socket code
have been retrieve when the socket event is freed.
                        [RT #16122]

2038.   [bug]           dig/nslookup/host was unlinking from wrong list
                        when handling errors. [RT #16122]
2006-06-06 00:53:36 +00:00
Mark Andrews
472460e05f update copyright notice 2006-06-06 00:11:42 +00:00
Mark Andrews
5d51f53483 2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
[RT #16075]
2006-06-04 23:59:33 +00:00
Mark Andrews
6bf6622b7b regen 2006-06-04 23:38:17 +00:00
Mark Andrews
a45a6ea2b0 2035. [func] Make falling back to TCP on UDP refresh failure
optional. Default "try-tcp-refresh yes;" for BIND 8
                        compatibility. [RT #16123]
2006-06-04 23:17:07 +00:00
Mark Andrews
b5205d860b 2033. [bug] We wern't creating multiple client memory contexts
on demand as expected. [RT #16095]
2006-05-29 01:27:58 +00:00
Mark Andrews
9a1e8f1baf 2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074] 2006-05-26 02:44:02 +00:00
Mark Andrews
c79e85f7d7 2031. [bug] Emit a error message when "rndc refresh" is called on
a non slave/stub zone. [RT # 16073]
2006-05-24 04:23:15 +00:00
Mark Andrews
8d18fc189f missing type 2006-05-23 04:38:28 +00:00
Mark Andrews
e22bd3c4bc 2029. [bug] host printed out the server multiple times when
specified on the command line. [RT #15992]
2006-05-23 04:37:28 +00:00
Mark Andrews
444bbadb54 2026. [bug] Rate limit the two recursive client exceeded messages.
[RT #16044]
2006-05-18 03:12:36 +00:00
Mark Andrews
a9365554b6 2022. [bug] If dnssec validation is disabled only assert CD if
CD was requested. [RT #16037]

2021.   [bug]           dnssec-enable no; triggered a REQUIRE. [RT #16037]
2006-05-18 02:00:11 +00:00
Mark Andrews
47012ae6db regen 2006-05-17 02:39:16 +00:00
Mark Andrews
ffcc1bdb36 make query-source{-v6} clearer 2006-05-16 06:07:09 +00:00
Mark Andrews
7b68fa6229 2017. [bug] allow-query default was net correct. [RT #15946] 2006-05-16 03:35:56 +00:00
Mark Andrews
82ecc9cd96 2016. [bug] Return a partial answer if recursion is not
allowed but requested and we had the answer
                        to the original qname. [RT #15945]
2006-05-16 03:10:23 +00:00
Mark Andrews
a24742821b recusion -> recursion 2006-05-15 06:10:58 +00:00
Mark Andrews
b15d6bddeb regen 2006-05-08 15:46:27 +00:00
Mark Andrews
6412902ffc 2015. [cleanup] use-additional-cache is now acache-enable for
consistancy.  Default acache-enable off in BIND 9.4
                        as it requires memory usage to be configured.
                        It may be enabled by default in BIND 9.5 once we
                        have more experience with it.
2006-05-03 01:54:54 +00:00
Mark Andrews
52ece689e0 regen 2006-04-23 10:14:12 +00:00
Mark Andrews
170938fdfc tag mis-match 2006-04-15 22:19:49 +00:00
Mark Andrews
4b3f3cc671 update copyright notice 2006-04-15 01:30:16 +00:00
David Hankins
6ed53e5949 2011. [func] dnssec-signzone can now update the SOA record of
the signed zone, either as an increment or as the
                        system time(). [RT #15633]
2006-04-13 18:09:56 +00:00
Mark Andrews
f051d76c87 regen 2006-03-11 02:07:53 +00:00
Mark Andrews
d6b5e0b0e8 update copyright notice 2006-03-10 00:23:21 +00:00
Mark Andrews
84910d09ee 2009. [bug] libbind: coverity fixes. [RT #15808] 2006-03-09 23:57:56 +00:00
Mark Andrews
d2ef84e07b 2008. [func] It is now posssible to enable/disable DNSSEC
validation from rndc.  This is useful for the
                        mobile hosts where the current connection point
                        breaks DNSSEC (firewall/proxy).  [RT #15592]

                                rndc validation newstate [view]
2006-03-09 23:39:00 +00:00
Mark Andrews
cfe92110ce 2007. [func] It is now possible to explicitly enable DNSSEC
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
2006-03-09 23:21:54 +00:00
Mark Andrews
fe6f384b2e 2006. [security] Allow-query-cache and allow-recursion now default
to the builtin acls "localnets" and "localhost".

                        This is being done to make caching servers less
                        attractive as reflective amplifying targets for
                        spoofed traffic.  This still leave authoritative
                        servers exposed.

                        The best fix is for full BCP 38 deployment to
                        remove spoofed traffic.
2006-03-09 03:30:18 +00:00
Mark Andrews
083a5588a3 regen 2006-03-06 02:23:19 +00:00
Mark Andrews
59d84d1b07 2001. [func] Check the KSK flag when updating a secure dynamic zone.
New zone option "update-check-ksk yes;".  [RT #15817]
2006-03-06 01:27:52 +00:00
Mark Andrews
ea8874ec35 update copyright notice 2006-03-05 23:58:52 +00:00
Mark Andrews
d76ed813a5 1999. [func] Implement "rrset-order fixed". [RT #13662] 2006-03-03 00:43:35 +00:00
Mark Andrews
fb9395c8dd update copyright notice 2006-03-02 23:48:50 +00:00
Mark Andrews
f27eae9cfe 1996. [bug] nsupdate: if a zone has been specified it should
appear in the output of 'show'. [RT #15797]
2006-03-02 01:57:20 +00:00
Mark Andrews
9a8cec4995 1995. [bug] 'host' was reporting multiple "is an alias" messages.
[RT #15702]
2006-03-02 01:45:46 +00:00
Mark Andrews
641f68d427 update copyright notice 2006-03-02 00:37:23 +00:00
Mark Andrews
45e1bd6358 1991. [cleanup] The configuration data, once read, should be treated
as readonly.  Expand the use of const to enforce this
                        at compile time. [RT #15813]
2006-02-28 02:39:52 +00:00
Mark Andrews
8131d4ed6d update copyright notice 2006-02-26 23:49:50 +00:00
Mark Andrews
95b484c958 fix minor typos 2006-02-26 22:57:18 +00:00
Mark Andrews
6c4435e3ee update copyright notice 2006-02-26 22:28:38 +00:00
Mark Andrews
4f54d09594 1989. [bug] win32: don't check the service password when
re-installing. [RT #15882]
2006-02-24 03:47:22 +00:00
Mark Andrews
c5387e6942 1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608] 2006-02-21 23:49:51 +00:00
Mark Andrews
d00e58d481 1986. [func] Report when a zone is removed. [RT #15849] 2006-02-21 23:12:27 +00:00
Mark Andrews
7d4a465de0 1597. [func] Allow notify-source and query-source to be specified
on a per server basis similar to transfer-source.
2006-02-17 00:24:21 +00:00
Mark Andrews
3e9ab6efd1 1984. [func] dig, nslookup and host now advertise a 4096 byte
EDNS UDP buffer size by default. [RT #15855]
2006-02-17 00:10:42 +00:00
Mark Andrews
6e373c5025 1983. [func] Two new update policies. "selfsub" and "selfwild".
[RT #12895]
2006-02-16 01:34:24 +00:00
Mark Andrews
9d3acb28cd Fix a signal race condition with the following change.
1980.   [func]          dnssec-signzone: output the SOA record as the
                        first record in the signed zone. [RT #15758]
2006-02-07 21:53:36 +00:00
Mark Andrews
e0fe05b5ae update copyright notice 2006-02-03 23:51:39 +00:00
Mark Andrews
2a35dc09d6 1980. [func] dnssec-signzone: output the SOA record as the
first record in the signed zone. [RT #15758]
2006-02-03 00:13:57 +00:00
Mark Andrews
d53520b78d 1979. [port] linux: allow named to drop core after changing
user ids. [RT #15753]
2006-02-02 23:33:21 +00:00
Mark Andrews
c2b2bd69fa 1977. [bug] Silence noisy log message. [RT #15704] 2006-02-02 22:48:58 +00:00
Mark Andrews
605b07cadd regen 2006-01-29 22:57:16 +00:00
Mark Andrews
726b472292 regen 2006-01-28 02:15:53 +00:00
Mark Andrews
26e2a07a0b update copyright notice 2006-01-27 23:57:46 +00:00
Mark Andrews
7329012471 regen 2006-01-27 05:17:12 +00:00
Mark Andrews
c6d4f78152 1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
Mark Andrews
557a0ad515 regen 2006-01-07 03:34:55 +00:00
Mark Andrews
141132c272 update copyright notice 2006-01-07 00:23:35 +00:00
Mark Andrews
08c58709fa specify -D as libtool does not preserve argv0. 2006-01-06 06:55:28 +00:00
Mark Andrews
b44f48a31a remove ns1/example.db.raw 2006-01-06 06:53:57 +00:00
Mark Andrews
219a8f14a8 1970. [bug] nsupdate: adjust UDP timeout when falling back to
unsigned SOA query. [RT #15775]
2006-01-06 04:45:11 +00:00
Mark Andrews
3430bfffca silence compiler warning 2006-01-06 02:07:03 +00:00
Mark Andrews
3b4098640d regen 2006-01-06 01:55:39 +00:00
Mark Andrews
8549bc9b78 1967. [func] dig/nslookup/host: warn about missing QR. [RT #15779] 2006-01-06 00:54:21 +00:00
Mark Andrews
9a33e2d135 I1965. [func] Suppress spurious "recusion requested but not
available" warning with 'dig +qr'. [RT #15780].
2006-01-06 00:13:30 +00:00
Mark Andrews
1b06367c34 update copyright notice 2006-01-06 00:01:44 +00:00
Mark Andrews
dc6da18ccb 1964. [func] Seperate out MX and SRV to CNAME checks. [RT #15723] 2006-01-05 23:45:34 +00:00
Mark Andrews
7ba5dc6485 typo 2006-01-05 03:47:51 +00:00
Mark Andrews
a687a0592b 1962. [bug] Named failed to clear old update-policy when it
was removed. [RT #15491]
2006-01-05 03:32:50 +00:00
Mark Andrews
6eb8591f00 1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
[RT #15465]
2006-01-05 03:14:33 +00:00
Mark Andrews
a1bc941093 1959. [func] Control the zeroing of the negative response TTL to
a soa query.  Defaults "zero-no-soa-ttl yes;" and
                        "zero-no-soa-ttl-cache no;". [RT #15460]
2006-01-05 02:19:02 +00:00
Mark Andrews
1bc63715b7 fixed typos in error messages 2006-01-05 01:37:19 +00:00
Mark Andrews
08c9026166 1953. [func] Named now falls back to advertising EDNS with a
512 byte receive buffer if the initial EDNS queries
                        fail.  [RT #14852]

1952.   [func]          The maximum EDNS UDP response named will send can
                        now be set in named.conf (max-udp-size).  This is
                        independent of the advertised receive buffer
                        (edns-udp-size). [RT #14852]
2006-01-05 00:01:46 +00:00
Mark Andrews
acb4f52369 update copyright notice 2006-01-04 23:50:24 +00:00
Mark Andrews
05d32f6b0f 1951. [security] Drop queries from particular well known ports.
Don't return FORMERR to queries from particular
                        well known ports.  [RT #15636]
2006-01-04 05:06:10 +00:00
Mark Andrews
e9733bc599 1949. [func] Addition memory leakage checks. [RT #15544] 2006-01-04 03:16:47 +00:00
Mark Andrews
fabf2ee6b0 1947. [func] It is now possible to configure named to accept
expired RRSIGs.  Default "dnssec-accept-expired no;".
                        Setting "dnssec-accept-expired yes;" leaves named
                        vulnerable to replay attacks.  [RT #14685]
2006-01-04 02:35:49 +00:00
Mark Andrews
35da39a7f1 update copyright notice 2006-01-04 00:37:24 +00:00
Mark Andrews
2a90390dee 1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is nolonger recommended.
To generate a RSAMD5 key you must explictly request
                        RSAMD5. [RT #13780]
2006-01-03 06:06:04 +00:00
Mark Andrews
5c6e60df66 update copyright notice 2005-11-30 23:52:54 +00:00
Mark Andrews
ade83e60fa silence ambigious else 2005-11-30 03:36:45 +00:00
Mark Andrews
2674e1a455 1940. [bug] Fixed a number of error conditions reported by
Coverity.
2005-11-30 03:33:49 +00:00
Mark Andrews
e6d667397a update copyright notice 2005-11-03 00:02:56 +00:00
Mark Andrews
d29c05346a address timing issue in tests 2005-11-02 04:56:49 +00:00
Mark Andrews
faa4af28cf 1935. [bug] 'acache' was DO sensitive. [RT #15430]
1934.   [func]          Validate pending NS RRsets, in the authority section,
                        prior to returning them if it can be done without
                        requiring DNSKEYs to be fetched.  [RT #15430]
2005-11-02 01:28:45 +00:00
Mark Andrews
8c9957e632 regen 2005-10-26 06:23:18 +00:00
Mark Andrews
1425217e5c spelling arguement vs arguments 2005-10-26 04:35:56 +00:00
Mark Andrews
d08c5dfcd4 1931. [bug] Per-client mctx could require a huge amount of memory,
particularly for a busy caching server. [RT #15519]
2005-10-16 23:21:25 +00:00
Mark Andrews
16ee4fe11b 1930. [port] HPUX: ia64 support. [RT #15473]
1929.   [port]          FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
2005-10-14 01:14:08 +00:00
Mark Andrews
cedb0bd0c1 regen 2005-10-13 03:14:05 +00:00
Mark Andrews
982e072a50 1927. [bug] Access to soanode or nsnode in rbtdb violated the
lock order rule and could cause a dead lock.
                        [RT# 15518]
2005-10-13 01:58:32 +00:00
Mark Andrews
9547d3e03b 1926. [bug] The Windows installer did not check for empty
passwords. [RT #15483]
2005-10-11 22:54:45 +00:00
Mark Andrews
e23932d3c8 1923. [bug] ns_client_detach() called too early. [RT #15499] 2005-10-07 04:03:25 +00:00
Mark Andrews
72160d9b51 1922. [bug] check-tool.c:setup_logging() missing call to
dns_log_setcontext().
2005-09-30 08:25:38 +00:00
Mark Andrews
3a58ea619a update copyright notice 2005-09-30 00:39:50 +00:00
Mark Andrews
8ec0567236 1920. [bug] Client memory contexts were not using internal
malloc. [RT# 15434]
2005-09-28 04:50:15 +00:00
Mark Andrews
80a609bf44 1919. [bug] The cache memory context array was too small to
have the desired performance characteristics.
                        [RT #15454]

stop.pl Increase amount of time allowed for named to stop before aborting the
server.
2005-09-28 04:36:06 +00:00
Mark Andrews
3a8be17fbf win32 2005-09-20 06:16:29 +00:00
Mark Andrews
d32b13e0be silence compiler warning 2005-09-19 00:18:00 +00:00
Mark Andrews
1d1569e5ab upate 2005-09-19 00:11:05 +00:00
Mark Andrews
ed6ca94ad7 finetune isc_thread_key implementation [RT #15408] 2005-09-18 07:16:24 +00:00
Mark Andrews
5bb39eeafa regen 2005-09-15 23:02:38 +00:00
Mark Andrews
c5f4c17c4c update copyright notice 2005-09-13 00:35:29 +00:00
Mark Andrews
4cabb8becd fix cleanup 2005-09-12 22:35:05 +00:00
Mark Andrews
47c2e9924e win32 fixes 2005-09-12 02:16:36 +00:00
Mark Andrews
8d10c10ec9 update copyright notice 2005-09-09 14:11:38 +00:00
Mark Andrews
057cafaa3d regen 2005-09-09 13:40:39 +00:00
Mark Andrews
6cf369f528 1916. [func] Integrate contibuted IDN code from JPNIC. [RT #15383] 2005-09-09 06:17:03 +00:00
Mark Andrews
cae2cb0862 1916. [func] Integrate contibuted IDN code from JPNIC. [RT #15383] 2005-09-09 06:13:58 +00:00
Mark Andrews
cf0bcc2c80 1915. [bug] dig +ndots was broken. [RT #15215] 2005-09-08 23:59:45 +00:00
Mark Andrews
675d696977 update copyright notice 2005-09-06 03:51:37 +00:00
Mark Andrews
676619a22f win32 fixes 2005-09-05 02:54:38 +00:00
Mark Andrews
03e200df5d 1913. [func] Integrate contibuted DLZ code into named. [RT #11382] 2005-09-05 00:12:29 +00:00
Mark Andrews
909ab89487 cleanup makekeyset/signkey 2005-09-01 02:57:32 +00:00
Mark Andrews
74f261bd2b 1920. [bug] Update windows socket code. [RT #14965] 2005-09-01 02:25:06 +00:00
Mark Andrews
90153b6536 regen 2005-08-30 04:18:58 +00:00
Mark Andrews
79399226b7 remove make-keyset reference 2005-08-30 01:50:05 +00:00
Mark Andrews
3389b6215a update trusted-keys description 2005-08-30 00:45:08 +00:00
Mark Andrews
a057e8e33b regen 2005-08-25 03:12:48 +00:00
Mark Andrews
5be3685b0e 1919. [bug] dig's +sigchase code overhauled. [RT #14933]
1918.   [bug]           The DLV code has been re-worked to make no longer
                        query order sensitive. [RT #14933]
2005-08-25 00:56:08 +00:00
Mark Andrews
715361d0c3 1917. [func] dig now warns if 'RA' is not set in the answer when
'RD' was set in the query.  host/nslookup skip servers
                        that fail to set 'RA' when 'RD' is set unless a server
                        is explicitly set.  [RT #15005]
2005-08-25 00:40:50 +00:00
Mark Andrews
3d711f2f75 1916. [func] host/nslookup now continue (default)/fail on SERVFAIL.
[RT #15006]
2005-08-25 00:31:32 +00:00
Mark Andrews
a268fec7f5 1915. [func] dig now has a '-q queryname' and '+showsearch' options.
[RT #15034]
2005-08-25 00:17:46 +00:00
Mark Andrews
2c15fcdeac seperate out sibling glue checks 2005-08-24 23:54:04 +00:00
Mark Andrews
0e72e2c967 cleanup comment 2005-08-23 04:07:57 +00:00
Mark Andrews
497beda397 adjust builtin syntax checks [RT#15268] 2005-08-23 03:01:14 +00:00
Mark Andrews
4e1d3e67cd 1914. [bug] Strings returned from cfg_obj_asstring() should be
treated as read-only.  The prototype for
                        cfg_obj_asstring() has been updated to reflect this.
                        [RT #15256]
2005-08-23 02:36:11 +00:00
Mark Andrews
36ca24a121 dns_log_init() and dns_log_setcontext() had been moved to setup_logging() 2005-08-22 00:58:18 +00:00
Mark Andrews
1586d8cbac regen 2005-08-19 03:52:27 +00:00
Mark Andrews
6b79e960e6 1913. [func] Automatic empty zone creation for D.F.IP6.ARPA and
friends.  Note: RFC 1918 zones are not yet covered by
                        this but are likely to be in a future release.

                        New options: empty-server, empty-contact,
                        empty-zones-enable and disable-empty-zone.
2005-08-18 00:57:31 +00:00
Mark Andrews
261a6a1f7d 1911. [func] Attempt to make the amount of work performed in a
iteration self tuning.  The covers nodes clean from
                        the cache per iteration, nodes written to disk when
                        rewriting a master file and nodes destroyed per
                        iteration when destroying a zone or a cache.
                        [RT #14996]
2005-08-15 01:21:07 +00:00
Mark Andrews
7c678cfe0b 1910. [cleanup] Don't add DNSKEY records to the additional section. 2005-08-11 04:45:38 +00:00
Mark Andrews
7a80d6d5ba result was not being assigned. 2005-07-28 05:46:12 +00:00
Mark Andrews
ec8f4b0adb remove white space 2005-07-27 04:12:00 +00:00
Mark Andrews
8abe06b25d 1905. [bug] Recursive clients soft quota support wasn't working
as expected. [RT #15103]
2005-07-27 02:29:01 +00:00
Mark Andrews
5a4557e8de gregen 2005-07-19 06:12:24 +00:00
Mark Andrews
54a5ca24e1 uintptr_t is in <inttypes.h> on some platforms 2005-07-19 05:57:12 +00:00
Mark Andrews
b5ad6dfea4 1903. [doc] Review ARM for BIND 9.4. 2005-07-19 04:55:25 +00:00
Mark Andrews
b0ceeb82e5 update copyright notice 2005-07-18 23:59:36 +00:00
Mark Andrews
fb827ed6df 9.4/HEAD sync 2005-07-18 06:03:01 +00:00
Mark Andrews
6e9efadbea 1902. [port] Use uintptr_t if available. [RT #14606] 2005-07-18 05:07:17 +00:00
Mark Andrews
02004b6ff1 regen 2005-07-18 02:57:54 +00:00
Mark Andrews
aa0f0779d1 1901. [func] Support for SPF rdata type. [RT #15033] 2005-07-14 06:46:44 +00:00
Mark Andrews
f3064bfd1b update copyright notice 2005-07-12 05:47:18 +00:00
Mark Andrews
18d0b5e54b 1900. [port] freebsd: pthread_mutex_init can fail if it runs out
of memory. [RT #14995]
2005-07-12 01:00:20 +00:00
Mark Andrews
42b37d29c7 1894. [func] dig: report the number of extra bytes still left in
the packet after processing all the records.

1893.   [cleanup]       dighost.c: move external declarations into <dig/dig.h>.
2005-07-04 03:03:21 +00:00
Mark Andrews
7c386b0c31 1892. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
levels. [RT #14962]
2005-07-01 03:28:42 +00:00
Mark Andrews
94fc951a9b regen 2005-06-28 06:05:59 +00:00
Mark Andrews
e174044290 1817. [func] Add support for additional zone file formats for
improving loading performance.  The masterfile-format
                        option in named.conf can be used to specify a
                        non-default format.  A separate command
                        named-compilezone was provided to generate zone files
                        in the new format.  Additionally, the -I and -O options
                        for dnssec-signzone specify the input and output
                        formats.
2005-06-28 02:55:09 +00:00
Mark Andrews
538a83db75 regen 2005-06-27 03:00:05 +00:00
Mark Andrews
fd780f3d47 1891. [func] Limit the number of recursive clients that can be
waiting for a single query (<qname,qtype,qclass>) to
                        resolve.  New options clients-per-query and
                        max-clients-per-query.
2005-06-27 00:15:45 +00:00
Mark Andrews
096103ae0d regen 2005-06-26 00:06:22 +00:00
Mark Andrews
74b0c89c0c remove garbage line 2005-06-24 00:17:08 +00:00
Mark Andrews
9297259c7a make adb_test and byname_test compile and run 2005-06-23 23:49:35 +00:00
Mark Andrews
2bef371309 1890. [func] Add a system test for named-checkconf. [RT #14931] 2005-06-23 06:52:23 +00:00
Mark Andrews
bcf369e513 1889. [func] The lame cache is now done on a <qname,qclass,qtype>
basis as some servers only appear to be lame for
                        certain query types.  [RT #14916]
2005-06-23 04:22:02 +00:00
Mark Andrews
045eca6d9c handle libtool prefix 2005-06-22 23:29:07 +00:00
Mark Andrews
618e5825c5 update copyright notice 2005-06-22 00:10:30 +00:00
Mark Andrews
7208386cd3 1817. [func] add support for additional zone file formats for
improving loading performance.  The masterfile-format
                        option in named.conf can be used to specify a
                        non-default format.  A new separate command
                        named-compilezone was provided to generate zone files
                        in a new format.
2005-06-20 03:30:28 +00:00
Mark Andrews
728a9bec1f missing </para> 2005-06-20 01:09:42 +00:00
Mark Andrews
a903095bf4 1817. [func] add support for additional zone file formats for
improving loading performance.  The masterfile-format
                        option in named.conf can be used to specify a
                        non-default format.  A new separate command
                        named-compilezone was provided to generate zone files
                        in a new format.
2005-06-20 01:05:33 +00:00
Mark Andrews
1fb4c62faa remove #define ROOTNS 1 2005-06-19 22:45:22 +00:00
Mark Andrews
2fda20909f simplify conditional code 2005-06-19 22:12:31 +00:00
Mark Andrews
94271b0d99 extent timeout now that we are have memrecord on 2005-06-19 05:49:22 +00:00
Mark Andrews
016c0a82f1 1888. [func] "USE INTERNAL MALLOC" is now runtime selectable.
[RT #14892]
2005-06-17 02:22:45 +00:00
Mark Andrews
9b80f3a7c7 1887. [func] Detect duplicates of UDP queries we are recursing on
and drop them.  New stats category "duplicates".
                        [RT #14892]
2005-06-17 01:58:23 +00:00
Mark Andrews
f2daad8ac3 update copyright notice 2005-06-12 00:03:20 +00:00
Mark Andrews
d4d68515d2 1885. [func] Additional memory debugging support to track size
and mctx arguements. [RT #14814]
2005-06-10 07:00:20 +00:00
Mark Andrews
e7fb847ed5 1883. [port] sunos: portability fixes. [RT #14814] 2005-06-08 02:09:18 +00:00
Mark Andrews
00124ad040 regen 2005-06-07 03:06:51 +00:00
Mark Andrews
16b9ee24b9 1857. [bug] named could trigger a INSIST() if reconfigured /
reloaded too fast.  [RT #14673]
2005-06-07 01:52:51 +00:00
Mark Andrews
3d247992c4 1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]

1865.   [bug]           Silently ignore nameservers in /etc/resolv.conf with
                        bad addresses. [RT #14841]
2005-06-07 01:00:00 +00:00
Mark Andrews
1c153afce5 1868. [func] edns-udp-size can now be overridden on a per
server basis. [RT #14851]
2005-06-07 00:27:34 +00:00
Mark Andrews
1fc4793844 1879. [func] Added framework for handling multiple EDNS versions.
1878.   [func]          dig can now specify the EDNS version when making
                        a query.
2005-06-07 00:16:01 +00:00
Tatuya JINMEI 神明達哉
5597be9bb8 1813. [func] Restructured the data locking framework using
architecture dependent atomic operations (when
			available), improving response performance on
			multi-processor machines significantly.
			x86, x86_64, alpha, and sparc64 are currently
			supported.

(RT #13505)
2005-06-04 05:32:50 +00:00
Mark Andrews
fafd53abda style 2005-06-01 01:56:49 +00:00
Mark Andrews
0c545eb705 update copyright notice 2005-05-30 02:00:39 +00:00
Mark Andrews
e123ebc1aa integrity check cleanup 2005-05-24 04:30:10 +00:00
Mark Andrews
bb99a72b21 1838. [cleanup] Don't allow Linux capabilities to be inherited.
[RT #13707]
2005-05-20 01:37:03 +00:00
Mark Andrews
3b4405aba9 1837. [bug] Compile time option ISC_FACILITY was not effective
for 'named -u <user>'.  [RT #13714]
2005-05-20 01:19:43 +00:00
Mark Andrews
172d748152 update copyright notice 2005-05-20 01:09:36 +00:00
Mark Andrews
3a3705ef77 regen 2005-05-19 12:34:34 +00:00
Mark Andrews
c5223c9cb7 1862. [func] Add additional zone data constancy checks.
named-checkzone has extended checking of NS, MX and
                        SRV record and the hosts they reference.
                        named has extended post zone load checks.
                        New zone options: check-mx and integrity-check.
                        [RT #4940]
2005-05-19 04:59:05 +00:00
Mark Andrews
361a71b7e6 typo in comment 2005-05-16 05:33:42 +00:00
Mark Andrews
75c0816e82 regen 2005-05-13 03:14:16 +00:00
Mark Andrews
f5d30e2864 update copyright notice 2005-05-13 01:35:48 +00:00
Rob Austein
83217b5fdc regen 2005-05-12 23:54:40 +00:00
Rob Austein
60e5e10f8d regen 2005-05-11 06:05:43 +00:00
Rob Austein
268a447506 1856. [doc] Switch Docbook toolchain from DSSSL to XSL. 2005-05-11 05:55:41 +00:00
Rob Austein
57ed0bab5b 1852. [cleanup] Remove dnssec-signkey and dnssec-makekeyset 2005-05-03 22:51:00 +00:00
Mark Andrews
9848aa3e16 update copyright notice 2005-05-02 00:26:28 +00:00
Mark Andrews
52e6d50bf4 oops the dnssec-signzone.@O@ was needed to set VERSION. 2005-04-29 05:24:56 +00:00
Mark Andrews
74665eb6d8 remove explict build rule for dnssec-signzone.o 2005-04-29 04:28:47 +00:00
Mark Andrews
2e740e169d further changes for
1848.   [bug]           Improve SMF integration. [RT #13238]
2005-04-29 00:36:16 +00:00
Mark Andrews
69fe9aaafd update copyright notice 2005-04-29 00:24:12 +00:00
Rob Austein
ab023a6556 1851. [doc] Doxygen comment markup. [RT #11398] 2005-04-27 04:57:32 +00:00
Mark Andrews
c651f15b30 1849. [doc] All forms of the man pages (docbook, man, html) should
have consistant copyright dates.
2005-04-07 03:50:05 +00:00
Mark Andrews
1f3b8f3162 1848. [bug] Improve SMF integration. [RT #13238] 2005-04-05 02:13:45 +00:00
Mark Andrews
7bce772e62 1848. [bug] Improve SMF integration. [RT #13238] 2005-04-05 01:30:05 +00:00
Mark Andrews
f754fa97bc 1848. [bug] Improve SMF integration. [RT #13238] 2005-04-05 00:58:16 +00:00
Mark Andrews
89da2a5641 regen 2005-04-03 03:31:37 +00:00
Mark Andrews
fcf6c62ab4 update copyright notice 2005-03-31 23:54:46 +00:00
Mark Andrews
b514e0cd0e 1841. [bug] "dig +nssearch" now makes a recursive query to
find the list of nameservers to query. [RT #13694]
2005-03-31 02:36:05 +00:00
Mark Andrews
fec3621e80 update copyright notice 2005-03-24 00:14:49 +00:00
Mark Andrews
ec47b0bff3 update copyright notice 2005-03-23 04:27:46 +00:00
Mark Andrews
bcab20b2f5 regen 2005-03-22 04:58:13 +00:00
Mark Andrews
6e8a8077fa 1840. [func] dnssec-signzone can now randomize signature endtimes
(dnssec-signzone -j jitter). [RT #13609]
2005-03-22 02:20:03 +00:00
Mark Andrews
9f069b2771 update copyright notice 2005-03-17 03:56:12 +00:00
Mark Andrews
b6b21d8045 silence compiler warnings 2005-03-16 22:22:31 +00:00
Mark Andrews
bf2a612889 1836. [cleanup] Silence compiler warnings in hash_test.c 2005-03-16 19:56:29 +00:00
Mark Andrews
ac47be4d71 1836. [cleanup] Silence compiler warnings in hash_test.c 2005-03-16 19:45:45 +00:00
Mark Andrews
5c9d44a068 conflict w/ builtin, log -> lctx. 2005-03-16 13:52:51 +00:00
Mark Andrews
36ff1620e4 missing ${LIBTOOL_MODE_LINK} 2005-03-16 13:43:59 +00:00
Mark Andrews
c553b3308e 1836. [cleanup] Silence compiler warnings in hash_test.c. 2005-03-16 13:40:14 +00:00
Mark Andrews
b4fcb547a2 regen 2005-03-16 05:00:44 +00:00
Mark Andrews
24efdccd68 1835. [bug] Update dnssec-signzone's usage message. [RT #13657] 2005-03-16 03:08:48 +00:00
Mark Andrews
a5bb4ad5db 1834. [bug] Bad memset in rdata_test.c. [RT #13658] 2005-03-16 02:44:05 +00:00
Mark Andrews
cb2d565b50 1831. [doc] Update named-checkzone documentation. [RT#13604] 2005-03-16 01:07:00 +00:00
Mark Andrews
0da70bc50a 1815. [bug] nsupdate triggered a REQUIRE if the server was set
without also setting the zone and it encountered
                        a CNAME and was using TSIG.  [RT #13086]
2005-03-16 01:02:33 +00:00
Mark Andrews
b7b6b01a0d update copyright 2005-03-16 00:55:19 +00:00
Mark Andrews
797944723c 1803. [bug] dnssec-signzone sometimes failed to remove old
RRSIGs. [RT #13483]
2005-03-16 00:10:21 +00:00
Mark Andrews
1439214380 1829. [bug] win32: "pid-file none;" broken. [RT #13563] 2005-03-15 23:16:53 +00:00
Mark Andrews
5d3083c4b5 1827. [bug] host: update usage message for '-a'. [RT #37116] 2005-03-15 01:49:30 +00:00
Mark Andrews
e50b75e36c 1804. [bug] Ensure that if we are queried for glue that it fits
in the additional section or TC is set to tell the
                        client to retry using TCP. [RT #10114]
2005-03-15 01:29:10 +00:00
Mark Andrews
a2037d7177 style 2005-03-15 00:46:29 +00:00
Mark Andrews
b326d7e3a3 1795. [bug] "rndc dumpb" was not fully documented. Minor
formating issues with "rndc dumpdb -all".  [RT #13396]
2005-03-14 23:55:57 +00:00
Mark Andrews
93f429295a 1791. [bug] 'host -t a' still printed out AAAA and MX records.
[RT #13230]
2005-03-14 23:36:04 +00:00
Mark Andrews
408767b505 update copyright notice 2005-03-06 15:30:37 +00:00
Mark Andrews
39c7fc7e00 1811. [func] Preserve the case of domain names in rdata during
zone transfers. [RT #13547]
2005-03-04 02:56:21 +00:00
Mark Andrews
35538d7a7d update copyright notice 2005-03-03 06:33:05 +00:00
Mark Andrews
77b101ced9 1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599] 2005-03-03 04:46:18 +00:00
Mark Andrews
4423c99613 1814. [func] UNIX domain controls are now supported. 2005-02-23 01:09:23 +00:00
Mark Andrews
08097713a4 update copyright notice 2005-02-11 00:01:58 +00:00
Mark Andrews
3aca8e5bf3 1758. [func] Don't send notify messages to self. [RT #12933] 2005-02-10 05:53:43 +00:00
Mark Andrews
d99ef741b7 remove aclconf 2005-02-09 22:55:57 +00:00
Mark Andrews
e89e09eda8 update copyrights 2005-01-17 04:11:34 +00:00
Mark Andrews
e0172ab8e2 regen 2005-01-17 01:55:06 +00:00
Mark Andrews
4844ed026a 1798. [func] The server syntax has been extended to support a
range of servers.  [RT #11132]
2005-01-17 00:46:05 +00:00
Mark Andrews
7502c66006 1796. [func] "rndc freeze/thaw" now freezes/thaws all zones. 2005-01-14 03:28:09 +00:00
Mark Andrews
32374d9483 regen 2005-01-13 04:52:21 +00:00
Mark Andrews
abeb45c775 update copyrights 2005-01-12 01:56:12 +00:00
Mark Andrews
48f929d315 1792. [func] New zone option "notify-delay". Specify a minimum
delay between sets of NOTIFY messages.
2005-01-11 23:10:06 +00:00
Mark Andrews
ad5bc22a81 1797. [func] named-checkconf now check acls to verify that they
only refer to existing acls. [RT #13101]
2005-01-11 03:46:11 +00:00
Mark Andrews
101c34c3f7 update copyright 2005-01-11 01:36:35 +00:00
Mark Andrews
2f4ffd7f55 update copyrights 2005-01-10 23:43:27 +00:00
Mark Andrews
ffc73e6d26 regen 2005-01-10 06:01:48 +00:00
Mark Andrews
508f61f8d6 1794. [func] Named and named-checkzone can now both check for
non-terminal wildcard records.
2005-01-09 23:40:04 +00:00
Tatuya JINMEI 神明達哉
d0eb2cc33c 1526. [func] Implemented "additional section caching (or acache)",
an internal cache framework for additional section
			content to improve response performance.  Several
			configuration options were provided to control the
			behavior.
2004-12-21 10:45:20 +00:00
Mark Andrews
3002b5952d cleanup a couple more files 2004-12-14 01:02:50 +00:00
Mark Andrews
494576ce20 1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
allow parallel make to succeed.
2004-12-09 01:41:25 +00:00
Mark Andrews
a36db48f57 1789. [bug] Prerequisite test for tkey and dnssec could fail
with "configure --with-libtool".
2004-12-08 06:10:49 +00:00
Mark Andrews
09ba9eaceb 1774. [port] Aix: Silence compiler warnings / build failures.
[RT #13154]
2004-11-30 01:12:52 +00:00
Mark Andrews
850a31f07e update copyright notices 2004-11-24 23:50:57 +00:00
Mark Andrews
6c52944ef2 1763. [func] Perform sanity checks on NS records which refer to
'in zone' names. [RT #13002]
2004-11-23 05:23:46 +00:00
Mark Andrews
c1807114ce 1745. [bug] Dig/host/nslookup accept replies from link locals
regardless of scope if no scope was specified when
                        query was sent. [RT #12745]
2004-11-22 23:29:10 +00:00
Mark Andrews
344027f57e 1769. [port] win32: change compiler flags /MTd ==> /MDd,
/MT ==> /MD.
2004-11-18 00:37:01 +00:00
Mark Andrews
3d75a3aef3 1769. [port] win32: change compiler flags /MTd ==> /MDd,
/MT ==> /MD.
2004-11-18 00:30:31 +00:00
Mark Andrews
15996d1b4f regen 2004-11-11 02:06:30 +00:00
Mark Andrews
73fb13fe97 1755. [func] allow-update is now settable at the options / view
level. [RT #6636]
2004-11-11 01:08:24 +00:00
Mark Andrews
892c9a8817 1759. [bug] Named failed to startup if the OS supported IPv6
but had no IPv6 interfaces configured. [RT #12942]
2004-11-10 22:14:28 +00:00
Mark Andrews
4d86cda3d7 1757. [func] host now can turn on memory debugging flags with '-m'. 2004-11-10 22:04:25 +00:00
Mark Andrews
84a5b69f00 1756. [func] named-checkconf now checks the logging configuration.
[RT #12352]
2004-11-09 21:24:20 +00:00
Mark Andrews
40e7c805a8 1740. [bug] Replace rbt's hash algorithm as it performed badly
with certain zones. [RT #12729]
2004-10-25 01:27:54 +00:00
Mark Andrews
a79348a6db 1752. [port] Move isc_app_start() to after ns_os_daemonise()
as some fork() implementations unblock the signals
                        that are blocked by isc_app_start(). [RT #12810]
2004-10-25 00:33:28 +00:00
Mark Andrews
575e532437 regen 2004-10-21 02:51:49 +00:00
Mark Andrews
81e6a5849d 1748. [func] dig now returns the byte count for axfr/ixfr. 2004-10-21 01:44:24 +00:00
Mark Andrews
055597532d 1742. [bug] Deleting all records at a node then adding a
previously existing record, in a single UPDATE
                        transaction, failed to leave / regenerate the
                        associated RRSIG records. [RT #12788]
2004-10-21 01:29:29 +00:00
Mark Andrews
49210da3fb 1676. [func] New option "allow-query-cache". This lets
allow-query be used to specify the default zone
                        access level rather than having to have every
                        zone override the global value.  allow-query-cache
                        can be set at both the options and view levels.
                        If allow-query-cache is not set allow-query applies.
2004-10-21 00:58:33 +00:00
Mark Andrews
428dc96988 regen 2004-10-17 23:57:16 +00:00
Mark Andrews
4181218570 1747. [bug] BIND 8 compatability: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
2004-10-17 23:11:30 +00:00
Mark Andrews
1672cff96d 1684. [func] ixfr-from-differences now takes master and slave in
addition to yes and no at the options and view levels.
2004-10-14 00:49:34 +00:00
Mark Andrews
6cdae8730d 1741. [bug] Deleting all records at a node in a secure zone
using a update-policy grant failed. [RT #12787]
2004-10-12 21:57:57 +00:00
Mark Andrews
2a71a21346 1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
messages for the specified zone. [RT #9479]
2004-10-11 05:30:20 +00:00
Mark Andrews
32d1434aff regen 2004-10-07 02:58:36 +00:00
Mark Andrews
31a71adf14 1725. [port] linux: update error message on interaction of threads,
capabilities and setuid support (named -u). [RT #12541]
2004-10-07 02:33:31 +00:00
Mark Andrews
722ebc3a47 1715. [func] 'dig +trace' now randomly selects the next servers
to try.  Report if there is a bad delegation.
2004-10-07 02:21:48 +00:00
Mark Andrews
207f0a15bb 1705. [func] Allow the journal's name to be changed via named.conf. 2004-10-07 02:15:14 +00:00
Mark Andrews
0553f5554f 1729. [func] Improve check-names error messages.
1728.   [doc]           Update check-names documentation.

1727.   [bug]           named-checkzone: check-names support didn't match
                        documentation.
2004-10-06 05:56:29 +00:00
Mark Andrews
31affb2ca3 1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
[RT #12467]
2004-10-05 04:38:17 +00:00
Mark Andrews
43fe2897fc 1731. [port] darwin: relax version test in ifconfig.sh.
[RT #12581]

1730.   [port]          Determine the length type used by the socket API.
                        [RT #12581]
2004-10-05 03:17:18 +00:00
Mark Andrews
110fbe3a13 1724. [bug] Look for DNSKEY records with "dig +sigtrace".
[RT #12557]
2004-10-05 03:01:47 +00:00
Mark Andrews
3c20ae7638 1737. [bug] named failed if more that 16 masters were specified.
[RT #12627]
2004-10-05 02:47:50 +00:00
Mark Andrews
314cac2365 1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
[RE #12688]
2004-09-30 23:56:22 +00:00
Mark Andrews
2c329da87c 1733. [bug] Return non-zero exit status on initial load failure.
[RT #12658]
2004-09-29 06:45:38 +00:00
Mark Andrews
c42ab597c4 1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
[RT #12588]
2004-09-28 07:11:25 +00:00
Mark Andrews
83ded0da57 Update error message. s/isc_socket_recv()/isc_socket_recv2()/ 2004-09-26 22:34:32 +00:00
Mark Andrews
ca155b1321 aix5 2004-09-24 05:38:01 +00:00
Mark Andrews
3b9a0696f9 1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493] 2004-09-21 02:12:08 +00:00
Mark Andrews
c93003b0a6 1713. [port] linux: extend capset failure message to say:
please ensure that the capset kernel module is
                        loaded.  see insmod(8)
2004-09-16 02:49:41 +00:00
Mark Andrews
3e15f55914 move the calculation of remaining 2004-09-16 02:12:37 +00:00
Mark Andrews
51f99a878d 1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
negative response. [RT #12506]

1719.   [bug]           named was not correctly caching a RFC 2308 Type 1
                        negative response. [RT #12506]

1718.   [bug]           nsupdate was not handling RFC 2308 Type 3 negative
                        responses when looking for the zone / master server.
                        [RT #12506]
2004-09-16 02:10:42 +00:00
Mark Andrews
ffcbf9ea91 silence compiler warnings 2004-09-16 01:01:27 +00:00
Mark Andrews
86c3e4bb96 1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
2004-09-09 01:02:12 +00:00
Mark Andrews
756f078904 clean up */dsset-*, */dlvset-* and ns2/dlv.db 2004-09-07 04:14:44 +00:00
Mark Andrews
4ab6d6464f 1716. [doc] named.conf(5) was being installed in the wrong
location.  [RT# 12441]
2004-09-06 21:53:34 +00:00
Mark Andrews
9678a61917 indenting 2004-09-06 06:22:35 +00:00
Mark Andrews
3f79a8b6f1 1714. [bug] dig/host/nslookup were only trying the first
address when a nameserver was specified by name.
                        [RT #12286]
2004-09-06 01:24:44 +00:00
Mark Andrews
a4743d3d26 1712. [bug] Missing FULLCHECK for "trusted-key" in dig. 2004-09-03 03:55:20 +00:00
Mark Andrews
817a7fb62d 1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'. 2004-09-03 03:42:58 +00:00
Mark Andrews
23ac30603a 1709. [port] solaris: add SMF support from Sun. 2004-09-01 07:25:51 +00:00
Mark Andrews
74e0971044 copyright 2004-08-30 00:54:45 +00:00
Mark Andrews
16a68807e1 1704. [port] lwres needed a snprintf() implementation for
platforms without snprintf().  Add missing
                        "#include <isc/print.h>". [RT #12321]
2004-08-28 06:20:14 +00:00
Mark Andrews
5639d60b40 1702. [bug] also-notify should not be applied to builtin zones.
[RT #12323]
2004-08-28 05:42:12 +00:00
Mark Andrews
2cd182921e regen 2004-08-23 00:05:48 +00:00
Mark Andrews
4f6469885c regen 2004-08-21 09:49:57 +00:00
Mark Andrews
d744c4e7dd 1701. [doc] A minimal named.conf man page. 2004-08-20 22:01:22 +00:00
Mark Andrews
689023771c 1701. [doc] A minimal named.conf man page. 2004-08-20 21:33:14 +00:00
Mark Andrews
7d441a69eb close some open <varlistentry>s 2004-08-20 00:54:29 +00:00
Mark Andrews
30b41c205c 1699. [bug] dnssec-signzone can generate "not exact" errors
when resigning. [RT #12281]
2004-08-20 00:47:40 +00:00
Mark Andrews
fb2c34419d 1700. [func] nslookup is no longer to be treated as deprecated.
Remove "deprecated" warning message.  Add man page.
2004-08-19 07:02:42 +00:00
Mark Andrews
d7a8ba373d copyright 2004-08-19 04:44:08 +00:00
Mark Andrews
3eb9ec750c regen 2004-08-16 06:01:59 +00:00
Mark Andrews
26440aaebb use correct comment leader 2004-08-16 04:35:23 +00:00
Mark Andrews
33d96fbbc8 copyright 2004-08-16 04:31:01 +00:00
Mark Andrews
819fe493f9 add nslookup.docbook 2004-08-16 04:20:59 +00:00
Mark Andrews
5e4346a4f9 1696. [bug] dnssec-signzone failed to clean out nodes that
consisted of only NSEC and RRSIG records.
                        [RT #12154]
2004-08-11 08:55:47 +00:00
Tatuya JINMEI 神明達哉
ecef5a3d5f comment wording / style nits. 2004-08-10 04:55:39 +00:00
Mark Andrews
41a789ed9a regen 2004-07-23 06:09:34 +00:00
Mark Andrews
c4f9e613e1 1680. [func] rndc: the source address can now be specified. 2004-07-23 04:15:27 +00:00
Mark Andrews
c426fddf16 1690. [bug] Delay detaching view from the client until UPDATE
processing completes when shutting down. [RT #11714]
2004-07-23 02:57:27 +00:00
Mark Andrews
8bcfe79521 1686. [bug] Named sent a extraneous NOTIFY when it received a
redundant UPDATE request. [RT #11943]
2004-07-20 07:39:31 +00:00
Mark Andrews
9f7d51ee32 1688. [bug] LDFLAGS was not supported. 2004-07-20 07:13:43 +00:00
Mark Andrews
0d8d36b7c8 silence compiler 2004-07-01 02:03:54 +00:00
Mark Andrews
cf6b361717 1683. [bug] dig +sigchase could leak memory. [RT #11445] 2004-06-30 23:47:48 +00:00
Mark Andrews
85609ef4d7 order should be signed. 2004-06-30 14:16:06 +00:00
Mark Andrews
5b4a9ac6bf 1675. [bug] named would sometimes add extra NSEC records to
the authority section.
2004-06-29 00:51:50 +00:00
Mark Andrews
53337a5daf regen 2004-06-23 09:11:41 +00:00
Mark Andrews
7de69feda2 1677. [bug] dig: +aaonly didn't work, +aaflag undocumented. 2004-06-23 04:07:29 +00:00
Mark Andrews
1d8abe0521 1671. [cleanup] Tests which only function in a threaded build
now return R:THREADONLY (rather than R:UNTESTED)
                        in a non-threaded build.
2004-06-21 05:36:41 +00:00
Mark Andrews
18afcb7028 1670. [func] Log UPDATE requests to slave zones without an acl as
"disabled" at debug level 3. [RT# 11657]
2004-06-20 23:57:13 +00:00
Rob Austein
32c7aa3dd1 1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core. 2004-06-19 02:23:36 +00:00
Mark Andrews
36e0109263 regen 2004-06-18 06:00:41 +00:00
Mark Andrews
7389e8330d 1666. [bug] The optional port on hostnames in dual-stack-servers
was being ignored.

1665.   [func]          rndc now allows addresses to be set in the
                        server clauses.
2004-06-18 04:38:47 +00:00
Rob Austein
014c882ddd nsupdate needed KEY for SIG(0), not DNSKEY. 2004-06-17 01:03:00 +00:00
Mark Andrews
f6d93187a1 regen 2004-06-11 03:03:14 +00:00
Mark Andrews
cc3aafe737 1659. [cleanup] Cleanup some messages that were referring to KEY vs
DNSKEY, NXT vs NSEC and SIG vs RRSIG.

1658.   [func]          Update dnssec-keygen to default to KEY for HMAC-MD5
                        and DH.  Tighten which options apply to KEY and
                        DNSKEY records.
2004-06-11 01:12:40 +00:00
Mark Andrews
23fdb6a5a3 1654. [bug] isc_result_totext() contained array bounds read
error.

1653.   [func]          Add key type checking to dst_key_fromfilename(),
                        DST_TYPE_KEY should be used to read TSIG, TKEY and
                        SIG(0) keys.

1652.   [bug]           TKEY still uses KEY.
2004-06-11 00:27:06 +00:00
Mark Andrews
e6c95fe56b 1651. [bug] dig: process multiple dash options.
1650.   [bug]           dig, nslookup: flush standard out after each command.
2004-06-07 03:56:02 +00:00
Mark Andrews
1c52f228e9 1649. [bug] Silence "unexpected non-minimal diff" message.
[RT #11206]
2004-06-04 03:44:53 +00:00
Mark Andrews
c315e5cfea 1648. [func] Update dnssec-lookaside named.conf syntax to support
multiple dnssec-lookaside namespaces (not yet
                        implemented).
2004-06-04 02:31:43 +00:00
Mark Andrews
d21d4ddac7 update -b usage 2004-06-03 04:23:01 +00:00
Mark Andrews
6564bfdd88 regen 2004-06-03 04:12:38 +00:00
Mark Andrews
17cb8353e9 update corpauthor 2004-06-03 02:22:35 +00:00
Mark Andrews
cc3b9bde96 mfc71.dll and msvcr71.dll correspond to _MSC_VER 1310 (Wesley Griffin) 2004-05-18 01:31:12 +00:00
Mark Andrews
c928cebdc5 do not install dnssec-makekeyset and dnssec-signkey. 2004-05-17 10:14:37 +00:00
Mark Andrews
4f04f13a4d Install MFC71.DLL and MSVCR71.DLL if _MSC_VER is 1400 2004-05-17 10:14:06 +00:00
Mark Andrews
51c7f79515 LIBTOO_MODE_INSTALL -> LIBTOOL_MODE_INSTALL 2004-05-16 00:15:04 +00:00
Mark Andrews
2cd8fa3ef9 1639. [func] Initial dlv system test. 2004-05-14 04:58:24 +00:00
Mark Andrews
97f1498dda move cleanup of in_roothints earlier to make it easier to detect reference
count mismatches.
2004-05-14 00:51:52 +00:00
Mark Andrews
4499c6cd5e 1635. [bug] Memory leak on error in query_addds(). 2004-05-14 00:10:52 +00:00
Mark Andrews
392cd518b3 1633. [bug] named should return NOTIMP to update requests to a
slaves without a allow-update-forwarding acl specified.
                        [RT #11331]
2004-05-12 06:38:37 +00:00
Mark Andrews
5efa612be0 1632. [bug] nsupdate failed to send prerequisite only UPDATE
messages. [RT #11288]
2004-05-12 04:48:23 +00:00
Mark Andrews
38e8022ace 1625. [bug] named failed to load/transfer RFC2535 signed zones
which contained CNAMES. [RT# 11237]
2004-05-05 01:32:58 +00:00
Mark Andrews
1ccee0aff3 silence compiler warning (cast to long and use %ld) 2004-05-04 03:24:39 +00:00
Mark Andrews
cc32d38366 1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
available, and suppress wildcard binding if not.

1621.   [bug]           match-destinations did not work for IPv6 TCP queries.
                        [RT# 11156]
2004-04-29 01:37:14 +00:00
Mark Andrews
1cf54d1966 1612. [bug] check-names at the option/view level could trigger
an INSIST. [RT# 11116]
2004-04-20 14:11:47 +00:00
Mark Andrews
349f684cf1 1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
[RT# 11118]
2004-04-20 07:16:23 +00:00
Mark Andrews
b0cab2b6bf 1616. [compat] Ensure that named's version is visible in the core
dump. [RT #11127]
2004-04-20 06:53:52 +00:00
Mark Andrews
ea38808b7d 1614. [port] win32: silence resource limit messages. [RT# 11101] 2004-04-19 23:09:51 +00:00
Mark Andrews
dc02df4d9e silence deprecated warning 2004-04-19 05:48:02 +00:00
Mark Andrews
5ed76fa7ea 1617. [port] win32: VC++ 6.0 support. 2004-04-19 04:16:55 +00:00
Mark Andrews
8d414d1559 1600. [bug] Duplicate zone pre-load checks were not case
insensitive.

1599.   [bug]           Fix memory leak on error path when checking named.conf.

1598.   [func]          Specify that certain parts of the namespace must
                        be secure (dnssec-must-be-secure).
2004-04-15 23:40:27 +00:00
Mark Andrews
c2ec022f57 1610. [bug] On dual stack machines "dig -b" failed to set the
address type to be looked up with "@server".
                        [RT #11069]
2004-04-15 06:47:08 +00:00
Mark Andrews
764808211e #include <time.h>. 2004-04-15 04:49:50 +00:00
Mark Andrews
42b48d11ca hide ((isc_event_t **) (void *)) cast using a macro, ISC_EVENT_PTR. 2004-04-15 01:58:25 +00:00
Mark Andrews
56d61bf855 remove spurious tabs 2004-04-13 05:56:30 +00:00
Mark Andrews
a72932d4c7 regen 2004-04-13 04:44:05 +00:00
Mark Andrews
f38cee6326 remove stray nbits reference. 2004-04-13 03:31:14 +00:00
Mark Andrews
2a23a62524 sigchase 2004-04-13 02:54:15 +00:00
Mark Andrews
1ae75c1024 1609. [func] dig now has support to chase DNSSEC signature chains.
Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
2004-04-13 02:39:35 +00:00
Mark Andrews
ea17e96977 1608. [func] dig and host now accept -4/-6 to select IP transport
to use when making queries.
2004-04-13 01:09:37 +00:00
Mark Andrews
80cc19dc26 1601. [bug] Silence spurious warning 'both "recursion no;" and
"allow-recursion" active' warning from view "_bind".
                        [RT# 10920]
2004-04-10 05:03:27 +00:00
Mark Andrews
b39213ce59 1603. [bug] nsupdate: set interactive based on isatty().
[RT# 10929]
2004-04-10 04:03:16 +00:00
Mark Andrews
5eb0659963 1607. [bug] dig, host and nslookup were still using random()
to generate query ids. [RT# 11013]
2004-04-08 01:21:16 +00:00
Mark Andrews
0822cc5065 1594. [bug] 'rndc dumpdb' could prevent named from answering
queries while the dump was in progress.  [RT #10565]
2004-04-08 00:10:42 +00:00
Mark Andrews
61e1dc26d6 regen 2004-04-07 00:57:04 +00:00
Mark Andrews
e3f6b4d219 regen 2004-04-06 22:04:52 +00:00
Mark Andrews
4995dba770 1604. [bug] A xfrout_ctx_create() failure would result in
xfrout_ctx_destroy() being called with a
                        partially initaliased structure.
2004-04-02 05:13:25 +00:00
Mark Andrews
3b1fce680f 1595. [func] New notify type 'master-only'. Enable notify for
master zones only.
2004-03-30 02:13:45 +00:00
Mark Andrews
c5cde9d5a7 1593. [bug] rndc should return "unknown command" to unknown
commands. [RT# 10642]
2004-03-22 01:46:01 +00:00
Mark Andrews
1676408640 pullup silence compiler fixes
ifconfig.sh for Solaris 9
README updates
2004-03-18 02:58:08 +00:00
Mark Andrews
28b863e609 pullup fixed from 9.3 2004-03-16 05:52:24 +00:00
Mark Andrews
1fa26403d7 copyright 2004-03-16 05:22:33 +00:00
Mark Andrews
6e423af8f0 remove unused variables: dispatchv4, dispatchv6. 2004-03-14 23:00:47 +00:00
Mark Andrews
a3a09ca249 1592. [bug] configure_view() could leak a dispatch. 2004-03-14 22:53:39 +00:00
Mark Andrews
50105afc55 1589. [func] DNSSEC lookaside validation.
enable-dnssec -> dnssec-enable
2004-03-10 02:19:58 +00:00
Mark Andrews
fa7ee558e0 1584. [bug] "make test" failed with a readonly source tree.
[RT #10461]
2004-03-10 01:06:06 +00:00
Mark Andrews
a1ade0efb5 add mfc70.dll and msvcr70.dll 2004-03-09 04:25:06 +00:00
Mark Andrews
3b7dadafad update copyrights 2004-03-05 12:46:14 +00:00
Mark Andrews
0707a8c04f regen 2004-03-05 12:40:39 +00:00
Mark Andrews
8a66318e41 regen / copyright update 2004-03-05 08:32:21 +00:00
Mark Andrews
9016767f4e update copyrights 2004-03-05 05:54:38 +00:00
Mark Andrews
af5073d032 update copyrights 2004-03-05 05:48:29 +00:00
Mark Andrews
dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews
8dcabaace1 regen 2004-03-04 12:22:04 +00:00
Mark Andrews
993b154103 retry w/o TSIG 2004-03-04 05:33:03 +00:00
Mark Andrews
c4b8c7555d 1569. [func] nsupdate new command 'answer' which displays the
complete answer message to the last update.

1568.   [bug]           nsupdate now reports that the update failed in
                        interative mode. [RT# 10236]
2004-03-04 01:21:39 +00:00
Mark Andrews
aa20b1b625 1570. [bug] nsupdate failed to handle classes other than IN.
New keyword 'class' which sets the default class.
                        [RT #10202]
2004-03-03 23:43:09 +00:00
Mark Andrews
90c4900d5c 1559. [port] named should ignore SIGFSZ. 2004-03-03 23:09:02 +00:00
Mark Andrews
22cd704fca 1572. [bug] nsupdate: sign the soa query to find the enclosing
zone if the server is specified. [RT #10148]
2004-03-03 22:57:33 +00:00
Mark Andrews
7052e191ce 1544. [bug] Named would logged a single entry to a file despite it
being over the specified size limit.

1543.   [bug]           Logging using "versions unlimited" did not work.
2004-03-03 05:39:05 +00:00
Mark Andrews
821644d49b 1574. [bug] Don't attempt to open the controls socket(s) when
running tests. [RT #9091]
2004-03-02 02:01:41 +00:00
Mark Andrews
7ad4d54f29 1537. [func] New option "querylog". If set specify whether query
logging is to be enabled or disabled at startup.
2004-03-02 01:15:00 +00:00
Mark Andrews
029a79c880 1556. [bug] nsupdate now treats all names as fully qualified.
[RT #6427]
2004-03-02 00:46:53 +00:00
Mark Andrews
f9cdef0ba5 regen 2004-02-27 21:01:25 +00:00
Mark Andrews
362a27e81e 1586. [func] "check-names" is now implemented. 2004-02-27 20:44:09 +00:00
Mark Andrews
2047977ce2 1586. [func] "check-names" is now implemented. 2004-02-27 20:41:51 +00:00
Mark Andrews
30b89a5ad9 1533. [func] Warn if both "recusion no;" and "allow-recursion"
are active. [RT# 4389]
2004-02-24 03:31:08 +00:00
Mark Andrews
74cb99072c 1573. [port] linux: update to libtool 1.5.2 so that
"make install DESTDIR=/xx" works with
                        "configure --with-libtool".  [RT #9941]
2004-02-24 01:41:28 +00:00
Mark Andrews
89783da064 1581. [func] Disable DNSSEC support by default. To enable
DNSSEC specify "enable-dnssec yes;" in named.conf.
2004-02-17 03:40:23 +00:00
Mark Andrews
4230c2e85e lookup RRSIG (46) not SIG (24) in getrrsetbyname test. 2004-02-17 03:34:55 +00:00
Mark Andrews
80c5a37ddc 1575. [func] Log TSIG name on TSIG verify failure. [RT #4404] 2004-02-09 23:25:22 +00:00
Mark Andrews
daa73eae70 silence punned messages 2004-02-03 00:59:05 +00:00
Mark Andrews
73f5c1ff00 stop listening to AD 2004-01-27 05:01:12 +00:00
Mark Andrews
148d848bbc NSEC does not support raw type numbers 2004-01-27 04:39:29 +00:00
Mark Andrews
8d1374958f create/destroy hash 2004-01-27 04:25:36 +00:00
Mark Andrews
f8dfdef682 1564. [func] Attempt to provide a fallback entropy source to be
used if named is running chrooted and named is unable
                        to open entropy source within the chroot area.
                        [RT #10133]
2004-01-27 02:13:22 +00:00
Mark Andrews
b3d3e57841 update wording 2004-01-27 01:19:41 +00:00
Mark Andrews
ea40cebe2b 1563. [bug] Gracefully fail when unable to obtain neither a IPv4
or a IPv6 dispatch. [RT #10230]
2004-01-26 23:44:12 +00:00
Mark Andrews
2f35edba9c AD is independent of DO/AD 2004-01-21 15:47:22 +00:00
Mark Andrews
9cf0970f43 1561. [bug] It was possible to release the same name twice if
named ran out of memory. [RT #10197]
2004-01-21 15:44:24 +00:00
Mark Andrews
841ed46de5 1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
child zones for which we don't have a supported
                        algorithm.  Such child zones are treated as unsigned.
2004-01-15 04:09:17 +00:00
Mark Andrews
b346807a32 regen documentation 2004-01-14 02:13:45 +00:00
Mark Andrews
35541328a8 1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
child zones for which we don't have a supported
                        algorithm.  Such child zones are treated as unsigned.

1557.   [func]          Implement missing DNSSEC tests for
                        * NOQNAME proof with wildcard answers.
                        * NOWILDARD proof with NXDOMAIN.
                        Cache and return NOQNAME with wildcard answers.
2004-01-14 02:06:51 +00:00
Mark Andrews
9cc75a3e5b 1554. [bug] dig, host, nsloolup failed when no nameservers
were specified in /etc/resolv.conf. [RT #8232]
2004-01-12 03:39:29 +00:00
Mark Andrews
c52ae25dd7 1551. [port] Open "/dev/null" before calling chroot(). 2004-01-07 06:17:04 +00:00
Mark Andrews
6286983c50 1550. [port] Call tzset(), if available, before calling chroot(). 2004-01-07 05:48:15 +00:00
Mark Andrews
d0aebc5a55 1549. [func] named-checkzone can now write out the zone contents
in a easily parsable format (-D and -o).
2004-01-07 05:27:17 +00:00
Mark Andrews
62700b67eb 1539. [bug] Open UDP sockets for notify-source and transfer-source
that use reserved ports at startup. [RT #9475]
2004-01-05 06:56:44 +00:00
Mark Andrews
9991accfe2 sync options string with reality 2004-01-05 05:14:51 +00:00
Mark Andrews
185fd22738 1541. [func] NSEC now uses new bitmap format. 2003-12-13 04:20:44 +00:00
Mark Andrews
0f98d5c83e repeated words 2003-11-02 22:49:10 +00:00
Mark Andrews
b7e6fb4e84 whitespace 2003-10-26 21:33:47 +00:00
Tatuya JINMEI 神明達哉
e407562a75 1528. [cleanup] Simplify some dns_name_ functions based on the
deprecation of bitstring labels.
2003-10-25 00:31:12 +00:00
Tatuya JINMEI 神明達哉
6da7c87a77 1527. [cleanup] Reduce the number of gettimeofday() calls without
losing necessary timer granularity.

(reviewed by marka and Kurt)
2003-10-25 00:09:14 +00:00
Mark Andrews
fcb54ce0a4 whitespace / layout 2003-10-17 03:46:46 +00:00
Mark Andrews
b6d52ee5be 1524. [port] AIX needs to be able to resolve all symbols when
creating shared libraries (--with-libtool).
2003-10-08 06:36:13 +00:00
Mark Andrews
ea72ae09ff print out zone if set 2003-10-02 02:59:58 +00:00
Mark Andrews
94be8e357c 1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
length of the new bitmap.
2003-10-01 04:10:26 +00:00
Mark Andrews
3970098dcd regen documentation 2003-09-30 06:13:33 +00:00
Mark Andrews
93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Tatuya JINMEI 神明達哉
600cbd1fce 1515. [func] Allow transfer source to be set in a server statement.
[RT #6496]

implemented by marka, reviewed and documented by jinmei.
Notes:
  lib/dns/zone.c had to be modified manually.
  ARM html files were not regenerated (yet).
2003-09-25 18:16:50 +00:00
Mark Andrews
1160ecfd14 1514. [bug] named: isc_hash_destroy() was being called to early.
[RT #9160]
2003-09-24 23:20:54 +00:00
Mark Andrews
0b1da8124c 1510. [func] New view option "root-delegation-only". Apply
delegation-only check to all TLDs and root.
                        Note there are some TLDs that are NOT delegation
                        only (e.g. DE and MUSEUM) these can be excluded
                        from the checks buy using exclude.

                        root-delegation-only exclude { "DE"; "MUSEUM"; };
2003-09-19 12:39:49 +00:00
Mark Andrews
da34d92aee 1509. [bug] Hint zones should accept delegation-only. Forward
zone should not accept delegation-only.

1508.   [bug]           Don't apply delegation-only checks to answers from
                        forwarders.

1507.   [bug]           Handle BIND 8 style returns to NS queries to parents
                        when making delegation-only checks.
2003-09-19 05:53:28 +00:00
Mark Andrews
4607e7a9b8 1504. [func] New zone type "delegation-only". 2003-09-17 05:24:43 +00:00
Mark Andrews
2f025ec6fe 1503. [port] win32: install libeay32.dll outside of system32. 2003-09-09 03:38:47 +00:00
Tatuya JINMEI 神明達哉
ce28ea0f2f fixed a typo in a comment line: s/compatability/compatibility/ 2003-08-08 22:46:37 +00:00
Mark Andrews
5e9f612524 1498. [port] bsdos: 5.x support. 2003-07-30 01:43:28 +00:00
Mark Andrews
3818601601 remove redundant check [RT #8539] 2003-07-30 00:19:06 +00:00
Tatuya JINMEI 神明達哉
1e271ac738 typo: s/baliwick/bailiwick/
(I hope it is okay to commit this since it is so trivial)
2003-07-29 22:05:01 +00:00
Mark Andrews
974f1d7b49 pass the size of the result buffer in get_reverse 2003-07-25 04:02:54 +00:00
Mark Andrews
1e107b3d7b 1495. [cleanup] Replace hash functions with universal hash. 2003-07-25 02:22:26 +00:00
Mark Andrews
5eb91bd90e silence compiler warnings (HPUX/11i) 2003-07-25 00:01:16 +00:00
Mark Andrews
743ffc91bd 1484. [bug] The number of records reported after a AXFR was wrong.
[RT #6229]

1483.   [bug]           dig axfr failed if the message id failed to match
                        that in the request.  Only the id in the first message
                        is require to match. [RT #8138]
2003-07-17 07:42:00 +00:00
Mark Andrews
ca18417083 1482. [bug] Named could fail to start if the kernel supports
IPv6 but no interfaces are configured.  Similarly
                        for IPv4. [RT #6229]
2003-07-17 07:22:21 +00:00
Mark Andrews
72ddc4cef9 1480. [bug] Provide replay protection for rndc commands. Full
replay protection requires both rndc and named to
                        be updated.  Partial replay protection (limited
                        exposure after restart) is provided if just named
                        is updated.
2003-07-17 06:24:44 +00:00
Mark Andrews
a947b0145f convert bit-string labels to nibbles. 2003-07-08 05:17:20 +00:00
Mark Andrews
5e4f63dbc1 error path could trigger a REQUIRE failure in ns_client_next. 2003-07-04 04:38:54 +00:00
Mark Andrews
21f1794606 1474. [port] Provide strtoul() and memmove() for platforms
without them.
2003-06-24 05:11:53 +00:00
Mark Andrews
ebb9c914f2 Change #1466 resulted in ns_lwdmanager_detach() not always setting the
pointer to NULL.
remove reference after detach
2003-05-05 07:16:44 +00:00
Mark Andrews
24b287037f use "%u" for unsigned arguements 2003-04-22 04:14:14 +00:00
Mark Andrews
a22f967b7e 1469. [func] Log end of outgoing zone transfer at same level
as the start of transfer is logged. [RT #4441]
2003-04-22 04:08:54 +00:00
Mark Andrews
1a4d687359 1468. [func] Internal zones are nolonger for 'rndc status'.
[RT #4706]
2003-04-17 12:11:39 +00:00
Mark Andrews
c7c5645e06 1466. [bug] lwresd configuration errors resulted in memory
and lock leaks.  [RT #5228]
2003-04-17 06:39:33 +00:00
Mark Andrews
b0c2141b23 1464. [bug] Preserve "out of zone" data for outgoing zone
transfers. [RT #5192]
2003-04-17 05:40:45 +00:00
Mark Andrews
492c2a9c24 nxt_setbit() could generate bad bit masks
setting the DS bit in the NXT record would result in a bad signature
being generated.
2003-04-17 03:45:49 +00:00
Mark Andrews
d544aec9ee type/class reversed in ns_client_aclmsg() call. 2003-04-07 02:29:46 +00:00
Mark Andrews
be8aff07bb spelling 2003-03-19 17:43:41 +00:00
Mark Andrews
ea6fe0d54f 1451. [bug] rndc-confgen didn't exit with a error code for all
failures. [RT #5209]
2003-03-03 05:08:56 +00:00
Mark Andrews
b500de3be9 alt-transfer-source-v4 -> alt-transfer-source 2003-02-27 05:12:47 +00:00
Mark Andrews
0c2509b0b9 1449. [bug] query_addbestns() didn't handle running out of memory
gracefully.
developer: marka
reviewer: explorer
2003-02-27 02:11:16 +00:00
Mark Andrews
8b5de97014 1448. [bug] Handle empty wildcards labels.
developer: marka
reviewer: explorer
2003-02-27 00:19:04 +00:00
Mark Andrews
476386968b 1446. [func] Implemented undocumented alternate transfer sources
from BIND 8.  See use-alt-transfer-source,
                        alt-transfer-source-v4 and alt-transfer-source-v6.

                        SECURITY: use-alt-transfer-source is ENABLED unless
                        you are using views.  This may caues a security risk
                        resulting in accidental disclosure of wrong zone
                        content if the master supplying different source
                        content based on IP address.  If you are not certian
                        ISC recommends setting use-alt-transfer-source no;
developer: marka
reviewer: explorer
2003-02-26 23:29:00 +00:00
Mark Andrews
888bb8bf68 1443. [func] Masters lists can now be specified and referenced
in zone masters clauses and other masters lists.
developer: marka
reviewer: explorer
2003-02-26 06:04:03 +00:00
Mark Andrews
b312748a11 1442. [func] New fuctions for manipulating port lists:
dns_portlist_create(), dns_portlist_add(),
                        dns_portlist_remove(), dns_portlist_match(),
                        dns_portlist_attach() and dns_portlist_detach().

1441.   [func]          It is now possible to tell dig to bind to a specific
                        source port.

1440.   [func]          It is now possible to tell named to avoid using
                        certian source ports (avoid-v4-udp-ports,
                        avoid-v6-udp-ports).
developer: marka
reviewer: explorer
2003-02-26 05:05:16 +00:00
Mark Andrews
ee84964a7d 1439. [bug] Named could return NOERROR with certian NOTIFY
failures.  Return NOTAUTH is the NOTIFY zone is
                        not being served.

1438.   [func]          Log TSIG (if any) when logging NOTIFY requests.
developer: marka
reviewer: explorer
2003-02-26 04:16:27 +00:00
Mark Andrews
c3ea698877 1436. [func] dns_zonemgr_resumexfrs() can be used to restart
stalled transfers.

1435.   [bug]           zmgr_resume_xfrs() was being called read locked
                        rather than write locked.  zmgr_resume_xfrs()
                        was not being called if the zone was being
                        shutdown.

1434.   [bug]           "rndc reconfig" failed to initiate the initial
                        zone transfer of new slave zones.
developer: marka
reviewer: explorer
2003-02-26 03:45:59 +00:00
Mark Andrews
e2fb08b85d 1432. [func] The advertised EDNS UDP buffer size can now be set
via named.conf (edns-udp-size).
developer: marka
reviewer: explorer
2003-02-26 02:04:00 +00:00
Mark Andrews
6e0f975309 remove duplicate "the" 2003-02-25 22:40:23 +00:00
Mark Andrews
b587e1d83f spelling 2003-02-07 01:13:13 +00:00
Mark Andrews
a1301ef891 undo (wrong branch) 2003-02-04 06:10:09 +00:00
Mark Andrews
ab4bec8504 checkpoint 2003-02-04 05:44:32 +00:00
Mark Andrews
308094e467 arguements reversed 2003-01-31 12:07:56 +00:00
Mark Andrews
838d608e6f 1422. [func] Log name/type/class when denying a query. [RT #4663] 2003-01-21 06:11:46 +00:00
Mark Andrews
64cc9c8818 1421. [func] Differentiate updates that don't succeed due to
prerequisites (unsuccessful) vs other reasons
                        (failed).
developer: marka
reviews: explorer
2003-01-21 05:18:11 +00:00
Mark Andrews
c7fc6434fe 1418. [bug] 'rndc reconfig' did not cause new slaves to load. 2003-01-20 23:51:23 +00:00
Mark Andrews
9bd478a5e6 1417. [func] ID.SERVER/CHAOS is now a built in zone.
See "server-id" for how to configure.
2003-01-20 05:46:11 +00:00
Mark Andrews
421e4cf66e 1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
[RT #4715]
developer: marka
reviewer: explorer
2003-01-18 03:18:31 +00:00
Mark Andrews
b0c15bd979 1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
from SOA MINIMUM.

1414.   [func]          Support for KSK flag.
2003-01-18 02:40:59 +00:00
Mark Andrews
bf7f253e30 1413. [func] Explictly request the (re-)generation of DS records from
keysets (dnssec-signzone -g).
developer: marka
reviewer: explorer
2003-01-18 00:24:09 +00:00
Mark Andrews
0ffaee887f 1412. [func] You can now specify servers to be tried if a nameserver
has IPv6 address and you only support IPv4 or the
                       reverse. See dual-stack-servers.
2003-01-16 03:59:28 +00:00
Mark Andrews
c86eed4bde 1410. [func] handle records that live in the parent zone, e.g. DS.
developer: marka
reviewer: explorer
2003-01-14 00:28:50 +00:00
Mark Andrews
c314efc295 add comment 2003-01-10 02:37:44 +00:00
Mark Andrews
f4cbe536b1 cygwin support 2002-12-27 03:29:37 +00:00
Mark Andrews
81aea2f2d3 undo wrong branch 2002-12-13 02:51:41 +00:00
Mark Andrews
0020640ff6 checkpoint 2002-12-13 02:37:35 +00:00
Mark Andrews
bdf0739d6e Restore accidentally deleted call to isc_app_start(); [RT #4699]
developer: jinmei
reviewer: marka
2002-12-11 06:31:37 +00:00
Mark Andrews
5b76a09697 1405. [func] Use arc4random() if available.
from: jakob@crt.se
reviewed: marka
2002-12-04 01:19:28 +00:00
Mark Andrews
93e353425a 1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
dnssec-signkey now report their version in the
                        usage message.
2002-12-03 05:01:34 +00:00
Mark Andrews
49a940dc68 1402. [cleanup] A6 has been moved to experimental and is no longer
fully supported.
developer: jinmei
reviewer: marka
2002-11-27 09:52:58 +00:00
Michael Graff
e903df2f01 merge 4319 2002-11-12 23:58:14 +00:00
Michael Graff
994bc04060 merge 3907 2002-11-12 23:42:38 +00:00
Michael Graff
43ee20a821 merge rt4112 2002-11-12 23:38:12 +00:00
Michael Graff
49c6fe9bcc merge rt3892 2002-11-12 23:08:27 +00:00
Michael Graff
eec234d7a2 don't check for result being sane before it's first set. This is
probably related to the removal of isc_app stuff.
2002-11-12 22:57:57 +00:00
Michael Graff
2706bea98e pull down 3625 (code by Mark, pulldown by me)
Note:  this also changes behavior beyond that mentioned in PR 3625
to also look up AAAA and MX records for hosts when 'host foo' is
the command line.

Also note that there will be one more commit here to fix a potential
show stopper.  I'll make that change directly to the mainline.
2002-11-12 22:57:06 +00:00
Michael Graff
4411b9b6e7 pull down rt3507 (work by Mark, checked by me) 2002-11-12 21:52:44 +00:00
Mark Andrews
59ab128c97 1400. [bug] Block the addition of wildcard NS records by IXFR
or UPDATE. [RT #3502]
developer: marka
reveiwer: ogud
2002-11-12 20:16:30 +00:00
Mark Andrews
9977600381 1396. [func] dnssec-signzone: adjust the default signing time by
1 hour to allow for clock skew.
2002-11-04 00:16:05 +00:00
Mark Andrews
440edeebf9 emit explict interface message only if we are about to configure the
first interface.
2002-10-31 04:08:22 +00:00
Mark Andrews
aa39170da8 1394. [func] It is now possible to check if a particular element is
in a acl.  Remove duplicate entries from the localnets
                        acl.

1393.   [port]          Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
                        is not available in the kernel to prevent accidently
                        listening on IPv4 interfaces.
developer: jinmei
reviewer: marka
2002-10-29 04:40:26 +00:00
Mark Andrews
925c021f1f u_int32_t -> isc_uint32_t 2002-10-28 02:35:36 +00:00
Mark Andrews
52fc1457e4 1392. [bug] named-checkzone: update usage. 2002-10-25 01:02:53 +00:00
Mark Andrews
6526fd032f 1391. [func] Add support for IPv6 scoped addresses in named. 2002-10-24 03:52:35 +00:00
Mark Andrews
0f44724dbc 1390. [func] host now supports ixfr. 2002-10-17 23:50:08 +00:00
Mark Andrews
b8fff4f0d7 1390. [func] host now supports ixfr.
developer: marka
reviewer: jinmei
2002-10-17 23:44:35 +00:00
Tatuya JINMEI 神明達哉
b6a4cc6927 prevented 'named-checkconf -z' from stopping due to an intermediate fail
RT #3653

developer: marka
reviewer: jinmei
2002-10-10 13:22:00 +00:00
Tatuya JINMEI 神明達哉
3ac2a99878 further BIND 8 compatiblity changes
- made the output and exit code with the -l option compatible with bind 8

additionally, treated host -t axfr as host "-l -t any -v".

developer: marka
reviewer: jinmei
2002-09-26 11:17:06 +00:00
Tatuya JINMEI 神明達哉
e9b85f0309 host exits with a non-zero code for erroneous results
(RT #3536)
developer: marka
reviewer: jinmei
2002-09-20 06:26:10 +00:00
Mark Andrews
c30d291128 correct typo in usage message.
jinmei/marka
2002-09-19 02:40:15 +00:00
Mark Andrews
79da8302e8 1380. [func] 'rndc recursing' dump recursing queries to
'recursing-file = "named.recursing";'.
2002-09-12 04:17:21 +00:00
Mark Andrews
02b772da47 developer: bwelling
reviewed: marka
Generating a response when the qname matches a wildcard and the type
doesn't exist didn't work; the NXT name was improperly expanded and the
wildcard proof was omitted.
2002-09-11 06:36:17 +00:00
Mark Andrews
a6b416d38c Don't call adjust_interfaces unless IPv6 support is enabled. [RT #3593] 2002-09-11 04:32:29 +00:00
Mark Andrews
77cdba459a missing const 2002-09-10 05:08:53 +00:00
Mark Andrews
dfd0eaf243 missing include 2002-09-10 05:07:56 +00:00
Mark Andrews
a9ae9d743c 1380. [func] 'rndc recursing' dump recursing queries to
'recursing-file = "named.recursing";'.
2002-09-10 04:45:54 +00:00
Mark Andrews
75ace6601e 1379. [func] 'rndc stats' now reports tcp and recursion quota
states.

1378.   [func]          Improved positive feedback for 'rndc {reload|refresh}.

1377.   [func]          dns_zone_load{new}() now reports if the zone was
                        loaded, queued for loading to up to date.

1376.   [func]          New function dns_zone_logc() to log to specified
                        category.
2002-09-10 02:23:46 +00:00
Michael Graff
e3239b40d2 remove the periodic 'still alive' message 2002-09-09 21:20:16 +00:00
Michael Graff
72ea295e09 change the 'I'm alive' messages to be 60 second apart, not 15 2002-09-09 20:03:18 +00:00
Michael Graff
ab7ce5eb6e detach from quota in an error case. I don't know if this is strictly needed,
but it makes sense.  It is probably done later as well, but all places
check for the pointer != NULL, so we'll be ok.
2002-09-08 18:40:58 +00:00
Michael Graff
e64aa1b4f2 add 15-second 'alive' messages (sent to server info channel) and support for a temporary hack, 'rndc timerpoke' 2002-09-08 18:34:04 +00:00
Mark Andrews
9130ab90fe developer: bwelling
reviewer: marka
DNSSEC wildcard negative proof responses were longer than necessary in
some cases; the existence of a node for which the qname is a subdomain
obscures all shallower wildcards.

That is, query for y.x.foo.com.  If the response contains an NXT
at x.foo.com, it's not necessary to prove that there's no wildcard at
*.foo.com, since it wouldn't be matched anyway.
2002-09-06 03:47:56 +00:00
Mark Andrews
3bdf879a53 developer: jinmei
reviewer: marka
1371    [bug]           notify-source-v6, transfer-source-v6 and
                        query-source-v6 with explict addresses and using the
                        same ports as named was listening on could interfere
                        with nameds ability to answer queries sent to those
                        addresses.
2002-08-30 02:05:30 +00:00
Mark Andrews
1b5b46942d developer: mayer
reviewed: marka
1370.   [bug]           dig '+[no]recurse' was incorrectly documented.
2002-08-29 07:45:04 +00:00
Mark Andrews
6b25d2f7f7 developer: bwelling
reviewed: marka
1369.   [bug]           Adding an NS record as the lexicographically last
                        record in a secure zone didn't work.
2002-08-29 05:40:07 +00:00
Mark Andrews
52bf8cbb01 copy_server_list(), add_nameserver() and create_search_list() are private
functions.
2002-08-28 07:04:48 +00:00
Mark Andrews
b6309ed962 developer: jinmei
reviewer: marka
1368.   [func]          remove support for bitstring labels.
2002-08-27 04:53:43 +00:00
Mark Andrews
a2239239cf reviewed: marka
developer: bwelling
don't attempt to generate a wildcard proof unless the zone is secure.
2002-08-19 21:32:56 +00:00
Mark Andrews
301ef360a1 supported multiple listen-on-v6 correctly. 2002-08-17 03:00:49 +00:00
Mark Andrews
741a75f81b reviewed: marka
developer: mayer
relative paths
build against openssl 0.9.6g
2002-08-17 01:34:09 +00:00
Mark Andrews
8689f943a4 reviewed: jinmei
developer: marka
1361.   [func]          Log file name when unable to open memory statistics
                        and dump database files. [RT# 3437]
2002-08-17 00:23:19 +00:00
Mark Andrews
2434ccfde7 reviewed: marka
developer: jinmei
1360.   [func]          Listen-on-v6 now supports specific addresses.
2002-08-16 23:46:11 +00:00
Mark Andrews
306de01400 Re-order include directories. 2002-08-13 21:51:12 +00:00
Mark Andrews
2102584914 add lwres linkage 2002-08-13 01:59:31 +00:00
Danny Mayer
a17bea4f04 Put back missing origin fixes 2002-08-12 19:57:13 +00:00
Danny Mayer
b31e7ab885 Modifications to have dighost.c use liblwres to parse the resolv.conf file. Updates to dig, host and nslookup to increase modularity and use more functions in dighost.c 2002-08-12 18:25:25 +00:00
Danny Mayer
baeb459981 Updated dependencies to include lwres 2002-08-12 18:22:55 +00:00
Danny Mayer
03845b2911 Add the liblwres to the list of paths and lib 2002-08-12 01:31:48 +00:00
Danny Mayer
f7a51394db Add the liblwres to the list of paths and lib 2002-08-11 03:36:24 +00:00
Mark Andrews
95d24aa0d0 prevent assertion failure 2002-08-07 02:03:49 +00:00
Danny Mayer
c9fb8b9f19 Added UF_SHIFT flag as NT requires it to add an account. W2K and WXP do not require it. 2002-08-06 03:35:30 +00:00
Mark Andrews
a6211a2f23 1354. [bug] nsupdate was extremely wasteful of memory. 2002-08-06 03:21:59 +00:00
Mark Andrews
4c342614f8 1354. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME. 2002-08-06 01:50:28 +00:00
Mark Andrews
4c8f0896dc 1352. [bug] dig, host, nslookup: when falling back to TCP use the
current search list entry (if any). [RT #3374]
Original change missed one case.
2002-08-06 00:35:01 +00:00
Danny Mayer
0956e3d607 Add check and warning message for Windows 2000 systems not running Service Pack 2 or later 2002-08-03 01:31:48 +00:00
Mark Andrews
6c6673405c 1352. [bug] dig, host, nslookup when failing back to TCP use the
current search entry (if any). [RT #3374]
2002-08-02 12:49:46 +00:00
Mark Andrews
a1d4da0dc7 initalise str 2002-08-01 06:51:32 +00:00
Danny Mayer
8ef03ac274 Port needed cast to isc_uint16_t as it is a 16 bit quantity 2002-08-01 03:28:01 +00:00
Danny Mayer
977265bc5d Fixed fclose to close the lockfile and not fd 2002-08-01 03:25:34 +00:00
Danny Mayer
6f1437add9 Fixed missing newline and continuation character (\n\) 2002-08-01 03:23:36 +00:00
Mark Andrews
31fd8a17fb missing %s in format 2002-07-31 02:22:15 +00:00
Mark Andrews
87f4715d6c 1344. [func] Log if the serial number on the master has gone backwards.
If you have multiple machines specified in the masters
                        clause you may want to set 'multi-master yes;' to suppress
                        this warning.
2002-07-29 06:58:46 +00:00
Mark Andrews
1431917c7c 1343. [func] Log successful notifies received (info). Adjust log level
for failed notifies to notice.
2002-07-29 05:15:32 +00:00
Mark Andrews
ec3984e9df 1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
lookups.  Bit string lookups are no longer attempted.
2002-07-25 05:46:07 +00:00
Mark Andrews
f462e2f372 remove unused label 2002-07-25 05:16:10 +00:00
Mark Andrews
b972ff033b 1338. [func] IPv6 synthesis is now performed for IP6.ARPA bit
string queries.
2002-07-24 11:53:52 +00:00
Mark Andrews
fa4e143801 1337. [func] IPv6 synthesis is now performed for both IP6.ARPA
and IP6.INT nibble queries.
2002-07-24 07:02:50 +00:00
Mark Andrews
34c1d0e1b6 For some zones, querying for a non-DS record, then a DS record would
time out and SERVFAIL.
2002-07-23 03:40:19 +00:00
Mark Andrews
edc944d166 Change #1331 (Generate DNSSEC wildcard proofs) contained a memory leak. 2002-07-23 03:33:12 +00:00
Mark Andrews
0f042c7c44 - improves tests of negative insecurity proofs, including tests for the
SOA TTL 0 hack.
- adds +noauth to a few invocations of dig where the authority section is
  not important.
- removes the bogus first half of the dynamic zone test, which didn't
  do anything other than make the test suite fail if run twice.
- fixed the fact that the keyless.example zone wasn't being securely
  delegated.
bwelling
2002-07-19 06:20:24 +00:00
Mark Andrews
c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews
4d9f3f00d9 1249. [func] named-checkzone will now check if nameservers that
appear to be IP addresses.  Available modes "fail",
                        "warn" (default) and "ignore" the results of the
                        check.
2002-07-19 02:34:58 +00:00
Mark Andrews
240a5d160a When returning a delegation from the cache and the DO bit is set, always
try to add a DS.  The test for the existence of the sigrdataset was bogus
and crashed the server.

to reproduce:
 - create a signed parent & child zone
 - query a recursive server for the ns record of the child
 - query the recursive server for a name in the child with +norec
bwelling
2002-07-17 06:09:41 +00:00
Mark Andrews
8e5017af68 Recursive quota should apply to tcp queries when the tcp quota is reached. 2002-07-11 05:45:33 +00:00
Mark Andrews
bca7f81db5 all references from -m to -j 2002-07-11 05:36:12 +00:00
Mark Andrews
e14e853d86 usage should show -j 2002-07-11 04:50:36 +00:00
Mark Andrews
e9359db5e9 use -j rather than -m to read the journal if it exists. 2002-07-11 04:49:27 +00:00
Mark Andrews
ba06508f01 ISC_MEM_DEBUGRECORD was turned on accidently.
'm' option was missing from isc_commandline_parse()
2002-07-11 04:40:07 +00:00
Mark Andrews
5d98cf67b3 white space cleanup 2002-07-10 01:13:44 +00:00
Mark Andrews
454c78d02c runt -> short (< header size) 2002-07-10 01:03:14 +00:00
Mark Andrews
475fe52dc3 1345. [bug] If the tcpquota was exhausted it was possible to
to trigger a INSIST() failure.
2002-07-09 02:41:36 +00:00
Mark Andrews
5af560664d 1342. [port] darwin: ifconfig.sh now supports darwin. 2002-07-06 21:54:44 +00:00
Mark Andrews
268c7ef56b don't apply cache-filename to "_bind" view. 2002-07-04 05:03:46 +00:00
Mark Andrews
0f8f42a09e 1341. [port] linux: Slackware 4.0 needs <asm/unistd.h>. 2002-07-03 05:09:43 +00:00
Mark Andrews
8d77066ba0 1342. [bug] dnssec-signzone usage message was misleading.
1341.   [bug]           If the last RRset in a zone is glue, dnssec-signzone
                        would incorrectly duplicate its output and sign it.
2002-07-01 07:37:38 +00:00
Mark Andrews
70f8c70cdd 1335. [bug] Options should apply to the internal _bind view. 2002-06-26 04:48:12 +00:00
Mark Andrews
ac65e45126 1333. [func] Query log now says if the query was signed (S) or
if EDNS was used (E).
2002-06-25 04:12:51 +00:00
Mark Andrews
0423090da1 1332. [func] Log TSIG key used w/ outgoing zone transfers. 2002-06-25 04:08:43 +00:00
Mark Andrews
8f1bf2fb3a null pointer dereference 2002-06-20 00:21:35 +00:00
Mark Andrews
0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews
6a3c86ff43 1327. [bug] nsupdate: allow white space base64 key data. 2002-06-17 02:30:40 +00:00
Mark Andrews
cd9bfe5b25 1323. [func] Option 'flush-zones-on-shutdown <boolean>;'. 2002-06-13 05:54:34 +00:00
Mark Andrews
dcd371be7d 1220. [func] Extended rndc dumpdb to support dumping of zones and
view selection: 'dumpdb [-all|-zones|-cache] [view]'.
2002-06-13 05:12:54 +00:00
Mark Andrews
cc4928ec71 1219. [func] New category 'update-security'. 2002-06-12 06:29:49 +00:00
Mark Andrews
a483e67c4c 1210. [func] "dig axfr" now reports the number of messages
as well as the number of records.
2002-05-29 05:31:05 +00:00
Mark Andrews
a1edcd1b8d 1203. [func] Use "dataready" accept filter if available. 2002-05-27 00:40:23 +00:00
Mark Andrews
7c23b791f4 1301. [func] Log zone when unable to get private keys to update
zone.  Log zone when NXT records are missing from
                        secure zone.
2002-05-24 06:26:04 +00:00
Mark Andrews
f013b11377 1213. [func] Report view associated with client if it is not a
standard view (_default or _bind).
2002-05-24 06:22:30 +00:00
Mark Andrews
acc8b7ac3d 1299. [port] Darwin uses (unsigned long) for size_t. [RT #2590] 2002-05-23 04:32:30 +00:00
Mark Andrews
e7bb307667 1298. [func] dig: now supports +[no]cl +[no]ttlid. 2002-05-22 04:58:30 +00:00
Mark Andrews
4c83dd7f22 1291. [bug] "recursion available: {denied,approved}" was too
confusing.
2002-05-16 04:05:42 +00:00
Mark Andrews
57e0f58b3f 1289. [port] Openserver: ifconfig.sh support. 2002-05-13 04:18:07 +00:00
Mark Andrews
26cf4737b3 1288. [port] Openserver: the value FD_SETSIZE depends on whether
<sys/param.h> is included or not.  Be consistant.
2002-05-10 06:41:55 +00:00
Mark Andrews
88c2b83cc5 1282. [bug] ns_server_destroy() failed to set *serverp to NULL. 2002-05-08 04:45:43 +00:00
Mark Andrews
93e6ebcd0a 1277. [bug] Failure to write pid-file should not be fatal on
reload. [RT #2861]
2002-05-03 05:28:29 +00:00
Mark Andrews
0dfac52f06 null pointer de-reference 2002-04-29 23:43:46 +00:00
Mark Andrews
c4a9ce445c 1274. [func] preferred-glue option from BIND 8.3. 2002-04-26 00:40:37 +00:00
Mark Andrews
a04a323f9a 1273. [bug] The dnssec system test failed to remove the correct
files.
2002-04-24 00:46:25 +00:00
Mark Andrews
dd02289085 1272. [bug] Dig, host and nslookup were not checking the address
the answer was coming from against the address it was
                        sent to. [RT# 2692]
2002-04-19 04:06:53 +00:00
Mark Andrews
15f358ed4e 1270. [func] Nsupdate will report the address the update was
sent to.
2002-04-18 00:22:17 +00:00
Mark Andrews
2b1c71b134 1244. [bug] Receiving a TCP message from a blackhole address would
prevent further messages being received over that
                        interface.
2002-04-03 05:30:03 +00:00
Mark Andrews
7791dd06ea 1242. [bug] named-checkzone failed if a journal existed. [RT #2657] 2002-04-02 06:54:07 +00:00
Mark Andrews
7d3458a972 1240. [bug] It was possible to leak zone references by
specifying an incorrect zone to rndc.
2002-03-29 01:10:22 +00:00
Mark Andrews
7c441b7f4a 1239. [bug] Under certain circumstances named could continue to
use a name after it had been freed triggering
                        INSIST() failures.  [RT #2614]
2002-03-28 04:03:50 +00:00
Mark Andrews
7f20fd8ebb 1237. [bug] nslookup: "set q=type" failed. 2002-03-20 18:20:03 +00:00
Brian Wellington
b3c7dffe07 the 'ID mismatch' message printed by dig should show the expected and received
message IDs.
(now to figure out why they don't match...)
2002-03-14 18:11:38 +00:00
Brian Wellington
3c5f4710cf remove extraneous blank lines 2002-03-13 23:36:14 +00:00
Mark Andrews
2dd99c098c 1234. [bug] 'rrset-order' and 'sortlist' should be additive
not exclusive.

1223.   [func]          'rrset-order' partially works 'cyclic' and 'random'
                        are supported.
2002-03-07 13:46:41 +00:00
Mark Andrews
608c703d12 1221. [bug] Zone types 'master', 'slave' and 'stub' were not being
compared case insensitively. [RT #2542]
2002-03-06 23:52:38 +00:00
Mark Andrews
feb8ae0931 1220. [func] Support for APL rdata type. 2002-03-06 07:41:25 +00:00
Mark Andrews
27151990b2 1219. [func] Named now reports the TSIG extended error code when
signature verification fails. [RT #1651]
2002-03-05 00:36:44 +00:00
Mark Andrews
3561e645d7 1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1 2002-03-01 11:28:28 +00:00
Mark Andrews
e53a5a116f 1209. [bug] Dig, host, nslookup were not checking the message ids
on the responses. [RT #2454]
2002-02-21 04:48:00 +00:00
Mark Andrews
e1cbf95aec regen 2002-02-20 04:31:44 +00:00
Mark Andrews
a7038d1a05 copyrights 2002-02-20 03:35:59 +00:00
Andreas Gustafsson
6a8832f784 There are four "i":s in "initialize" 2002-02-20 01:45:15 +00:00
Brian Wellington
4014b6a8ae although a privately secure zone was signed, it was never tested. 2002-02-13 01:32:12 +00:00
Mark Andrews
d03d2dbfe9 distclean should remove r1.htm 2002-02-12 05:35:08 +00:00
Mark Andrews
c73c1c33ec 1193. [bug] dig +besteffort parsing didn't handle packet
truncation.  dns_message_parse() has new flag
                        DNS_MESSAGE_IGNORETRUNCATION.
2002-02-12 02:10:33 +00:00
Brian Wellington
64ea670052 the dynamic zone test wasn't working as expected since the child zone wasn't
securely delegated.
2002-02-06 03:28:59 +00:00
Brian Wellington
6c62c34a5b signing the root zone didn't work. 2002-02-05 05:16:11 +00:00
Danny Mayer
51693f0bd9 Added case to ensure that normal cleanup code is run during system shutdown 2002-02-02 00:56:40 +00:00
Brian Wellington
4ca54c8f3b ns5 is the incorrectly configured server, not ns4. 2002-02-01 01:56:00 +00:00
Brian Wellington
94b4f2728e rndc unfreeze should reload the zone. 2002-01-30 00:55:15 +00:00
Brian Wellington
f29583dca7 mention freeze & unfreeze in the usage 2002-01-30 00:20:50 +00:00
Brian Wellington
8fb0f1fa42 regen 2002-01-29 23:30:32 +00:00
Brian Wellington
a20b2c5f53 document SIG(0) support. 2002-01-29 23:30:12 +00:00
Mark Andrews
0e84be2c52 unsigned char -> char 2002-01-25 03:12:07 +00:00
Brian Wellington
b6279d0b4b Don't freeze an already frozen zone. 2002-01-24 09:58:42 +00:00
Brian Wellington
b2ca6fd3a8 #1187 was both unclean and broken. Fix it and clean it up. 2002-01-23 08:46:40 +00:00
Mark Andrews
023dd2cfe0 reverse also-notify changes. dns_zone_setalsonotify() has relaxed its calling
convention.
Correct INSIST
2002-01-23 02:12:24 +00:00
Andreas Gustafsson
473ca0bf8c Added RT #2399 regression test 2002-01-22 22:27:29 +00:00
Andreas Gustafsson
48b0f5ff87 1191. [bug] A dynamic update removing the last non-apex name in
a secure zone would fail. [RT #2399]
2002-01-22 22:26:45 +00:00
Brian Wellington
cde7dfea4c 1190. [func] Add the "rndc freeze" and"rndc unfreeze" commands.
[RT #2394]

Basically, "freeze" disables dynamic updates to a zone, syncs the journal
file into the master file, and removes the journal.  This allows manual
edits of a dynamic zone file without stopping the server, since the
zone is temporarily considered non-dynamic.  "unfreeze" re-enables dynamic
updates to a zone.

So, instead of the old:
	rndc stop
	edit master file
	remove journal
	restart server
you can now do:
	rndc freeze zone
	edit master file
	rndc reload zone
	rndc unfreeze zone
which doesn't require stopping the server.

About everyone here at the secure dynamic update workshop wanted this.
It will be documented soon.
2002-01-22 22:05:59 +00:00
Andreas Gustafsson
ec52edeff2 missing format string argument; add format checking 2002-01-22 21:45:07 +00:00
Brian Wellington
15033eed4d make a few dynamic update log messages more informative 2002-01-22 16:05:51 +00:00
Brian Wellington
a5c077e40c 1181. [func] Add the "key-directory" configuration statement,
which allows the server to look for online signing
			keys in alternate directories.
2002-01-21 11:00:25 +00:00
Brian Wellington
2ca556300b 1180. [func] dnssec-keygen should always generate keys with
protocol 3 (DNSSEC), since it's less confusing
			that way.
2002-01-21 10:13:20 +00:00
Brian Wellington
97527fc03c 1179. [func] Add SIG(0) support to nsupdate. 2002-01-21 07:59:15 +00:00
Mark Andrews
b627356826 re-do:
1168.   [bug]           Empty also-notify clauses were not handled. [RT #2309]
2002-01-14 04:16:03 +00:00
Mark Andrews
e9472e9f18 1175. [bug] named-checkzone and named-checkconf failed to call
dns_result_register() at startup which could
                        result in runtime exceptions when printing
                        "out of memory" errors. [RT #2335]
2002-01-14 01:42:04 +00:00
Andreas Gustafsson
669e9657c7 Split off the named.conf grammar into a source module separate
from the configuration parser, to facilitate reuse of the latter for
parsing non-BIND configuration files
2002-01-04 02:32:16 +00:00
Mark Andrews
9ab461a6ff 1169. [func] Identify recursive queries in the query log. 2001-12-29 05:31:26 +00:00
Mark Andrews
da5d1cf1b1 1164. [bug] "Not Implemented" should be reported as NOTIMP. 2001-12-19 12:16:47 +00:00
Mark Andrews
2c63b97c09 update tests for MD and MF know longer being loadable 2001-12-12 06:24:11 +00:00
Mark Andrews
11dbb6dc6b silently reject MD and MF updates. 2001-12-11 23:53:13 +00:00
Mark Andrews
8e40433e34 1158. [func] Report the client's address when logging notify
messages.
2001-12-10 23:09:24 +00:00
Brian Wellington
e57e32e575 restructuring - build the nxt chain independently from the signing process 2001-12-08 00:38:40 +00:00
Brian Wellington
8740bb8af0 remove #defines that shouldn't be there. 2001-12-07 01:55:42 +00:00
Brian Wellington
68d9a8bddf Fix a typo (I hope) in marka's keys-in-match-* patch. 2001-12-07 01:34:08 +00:00
Andreas Gustafsson
1b1f3fca3a spacing 2001-12-06 18:55:52 +00:00
Mark Andrews
880723fb13 1157. [func] match-clients and match-destinations now accept
keys. [RT #2045]
2001-12-06 04:38:51 +00:00
Mark Andrews
3acadb07f4 wrong test to see if snprintf had a too small buffer. 2001-12-01 00:39:22 +00:00
Mark Andrews
cf300e03de 1153. [func] 'rndc {stop|halt} -p' now reports the process id
of the instance of named being shutdown.
2001-12-01 00:34:27 +00:00
Andreas Gustafsson
fdba3257ce one more ignored return value 2001-11-30 02:09:48 +00:00
Andreas Gustafsson
1f1d36a87b Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable
2001-11-30 01:59:49 +00:00
Andreas Gustafsson
d5cc778a3e tweaked messages 2001-11-30 01:09:11 +00:00
Andreas Gustafsson
242bba8991 1151. [bug] nslookup failed to check that the arguments to
the port, timeout, and retry options were
                        valid integers and in range. [RT #2099]

1150.   [bug]           named incorrectly accepted TTL values
                        containing plus or minus signs, such as
                        1d+1h-1s.

1149.   [func]          New function isc_parse_uint32().
2001-11-30 01:02:18 +00:00
Mark Andrews
02bdc23f8e 1148. [func] 'rndc-confgen -a' provide positive feedback. 2001-11-29 23:17:22 +00:00
Mark Andrews
ef29912666 1147. [func] Set IPV6_IPV6ONLY on IPv6 sockets if supported by
the OS.  listen-on-v6 { any; }; should no longer
                        result in IPv4 queries be accepted.  Similarly
                        control { inet :: ... }; should no longer result
                        in IPv4 connections being accepted.  This can be
                        overridden at compile time by defining
                        ISC_ALLOW_MAPPED=1.
2001-11-29 13:14:33 +00:00
Andreas Gustafsson
06a949d2ce 1145. [func] host no longer reports a NOERROR/NODATA response
by printing nothing. [RT #2065]
2001-11-29 01:21:19 +00:00
Andreas Gustafsson
db080b7310 need <isc/print.h> 2001-11-29 01:14:35 +00:00
Andreas Gustafsson
9ecb35e7d4 Rewrote code that prints the silly human-readable RR type names to
handle all possible RR types, and made it much smaller in the process
2001-11-29 01:08:43 +00:00
Brian Wellington
6785447aaf use dns_diff_applysilently 2001-11-29 00:39:07 +00:00
Brian Wellington
0b81e99ddf 1144. [bug] rndc-confgen would crash if both the -a and -t
options were specified. [RT #2159]
2001-11-28 21:44:19 +00:00
Andreas Gustafsson
5c898d95dc regenerated 2001-11-28 02:52:31 +00:00
Andreas Gustafsson
cd801a4ed8 The dig help message did not documents the -b, -k, and +noqr options,
and some options were less than logically grouped [RT #2151]
2001-11-28 02:46:21 +00:00
Brian Wellington
8771fbe4a2 1142. [bug] dnssec-signzone would fail to delete temporary files
in some failure cases. [RT #2144]
2001-11-27 22:08:58 +00:00
Brian Wellington
b541c10d04 1141. [bug] When named rejected a control message, it would
leak a file descriptor and memory.
2001-11-27 21:51:31 +00:00
Andreas Gustafsson
c01237c6bc 1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments
to the -s option. [RT #2138]
2001-11-27 20:59:52 +00:00
Andreas Gustafsson
e181d9899b regenerated 2001-11-27 18:56:18 +00:00
Andreas Gustafsson
06a316a2fe command example was missing TTL (reported in private email by Bdale Garbee <bdale@gag.com> 2001-11-27 18:55:20 +00:00
Mark Andrews
60213f2815 1139. [func] It is now possible to flush a given name from the
caches via 'rndc flushname name [view]'.  [RT #2051]
2001-11-27 04:06:17 +00:00
Andreas Gustafsson
91cd0f93ad sizeof style 2001-11-27 01:56:32 +00:00
Andreas Gustafsson
f1b6872550 Do not put a space before ';' when terminating a statement or in a 'for' statement. 2001-11-27 00:56:32 +00:00
Andreas Gustafsson
6b31d9c568 1136. [bug] CNAME records synthesized from DNAMEs did not
have a TTL of zero as required by RFC2672
                        [RT #2129]
2001-11-26 22:54:16 +00:00
Mark Andrews
ee80f45064 1135. [func] You can now override the default syslog() facility for
named/lwresd at compile time. [RT #1982]
2001-11-23 01:15:07 +00:00
Danny Mayer
c2cee22ec1 Added builtin.c to build 2001-11-22 03:12:00 +00:00
Danny Mayer
7869e8ad05 Braces were missing when isc__strerror was added 2001-11-22 03:11:01 +00:00
Andreas Gustafsson
acf6bcebf9 style 2001-11-22 02:18:52 +00:00
Andreas Gustafsson
9a762177e6 style 2001-11-22 01:59:02 +00:00
Andreas Gustafsson
27f9274cb4 nsupdate should not take octal and hex TTLs 2001-11-22 00:59:18 +00:00
Danny Mayer
d5f394f4c4 Change strerror references to use isc__strerror [RT #1689] 2001-11-21 05:07:25 +00:00
Danny Mayer
05903e6b3a Added libbind9 to list of DLL's to install in System32 2001-11-21 05:04:13 +00:00
Andreas Gustafsson
3cac42f8db libbind9 requires libdns and libisccfg 2001-11-21 02:19:02 +00:00
Andreas Gustafsson
3c17c8b945 ignore libtool stuff 2001-11-21 02:16:29 +00:00
Andreas Gustafsson
d2e371201c the named.conf options block should not apply to the built-in views 2001-11-20 22:30:35 +00:00
Andreas Gustafsson
6af3a0d53c properly quote embedded newlines in string 2001-11-20 18:46:43 +00:00
Mark Andrews
4072dfb9b8 1132. [func] Improve UPDATE prerequisite failure diagnotic messages. 2001-11-20 05:04:41 +00:00
Andreas Gustafsson
17453368fa Reimplemented the built-in CHAOS zones using sdb. 2001-11-20 01:18:15 +00:00
Danny Mayer
707b733dc3 Add missing include file 2001-11-18 06:21:35 +00:00
Danny Mayer
cff4f731e4 Fix to eliminate extra cursor and ico information 2001-11-18 06:19:17 +00:00
Danny Mayer
33b8775d3a Updated to support tree organization changes and to support the lib/bind9 library code 2001-11-18 03:11:06 +00:00
Danny Mayer
0021672451 Added proper code for retrieving the hostname 2001-11-18 03:03:42 +00:00
Andreas Gustafsson
cde2f4dabe style 2001-11-16 23:58:39 +00:00
Andreas Gustafsson
92094d44a2 1131. [bug] The match-destinations view option did not work with
IPv6 destinations. [RT #2073, #2074]
2001-11-16 20:01:57 +00:00
Brian Wellington
d9af67ef70 add RSA to the secalgs list in rdata.c (as a synonym for RSAMD5), remove the
special case code in dnssec-keygen to parse RSA.
2001-11-15 19:44:52 +00:00
Brian Wellington
47b4920f08 add the undocumented -S (simple output format) option 2001-11-15 00:51:23 +00:00
Brian Wellington
420e5e1022 retry connecting on all errors except CANCELED, not just on CONNREFUSED. 2001-11-14 23:54:29 +00:00
Andreas Gustafsson
f547209bf6 more leftovers 2001-11-14 23:16:49 +00:00
Andreas Gustafsson
ca1ecf38c6 forgot to remove an UNLOCK() in previous change 2001-11-14 23:15:22 +00:00
Brian Wellington
3f96cf3e4f Allow up to 10 addresses, not 4. 2001-11-14 23:14:29 +00:00
Brian Wellington
b6b9d8b843 1127. [func] rndc: If the server to contact has multiple addresses,
try all of them.
2001-11-14 23:12:18 +00:00
Brian Wellington
08e4f1ac94 oops, inadvertantly checked in a change here. 2001-11-14 22:14:19 +00:00
Brian Wellington
b493dfe8bc Add bind9_getaddresses(), a consistent version of the get_address function
from dig/host/nslookup, nsupdate, and rndc.  This should make it
easier to have the various programs support multiple addresses for a hostname.
2001-11-14 22:08:38 +00:00
Andreas Gustafsson
31f6e44dca 1126. [bug] The server could access a freed event if shut
down while a client start event was pending
                        delivery. [RT #2061]
2001-11-14 22:00:22 +00:00
Andreas Gustafsson
fbdbb3e8fa spacing 2001-11-14 19:11:06 +00:00
Mark Andrews
6d6529b5e5 1125. [bug] rndc: -k missing from usage. [RT #2057] 2001-11-14 06:42:46 +00:00
Mark Andrews
0b07b9482c 1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail
now documented. [RT #2052]
2001-11-14 06:34:24 +00:00
Mark Andrews
c0fe9b0d1b 1123. [bug] dig +[no]fail did not match description. [RT #2052] 2001-11-14 06:31:38 +00:00
Andreas Gustafsson
10a6442013 typo 2001-11-14 02:03:43 +00:00
Mark Andrews
80dd46d7aa 1113. [bug] allow-update/allow-update-forwarding did not work
when specified in a view.  [RT #2014]
2001-11-08 05:36:23 +00:00
Andreas Gustafsson
868c254c18 regenerated 2001-11-08 00:14:00 +00:00
Andreas Gustafsson
f5385613e2 note that the +[no]cmd option cannot be overridden on a per-query
basis [RT #2004]
2001-11-08 00:13:54 +00:00
Andreas Gustafsson
66923d616a spacing 2001-11-07 23:01:41 +00:00
Mark Andrews
afeabf9f70 1120. [bug] dig only accept valid abbreviations of +options. 2001-11-07 05:40:48 +00:00
Mark Andrews
3842a051ba 1109. [bug] nsupdate accepted illegal ttl values.
e.g. "update add foo -0 IN A 1.2.3.4"
simlified ttl range processing by using unsigned long.
2001-11-07 04:44:09 +00:00
Mark Andrews
773e64ec15 try-edns is no more 2001-11-07 04:25:19 +00:00
Mark Andrews
be9932698b max-adb-size is no more.
1073.  [bug]           The adb cache should also be space driven.
                       [RT #1915, #1938]
2001-11-07 03:52:20 +00:00
Andreas Gustafsson
04f158ce9a 1107. [bug] nsupdate could catch an assertion failure if an
invalid domain name was given as the argument to
                        the "zone" command.
2001-11-06 20:21:42 +00:00
Brian Wellington
0e40083fdd @DNS_OPENSSL_LIBS@ -> @DNS_CRYPTO_LIBS@ 2001-11-06 20:05:13 +00:00
Andreas Gustafsson
d2a23df349 clear errno before calling strtol() 2001-11-06 19:59:38 +00:00
Brian Wellington
78baa4ccb8 some files weren't being removed. 2001-11-06 19:32:54 +00:00
Brian Wellington
62c1fe7b45 1106. [bug] After seeing an out of range TTL, nsupdate would
treat all TTLs as out of range. [RT #2001]
2001-11-06 17:46:35 +00:00
Mark Andrews
72499be79f 1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970] 2001-11-05 04:19:56 +00:00
Andreas Gustafsson
43c69727ea In several places, dighost.c called cancel_lookup() and then called
requeue_lookup() on the canceled lookup.  Because cancel_lookup()
resets the retry count of the lookup to zero, the requeued lookups
would not be retried at all (for example, in the case of UDP NS
queries executed when doing "dig +search") or, in the case of TCP
queries, retried indefinitely since the unsigned retry count of zero
was subsequently decremented, causing it to wrap around to the largest
unsigned integer value.
[RT #1940]
2001-10-31 21:55:31 +00:00
Andreas Gustafsson
589dce8281 spacing 2001-10-31 20:39:39 +00:00
Andreas Gustafsson
5cd7e9d4db 1083. [bug] The default control channel listened on the
wildcard adress, not the loopback as documented.
2001-10-31 19:35:19 +00:00
Andreas Gustafsson
cc8e8b59d6 1082. [bug] The -g option to named incorrectly caused logging
to be sent to syslog in addition to stderr.
2001-10-31 17:42:04 +00:00
Andreas Gustafsson
17b687ef36 1080. [bug] BIND 8 compatibility: accept bare IP prefixes
as the second element of a two-element top level
                        sort list statement. [RT #1964]
2001-10-30 20:19:34 +00:00
Andreas Gustafsson
cd60cef97d rewrote parts of 1079. to reduce code duplication and to support
a bare 'localhost' or 'localnets' at the top level of the sortlist
2001-10-30 19:45:33 +00:00
Mark Andrews
998358fa90 1079. [bug] BIND 8 compatibility: accept bare elements at top
level of sort list treating them as if they were
                        a single element list.  [RT #1963]
2001-10-30 06:41:58 +00:00
Andreas Gustafsson
fde3820de9 AXFRs were misidentified as AXFR-style IXFRs in log messages 2001-10-30 00:55:25 +00:00
Andreas Gustafsson
f33fe250cf running out of memory during ns_client_t construction could crash server [RT #409] 2001-10-30 00:48:25 +00:00
Andreas Gustafsson
e8108e60c9 removed empty line 2001-10-29 19:30:11 +00:00
Andreas Gustafsson
479c6fc458 disable change 1069 since it makes the problem of caching server
memory growth worse rather than better, at least under some load conditions
2001-10-29 19:10:42 +00:00
Andreas Gustafsson
b352902413 1077. [func] Do not accept further recursive clients when
the total number of of recursive lookups being
                        processed exceeds max-recursive-clients, even
                        if some of the lookups are internally generated.
                        [RT #1915, #1938]
2001-10-29 19:02:48 +00:00
Andreas Gustafsson
f2b515e117 more compiler warning elimination 2001-10-26 23:18:51 +00:00
Andreas Gustafsson
9615df2e83 eliminate compiler warning 2001-10-26 23:04:17 +00:00
Andreas Gustafsson
4785e8e98a clarify log message reporting number of CPUs [RT #1948] 2001-10-26 22:54:22 +00:00
Brian Wellington
5fc04b8135 add an assertion check (which will never be triggered) 2001-10-26 21:08:03 +00:00
Mark Andrews
081cff0c33 1073. [bug] The adb cache should also be space driven,
max-adb-size.  [RT #1915, #1938]
2001-10-25 04:57:46 +00:00
Andreas Gustafsson
2562a84dc5 make error message issued when exceeding the recursive client
quota more meaningful to users
2001-10-25 01:50:15 +00:00
Mark Andrews
ee3085e9e2 Add '-m usage'.
Add '-m' to usage messages.
2001-10-25 01:07:45 +00:00
Andreas Gustafsson
d352f188cb 1072. [bug] The TCP client quota could be exceeded when
recursion occurred. [RT #1937]
2001-10-25 00:13:37 +00:00
Andreas Gustafsson
3d38596530 1071. [bug] Sockets listening for TCP DNS connections
specified an excessive listen backlog. [RT #1937]
2001-10-25 00:12:07 +00:00
Mark Andrews
a7cb695600 1070. [bug] Copy DNSSEC OK (DO) to response as specified by
draft-ietf-dnsext-dnssec-okbit-03.txt.
2001-10-24 21:47:12 +00:00
Andreas Gustafsson
5b4f07a4f3 redid 1.204 using a subroutine to reduce code duplication and
to eliminate a rather confusing for loop
2001-10-24 18:55:04 +00:00
Mark Andrews
b19619260f 1069. [func] Kill oldest recursive query when recursive query
quota is exhausted.
2001-10-24 03:10:18 +00:00
Mark Andrews
5d4bffa427 cancelled fetches wern't being detected. 2001-10-23 06:04:37 +00:00
Mark Andrews
f0a464d58a memory leak on error. 2001-10-23 06:01:14 +00:00
Brian Wellington
e7468041e7 silence compiler warning 2001-10-22 23:50:31 +00:00
Brian Wellington
b9043a19e2 missing ISC_TF 2001-10-22 23:49:13 +00:00
Mark Andrews
2f6d1483f6 1064. [bug] Do not shutdown active interfaces if we are unable
to scan the list of interfaces.  [RT #1921]
2001-10-22 03:31:24 +00:00
Andreas Gustafsson
32d248107a 1062. [bug] If the control channel listener socket was shut
down before server exit, the listener object could
                        be freed twice. [RT #1916]
2001-10-19 21:00:12 +00:00
Andreas Gustafsson
3b19037ccd removed unnecessary includes 2001-10-19 19:05:42 +00:00
Brian Wellington
05a1fd6093 more minor cleanup 2001-10-18 22:36:52 +00:00
Brian Wellington
f6132a5038 minor code restructure 2001-10-18 00:40:50 +00:00
Andreas Gustafsson
5a23b8523d spelling 2001-10-17 19:34:07 +00:00
Andreas Gustafsson
0cf9ce19cc 1057. [bug] Reloading the server after adding a "file" clause
to a zone statement could cause the server to
                        crash due to a typo in change 1016.
2001-10-17 18:57:01 +00:00
Mark Andrews
2ba574f329 1056. [bug] Rndc could catch an assertion failure on SIGINT due
to an uninitialized variable. [RT #1908]
2001-10-17 03:59:44 +00:00
Andreas Gustafsson
3c3fe07225 1055. [func] Version and hostname queries can now be disabled
using "version none;" and "hostname none;",
                        respectively.
(for consistency with "pid-file none" and each other)
2001-10-16 22:18:59 +00:00
Andreas Gustafsson
8d2b885018 The option for disabling the PID file is now pid-file none, not pid-file "none" 2001-10-16 20:04:41 +00:00
Andreas Gustafsson
3ad07fa335 1053. [bug] Dig did not increase its timeout when receiving
AXFRs unless the +time option was used. [RT #1904]
2001-10-15 20:40:36 +00:00
Brian Wellington
0ebade1fcd mention [filename] in the help. 2001-10-15 20:23:47 +00:00
Bob Halley
392b3526d8 The server was segfaulting comparing NULL pidfile to "none". The correct
comparison is filename, not pidfile.
2001-10-13 20:13:53 +00:00
Andreas Gustafsson
79432444e8 RFC1123 says ignore the RD bit in multicast requests, not
FORMERR multicast requests with RD set
2001-10-13 01:10:26 +00:00
Andreas Gustafsson
afe5729a33 in revision 1.182, presumably a & was intended where a |= was written 2001-10-13 00:44:24 +00:00
Andreas Gustafsson
fc9acafe15 spacing 2001-10-12 23:54:03 +00:00
Andreas Gustafsson
fa2fb620c7 1051. [bug] Do not ignore a network interface completely just
because it has a noncontiguous netmask.  Instead,
                        omit it from the localnets ACL and issue a warning.
                        [RT #1891]
2001-10-12 23:05:58 +00:00
Mark Andrews
9bdb01e6c3 1049. [func] pid-file "none"; will disable writing a pid file.
[RT #1848]
2001-10-12 05:40:41 +00:00
Mark Andrews
ff52c72095 restore comment 2001-10-12 04:01:40 +00:00
Mark Andrews
417872b98a re-do #1047
1047.  [bug]           named was incorrectly refusing all requests signed
                       with a TSIG key derived from an unsigned TKEY
                       negotiation with a NOERROR response.  [RT #1886]
2001-10-12 03:58:04 +00:00
Andreas Gustafsson
d25365515e consistently begin error messages with a lower case letter 2001-10-11 22:53:46 +00:00
Andreas Gustafsson
a77ad145d0 1047. [bug] When a request was refused due to being signed with
a TSIG key derived from an unsigned TKEY negotiation,
                        the response could have an rcode of SUCCESS rather
                        than REFUSED. [RT #1886]
2001-10-11 22:45:20 +00:00
Brian Wellington
ce1d4c7aeb Print an error when creating a zone key with an algorithm that is not
allowed for a zone key.
2001-10-11 22:19:15 +00:00
Andreas Gustafsson
bb60abb445 1043. [bug] Specifying a transfer-source or transfer-source-v6
option in the zone statement for a master zone was
                        not treated as an error. [RT #1876]
2001-10-11 01:55:03 +00:00
Andreas Gustafsson
024face21c 1042. [bug] The "config" logging category did not work properly.
[RT #1873]
2001-10-11 01:16:18 +00:00
Andreas Gustafsson
1beaa9e457 1041. [bug] Dig/host/nslookup could catch an assertion failure
on SIGINT due to an uninitialized variable. [RT #1867]
2001-10-11 00:38:56 +00:00
Andreas Gustafsson
f953788d75 1040. [bug] Multiple listen-on-v6 options with different ports
were not accepted. [RT #1875]
2001-10-11 00:02:34 +00:00
Andreas Gustafsson
1c31f17f89 added regression test for RT #1866, #1869 2001-10-09 22:58:24 +00:00
Andreas Gustafsson
06365907a0 don't assume perl is in the path 2001-10-09 22:31:39 +00:00
Andreas Gustafsson
094d1d9a27 the tkey test would randomly fail due to key IDs with a leading
zero being interpreted as octal numbers
2001-10-09 22:24:24 +00:00
Mark Andrews
0aba41458d 1036. [func] Temporally drop requests received via multicast. 2001-10-09 04:29:19 +00:00
Mark Andrews
5f7516bee5 1035. [bug] Respond to multicast queries from a unicast address,
RFC 1123. [RT #137]
2001-10-09 02:39:03 +00:00
Mark Andrews
2e24e82fc3 1034. [bug] Multicast queries must not have RD set, RFC 1123.
FORMERR those that do.  [RT #137]
2001-10-09 02:30:20 +00:00
Mark Andrews
d5169236b7 1033. [bug] Don't imply that we support a opcode that we don't
when we don't have a matching view or cannot
                        determine the class.
2001-10-09 02:05:55 +00:00
Mark Andrews
df7596a03e 1032. [func] hostname.bind/txt/chaos now returns the name of
the machine hosting the nameserver.  This is useful
                        in diagnosing problems with anycast servers.
2001-10-08 07:46:11 +00:00
Andreas Gustafsson
4cef36044c style 2001-10-05 17:08:09 +00:00
Danny Mayer
290e1b94e4 Code cleanup. Checks now for out-of-memory errors on mallocs, and privides additional error information on failure. Fixed missing Done message in GUI 2001-10-05 05:45:52 +00:00
Andreas Gustafsson
94ce9c52fb Improve error messages printed by dnssec tools when compiled
without crypto support (patch from Olafur)
2001-10-04 23:48:16 +00:00
Andreas Gustafsson
ed2cefaf0e 1030. [bug] On systems with no resolv.conf file, nsupdate
exited with an error rather than defaulting
                        to using the loopback address. [RT #1836]
2001-10-04 23:29:41 +00:00
Bob Halley
678be98a63 ok, the prototypes really *do* agree totally now! 2001-10-04 07:02:28 +00:00
Bob Halley
f216f79834 make prototype of get_reverse() match the code 2001-10-04 06:56:37 +00:00
Danny Mayer
cddaf5def3 Change macro RESOLVCONF to RESOLV_CONF. This allows Win32 to pick up the real location of resolv.conf through ntpaths.c. Otherwise location defaults to Unix location [RT #1833] 2001-10-04 03:20:23 +00:00
Andreas Gustafsson
ff9cad0802 removed trailing space from usage message 2001-10-02 22:54:26 +00:00
Andreas Gustafsson
6a252184e2 80 columns 2001-10-02 22:53:35 +00:00
Andreas Gustafsson
08bed4d70a Reverted accidental bulk commit with log message of "%" 2001-10-02 17:20:46 +00:00
Andreas Gustafsson
e1fdebdcc8 % 2001-10-02 01:09:08 +00:00
Andreas Gustafsson
9066d09c3e Removed all code within #ifdef DNS_OPT_NEWCODES*.
It was the last thing being sanitized out of releases; removing
it makes it possible to eliminate the sanitation process.
2001-10-01 18:54:05 +00:00
Andreas Gustafsson
93b9133cfa The -t option of wire_test now causes it to use, not just ignore,
the length field of a TCP message, and to process multiple
TCP messages if present.
2001-09-29 18:23:56 +00:00
Andreas Gustafsson
84b0ad0959 style 2001-09-29 00:01:44 +00:00
Andreas Gustafsson
e5100b1367 report duplicate zones with file name and line number even if
they are not caught by the configuration checking code, which is
the case if they are spelled differently [RT #1806]
2001-09-28 18:19:34 +00:00
Andreas Gustafsson
846474d5a6 1020. [bug] IXFR log messages did not distinguish between
true IXFRs, AXFR-style IXFRs, and and mere
                        version polls. [RT #1811]
2001-09-28 00:45:34 +00:00
Andreas Gustafsson
edaf5b86ce 1019. [bug] The value of the lame-ttl option was limited to 18000
seconds, not 1800 seconds as documented. [RT #1803]
2001-09-27 22:46:35 +00:00
Andreas Gustafsson
6859033d42 1018. [bug] The default log channel was not always initialized
correctly. [RT #1813]
2001-09-27 20:54:27 +00:00
Brian Wellington
f558da602e 1017. [bug] When specifying TSIG keys to dig and nsupdate using
the -k option, they must be HMAC-MD5 keys.  [RT #1810]
2001-09-27 17:53:39 +00:00
Andreas Gustafsson
8bd6c39d5e clean more files 2001-09-26 23:33:19 +00:00
Andreas Gustafsson
99f08fc172 ignore more files 2001-09-26 23:29:12 +00:00
Andreas Gustafsson
83515c3462 ifconfig.sh can now be invoked either from bin/tests/system or from the top level directory [RT #1758] 2001-09-26 23:16:26 +00:00
Danny Mayer
7e22eec300 Added support for installer to change the account being used rather than uninstalling and reinstalling 2001-09-26 02:22:27 +00:00
Andreas Gustafsson
a4701d3b7e consistently begin error messages with a lower case letter 2001-09-26 00:38:39 +00:00
Andreas Gustafsson
ff4322d44f 1016. [bug] Slave zones with no backup file were re-transferred
on every server reload.
2001-09-25 23:01:15 +00:00
Brian Wellington
f2d88ed98c clarify help text 2001-09-25 22:47:02 +00:00
Danny Mayer
5044d03efa Removed generation of Browse file for Win32 release versions 2001-09-25 01:58:48 +00:00
Danny Mayer
ecd67d8109 Updated to add new files into the make 2001-09-25 01:56:43 +00:00
Danny Mayer
53b7400731 Updated Installer to require named run in a specified account with the minimum privileges necessary to run. The account will also be used laterfor file system security and protections. 2001-09-25 01:48:49 +00:00
Danny Mayer
1ebeb6bbf3 Code to get account privilege information, create accounts with minimum privilege required, and validate account exists and has minimum required privilege 2001-09-25 01:46:22 +00:00
Andreas Gustafsson
8d146b6e11 1015. [bug] Log channels that had a "versions" option but no
"size" option failed to create numbered log
                        files. [RT #1783]
2001-09-25 00:55:22 +00:00
Andreas Gustafsson
f8d86ef2f6 if network interfaces are not not configured,
urge the user to configure them [RT #1757]
2001-09-22 01:10:41 +00:00
Andreas Gustafsson
589a8a85b3 clarified messages 2001-09-22 01:10:03 +00:00
Andreas Gustafsson
808b909f27 1014. [bug] Some queries would cause statistics counters to
increment more than once or not at all. [RT #1321]
2001-09-21 19:08:06 +00:00
Mark Andrews
fe57fad800 make "lwresd -p port" work again. 2001-09-21 12:34:19 +00:00
Brian Wellington
9cc98b104e controls->shuttingdown should not be set on server reload. 2001-09-21 03:04:14 +00:00
Brian Wellington
39504d4517 remove dead code, consolidate dupliacted code. 2001-09-21 00:17:01 +00:00
Brian Wellington
87647e12e9 more minor cleanups 2001-09-21 00:02:20 +00:00
Andreas Gustafsson
d9e690eb71 1012. [bug] The -p option to named did not behave as documented. 2001-09-20 21:51:22 +00:00
Brian Wellington
3bf31a5161 misc cleanup 2001-09-20 21:51:05 +00:00
Andreas Gustafsson
f1491358ff removed numerous ununsed extern variable declarations 2001-09-20 19:26:57 +00:00
Andreas Gustafsson
bf097e2a31 the +rec option was no longer recognized after +retry
was added, due to a misplaced break statement
2001-09-20 19:11:59 +00:00
Brian Wellington
b32e75f3e1 deuglify #1010 [RT #1766] 2001-09-20 19:04:59 +00:00
Andreas Gustafsson
640923da58 1010. [bug] The server could attempt to execute a command channel
command after initiating server shutdown, causing
                        an assertion failure. [RT #1766]
2001-09-20 18:37:00 +00:00
Andreas Gustafsson
2e189b0677 if a server does not die when sent a SIGTERM, kill it using
SIGABRT, not SIGKILL, so that we get a core file to analyze.  Also make
sure we return with a nonzero exit status in this case.
2001-09-20 18:33:51 +00:00
Andreas Gustafsson
4b611cca1d regenerated 2001-09-20 17:25:49 +00:00
Brian Wellington
897adbe920 dig +retry, not +retries is the option from BIND 8. Conveniently,
+retries works also.
2001-09-20 17:15:03 +00:00
Mark Andrews
c2bc56dc65 Move configuration checking to libbind9. 2001-09-20 15:17:07 +00:00
Andreas Gustafsson
2f734e0a7e sizeof style 2001-09-19 23:08:24 +00:00
Brian Wellington
b4c38fdd69 cleanups and rewrites 2001-09-19 21:24:34 +00:00
Andreas Gustafsson
e4b5f088ca Added RT #1763 regression test 2001-09-19 21:19:52 +00:00
Brian Wellington
97f4d2e8f4 typo 2001-09-19 21:00:35 +00:00
Andreas Gustafsson
1301637cc5 check that negative validation fails with a misconfigured trusted key 2001-09-19 20:47:02 +00:00
Brian Wellington
19d684e84f fix potential memory leak 2001-09-19 19:22:28 +00:00
Brian Wellington
f8dd2aeebd rewrite large chunks of code. 2001-09-19 19:14:35 +00:00
Brian Wellington
2dee13b8b8 rsasha1 stuff 2001-09-19 00:15:05 +00:00
Brian Wellington
b7b9b499f4 remove unused code 2001-09-19 00:03:37 +00:00
Andreas Gustafsson
28cf7340b9 1005. [bug] Don't copy nonzero RCODEs from request to response.
[RT #1765]
2001-09-19 00:02:26 +00:00
Brian Wellington
56ae0ccb87 minor cleanup 2001-09-18 21:43:19 +00:00
Brian Wellington
d11cc41b2b fixed weird code. 2001-09-18 21:21:18 +00:00
Brian Wellington
feb1f6a4ac 1003. [func] Add the +retry option to dig. 2001-09-18 18:25:14 +00:00
Brian Wellington
bbece796a9 The default number of UDP queries should be 3, not 2. 2001-09-18 18:16:08 +00:00
Andreas Gustafsson
e1e635578d use ifconfig.sh up, not ifconfig.sh start, to be
consistent with the ifconfig.sh usage message [RT #1758]
2001-09-17 21:42:47 +00:00
Andreas Gustafsson
66870de523 support 'make check' as an alias for 'make test' 2001-09-17 20:47:51 +00:00
Andreas Gustafsson
f4f9761c84 note that ifconfig.sh must be run as root 2001-09-17 20:33:54 +00:00
Brian Wellington
81b172466c *** empty log message *** 2001-09-17 17:47:20 +00:00
Brian Wellington
206bced36f order the parameters to dnssec-keygen consistently. 2001-09-17 17:42:04 +00:00
Mark Andrews
9054558fbd remove redundant check 2001-09-17 02:59:01 +00:00
Mark Andrews
d1a6976967 1002. [bug] Log unknown class including file and line. [RT #1759] 2001-09-17 00:33:52 +00:00
Mark Andrews
fc14ca7a8f improved error reporting 2001-09-17 00:23:10 +00:00
Mark Andrews
5fe21da364 999. [func] "rndc retransfer zone [class [view]]" added.
[RT #1752]
2001-09-15 14:23:29 +00:00
Mark Andrews
43efd9fa56 998. [func] named-checkzone now has arguements to specify the
chroot directory (-t) and working directory (-w).
                        [RT #1755]
2001-09-15 02:05:35 +00:00
Brian Wellington
36e37042c6 997. [func] Add support for RSA-SHA1 keys. 2001-09-15 00:01:58 +00:00
Andreas Gustafsson
1b1f63339c regenerated 2001-09-14 20:21:52 +00:00
Andreas Gustafsson
d4678a75ed replaced 'List the keys included in the keyset file' by
'The list of keys to be included in the keyset file', as
suggested by <Jason.Fountain@compaq.com>
2001-09-14 20:20:54 +00:00
Mark Andrews
98e231525f 996. [func] Issue warning if the configuration filename contains
the chroot path.
2001-09-14 12:34:03 +00:00
Mark Andrews
da5795a32a 995. [bug] dig, host, nslookup: using a raw IPv6 address as a
target address should be fatal on a IPv4 only system.
2001-09-14 06:31:40 +00:00
Brian Wellington
e49238474c 'dig +short' should explicitly enable printing the answer section.
Otherwise, 'dig +noall +short' prints nothing.
2001-09-14 04:54:56 +00:00
Mark Andrews
48cddfee7c remove broken (unreachable) undocumented ./.digrc support. 2001-09-13 03:02:59 +00:00
Andreas Gustafsson
41a0c85888 regenerated 2001-09-13 01:50:31 +00:00
Andreas Gustafsson
4c30c4d572 typo 2001-09-13 01:49:56 +00:00
Mark Andrews
e60b3717f0 993. [func] dig: -v now reports the version. 2001-09-13 01:42:21 +00:00
Mark Andrews
0262406cea 992. [doc] dig: ~/.digrc is now documented. 2001-09-13 01:37:10 +00:00
Andreas Gustafsson
72baa6528d 80 columns 2001-09-12 21:48:41 +00:00
Andreas Gustafsson
7bfb0145d6 indentation 2001-09-12 00:22:53 +00:00
Brian Wellington
6eeefeb3eb fix a memory leak on a tsig error condition. 2001-09-11 22:34:21 +00:00
Andreas Gustafsson
588372b853 note that the configuration generated by rndc-confgen -a works on the local
host only (as suggested by Tale)
2001-09-11 19:18:12 +00:00
Andreas Gustafsson
1e9efeeb22 986. [bug] 'additional-from-auth no;' did not work reliably
in the case of queries answered from the cache.
                        [RT #1436]
2001-09-11 01:21:39 +00:00
Mark Andrews
b1ae7a591a 987. [bug] "dig -help" didn't show "+[no]stats".
986.   [bug]           "dig +noall" failed to clear stats and command
                        printing.
2001-09-11 00:58:15 +00:00
Andreas Gustafsson
cab0ee644d 985. [func] Consider network interfaces to be up iff they have
a nonzero IP address rather than based on the
                        IFF_UP flag. [RT #1160]
2001-09-10 23:03:09 +00:00
Mark Andrews
699a26726c Print the update message sent when debugging. 2001-09-10 12:30:46 +00:00
Andreas Gustafsson
99f467f016 test the ixfr-from-differences option 2001-09-08 00:24:33 +00:00
Andreas Gustafsson
8cccaeaee1 New named.conf option "ixfr-from-differences" [RT #1727] 2001-09-08 00:21:49 +00:00
Andreas Gustafsson
260696e5e3 cleaned up xfer system test in preparation for adding
ixfr-from-differences tests
2001-09-07 23:29:52 +00:00
Andreas Gustafsson
f3bbe7772f added script for generating zone data, for use in system
tests so that they don't all need to have their own (duplicated)
zone data
2001-09-07 23:29:03 +00:00
Mark Andrews
a91e1db13e install rndc-confgen.8 2001-09-07 05:55:24 +00:00
Andreas Gustafsson
4b8b883127 Dollar sign in $TTL needs to be escaped; 80 columns 2001-09-07 00:57:25 +00:00
Andreas Gustafsson
7aac53eb69 Actually, this file should not be in CVS at all since it's machine
generated by setup.sh.
2001-09-07 00:49:03 +00:00
Mark Andrews
fe6b7ccc8d ns_os_*memstats() -> ns_main_setmemstats() 2001-09-07 00:37:02 +00:00
Andreas Gustafsson
f56cdc894f reverted unintentional commit 2001-09-07 00:35:40 +00:00
Andreas Gustafsson
11a4398874 New server command line option -m taking symbolic memory debuggin
flags, as in 'named -m record,trace' (as suggested by Brian).  Also moved
the creation of the global mctx to after parsing the command line so that
the flags are defined when the mctx is created
2001-09-07 00:17:25 +00:00
Andreas Gustafsson
b39ad8a69b when assigning to isc_mem_debugging, use symbolic names for
the flags, not magic integer constants
2001-09-06 23:14:42 +00:00
Mark Andrews
a24d253a3f 982. [func] If "memstatistics-file" is set in options the memory
statistics will be written to it.
2001-09-06 02:13:55 +00:00
Brian Wellington
3f543c371f 981. [func] The dnssec tools can now take multiple '-r randomfile'
arguments.
2001-09-05 23:15:42 +00:00
Brian Wellington
ed29aefe31 [RT #1709]
Change isc_entropy_usebestsource() to have saner semantics:
 - If an invalid file is specified, an error will be returned instead of the
   keyboard being used.
 - If no file is specified but a random device is present, the keyboard will
   be used if there is an error opening the random device.
 - ISC_ENTROPY_KEYBOARDYES indicates that the keyboard should be the
   only device used.  Otherwise, passing '-r keyboard' is meaningless
   on a machine with a random device, since the keyboard will not be used.

Change the callers in the dnssec tools and rndc-confgen to check for the
special file "keyboard" and call isc_entropy_usebestsource() with the right set
of parameters.
2001-09-05 22:32:09 +00:00
Brian Wellington
68b62e1c45 #include <string.h> 2001-09-05 21:09:31 +00:00
Andreas Gustafsson
f1eda76d36 include <named/types.h>, not <named/interfacemgr.h> 2001-09-04 19:29:24 +00:00
Andreas Gustafsson
76d9120dd6 80 columns 2001-09-04 19:20:54 +00:00
Mark Andrews
606e919ae3 opps missed this change 2001-09-04 01:12:04 +00:00
Mark Andrews
92551304a9 976. [func] named-checkconf will now test load master zone
files (-z).  [RT #1468]
2001-09-04 00:32:32 +00:00
Mark Andrews
a8842a35df move zone loading code into check-tool. 2001-09-03 08:21:46 +00:00
Danny Mayer
102e532c65 updated to properly support shutdowns. See RT #1672 as it relates to NT 2001-09-01 05:27:46 +00:00
Danny Mayer
ad82fd0a25 named/interfacemgr.h was not being included 2001-09-01 05:17:28 +00:00
Danny Mayer
530ee49d07 Changed RESOLV_CONF to be conditionally defined allowing win32 to override this definition 2001-09-01 05:09:33 +00:00
Andreas Gustafsson
687b7ef998 handle max-journal-size more like other options 2001-09-01 01:43:24 +00:00
Andreas Gustafsson
cb8fd52bbe call the new option for setting the maximum journal
size 'max-journal-size', not 'journal-size', in the tradition of the
historical option 'max-ixfr-log-size'
2001-09-01 01:13:41 +00:00
Mark Andrews
4b87939256 strerror() -> isc__strerror() [RT #1689] 2001-08-31 05:57:58 +00:00
Andreas Gustafsson
7edac4480f added colon to log message 2001-08-31 00:35:18 +00:00
Mark Andrews
452b30ddb3 973. [bug] Failed to log the question name when logging:
"bad zone transfer request: non-authoritative zone
                        (NOTAUTH)".
2001-08-30 23:51:45 +00:00
Mark Andrews
06a960c681 971. [func] 'try-edns' can be use to disable edns on all queries. 2001-08-30 05:52:18 +00:00
Mark Andrews
cc0a5f7142 journal-size can now be set from named.conf 2001-08-30 05:23:00 +00:00
Danny Mayer
91be5c8cce Remove shutdown privilege-enabling code. Installer should not be shutting down the system. 2001-08-30 04:23:43 +00:00
Andreas Gustafsson
cad3210bb9 969. [func] dig now supports the undocumented dig 8 feature
of allowing arbitrary labels, not just dotted
                        decimal quads, with the -x option.  This can be
                        used to conveniently look up RFC2317 names as in
                        "dig -x 10.0.0.0-127". [RT #827, #1576, #1598]
2001-08-29 18:57:28 +00:00
Andreas Gustafsson
f462b9aed2 Revert change 966. Brian says user-level programs should not include
any headers under asm.
2001-08-29 18:03:36 +00:00
Andreas Gustafsson
5f5b407b19 regenerated 2001-08-29 17:20:00 +00:00
Mark Andrews
b885fd1d53 966. [port] #include <asm/unistd.h> is required on some Linux
ports.  [RT #1670]
2001-08-29 04:21:51 +00:00
Mark Andrews
71bfe170e1 Explain the interaction of -u and -t. 2001-08-29 03:27:57 +00:00
Andreas Gustafsson
a0766ff416 cut-and-paste-o 2001-08-28 18:00:37 +00:00
Andreas Gustafsson
259b1b8c03 added rndc-confgen man page 2001-08-28 17:29:35 +00:00
Mark Andrews
28fc90e6c8 #857 was incomplete, ISC_MAGIC was not being used everwhere it should have been.
'magic' was not being declared consistantly.
some #include <isc/magic.h> were missing from other include files.
NS_SERVER_VALID was not using ISC_MAGIC_VALID.
2001-08-28 03:58:29 +00:00
Andreas Gustafsson
31f4d4ac63 removed -P (pseudorandom) option 2001-08-27 23:55:16 +00:00
Andreas Gustafsson
187bf10eb5 eliminated arbitrary limit on formatted rdata size in 'host' [RT #1557] 2001-08-27 21:31:29 +00:00
Andreas Gustafsson
135c1c53b8 don't INSIST() that calling dns_db_find() on the root hints
only binds the rdataset when returning ISC_R_SUCCESS, because that's not the case -
for example, if the root hints are '. 300 IN CNAME .', DNS_R_CNAME is returned and
the rdataset is bound
2001-08-27 17:20:10 +00:00
Mark Andrews
89555ff443 965. [bug] Using non root hints caused a rbtdb node reference
leak.    [RT #1581, RT #1618]
2001-08-27 06:10:17 +00:00
Mark Andrews
d20b7d6bea silence compiler warnings 2001-08-23 04:39:31 +00:00
Danny Mayer
7bda91f314 updated to add path for include files 2001-08-09 23:45:12 +00:00
Danny Mayer
b9eaebe882 ns_g_autorndckeyfile had been renamed to ns_g_keyfile 2001-08-09 23:44:13 +00:00
Andreas Gustafsson
f504adce37 duplicated CVS ID line 2001-08-09 17:21:06 +00:00
Danny Mayer
51ac5c28de Changed win32 code to remove references to named.key 2001-08-09 02:55:41 +00:00
Andreas Gustafsson
b4636f4587 update_copyrights 2001-08-09 00:33:47 +00:00
Andreas Gustafsson
33682c92e9 regenerated docs 2001-08-09 00:19:44 +00:00
Andreas Gustafsson
f4909f01a7 the test outcome should not depend on the dig version printed 2001-08-09 00:10:56 +00:00
Andreas Gustafsson
f30cab801a spacing 2001-08-08 23:27:03 +00:00
Andreas Gustafsson
b1600c0b02 spacing; no newline at end of file 2001-08-08 23:26:58 +00:00
Andreas Gustafsson
c961e08413 spacing 2001-08-08 23:13:16 +00:00
Andreas Gustafsson
76c8294c81 format string bugs and improved format string checking [RT #1578] 2001-08-08 22:54:55 +00:00
Andreas Gustafsson
5439bb1725 removed unused variable ns_g_autorndckeyfile 2001-08-08 20:37:31 +00:00
Andreas Gustafsson
569caae79d don't remove ns_g_autorndckeyfile - it no longer exists 2001-08-08 20:36:13 +00:00
Andreas Gustafsson
73a9f8ec94 need <isc/print.h> for snprintf on OSF/1 4 2001-08-08 19:42:53 +00:00
Andreas Gustafsson
eae21e533a declaring progname as a char pointer in util.c
and a char array in rndc-confgen.c doesn't work
2001-08-08 05:13:47 +00:00
Mark Andrews
de9833be77 955. [bug] When using views, the zone's class was not being
inherited from the view's class.  [RT #1583]
2001-08-07 01:58:59 +00:00
Andreas Gustafsson
0a77211c80 Wrapped long lines in an error message, and fixed two bugs:
1) rndc would crash if rndc.conf could not be read
2) rndc running in named.key mode required a working
DNS to resolve the default server name "localhost",
causing a chicken-and-egg problem when using rndc
to fix a broken DNS.  Fixed by changing the default
to 127.0.0.1.  This will probably offend some IPv6
people.
2001-08-06 11:40:46 +00:00
Andreas Gustafsson
b199e25ab7 spacing 2001-08-06 11:28:21 +00:00
Mark Andrews
4e400cb7a2 954. [bug] dig, host, nslookup: AXFR / IXFR are inherently
non-recursive, do not set RD.  [RT #1575]
2001-08-06 05:50:20 +00:00
Danny Mayer
e5656b4aeb Added support for win32 2001-08-06 05:35:16 +00:00
Danny Mayer
66352c0a05 Added support for key for win32 2001-08-06 05:34:26 +00:00
Danny Mayer
3571e1bda4 Added Copyright Statement 2001-08-06 05:33:17 +00:00
Mark Andrews
a769eca4e3 cleanup
document "rndc -k"
2001-08-06 04:25:08 +00:00
Mark Andrews
8173a963d2 #if (result) should have been #if (result == ISC_R_SUCCESS) otherwise we
would fail to replace the keys if they changed.
Add the IPv4 any control before the IPv6 any control.
2001-08-06 01:03:53 +00:00
Mark Andrews
d8ec3078d4 relax safe_create(). 2001-08-04 08:15:02 +00:00
Mark Andrews
ee8a5c01e2 only call get_key_info() in update_listener() if control != NULL. 2001-08-04 07:49:38 +00:00
Mark Andrews
9bac746a3c keyless inet controls triggered assertion. [RT#1566] 2001-08-04 07:38:06 +00:00
Andreas Gustafsson
4c69379d79 don't print empty lines until we can figure out
how to print them only when actually using keyboard
entropy.  The existing code was clearly wrong, as it used
an enumerated value as a boolean
2001-08-03 23:44:49 +00:00
Andreas Gustafsson
b769845105 improved comments 2001-08-03 23:06:46 +00:00
Andreas Gustafsson
7dacac1909 added .cvsignore file 2001-08-03 22:35:06 +00:00
Andreas Gustafsson
0094faa6e0 Reduced code duplication. Code duplication is evil. 2001-08-03 22:33:02 +00:00
Andreas Gustafsson
644772cf06 eliminated needless use of string literal concatenation 2001-08-03 22:12:42 +00:00
Andreas Gustafsson
dfe3edd7cd use ${srcdir}/include, not ./include, in the include path so
that builds into a separate object directory work; eliminiated the RNDCINCLUDES
and CONFINCLUDES macros since they are not really necessary;
eliminated -DRNDC_SYSCONFDIR option passed to compiler when compiling
rndc-confgen.c since it is not actually used
2001-08-03 22:03:10 +00:00
Andreas Gustafsson
89209405b7 spacing 2001-08-03 21:44:45 +00:00
Andreas Gustafsson
b4b47bf187 simplified by using dns_acl_any() 2001-08-03 20:05:42 +00:00
Brian Wellington
f5862b6f22 fix warning 2001-08-03 18:39:50 +00:00
Andreas Gustafsson
1bcdcce64b simplified by using dns_acl_any() 2001-08-03 18:28:48 +00:00
Brian Wellington
3dfc806ddf fix key algorithm checks 2001-08-03 18:12:08 +00:00
Andreas Gustafsson
f8c304e5a5 removed comment stating that 'For this reason,
the automagic key is not regenerated on each reload', which is no longer
applicable since automagic keys are no longer regenerated
by the server at all
2001-08-03 18:03:02 +00:00
Brian Wellington
337a8fe16a Add Danny's name to the authors.bind list 2001-08-03 17:58:18 +00:00
Andreas Gustafsson
7dac8d231c the server would catch an assertion failure if the key statement in rndc.key
was missing the algorithm or secret clause
2001-08-03 17:24:11 +00:00
Mark Andrews
326bcfa0e2 rndc.key support 2001-08-03 05:56:22 +00:00
Danny Mayer
a59a1d313a Updated .mak files to remove dependancies 2001-08-02 07:05:43 +00:00
Andreas Gustafsson
2627aca3bb oops, one too may CFLAGS snuck in 2001-08-01 22:16:06 +00:00
Andreas Gustafsson
0a53284205 951. [bug] CFLAGS was not passed to the linker when
linking some of the test programs under
                        bin/tests. [RT #1555].
2001-08-01 22:06:29 +00:00
Andreas Gustafsson
e0315f2160 added 'masterfile' system test to make sure
rt #1558 does not happen again
2001-08-01 19:01:02 +00:00
Brian Wellington
44c141f947 949. [bug] host was unable to print records larger than 512
bytes. [RT #1557]
(the limit is now 32K)
2001-08-01 16:18:56 +00:00
Andreas Gustafsson
b76883e1cc issue a more descriptive error message when multiple conflicting
forwarding policies are configured
2001-07-31 19:22:51 +00:00
Andreas Gustafsson
4e6b8a18ff update_copyrights 2001-07-31 00:03:21 +00:00
Mark Andrews
c38b92000c 947. [bug] dns_rdata_soa_t had a badly name element "mname" which
was really the RNAME field from RFC1035.  To avoid
                        confusion and silent errors that would occur it ther
                        "origin" and "mname" elements were given their correct
                        names "mname" and "rname" respectively, the "mname"
                        element is renamed to "contact".
2001-07-30 01:09:14 +00:00
Brian Wellington
ecc38edf79 make +trace and +nssearch work together 2001-07-29 23:23:42 +00:00
Danny Mayer
238e6556ea Restore dnssec-signzone to list of binaries to install 2001-07-28 02:45:07 +00:00
Brian Wellington
3d388146c6 if both +trace and +nssearch are specified, ignore the second one. 2001-07-28 01:41:28 +00:00
Brian Wellington
a0d965e7b1 comments 2001-07-28 01:01:02 +00:00
Brian Wellington
3806886c28 oops, dig +nssearch and host -C work again. 2001-07-28 00:55:15 +00:00
Brian Wellington
d0de20156a Make +trace work. More cleanup. 2001-07-28 00:11:15 +00:00
Brian Wellington
57bccaacd0 cleanup 2001-07-27 22:07:10 +00:00
Andreas Gustafsson
321fd0ceb4 in named-checkconf, pass in the complete path of named.conf
as NAMED_CONFFILE instead of constructing it by compile-time concatenation of NS_SYSCONFDIR
and /named.conf, to facilitate win32 support
2001-07-27 17:45:29 +00:00
Brian Wellington
1d78c8d7cd unused variables 2001-07-27 17:39:10 +00:00
Brian Wellington
637b4b4392 simplify header printing code. 2001-07-27 06:45:20 +00:00
Brian Wellington
0e0e575ec1 unused variables and stuff 2001-07-27 06:11:10 +00:00
Brian Wellington
f3f143f249 simplify TSIG key loading 2001-07-27 05:52:45 +00:00
Brian Wellington
46e349e515 more minor cleanup 2001-07-27 05:41:46 +00:00
Brian Wellington
f9521c63ea minor cleanup 2001-07-27 05:26:38 +00:00
Danny Mayer
1f43af072f Added named-check* apps to install list 2001-07-27 05:06:34 +00:00
Danny Mayer
ed1f8b162a added named.key file path to global variable 2001-07-27 05:02:11 +00:00
Danny Mayer
66a38d1693 Changed log to logc to allow VC++ to compile it on win32 2001-07-27 04:59:01 +00:00
Danny Mayer
a246e32f29 win32 build files for named-check* 2001-07-27 04:57:24 +00:00
Brian Wellington
a781910430 #define PATH_MAX if it's not already defined (such as on HURD) [RT #1543] 2001-07-26 22:09:25 +00:00
Andreas Gustafsson
113b83a9e2 always build cfg_test, since it is now needed when
regenerating the documentation
2001-07-26 21:33:28 +00:00
Brian Wellington
26a5f97dd8 Don't refer to keys as "TSIG keys", since they might be used for rndc only,
and this could be confusing.
2001-07-26 20:54:35 +00:00
Brian Wellington
ee3ab6063d 945. [func] Add the new view-specific options
"match-destinations" and "match-recursive-only".
2001-07-26 20:42:46 +00:00
Andreas Gustafsson
929b55a64d consistency 2001-07-26 20:37:26 +00:00
Andreas Gustafsson
05de675386 removed nonportable declaration of h_errno as h_errno is not
actually used in this file
2001-07-26 20:26:09 +00:00
Andreas Gustafsson
1ecd9d30a0 pass in the full name of the automatic configuration file from
the Makefile as RNDC_AUTOCONFFILE, so that it too can be overridden on Win32
if necessary
2001-07-26 20:14:46 +00:00
Andreas Gustafsson
5da31b1ebe define RNDC_CONFFILE 2001-07-26 20:08:03 +00:00
Andreas Gustafsson
dcfaeabc63 renamed RNDC_SYSCONFPATH to RNDC_CONFFILE; there's
nothing specifically SYS about it
2001-07-26 20:06:22 +00:00
Danny Mayer
922a15c7c0 Changes to support win32 2001-07-26 03:15:16 +00:00
Andreas Gustafsson
accf0d5f29 updated usage message 2001-07-23 18:57:53 +00:00
Andreas Gustafsson
4eb5d27bae issue a more specific error message when there is a problem with the
root hints file (such as it not existing)
2001-07-23 17:31:33 +00:00
Andreas Gustafsson
b0232b4bbe sloppy formatting 2001-07-23 16:32:40 +00:00
Danny Mayer
80b67b3a4f Modified to initialize conf path at run time and avoid redeclaring h_errno 2001-07-23 02:58:22 +00:00
Brian Wellington
a5b9c2b208 943. [bug] The server could crash when receiving a command
via rndc if the configuration file listed only
			nonexistent keys in the controls statement.  [RT #1530]
2001-07-23 01:01:31 +00:00
Brian Wellington
a81f09d395 oops, host does look at the 'bytes' field. Pass sevent->n, which should be
correct.
2001-07-22 18:09:46 +00:00
Brian Wellington
cfbf09786e The received() function doesn't look at the 'bytes' parameter when doing
an zone transfer, so just pass 0.  [RT #1524]
2001-07-22 18:06:40 +00:00
Danny Mayer
0b98125d1e Added Scripts 2001-07-22 06:16:13 +00:00
Danny Mayer
396ed5ef23 Added new binaries to list 2001-07-22 06:13:57 +00:00
Danny Mayer
1c810e5739 Added Make file 2001-07-22 06:13:20 +00:00
Danny Mayer
45847c3039 Bug fix to support win32 2001-07-22 06:11:44 +00:00
Danny Mayer
63169f237f Make file 2001-07-22 06:10:54 +00:00
Danny Mayer
a9c57ae221 Bug fixes to support win32 2001-07-22 06:09:42 +00:00
Danny Mayer
70f500794d Script updates and additions 2001-07-22 06:08:39 +00:00
Danny Mayer
78346b6670 Added make file 2001-07-22 06:04:35 +00:00
Danny Mayer
7d4e4d4984 Minor bug fixes to support win32 2001-07-22 06:03:06 +00:00
Danny Mayer
1fac3f0e70 Build Script modifications 2001-07-22 06:01:52 +00:00
Andreas Gustafsson
3cb3f6867c Portions Copyright (C) 2001 Internet Software Consortium. 2001-07-19 17:38:51 +00:00
Danny Mayer
4645932212 Added support for win32 2001-07-19 06:35:09 +00:00
Danny Mayer
7a665402a5 Added support for win32. 2001-07-19 06:26:12 +00:00
Danny Mayer
9dec38d1ee Added support for win32 2001-07-19 06:22:52 +00:00
Brian Wellington
3dba71207f The greeting and stats were printed in some cases when +short was used. 2001-07-18 21:03:54 +00:00
Andreas Gustafsson
9bf5a10fbd coding style 2001-07-18 18:42:48 +00:00
Andreas Gustafsson
9fe9eb9ee5 coding style; removed unused static function 2001-07-18 18:42:13 +00:00
Danny Mayer
01c7700793 Install Support for BIND 9 on win32 2001-07-18 05:04:46 +00:00
Danny Mayer
8423783bd0 Initial win32 support 2001-07-18 03:43:18 +00:00
Andreas Gustafsson
07dcadc6e2 update_copyrights 2001-07-17 20:29:36 +00:00
Andreas Gustafsson
b6a370c37f regenerated man pages 2001-07-17 19:48:57 +00:00
Andreas Gustafsson
6529f9ffb6 use isc_file_ischdiridempotent() 2001-07-16 18:33:30 +00:00
Andreas Gustafsson
cda18e7813 don't throw an assertion failure when cfg_check_namedconf() returns
failure
2001-07-16 17:53:22 +00:00
Andreas Gustafsson
7dd2d8b1ff use isc_file_absolutepath() 2001-07-16 17:32:49 +00:00
Brian Wellington
72568ce039 lower the priority of debug messages printed at shutdown 2001-07-14 20:17:48 +00:00
Brian Wellington
f46b1b2329 regen 2001-07-14 18:30:02 +00:00
Brian Wellington
fb173de212 fix the xml 2001-07-14 18:29:10 +00:00
Brian Wellington
18a71db562 document 'send' and 'show' 2001-07-14 18:26:38 +00:00
Andreas Gustafsson
25525110c1 fixed and simplified 2001-07-13 18:29:00 +00:00
Andreas Gustafsson
699095b077 regenerated docs 2001-07-13 01:50:31 +00:00
Brian Wellington
db5d9614fe @server can be an IPv6 address. 2001-07-12 16:29:11 +00:00
Brian Wellington
5e664afb95 don't send mesages with empty update sections, even if they have prereqs. 2001-07-12 04:13:39 +00:00
Brian Wellington
20d13d8975 remove generated file 2001-07-12 01:20:56 +00:00
Brian Wellington
828bd291c6 Only remove generated files. 2001-07-12 00:20:57 +00:00
Brian Wellington
710b0d6a8b oops. check that a message has either updates or prerequisites, not that it
has both.
2001-07-11 23:50:43 +00:00
Brian Wellington
9f5423a840 If the server was built without openssl, ignore trusted keys. 2001-07-11 22:22:37 +00:00
Brian Wellington
17f04ff2e7 don't test dst if configured without openssl 2001-07-11 21:46:32 +00:00
Brian Wellington
f4d26dbdb6 fix redirection 2001-07-11 19:02:16 +00:00
Brian Wellington
bd6504aa9a 928. [bug] nsupdate would send empty update packets if the
send (or empty line) command was run after
                        another send but before any new updates or
                        prerequisites were specified.  It should simply
                        ignore this command.
2001-07-11 06:30:54 +00:00
Brian Wellington
1a8002871e require a build with openssl to run dnssec & tkey tests 2001-07-10 21:41:14 +00:00
Brian Wellington
cda383abe0 don't call dst_algorithm_supported(), an unsupported algorithm will be caught
anyway.
2001-07-10 18:53:09 +00:00
Andreas Gustafsson
7c66a4555d spacing 2001-07-09 22:39:27 +00:00
Andreas Gustafsson
b233a7b9bb include <isc/netdb.h>, not <netdb.h>, as the latter one
may not exist on all platform
2001-07-09 22:02:15 +00:00
Brian Wellington
ed3418751e The 'stopping command channel on 127.0.0.1#953' message could be printed
multiple times on shutdown.
2001-07-05 18:39:14 +00:00
Andreas Gustafsson
8ee6b68d4f brace style 2001-07-05 17:01:40 +00:00
Brian Wellington
c2da4f9d8a The controls statement didn't support multiple keys (in 9.2). It does now,
although it's suboptimal - since the control message doesn't have a key
name, it just tries each key until it finds one that successfully decodes
the message.
2001-07-04 03:54:55 +00:00
Andreas Gustafsson
f0b6aa146e avoid using .orig as a filename extension, as it will be ignored by cvs import 2001-07-03 00:05:15 +00:00
Andreas Gustafsson
cf67a374a9 consistent error message style 2001-07-02 18:56:58 +00:00
Andreas Gustafsson
0af994c26f avoid capitalizing command name at beginning of sentence;
regenerate docs
2001-07-02 18:48:27 +00:00
Mark Andrews
ea2a4bbc5d 918. [func] nsupdate: TSIG errors are not immediately fatal.
917.   [func]          nsupdate: keys can now be specified inline with
                        with all other commands.
2001-07-02 06:09:28 +00:00
Brian Wellington
bfafdac061 defining program as a 'char []' in rndc.c and 'exterm char *' in util.c
doesn't work.
2001-07-02 00:07:09 +00:00
Brian Wellington
1744ed4042 add ISC_FORMAT_PRINTF to notify() also 2001-07-02 00:06:22 +00:00
Brian Wellington
22cc4b4e0d fix broken comment 2001-07-01 23:47:49 +00:00
Brian Wellington
e1d05d3235 fix a call to fatal() where the entire mesage wasn't printed due to an
extra comma; add ISC_FORMAT_PRINTF() to the declaration of fatal.
[RT #1460]
2001-07-01 17:36:47 +00:00
Danny Mayer
90947ef585 isc_buffer_putuint16 requires the second arguement to be isc_uint16_t, casting required 2001-06-30 04:43:47 +00:00
Danny Mayer
f5f40ad6c4 parse_int returns isc_uint32_t, casting required 2001-06-30 04:29:25 +00:00
Andreas Gustafsson
4a0b9bb051 signed/unsigned int pointer mismatch caused compiler warning on Tru64 2001-06-29 23:34:40 +00:00
Andreas Gustafsson
1e65b21566 signed/unsigned char mismatch caused compiler warning on Tru64 2001-06-29 23:32:09 +00:00
Andreas Gustafsson
97e1692460 New function cfg_print_grammar(), which generates a human-readable
summary of the grammar for a given configuration type from its syntax
tables.  Running bin/tests/cfg_test --grammar --named will print a
named.conf grammar summary, and bin/tests/cfg_test --grammar --rndc
will print the rndc.conf grammar summary.
2001-06-29 18:36:13 +00:00
Brian Wellington
fed846067d 916. [bug] Specifying type ixfr to dig without specifying
a serial number failed in unexpected ways.
2001-06-29 06:06:02 +00:00
Andreas Gustafsson
a26ad011f3 915. [func] The named-checkconf and named-checkzone programs
now have a '-v' option for printing their version.
                        [RT #1151]
2001-06-29 01:05:11 +00:00
Mark Andrews
b52c49c6e1 lower unknown class/view to DEBUG(1) 2001-06-28 02:39:46 +00:00
Mark Andrews
fa10bed228 remove "gross hack" as per request. 2001-06-28 01:08:24 +00:00
Mark Andrews
f08378699a gross hack to set isc_mem_debugging as it needs to be set before any
isc_mem_create() calls.
2001-06-27 23:50:50 +00:00
Mark Andrews
235839b7ef All memory debugging flags to be set from the command line. 2001-06-27 23:30:22 +00:00
Brian Wellington
09f3e7461f rndc-confgen didn't build when the --with-openssl configure flag was used 2001-06-27 06:32:20 +00:00
Andreas Gustafsson
07c336a9a8 912. [bug] Attempts to set the 'additional-from-cache' or
'additional-from-auth' option to 'no' in a
                        server with recursion enabled will now
                        be ignored and cause a warning message.
                        [RT #1145]
2001-06-26 23:53:39 +00:00
David Lawrence
4cd7656507 Split fatal(), notify() into util.c.
Put DO() and the fatal()/notify() declarations in util.h.
Makefile adjusted to build rndc with util.o, and to also build and
install rndc-confgen.
2001-06-22 17:22:26 +00:00
David Lawrence
f8644da8d9 908. [func] New program, rndc-confgen, to simplify setting up rndc. 2001-06-22 17:19:09 +00:00
David Lawrence
9bfa90768a 907. [func] The ability to get entropy from either the
random device, a user-provided file or from
			the keyboard was migrated from the DNSSEC tools
			to libisc as isc_entropy_usebestsource().
2001-06-22 17:05:54 +00:00
Andreas Gustafsson
01d9a393ec document the +multiline option [RT #1419] 2001-06-18 20:20:47 +00:00
Andreas Gustafsson
6a7a69e9f7 905. [bug] Creating a forward "zone" for the root domain
did not work. [RT #1418]
2001-06-18 20:03:48 +00:00
Andreas Gustafsson
045c9678e2 log zone/class when denying zone transfers
(patch posted to bind9-users by Mark Mentovai <mark-list@mentovai.com>
2001-06-18 19:04:32 +00:00
Andreas Gustafsson
5465e5f7dd query_getzonedb() formatted the domain name and class being queried
for at least once for every query to authoritative data, whether or not a log
message was actually printed, which adversely affected query performance
2001-06-15 23:28:29 +00:00
Andreas Gustafsson
0eace215bd "\0" is a rather strange way of representing the empty string 2001-06-15 23:25:20 +00:00
Andreas Gustafsson
30751145f8 don't warn about the server not istening on any interface if lwresdonly 2001-06-15 23:18:04 +00:00
Andreas Gustafsson
27ee1d06e9 typo 2001-06-15 22:35:42 +00:00
Andreas Gustafsson
ea4dc97575 declare launch_next_query() before calling it 2001-06-15 01:26:14 +00:00
Andreas Gustafsson
21bdba2f2d signed/unsigned warning on HP-UX 11 2001-06-15 01:20:09 +00:00
Andreas Gustafsson
cf2e85ee9c typo 2001-06-14 22:24:16 +00:00
Brian Wellington
34d5676aac 903. [bug] dig should not crash when receiving a tcp packet
of length 0.
2001-06-14 21:40:02 +00:00
Andreas Gustafsson
1d9ab72131 902. [bug] The -d option was ignored if both -t and -g were also
specified.
2001-06-14 14:14:17 +00:00
Andreas Gustafsson
3446187a42 consistently assume ifconfig is in path regardless of
platform and regardless of whether configuring interfaces up or down
2001-06-14 14:10:32 +00:00
Andreas Gustafsson
1c8409706f consistent ordering 2001-06-14 14:08:51 +00:00
Andreas Gustafsson
ddae6fe9c7 simplified 2001-06-14 14:06:04 +00:00
Mark Andrews
ef8d97818f 901. [bug] More Unixware config.guess related changes. 2001-06-14 04:52:39 +00:00
Olafur Gudmundsson
112d9875bf config.guess update changed FreeBSD system identifier 2001-06-12 03:34:01 +00:00
Andreas Gustafsson
8de7014e56 removed CVS Id from machine-generated man page files -- it is no longer needed
now that they are ignored by update_copyrights
2001-06-11 19:02:45 +00:00
Andreas Gustafsson
41626c0997 898. [bug] "dig" failed to set a nonzero exit status
on UDP query timeout. [RT #1323]
2001-06-11 18:20:43 +00:00
Andreas Gustafsson
d82fda8358 brace style 2001-06-11 18:08:16 +00:00
David Lawrence
cd7e84891c wrapped a long line, tried to address the $Id$ issue again 2001-06-10 19:54:07 +00:00
David Lawrence
8fe938e6d9 rewrote "$Id$" cvs keyword as "$Id: $" so it is properly expanded by cvs 2001-06-10 13:57:53 +00:00
Brian Wellington
fb64c9cf75 check for hmac-md5.sig-alg.reg.int as well as just hmac-md5 in key statements. 2001-06-10 02:37:08 +00:00
David Lawrence
6112718b0d 896. [bug] If a configuration file is set on named's command line
and it has a relative pathname, the current directory
			(after any possible jailing resulting from named -t)
			will be prepended to it so that reloading works
			properly even when a directory option is present.
2001-06-08 23:52:21 +00:00
David Lawrence
6c35e4dd17 894. [bug] A message intended to warn when the keyboard was being
used because of the lack of a suitable random device
			was not being printed.

wantkeyboard was always being set to true just before setting up the keyboard
callback, rather than only being set to true if PATH_RANDOMDEV was undefined
or not able to be opened.
2001-06-08 22:07:16 +00:00
David Lawrence
504f7802d4 893. [func] Removed isc_file_test() and added isc_file_exists()
for the basic functionality that was being added
			with isc_file_test().
2001-06-08 21:53:49 +00:00
Andreas Gustafsson
841179549b 889. [port] Eliminated blank lines before .TH in nroff man
pages since they cause problems with some versions
                        of nroff. [RT #1390]
2001-06-08 19:33:02 +00:00
Andreas Gustafsson
c380c1a78a test 'severity debug;' 2001-06-08 19:06:22 +00:00
Andreas Gustafsson
893612590b don't refer to resolver(5) since we are not distributing it 2001-06-08 17:18:15 +00:00
Andreas Gustafsson
fb84f90143 added HTML man pages 2001-06-08 17:16:44 +00:00
Andreas Gustafsson
f202f2587b converted dig(1) man page to docbook 2001-06-08 17:15:20 +00:00
Andreas Gustafsson
51eba00c8f converted host(1) man page to docbook 2001-06-08 16:38:10 +00:00
Andreas Gustafsson
ed0e1ae6bc 863. [bug] If an error occurred while an outgoing zone transfer
was starting up, the server could access a domain
                        name that had already been freed when logging a
                        message saying that the transfer was starting.
                        [RT #1383]
2001-06-07 18:18:24 +00:00
Mark Andrews
03f91269f5 856. [func] Allow partial rdatasets to be returned in answer and
authority sections to help non-TCP capable clients
                        recover from truncation.  [RT #1301]
2001-06-05 09:02:16 +00:00
Brian Wellington
17dba29ba5 854. [bug] The config parser didn't properly handle config
options that were specified in units of time other
			than seconds.  [RT #1372]
2001-06-04 21:51:27 +00:00
David Lawrence
92ef1a9b9d use ISC_MAGIC for all magic numbers, for our friends in EBCDIC land 2001-06-04 19:33:39 +00:00
Mark Andrews
b5a86fe434 853. [bug] configure_view_acl() failed to detach existing acls.
[RT #1374]
2001-06-04 14:08:34 +00:00
Bob Halley
5390957197 comment out man rules (not quite ready for them yet) 2001-06-01 03:10:33 +00:00
Bob Halley
875542855a update to 9.3.0, now that the 9.2 release branch has been created 2001-06-01 03:05:07 +00:00
Brian Wellington
53aba5065d man pages were not properly installed in separate-object-dir builds 2001-06-01 00:45:04 +00:00
David Lawrence
1f7342e098 In ns_controls_configure(), moved the ns_controls_shutdown() call that
removes no longer configured listeners into the block that actually
updates/add listeners, because when ns_controls_configure() recursively
calls itself to configure a 127.1 channel if there is no controls() statement,
the top level ns_controls_configure() was shutting down the channel that
the enclosing ns_controls_configure() just created.
2001-05-31 21:49:11 +00:00
David Lawrence
11c4f6b687 Reversed the sense of my earlier change to hmacmd5 key generation that
required good entropy only when 'param' (to dst_key_generate) was non-zero.
Since the default was always to require good entropy, that default behavior
has been restored and now a non-zero param means that pseudorandom is ok.
2001-05-31 18:34:51 +00:00
David Lawrence
d716e83021 initialize "type" to quiet compiler warning 2001-05-31 11:00:40 +00:00
David Lawrence
73a691c373 Look for and use named.key if the main configuration file is not found.
Converted numerous fprintf()/exit() combinations to fatal()s.
Use isc_file_progname().
2001-05-31 10:42:49 +00:00
David Lawrence
1c225de4ce pass -DNS_LOCALSTATEDIR=\"${localstatedir}\" to locate named.key 2001-05-31 10:40:32 +00:00
David Lawrence
6cad3f112f define ns_g_autorndckeyfile 2001-05-31 10:38:56 +00:00
David Lawrence
4f36774273 include <dns/soa.h> for dns_soa_serial() prototype 2001-05-31 10:38:01 +00:00
David Lawrence
a0a8ffd8c3 Remove the named.key file on server shutdown. 2001-05-31 10:37:08 +00:00
David Lawrence
7332e47e11 Automatically generate a key for command channel use whenever either
no controls statement is present or when an inet statement is missing
a keys clause.

Dump an rndc.conf-style configuration into a file
(NS_LOCALSTATEDIR "named.key") with the key and suitable default-* values.
2001-05-31 10:36:05 +00:00
Brian Wellington
5455f30a75 842. [func] 'rndc flush' now takes an optional view. 2001-05-31 01:21:12 +00:00
Brian Wellington
b804d77ad9 #include <dns/soa.h> 2001-05-31 00:59:46 +00:00
Brian Wellington
1969ab5360 copyright updates 2001-05-30 20:31:08 +00:00
Mark Andrews
89d03d4715 Redo:
839.   [func]          Dump packets for which there was no view or that the
                        class could not be determined to category "unmatched".
2001-05-28 05:17:05 +00:00
Mark Andrews
1666a83cab add sys/types.h for FreeBSD 2.1. 2001-05-25 07:42:15 +00:00
Mark Andrews
2ae4dd0dbd 839. [func] Dump packets for which there was no view or that the
class could not be determined to file, (-e filename).
2001-05-25 07:39:48 +00:00
Mark Andrews
4fbd6a13a5 #838 7.1.1 -> 7.x.x 2001-05-24 23:58:24 +00:00
Mark Andrews
761a21dfab 838. [port] UnixWare 7.1.1 is now suported by
bin/tests/system/ifconfig.sh.
2001-05-24 23:55:48 +00:00
Andreas Gustafsson
508d17362c 834. [func] Accept (but warn about) master files beginning with
an SOA record without an explicit TTL field and
			lacking a $TTL directive, by using the SOA MINTTL
			as a default TTL.  This is for backwards compatibility
			with old versions of BIND 8, which accepted such
			files without warning although they are illegal
			according to RFC1035.
2001-05-22 01:44:37 +00:00
Brian Wellington
b7ce2258ca change the description of 'rndc status' 2001-05-22 00:56:01 +00:00
Andreas Gustafsson
6cc2f10547 indentation 2001-05-19 00:08:21 +00:00
Andreas Gustafsson
5fdc9aaf40 832. [bug] The default location for named.conf in named-checkconf
should depend on --sysconfdir like it does in named.
                        [RT #1258]
2001-05-18 23:50:06 +00:00
Andreas Gustafsson
60084a1a5a The ARM and the man pages now use a common set of Makefile macros
to determine the paths to the various SGML and XML tools and files.
You should have a complete SGML catalog in /usr/local/share/sgml/catalog;
this will be picked up by the configure script and used for both the
ARM and the man pages.
2001-05-15 17:33:32 +00:00
Bob Halley
c209cc1ebd update test to check for new behavior of ANY queries at zone cut points 2001-05-15 05:32:53 +00:00
Andreas Gustafsson
b56607d483 the ixfr test requires Net::DNS 2001-05-14 22:35:57 +00:00
Andreas Gustafsson
82df406152 don't log ISC_R_CANCEL as a 'fatal error' 2001-05-14 21:33:45 +00:00
Andreas Gustafsson
70fcb78509 client->peeraddr_valid could be set even if the peer
address was not valid; socket errors were logged as requests; when a client shut down
due to a fatal I/O error, it failed to log a message to that effect
2001-05-14 21:12:32 +00:00
Brian Wellington
50097b38c0 830. [func] Implement 'rndc status'. 2001-05-14 20:44:16 +00:00
Brian Wellington
ecf4962155 more of 'rndc status' 2001-05-14 19:06:47 +00:00
Bob Halley
3e9b51fc7b Replies to the reload command would sometimes contain invalid signatures
because the code was incorrectly referencing the secret from memory that
the reload frees.  The code now makes a copy of the secret used to validate
the request, and uses that in the response.
2001-05-14 18:23:39 +00:00
Andreas Gustafsson
13b9abae18 uninitialized variable 2001-05-10 19:05:00 +00:00
Andreas Gustafsson
c6c5f2db75 added .cvsignore file 2001-05-10 19:01:51 +00:00
Andreas Gustafsson
89485c1d71 added incremental zone transfer test 2001-05-10 18:29:09 +00:00
Andreas Gustafsson
e5a9067ab2 regenerated 2001-05-10 16:30:13 +00:00
Andreas Gustafsson
67a3554aa6 use $PERL 2001-05-10 16:28:57 +00:00
Brian Wellington
1ba1b5242e pass DST_TYPE_PUBLIC | DST_TYPE_PRIVATE when both the public and private key
should be read.
2001-05-10 06:04:58 +00:00
Andreas Gustafsson
8ea814ce5f If a response was received on port 53 and failed to parse, the server
would respond to the response, potentially causing packet storms.
This bug was introduced on the mainline by the dispatch-bypass changes and
does not affect any released version.
2001-05-09 23:13:03 +00:00
Andreas Gustafsson
73a0d5c6ec do not assume . is in $PATH 2001-05-09 21:55:44 +00:00
Brian Wellington
66262ee904 rndc status now counts zones (in all views except _bind) 2001-05-09 21:35:28 +00:00
Brian Wellington
08116c0bbd -t now works 2001-05-09 18:59:55 +00:00
Brian Wellington
fdd2f4e5d0 Add an option to ignore the first 2 bytes (for TCP messages) 2001-05-09 18:56:29 +00:00
Brian Wellington
110c0fae7f add some commandline flags. 2001-05-09 18:51:44 +00:00
Brian Wellington
08a0525d92 Use a 64K buffer, not a 4K buffer. 2001-05-09 18:47:49 +00:00
Brian Wellington
1448a52296 the output buffer should be 64K, not 4000 bytes. 2001-05-09 00:16:48 +00:00
Andreas Gustafsson
c3ebcedbe5 Add isc_file_progname(), with trivial POSIX implementation, and
call it from main().  A separate WIN32 implementation will be needed.
2001-05-08 19:47:55 +00:00
Andreas Gustafsson
8fbd23c0aa 823. [func] The output of "dig -h" now goes to stdout so that it
can easily be piped through "more". [RT #1254]
2001-05-08 15:56:01 +00:00
Brian Wellington
7fea1b3b43 If 'rndc trace' is sent to a server already debugging at level 99, ignore it. 2001-05-08 04:30:32 +00:00
Brian Wellington
e4cd5a1e5d Partial support for "rndc status". Not all of the fields are filled in yet. 2001-05-08 04:09:41 +00:00
Andreas Gustafsson
532989b206 initate command channel shutdown from the server task, not the
main task, to avoid race conditions; eliminate global variables in
controlconf.c
2001-05-08 03:42:34 +00:00
Brian Wellington
bdfb3735ac check for DNS_R_SEENINCLUDE 2001-05-08 03:20:42 +00:00
Andreas Gustafsson
8b3fb4bded added reconfig command to usage message 2001-05-08 01:19:01 +00:00
Andreas Gustafsson
4257a38160 handle tabs in rndc commands; remove redundant strcmp() calls;
remove obsolete commentary
2001-05-08 00:28:28 +00:00
Andreas Gustafsson
2071b2be37 unused variable 2001-05-08 00:26:24 +00:00
Andreas Gustafsson
9dafd058e3 implemented 'rndc reconfig' 2001-05-07 23:34:24 +00:00
Andreas Gustafsson
6e0e723b25 quote key name in warning message; typos; plural 2001-05-07 21:57:25 +00:00
Andreas Gustafsson
02d8e643ea cut-and-paste-o caused memory leak 2001-05-07 21:01:45 +00:00
Danny Mayer
a14762f207 dst_key_fromfile needs cast of length 2001-05-06 02:20:29 +00:00
Danny Mayer
94b88b9500 named_order needed const in declaration 2001-05-06 02:17:48 +00:00
Brian Wellington
5f539d5fc6 822. [bug] Sending nxrrset prerequisites would crash nsupdate.
[RT #1248]
2001-05-05 01:19:45 +00:00
Andreas Gustafsson
b98aa30aa2 regenerated 2001-05-04 00:55:52 +00:00
Andreas Gustafsson
2eaad63a37 regenerated with docbook2man-spec.pl bug fixes 2001-05-04 00:51:29 +00:00
Brian Wellington
76477bd0e0 821. [bug] The program name used when logging to syslog should
be stripped of leading path components.
			[RT #1178, #1232]
2001-05-03 19:06:25 +00:00
Andreas Gustafsson
c62314bc9c removed sample configuration access code, now that we have
real configuration access code in bin/named/server.c and bin/named/*conf.c
2001-05-02 17:43:42 +00:00
Andreas Gustafsson
e23d2b98b7 don't include the now nonexistent <dns/namedconf.h> 2001-05-02 17:41:24 +00:00
Andreas Gustafsson
38db299051 make rwlock_test compile without threads 2001-05-02 17:35:52 +00:00
Andreas Gustafsson
3242899a56 818. [bug] Certain pathological responses to ANY queries could
cause an assertion failure. [RT #1218]
2001-04-28 00:21:30 +00:00
Andreas Gustafsson
33d4937a6e actually initialize the uninitialized variable instead of
initializing another variable twice
2001-04-26 17:20:07 +00:00
Brian Wellington
31628370cc uninitialized variables [RT #1188] 2001-04-26 05:27:18 +00:00
David Lawrence
5bc6f56bc1 Test that log files can be opened when they are configured, since
isc_log_open() can't effectively report failures when called in
isc_log_doit().
2001-04-26 02:38:08 +00:00
Andreas Gustafsson
54b4a8d345 reduced busy loop iteration count to avoid the test timing out on hp1020a 2001-04-25 01:23:13 +00:00
Andreas Gustafsson
4c110ccec1 t12() requires threads 2001-04-24 22:57:36 +00:00
Andreas Gustafsson
3ee7b0d2cd set the SO_REUSEADDR socket option, like named itself does 2001-04-24 01:52:16 +00:00
Andreas Gustafsson
7f4bf5aaac 8-columns indentation and consistent spacing 2001-04-24 01:23:28 +00:00
Brian Wellington
f5c1382fdf Don't leak memory when failing to parse an rdata in the prereq section. 2001-04-20 21:10:36 +00:00
Brian Wellington
4f35dccfc2 If lwresd was started with no -c or -C option, it would fail to read
/etc/resolv.conf if /etc/lwresd.conf was not found.
2001-04-19 23:38:32 +00:00
Brian Wellington
92da55299b If a client requests a UDP buffer of less than 512, ignore it. [RT #1197] 2001-04-19 18:29:53 +00:00
Brian Wellington
e19501436a seed random(), so that the message serial number is not always the same. 2001-04-16 23:07:34 +00:00
Andreas Gustafsson
10a06917a5 not all blackholed UDP datagrams are queries 2001-04-16 22:10:44 +00:00
Brian Wellington
71ca6e64b4 allow ^C to kill rndc while waiting for a response. 2001-04-16 22:00:21 +00:00
Brian Wellington
d8ffaef5c2 The blackhole ACL was not properly applied to UDP queries. Also,
blackholing of TCP connections was done later than it should have been.
2001-04-16 21:18:10 +00:00
Andreas Gustafsson
fa1a39a514 avoid unnecessary auto array initialization 2001-04-16 17:23:34 +00:00
Andreas Gustafsson
07c9d1dee5 'failed to' -> 'could not' 2001-04-16 17:09:00 +00:00
David Lawrence
95799c090c a cleaner approach to the whole issue of shutting up warnings for threaded
vs non-threaded builds.  both compile without any warnings now.
2001-04-13 02:19:37 +00:00
Brian Wellington
6d88b27c89 yet another shutdown race condition 2001-04-13 01:32:14 +00:00
Brian Wellington
32147eb26f refer to RFC 3007, not RFC 2137. 2001-04-13 00:48:57 +00:00
Brian Wellington
5d40dcc081 improved error message 2001-04-13 00:45:19 +00:00
David Lawrence
afe871339a move stack variable declaration within the ISC_PLATFORM_USETHREADS conditional
blocks.
2001-04-12 22:56:02 +00:00
David Lawrence
4f30524203 clean up numerous "statement not reached" errors on a few platforms 2001-04-12 21:31:38 +00:00
David Lawrence
8dd4cf7fc6 dns_dialuptype_t dialup = dns_notifytype_no changed to = dns_dialuptype_no 2001-04-12 21:09:35 +00:00
David Lawrence
8ed664e5a6 zonetype "ztype" was set but not used in configure_zone; removed 2001-04-12 21:07:39 +00:00
David Lawrence
6f053cd485 use ISC_TF() to set an isc_boolean_t 2001-04-12 21:04:14 +00:00
David Lawrence
8b0c51974b cleaned up IRIX warnings:
assigned the result of a comparison directly to an isc_boolean_t.
ipv4 was set but not used if USE_GETADDRINFO was not set.
2001-04-12 21:01:46 +00:00
David Lawrence
947295d886 warning cleanup for HPUX-10.20: trivial unsigned vs sign char pointer issues. 2001-04-12 20:39:04 +00:00
Brian Wellington
c20ffa38de 808. [func] Add 'rndc flush' to flush the server's cache. 2001-04-11 20:37:50 +00:00
Brian Wellington
7e6aeec8f9 The cvs id lines were duplicated 2001-04-11 19:11:07 +00:00
Brian Wellington
35112a392f Call isccc_ccmsg_setmaxsize() on the ccmsg. This causes rndc to sometimes
output the slightly cryptic "out of range" message when connecting to a random
port instead of the just plain wrong "out of memory".
2001-04-10 22:00:41 +00:00
Brian Wellington
d4ef65050f copyright updates
(note - this doesn't touch lib/bind at all.  Mark, whenever you're done with
lib/bind, make sure to do the copyright magic)
2001-04-10 21:52:17 +00:00
Brian Wellington
0e528248ab missed removing this file in the key id fix. 2001-04-10 21:35:35 +00:00
Brian Wellington
eb9c4c217f When creating the dispatch manager, pass in the entropy manager. Otherwise
query ids are completely predictable.
2001-04-10 18:45:05 +00:00
Andreas Gustafsson
aed6a8ed2e 805. [bug] When using "forward only", missing root hints should
not cause queries to fail. [RT #1143]
2001-04-09 21:16:47 +00:00
Brian Wellington
c9e698df1b When attempting to open a non-regular file as a pid file, assign errno rather
than printing an uninitialized value.
2001-04-04 21:45:29 +00:00
Brian Wellington
55ddb88e53 803. [bug] Treat all SIG queries as if they have the CD bit set,
otherwise no data will be returned [RT #749]
2001-04-04 18:47:06 +00:00
Brian Wellington
daad43e5a4 802. [bug] DNSSEC key tags were computed incorrectly in almost
all cases. [RT #1146]
2001-04-04 02:02:58 +00:00
Brian Wellington
599bf3aca7 The code to convert a resolv.conf sortlist into a named.conf sortlist was
broken in many ways.
2001-04-02 22:52:07 +00:00
Brian Wellington
b435b1ded3 correctly document the -V (verbose) argument. 2001-03-31 18:19:07 +00:00
Brian Wellington
edac761923 updates 2001-03-31 02:39:52 +00:00
Andreas Gustafsson
9c49c394b4 manpage docbook conversion 2001-03-31 02:31:16 +00:00
Brian Wellington
8ffa8320ab minor changes 2001-03-31 02:25:31 +00:00
Andreas Gustafsson
803b50652f manpage docbook conversion 2001-03-31 02:23:18 +00:00
Brian Wellington
c9c630ee84 If signing a zone fails, remove the partial file. [RT #1131] 2001-03-31 02:12:26 +00:00
Brian Wellington
bb74e8ce7b output the signed data into a temp file, then rename at the end. 2001-03-31 01:46:13 +00:00
Brian Wellington
091329e690 allow multiple messages on the command channel socket 2001-03-31 01:24:25 +00:00
Brian Wellington
eeb77542a8 improve logging [RT #1132] 2001-03-31 01:03:26 +00:00
Brian Wellington
0b062f4990 converted man pages to docbook and cleaned them up. 2001-03-30 22:50:27 +00:00
Brian Wellington
3efd690413 801. [bug] nsupdate should treat lines beginning with ';' as
comments. [RT #1139]
2001-03-30 22:48:35 +00:00
Brian Wellington
5c3efef926 fix port handling 2001-03-30 21:00:08 +00:00
Brian Wellington
2f8380972f don't die if a key wasn't found 2001-03-30 20:00:18 +00:00
Brian Wellington
70d08aea0a 800. [bug] dnssec-signzone produced incorrect statistics for
large zones.  [RT #1133]
2001-03-30 18:02:34 +00:00
Brian Wellington
e0b9690a0a fix format strings 2001-03-30 00:38:27 +00:00
Brian Wellington
c40265eba0 converted man pages to docbook 2001-03-30 00:08:35 +00:00
Brian Wellington
9b6a170d22 'command' is a required argument. 2001-03-30 00:06:30 +00:00
Brian Wellington
2c9db93149 798. [bug] nsupdate should be able to reject bad input lines
and continue. [RT #1130]
2001-03-29 23:51:36 +00:00
Andreas Gustafsson
7dde5be909 rephrased relative directory warning 2001-03-29 04:25:59 +00:00
Andreas Gustafsson
b18aa36ef0 removed extraneous space 2001-03-29 04:23:51 +00:00
Brian Wellington
672056d560 797. [func] Issue a warning if the 'directory' option contains
a relative path. [RT #269]
2001-03-29 02:33:48 +00:00
Bob Halley
1c17c669fa update 2001-03-28 20:19:57 +00:00
Brian Wellington
c2c7bfcef5 rndc only takes one command. make the documentation say this. 2001-03-28 20:17:10 +00:00
Brian Wellington
0f635e91db don't print -v and -z options in the usage statement, since they don't exist. 2001-03-28 20:09:05 +00:00
Brian Wellington
099805b4c1 remove the nonexistent namelimit option and the deprecated rrlimit option. 2001-03-28 03:09:47 +00:00
Brian Wellington
08a0b6d8a0 tabify 2001-03-28 02:43:44 +00:00
Brian Wellington
668f8d91db 795. [func] Add the +multiline option to dig.
(which requires dns_message_totext(), etc. to take a style parameter)
2001-03-28 02:42:56 +00:00
Bob Halley
94bd918b63 convert rndc.conf to docbook 2001-03-28 02:02:24 +00:00
Bob Halley
4610465ed9 rndc docbook conversion 2001-03-28 01:01:01 +00:00
Brian Wellington
566cc190fa remove extraneous spaces 2001-03-28 00:21:56 +00:00
Brian Wellington
d7ba3622ff 794. [func] Implement the "port" and "default-port" statements
in rndc.conf.
2001-03-28 00:16:09 +00:00
Brian Wellington
45e22378fc dns_name_tofilenametext() now downcases the name, which means the callers
don't need to.
2001-03-27 23:43:15 +00:00
Brian Wellington
7d7215baf8 Add dns_name_tofilenametext(), and use it in the dnssec tools. 2001-03-27 22:57:48 +00:00
Brian Wellington
d566e8ea7b open databases with the root as origin when possible. 2001-03-27 22:08:39 +00:00
Brian Wellington
dd750c560a Reran update_copyrights, which slightly reformatted the copyrights. 2001-03-27 20:11:04 +00:00
Bob Halley
610550dc5d add doc, docclean, and maintainer-clean targets 2001-03-27 19:37:23 +00:00
Andreas Gustafsson
a95181f3f2 statistics-file had incorrect default value if the configuration did not
load completely
2001-03-27 18:17:09 +00:00
Bob Halley
6ea1b817e3 convert man pages to docbook 2001-03-27 17:54:37 +00:00
Brian Wellington
be0e3baffd define the port explicitly, rather than including named/control.h and
getting into a dependency mess.
2001-03-27 02:34:36 +00:00
Brian Wellington
badf66abe0 Remove OMAPI. 2001-03-27 00:53:58 +00:00
Brian Wellington
1b4e6163be oops, missed a few files. 2001-03-27 00:45:13 +00:00
Brian Wellington
1d92d8a245 792. [cleanup] Replace the OMAPI command channel protocol with a
simpler one.
2001-03-27 00:44:59 +00:00
Andreas Gustafsson
34613b2e39 789. [bug] The "localhost" and "localnets" ACLs did not match
when used as the second element of a two-element
                        sortlist item.
2001-03-26 23:36:00 +00:00
Andreas Gustafsson
af0a9bac79 missing NULL initialization in
match-mapped-addresses glue code
2001-03-26 23:03:05 +00:00
Andreas Gustafsson
851c849a5e log successful setting of resource limits at level 3, not 1 2001-03-26 23:02:26 +00:00
Brian Wellington
6eccf5bd07 788. [feature] Add the "match-mapped-addresses" options, which
causes IPv6 v4mapped addresses to be treated as
			IPv4 addresses for the purpose of acl matching.
2001-03-26 21:33:07 +00:00
Brian Wellington
ff14db20fb check that the address family is supported before binding ports. 2001-03-24 02:31:41 +00:00
Brian Wellington
b03c1bf72f Make sure to create all keyset- and signedkey- files with downcased names;
downcase names before looking for signedkey- files in dnssec-signzone.
2001-03-23 03:59:00 +00:00
Brian Wellington
4e146b2fd6 duplicate keys on the command line were not properly suppressed 2001-03-22 19:28:23 +00:00
Brian Wellington
734ae1f7c6 isc_{base64|hex}_decodestring took an unused mctx. Remove the mctx. 2001-03-22 00:07:07 +00:00
Brian Wellington
4ade12133c A commented out line in the quoted string representing the default
configuration was missing a semicolon.  How AIX's make depend caught this
is somewhat of a mystery.
2001-03-20 21:54:29 +00:00
Brian Wellington
b0390aab30 783. [bug] Following CNAMEs could cause an assertion failure
when either using an sdb database or under very
                        rare conditions.
2001-03-20 00:00:45 +00:00
Brian Wellington
fed2c6d186 80 columns 2001-03-19 22:59:03 +00:00
Brian Wellington
55839cbe31 Linux 2.2.18 supports the prctl() call necessary for running setuid. 2001-03-19 22:41:22 +00:00
Brian Wellington
54d64c7994 782. [feature] Implement the serial-query-rate option. 2001-03-19 22:34:14 +00:00
Andreas Gustafsson
4c03e69ab8 781. [func] Avoid error packet loops by dropping duplicate FORMERR
responses. [RT #1006]
2001-03-19 20:52:21 +00:00
Brian Wellington
079878277f unused variable 2001-03-16 23:00:00 +00:00
Brian Wellington
36c754f274 missing space in AAAA output [RT #1051] 2001-03-16 22:13:41 +00:00
Brian Wellington
298273b535 The updated config.guess now calls linux "linux" instead of "linux-gnu" 2001-03-16 21:44:35 +00:00
Brian Wellington
a6b56c6609 If the default configuration fails to parse, don't seg fault. 2001-03-15 19:39:50 +00:00
Andreas Gustafsson
21f2b02a04 80 columns 2001-03-14 23:13:57 +00:00
Bob Halley
d911284333 add support for minimal-responses 2001-03-14 21:53:29 +00:00
Bob Halley
02a402afe5 add response minimization if MINIMIZE_RESPONSES is defined 2001-03-14 19:33:00 +00:00
Brian Wellington
aa5e0fe0fc spelling 2001-03-14 18:08:17 +00:00
Andreas Gustafsson
b31c8af1d9 name libisccfg logging functions consistently with
other libisccfg functions [RT #1020]
2001-03-13 03:04:09 +00:00
Andreas Gustafsson
89752c3cb7 test more variants of the inet controls channel syntax,
'notify explicit', and various types of file log channels
2001-03-13 03:03:06 +00:00
Brian Wellington
f746db7665 pass the compression context to dns_message_renderbegin (the change last week
was incomplete, but these tests are not built by default)
2001-03-13 02:48:54 +00:00
Brian Wellington
3b2634e9b9 remove nconf_test, since it used the old config parser. 2001-03-13 02:47:18 +00:00
Brian Wellington
40fab71b52 When querying for ANY at a zone apex, don't add NS records to the authority
section, since they're already in the answer section.
2001-03-13 01:37:11 +00:00
Michael Sawyer
bc223aaf8e miccing cancel_all in nslookup. 2001-03-13 01:03:43 +00:00
Brian Wellington
efec85a561 add consts [RT #1016] 2001-03-12 22:49:29 +00:00
Brian Wellington
461260ac15 add casts [RT #1017] 2001-03-12 22:27:15 +00:00
Brian Wellington
67b7a9bb17 add a cast [RT #1019] 2001-03-12 22:21:31 +00:00
Mark Andrews
55b6243923 776. [func] Improved error reporting in denied messages. [RT #252] 2001-03-11 06:19:39 +00:00
David Lawrence
06150c8388 Include lwres/net.h to ensure definition of INADDR_LOOPBACK for lwresd.c.
This might not be the best place for it, but seemed pretty reasonable.
2001-03-10 06:40:29 +00:00
David Lawrence
78b6b2b20d init fwdpolicy at its declaration; compiler can't tell it will be set when used 2001-03-10 06:39:47 +00:00
Brian Wellington
e608c9829f - Detect selective forwarding errors in the configuration checker.
- Clean up selective forwarding configuration.
- Fixed a few minor unrelated bugs in the configuration checker.
2001-03-09 19:07:30 +00:00
Brian Wellington
bbbcb61fb2 Add one more test; make sure configuration files are legal. 2001-03-09 18:49:57 +00:00
Brian Wellington
70aa25d018 isc_app_block() could be called twice with no _unblock() between them. 2001-03-09 18:18:42 +00:00
Andreas Gustafsson
f0a1134d33 updated 2001-03-08 18:44:59 +00:00
David Lawrence
8423f8296a added cacheclean to SUBDIRS to have its test execute with runall.sh 2001-03-08 16:19:35 +00:00
Brian Wellington
e2f470bebb Check that rndc stop syncs zone files. 2001-03-08 02:59:47 +00:00
Damien Neil
2f5f42596b - Stop can now use rndc, when passed the --use-rndc option.
- Slightly restructured code to eliminate duplication.
- No longer waits five seconds for a server to die, if it dies promptly.
2001-03-08 02:34:01 +00:00
David Lawrence
7f31a2eacc node joining no longer happens on deletion 2001-03-08 01:39:10 +00:00
David Lawrence
cbcf2bf6e9 removed "max_cache_size = 0" line, allowing cache limiting 2001-03-08 01:38:39 +00:00
Brian Wellington
8b9b498009 Check for duplicate zone and key statements. Note that duplicate server
and view statements are not detected, because they're harder.
2001-03-08 00:55:50 +00:00
Andreas Gustafsson
668f06c071 removed comments that no longer apply with the new
config code
2001-03-08 00:06:19 +00:00
Andreas Gustafsson
c434887bd5 compiler warning 2001-03-07 22:07:06 +00:00
Andreas Gustafsson
c1e4e35ee4 #include <isc/print.h> 2001-03-07 22:04:11 +00:00
Brian Wellington
d25dd5b056 770. [func] Add the "edns yes_or_no" statement to the server
clause. [RT #524]
2001-03-06 23:54:37 +00:00
Brian Wellington
7c294304af Fix a few places where the new config code would fail if there was no
config file (-c /dev/null).
2001-03-06 19:04:42 +00:00
Bob Halley
7c058f1c38 remove incorrect CNAME/DNAME dead-end code from NXDOMAIN handling 2001-03-06 06:57:47 +00:00
Mark Andrews
0c13f7af64 Document under what conditions client_allocsendbuf() is allowed to return
ISC_R_NOSPACE.  Add an INSIST to catch changes to callers.
2001-03-06 04:18:42 +00:00
Brian Wellington
668acc6107 remove a few references to deleted headers 2001-03-06 02:49:29 +00:00
Brian Wellington
5966e86744 Oops, revert an inadvertent checkin. 2001-03-06 02:40:13 +00:00
Brian Wellington
8772b86369 parse the listen-on-v6 statement, not listen-on a second time. 2001-03-06 01:57:19 +00:00
Brian Wellington
53aed64e0f add missing .cvsignore files 2001-03-06 01:51:34 +00:00
Brian Wellington
952a55000a Remove the 4k UDP send buffer from the client object; use an array on the
stack instead.
2001-03-06 01:24:40 +00:00
Brian Wellington
b9a99f0772 remove 'ans.run' files 2001-03-05 22:54:08 +00:00
Bob Halley
4e3f8e480f fix memory leaks in query_find() 2001-03-05 21:38:20 +00:00
Brian Wellington
e43b9a2005 move compression context create/delete into the caller of the message
rendering functions.  This reduces the size of the message object.
2001-03-05 21:15:47 +00:00
Bob Halley
58eb053ed2 Restructure default value code in set_limit to eliminate compiler warning.
(The previous code worked, but the compiler couldn't figure out that
value was always defined because of the INSIST().)

heartbeat_interval was being used without being initialized.
2001-03-05 17:20:48 +00:00
David Lawrence
ccf4c8616e AIX was extremely unhappy about unescaped literal newlines in a multiline
string.

ns_config_getzonetype was declared in the header to return dns_zonetype_t,
but in the source file to return isc_result_t.  The former is correct.
2001-03-05 13:43:14 +00:00
David Lawrence
9c2e820b3b new test for exercising cache cleaning 2001-03-05 12:50:08 +00:00
David Lawrence
0015ab0974 initialized some variables to silence warning 2001-03-05 12:04:46 +00:00
David Lawrence
371fd91f91 initialize ztype in ns_config_getzonetype() to silence warning 2001-03-05 11:49:15 +00:00
Brian Wellington
74e8f55ff5 #include <config.h> 2001-03-04 22:28:32 +00:00
Brian Wellington
90c099e88e 762. [feature] named now uses the new configuration parser. 2001-03-04 21:21:39 +00:00
Brian Wellington
494e26b333 clean up properly 2001-03-04 21:17:42 +00:00
Brian Wellington
8d0ee7a153 named-checkconf now uses the new config parser 2001-03-03 23:11:36 +00:00
Brian Wellington
626f97e223 allow-update is not allowed in slave zones 2001-03-02 02:44:51 +00:00
Andreas Gustafsson
f65a42f377 exit with a nonzero status if there were errors 2001-03-01 02:35:13 +00:00
Mark Andrews
23f3b516f7 INSTALL_DATA vs INSTALL_PROGRAM 2001-02-28 11:33:23 +00:00
Brian Wellington
2fa9cf0bf9 remove extraneous spaces 2001-02-28 03:05:01 +00:00
Brian Wellington
48755e1737 Don't log that there are no ipv6 interfaces if built with --disable-ipv6. 2001-02-27 04:20:44 +00:00
Mark Andrews
ed0a4f1a30 757. [func] Log zone transfers. 2001-02-26 03:52:30 +00:00
Brian Wellington
1d8cbe855f missed a few prctl.h changes 2001-02-24 23:06:34 +00:00
Brian Wellington
f8727bd903 check for <sys/prctl.h>, not <linux/prctl.h> [RT #679] 2001-02-24 23:05:09 +00:00
Brian Wellington
abf25eafee - update get_address() match the one in dig
- remove the call to get_address when parsing the 'local' statement,
  since it can't be a hostname.
2001-02-24 21:02:38 +00:00
Brian Wellington
3bb043a8b8 753. [bug] dig, host, and nslookup would fail to contact a
remote server if getaddrinfo() returned an IPv6
                        address on a system that doesn't support IPv6.
2001-02-24 20:53:26 +00:00
Brian Wellington
6fd0827482 Remove notify forwarding. 2001-02-24 00:59:00 +00:00
Brian Wellington
cd3ea9f0cf remove NOMINUM_PUBLIC around dns_zone_setmasterswithkeys 2001-02-24 00:35:12 +00:00
Brian Wellington
c6f7fb355d update a comment 2001-02-23 22:38:28 +00:00
Brian Wellington
7a224ba59b test that validation of an ANY query returning a DNAME works 2001-02-23 06:22:11 +00:00
Brian Wellington
529d1b9ada test that validation of a query returning a DNAME works 2001-02-23 06:14:44 +00:00
Andreas Gustafsson
dc9870de55 missed one instance of bug fixed in previous change 2001-02-22 23:39:11 +00:00
Andreas Gustafsson
e672999714 client_create() could return ISC_R_SUCCESS when it failed 2001-02-22 23:16:59 +00:00
Brian Wellington
ea544b0511 747. [bug] The code to determine whether an IXFR was possible
did not properly check for a database that could
                        not have a journal. [RT #908]
2001-02-22 19:15:01 +00:00
Andreas Gustafsson
2cb79d0f48 example code using cfg_tuple_get() 2001-02-22 04:17:57 +00:00
Brian Wellington
fa342c624a Added start.sh and stop.sh, which read the values from conf.sh into the
environment and call the perl scripts.
2001-02-21 20:11:34 +00:00
Brian Wellington
4f91c46a42 Test that both normal and ANY queries that match a CNAME are properly
validated.
2001-02-21 06:47:45 +00:00
Brian Wellington
a41ab607a4 Test that validation of ANY queries works. Also add data to be used for
CNAME/DNAME tests, but not the tests yet since they fail.
2001-02-20 18:33:50 +00:00
Brian Wellington
50448dc92a typo 2001-02-18 21:20:29 +00:00
Brian Wellington
b270a97754 Fix a case where the client could theoretically not free a temporary name.
It'll never happen, since dns_rdata_tostruct() cannot fail when passed a NULL
mctx, but it's more correct this way.
2001-02-18 05:56:16 +00:00
Brian Wellington
e6743c1b25 Don't call get_address when processing "-b address". The address can't be a
host name, and if it's not a valid address, it would call isc_app_block()
and assert since isc_app_run() had not been called yet before calling the
resolver.  This could be seen by running:
	dig @localhost xbill.org -b 127.0.0.1:1111
which now exits with an error.
2001-02-17 20:27:24 +00:00
Brian Wellington
7e966e0088 typos 2001-02-17 01:25:34 +00:00
Brian Wellington
b79adacaad Add more authors. 2001-02-17 01:09:22 +00:00
Andreas Gustafsson
1a77d17120 minor style fixes 2001-02-17 01:05:30 +00:00
Andreas Gustafsson
01254cbbd4 eliminate compiler warning 2001-02-17 00:41:03 +00:00
David Lawrence
7c8b86e762 lib/dns/include is still needed to find files included via bin/named/include 2001-02-16 04:17:00 +00:00
Andreas Gustafsson
adf199832b the rrset-order option was missing 2001-02-16 03:07:40 +00:00
Brian Wellington
f31fd1e949 Remove dispatch_test, which is also using lots of no longer existing API calls. 2001-02-16 01:12:09 +00:00
Brian Wellington
5a027af2a9 update 2001-02-16 01:08:53 +00:00
Brian Wellington
a1c4585f1c Remove ndcconf_test, since the old ndc parser is gone. Remove
dispatch_tcp_test, since the only parts of the dispatcher api it used
no longer exist.
2001-02-16 01:07:37 +00:00
Brian Wellington
c44ecc9bb8 #include <dns/acl.h> 2001-02-16 01:00:42 +00:00
Brian Wellington
8f66dad939 Make rndc use the new config parser. If anyone has any rndc.conf files
sitting around, testing them would be nice.
2001-02-16 00:41:43 +00:00
Brian Wellington
ede71ac5d2 fix suspicious (yet correct) use of strncat() in get_address() [RT #863] 2001-02-16 00:04:18 +00:00
Brian Wellington
f22ef00109 fix the potential buffer overflow in printgreeting() [RT #863] 2001-02-15 23:57:22 +00:00
Ben Cottrell
d8dde7c9fb Style fixes per Andreas, functionality fixes per Michael Sawyer.
The printgreeting() stuff is fixed once and for all by the change
to clone_lookup... I think this is the "right" way of doing it.
2001-02-15 23:44:08 +00:00
Andreas Gustafsson
7aff04f5d0 removed unused struct field client::disconnect 2001-02-15 23:42:54 +00:00
Brian Wellington
c3de05e48a send usage to stderr, not stdout. 2001-02-15 23:26:29 +00:00
Brian Wellington
e51477c9c4 Don't need to initialize dst anymore. 2001-02-15 19:45:27 +00:00
Andreas Gustafsson
08b48bdf45 missing space between words in error message 2001-02-15 19:38:09 +00:00
Andreas Gustafsson
eae31304be 80 columns 2001-02-15 19:02:18 +00:00
Andreas Gustafsson
1348364377 added more sample code for extracting key secrets from rndc.conf 2001-02-15 18:55:03 +00:00
Andreas Gustafsson
b6c943d1c9 added sample code for extracting key secrets from rndc.conf 2001-02-15 18:53:28 +00:00
Andreas Gustafsson
5d9cd26d79 added test program for new configuration parser 2001-02-15 05:15:27 +00:00
Andreas Gustafsson
3ad7f12f74 exit if restarting server fails; increase sleep after SIGKILLing server
to give sockets time to be freed
2001-02-15 01:04:06 +00:00
Matt Nelson
214eae639d Made obsolete by .pl version. 2001-02-15 00:10:33 +00:00
Matt Nelson
2d556761c2 Use stop.pl to stop servers, not stop.sh. 2001-02-15 00:07:03 +00:00
Andreas Gustafsson
3e42d5b2bb start and stop the servers in alphabetical order 2001-02-14 23:57:33 +00:00
Andreas Gustafsson
f915bbfc2d rdatas constructured by query_addcnamelike() always had
type CNAME, even when part of a non-CNAME rdataset
2001-02-14 19:32:30 +00:00
Andreas Gustafsson
65a66336a6 redid configuration locking using isc_task_beginexclusive()
and isc_task_endexclusive() instead of a multitude of separate
configuration rwlocks
2001-02-14 03:54:53 +00:00
Brian Wellington
dc5415c9fd comment update 2001-02-14 03:01:12 +00:00
Andreas Gustafsson
1dd8ee4fd5 fctx_addopt() would leak an rdataset if dns_message_setopt() ever failed;
fixed it by making dns_message_setopt() guarantee to either adopt
or free the rdataset
2001-02-14 02:51:12 +00:00
Andreas Gustafsson
927fe08882 leave more evidence when failing 2001-02-14 02:42:10 +00:00
Andreas Gustafsson
1b003261c2 stop.pl should replace only kill -TERM, not kill -KILL; the test is
specifically trying to test how the server behaves when shut down uncleanly
2001-02-14 02:11:17 +00:00
Andreas Gustafsson
edd03c5600 add -- before non-option argument starting with a dash so as not to
confuse the Perl Getopt module
2001-02-14 02:03:45 +00:00
Brian Wellington
bf5c44f380 ISC_R_INPROGRESS should not be propagated out of client_sendpkg. 2001-02-14 01:46:59 +00:00
Ben Cottrell
2caff6b7df Something that I thought was a win turned out to be a lose. I now no longer
even try to restore previous state when someone issues two conflicting
type options.
2001-02-14 01:46:03 +00:00
Andreas Gustafsson
ff6e7b684a commented 2001-02-14 01:34:26 +00:00
Matt Nelson
614610ba0b Use start.pl and stop.pl to start and stop servers during test. 2001-02-14 00:16:38 +00:00
Matt Nelson
a60a0fd346 Use start.pl and stop.pl instead of start.sh and stop.sh. 2001-02-14 00:14:24 +00:00
Brian Wellington
5226a9f307 argument handling was broken 2001-02-14 00:13:33 +00:00
Matt Nelson
557e104278 Added ability to test port on a single ip address. 2001-02-14 00:09:44 +00:00
Matt Nelson
cf1dd93491 Rewrite of stop.sh in perl. Added ability to stop single server. 2001-02-13 23:41:00 +00:00
Matt Nelson
7b8ebf78a8 Rewrite of start.sh in perl. Added ability to start single specified server
and to skip cleanup of server files.
2001-02-13 23:39:50 +00:00
Ben Cottrell
354f4f1ab2 Fixed RT #727 and #780. 2001-02-13 23:12:17 +00:00
Andreas Gustafsson
b27b26d710 added isc_task_beginexclusive() test 2001-02-13 18:55:19 +00:00
Mark Andrews
e1066e3f98 add named.8 2001-02-13 06:27:26 +00:00
Brian Wellington
8b473437f1 Support Solaris x86, improve Solaris support, support Linux on non x86. 2001-02-12 23:06:44 +00:00
Brian Wellington
2d1db4e2c0 Allocate events in the client structure, and use isc_socket_sendto2()
and isc_socket_recv2() for sending and receiving packets.  In the send
case, pass the IMMEDIATE flag to avoid receiving an event on send completion
if possible.
2001-02-12 21:45:37 +00:00
Brian Wellington
2ba06bbf5a cut-and-paste-o 2001-02-12 20:26:11 +00:00
Mark Andrews
0aba05dc81 named.8 -> named.8.in 2001-02-12 04:53:20 +00:00
Mark Andrews
070fc7e7e1 named.8 is now processed by configure. 2001-02-12 04:50:47 +00:00
Brian Wellington
319d2971f1 When the client informs the dispatcher of a received response, have the
dispatcher copy the event instead of reusing the original one.
2001-02-10 02:00:11 +00:00
Andreas Gustafsson
a771e5c797 removed outdated comment 2001-02-09 21:25:55 +00:00
Andreas Gustafsson
cf887bbf78 the 'additional-data' option was never implemented 2001-02-09 00:08:23 +00:00
Bob Halley
4ff3597979 In ns_server_setdebuglevel():
Fixed "comparison of unsigned expression < 0 is always false".
	Marked server parameter as UNUSED.
2001-02-08 18:01:33 +00:00
Brian Wellington
4cc2a6e261 Mention that the key must be defined in the server configuration file with the
same name and secret.
2001-02-07 20:27:40 +00:00
Mark Andrews
90f92d9f81 RDNC -> RNDC [RT# 816] 2001-02-07 13:31:27 +00:00
Brian Wellington
dfceef7e68 rndc trace now takes an optional level parameter. 2001-02-07 00:50:44 +00:00
Brian Wellington
9e560b59a7 726. [func] Implement the "trace" and "notrace" commands in rndc. 2001-02-06 23:57:16 +00:00
Brian Wellington
4239aef2fb client_request was not freeing its event. 2001-02-06 02:43:42 +00:00
Brian Wellington
ae73c78406 some data structures weren't freed. 2001-02-05 23:09:05 +00:00
Brian Wellington
f91dc72b42 725. [bug] Installing man pages could fail. 2001-02-04 15:52:44 +00:00
Stephen Jacob
524222cfb8 Added purify support (${PURIFY} to link lines) to remaining
Makefile.in's in bin/*
2001-02-02 18:53:05 +00:00
Stephen Jacob
dc7c9751e7 added purify support (${PURIFY} to link commands) to missed test Makefile.in 2001-02-02 01:01:22 +00:00
Stephen Jacob
7bc8deb30f purify support (${PURIFY added to link commands) for all in bin/tests 2001-02-01 23:41:55 +00:00
Stephen Jacob
783d28ddae Added ${PURIFY} to named link command. 2001-02-01 23:22:13 +00:00
Mark Andrews
8e68489885 722. [func] Allow n/named/server.cincrememtal loads to be canceled.
721.   [cleanup]       Load manager and dns_master_loadfilequota() are no
                        more.
2001-02-01 21:29:41 +00:00
Andreas Gustafsson
31c094afd6 random-seed-file is not implemented 2001-02-01 19:09:24 +00:00
Andreas Gustafsson
bce9e213fc chroot() happens before reading named.conf [RT #737] 2001-01-30 01:06:05 +00:00
Brian Wellington
3d76b54512 Don't create a timer for every incoming query - only create it for updates,
notifies, and recursive queries.
2001-01-29 19:49:52 +00:00
Andreas Gustafsson
1718abab45 document the new -t option; misc cleanup 2001-01-29 18:38:11 +00:00
Bob Halley
274a8316ad fix typo 2001-01-29 17:25:12 +00:00
Mark Andrews
2d0627005d 714. [bug] Preserve interval timers across reloads unless changed.
[RT# 729]
2001-01-29 07:08:41 +00:00
Mark Andrews
b1b3495eba 713. [func] named-checkconf takes '-t directory' similar to named.
[RT #726]
2001-01-29 03:23:13 +00:00
Andreas Gustafsson
38247e3857 enable-zone was never implemented; dialup should be allowed
in views
2001-01-27 07:24:35 +00:00
Brian Wellington
35f06ab0e6 Clients now listen on sockets instead of accepting queries from dispatchers.
When a socket is shared by clients and query-source, the client hands off
responses to the dispatcher.
2001-01-27 02:08:07 +00:00
Andreas Gustafsson
75534b6392 optimization: when deciding whether to do v6 syntheis, check the query type
before the ACL because it's usually faster that way
2001-01-26 23:40:44 +00:00
Brian Wellington
a12d9cfa59 710. [func] The forwarders statement now takes an optional port.
Also some assorted cleanup, which resulted in a lot of duplicated code removal.
2001-01-25 02:33:53 +00:00
Andreas Gustafsson
b4876b6ddf simplify dig/host/nslookup code by using the _format() functions in
more places; fix spacing issues; make nslookup print debugging details
for all lookup results, not just those with rcode==0; add comments
2001-01-24 19:28:34 +00:00
Brian Wellington
e2c46d18b3 spelling [RT #705] 2001-01-24 17:30:29 +00:00
James Brister
23360bc8f8 base64-ify the secret. 2001-01-24 15:22:19 +00:00
James Brister
36b8b0b251 base64-ify the secrets in the test config files. 2001-01-24 15:17:36 +00:00
Brian Wellington
aaa761cc39 remove tkey_test and its associated keys, since the tkey system test is
far more useful and comprehensive.
2001-01-24 03:18:36 +00:00
Brian Wellington
8aac4d4723 fix a potential race condition that could occur if the node being iterated
for a SIG query changed between iterations.  Also change a few consistency
checks to INSISTs.
2001-01-24 01:42:41 +00:00
Andreas Gustafsson
9ee323b64b 707. [func] The "filename" argument to named-checkzone is no
longer optional, to avoid reduce confusion. [RT #612]

Also some other minor cleanups of named-checkzone and its man page.
2001-01-24 00:56:56 +00:00
Andreas Gustafsson
3d4454cc2b these files don't belong in the BIND 9 CVS tree. b9status.pl is in the b9t CVS repository, and
we don't care about b8status.pl.
2001-01-24 00:43:09 +00:00
Andreas Gustafsson
6a3b882115 #ifndef USE_GETADDRINFO, not #ifdef USE_GETADDRINFO 2001-01-23 19:55:04 +00:00
Andreas Gustafsson
40562d7208 comment style 2001-01-23 18:47:33 +00:00
James Brister
5905bccacd use new include statement to include ndc.conf-include 2001-01-23 13:13:29 +00:00
James Brister
a21891ee97 file to be included by test ndc.conf 2001-01-23 13:12:50 +00:00
Brian Wellington
d29da750d2 statistics counting was slowing down the server. Make client.c:count_query()
inline and remove dns_stats_ncounters(), which just returned the public
constant DNS_STATS_NCOUNTERS.
2001-01-23 01:50:29 +00:00
Brian Wellington
b151cb7dfa rdataset -> sigrdataset 2001-01-22 23:28:48 +00:00
Andreas Gustafsson
20b6f1e657 misc cleanup 2001-01-22 23:22:09 +00:00
Andreas Gustafsson
4b3e2a344f #ifdef in last change should have been #ifndef 2001-01-22 22:38:21 +00:00
Andreas Gustafsson
8669e2a2eb need <sys/types.h> and <sys/time.h> for select() 2001-01-22 22:29:36 +00:00
Andreas Gustafsson
1d830654f5 removed bitstring avoidance code since it was only effective when
reverse mapping the exact same name multiple times within a 10-minute
window, and the resolver's EDNS0 capability flagging achieves much of
the same effect in a much more general way
2001-01-22 22:29:04 +00:00
Brian Wellington
9fb7cdd126 call getrrsetbyname with a zero length name 2001-01-22 22:12:45 +00:00
Brian Wellington
b9ceffe82f checking for 0 length names is no longer needed. 2001-01-22 22:12:17 +00:00
Brian Wellington
3aac1558c3 delete name operations were broken by the change allowing ttls in delete
commands.
2001-01-22 20:00:56 +00:00
Andreas Gustafsson
634784cb66 701. [func] Root hints are now fully optional. Class IN
views use compiled-in hints by default, as
                        before.  Non-IN views with no root hints now
                        provide authoritative service but not recursion.
                        A warning is logged if a view has neither root
                        hints nor authoritative data for the root. [RT #696]
2001-01-22 19:21:19 +00:00
Andreas Gustafsson
a1cfa2a82d need <isc/print.h> 2001-01-22 18:59:06 +00:00
Andreas Gustafsson
96b8d611a7 alphabetized includes 2001-01-22 18:58:36 +00:00
Brian Wellington
4d30acbac5 698. [bug] Aborting nsupdate with ^C would lead to several
race conditions.
2001-01-21 21:54:32 +00:00
Brian Wellington
131d5feb05 697. [bug] nsupdate was not compatible with the undocumented
BIND 8 behavior of ignoring TTLs in "update delete"
                        commands. [RT #693]
2001-01-21 19:52:06 +00:00
Brian Wellington
76c9d2f6c0 696. [bug] lwresd would die with an assertion failure when passed
a zero-length name.  [RT #692]
2001-01-21 18:50:41 +00:00
Brian Wellington
1ec527b712 693. [bug] An empty lwres statement in named.conf caused
the server to crash while loading.
2001-01-19 01:20:00 +00:00
Andreas Gustafsson
6259fcd6f7 include client address and zone name in dynamic update
log messages
2001-01-18 23:31:03 +00:00
Brian Wellington
6484f6ac04 oops, removed too many sleeps. 2001-01-18 22:43:49 +00:00
Brian Wellington
703e1c0bb6 692. [bug] Deal with systems that have getaddrinfo() but not
gai_strerror(). [RT #679]
2001-01-18 22:21:31 +00:00
Andreas Gustafsson
688a4c50c2 More searchlist/domain handling fixes. Dig/host/nslookup no longer
have the notion that there can be both a search list and a default
domain at the same time.  The resolv.conf "domain" directive is now
used only if there is no "search" directive, and is treated exacly
like a one-element searchlist. The "+domain" option of dig and the
"set domain" command of nslookup are now merely ways of overriding the
resolv.conf search list.  Parents of the name given in the "domain"
directive are still not searched; this is considered a feature and is
consistent with lwres, but different from the BIND 8 resolver. The
"+defname" option to "dig" is now deprecated and treated as a synonym
for "+search"
2001-01-18 05:12:44 +00:00
Brian Wellington
e6c446fd0c make zone_test exit properly [RT #108] 2001-01-18 02:53:57 +00:00
Brian Wellington
47700eeee3 make zone_test compile 2001-01-18 02:36:57 +00:00
Brian Wellington
ad36159e6c Add zone_test to all_tests 2001-01-18 02:35:50 +00:00
Brian Wellington
01b8865b14 689. [doc] man pages are now installed. [RT #210] 2001-01-18 01:33:54 +00:00
Brian Wellington
9fc2037ffe Remove bin/lwresd, as it's no longer used. 2001-01-18 01:00:54 +00:00
Brian Wellington
e037ca879d If "version" is specified in the config file, disable authors.bind [RT #651] 2001-01-18 00:14:20 +00:00
Brian Wellington
d0dc01dd9d Shorten a bunch of sleeps. Let's see if this breaks anything. 2001-01-17 20:53:44 +00:00
Brian Wellington
e56101fa68 consolidate duplicated code. 2001-01-17 02:21:51 +00:00
Brian Wellington
427f933ece use isc_app_block instead of an ugly hack. 2001-01-17 00:48:19 +00:00
Brian Wellington
66921d6dd2 685. [bug] nslookup should always use the search list/domain
options from resolv.conf, and it (and host) should use
                        the search list items first. [RT #405, #630]
2001-01-16 23:15:55 +00:00
Andreas Gustafsson
bda8d67fd4 race condition [RT #670] 2001-01-16 23:02:58 +00:00
Andreas Gustafsson
066cb385cd don't hardcode the magic constant 41 2001-01-16 19:13:10 +00:00
Andreas Gustafsson
93988fb202 use dns_name_format() in more places 2001-01-16 18:52:14 +00:00
Andreas Gustafsson
7ddb4c86a9 breaking out the SOA fields by calling dns_rdata_totext() and then
tokenizing the text representation is sick and demented
2001-01-16 18:39:38 +00:00
Mark Andrews
be387fd057 682. [bug] nslookup diplayed SOA records incorrectly. [RT #665] 2001-01-16 07:28:11 +00:00
Brian Wellington
53ee4a89ad fix copyright 2001-01-13 00:38:08 +00:00
Brian Wellington
cb2fcb2a66 remove a const-related warning 2001-01-13 00:26:09 +00:00
Andreas Gustafsson
cd0d4cbce0 head is not in the default path on irix, but sed is 2001-01-13 00:02:55 +00:00
Brian Wellington
b43d1c1f46 Don't die if a child's key is in the zone and a signedkey file is present. 2001-01-12 23:36:03 +00:00
Brian Wellington
f0e246e271 Fully implement the cachefile option, which allows persistent caching. This
removes some unused code in view.c and uncomments some code in cache.c.
This still isn't really usable, since the trust level of cached data is
not persistent, so all data in the persistent cache will be promoted to
"ultimate" trust on reload.
2001-01-12 22:22:17 +00:00
Brian Wellington
619ee46ac6 Copy cache.in to cache before running the test, so it's not overwritten on
exit.
2001-01-12 22:14:59 +00:00
Andreas Gustafsson
ebb8884123 revert to 1.90 since RT #646 is now fixed by relaxing the
requirements of dbiterators, but keep the removal of the unused structure element 'state'
2001-01-12 19:01:39 +00:00
Mark Andrews
17d8e5cce8 opps paused should be set to false not true before getting the next node. 2001-01-12 10:25:15 +00:00
Mark Andrews
f7321615ea 678. [bug] "tranfer-format one-answer;" could trigger an assertion
failure. [RT #646]
 also removed unused structure element state from axfr structure.
2001-01-12 10:20:05 +00:00
Brian Wellington
7dec36c225 677. [bug] dnssec-signzone would occasionally use the wrong ttl
for database operations and fail. [RT #643]
2001-01-12 01:38:21 +00:00
Brian Wellington
fd70428a03 Only open the random device on server load, not reload. 2001-01-12 00:37:11 +00:00
Brian Wellington
6b8ab03dc8 Implement the random-device option, and log a message if there is no entropy. 2001-01-11 23:46:12 +00:00
Andreas Gustafsson
ddec026ff9 run the v6synth test by default; explain why stress test is not run by default 2001-01-11 21:12:10 +00:00
Brian Wellington
73eb75dc21 add copyrights to the tkey system test 2001-01-11 20:51:19 +00:00
Andreas Gustafsson
7946047f2d name data are unsigned char, not char 2001-01-11 20:48:27 +00:00
Brian Wellington
2f9db90bf6 Add a tkey system test 2001-01-11 20:45:53 +00:00
Andreas Gustafsson
1988fd60fa share the root.hint file among most of the system tests instead of having multiple identical copies 2001-01-11 20:44:21 +00:00
Andreas Gustafsson
f6bbaee0b2 updated 2001-01-11 20:07:35 +00:00
Andreas Gustafsson
e9c861a307 max-names is no longer parsed; max-ixfr-log-size now takes
a size_spec
2001-01-11 20:04:12 +00:00
Andreas Gustafsson
e495738a16 it's named-checkzone, not name_checkzone 2001-01-11 18:29:53 +00:00
Brian Wellington
b401a139eb ${UOBJS} was used, but never defined. Probably a cut and paste error. 2001-01-11 18:05:15 +00:00
Brian Wellington
de832d133e The changes to reduce allocations in the memory code exposed the sheer
brokenness of this program.
2001-01-11 04:12:29 +00:00
Brian Wellington
db68dedac2 The usage should print named-checkzone, not zone_test. 2001-01-11 04:07:34 +00:00
Andreas Gustafsson
8227257b1c added IPv6 synthesis tests 2001-01-10 01:19:06 +00:00
Andreas Gustafsson
fd8125cac3 respond with NXDOMAIN, not SERVFAIL, when no PTR record is
found in either ip6.int or ip6.arpa
2001-01-09 23:48:44 +00:00
Andreas Gustafsson
14b90c6eb0 v6 synthesis code used uninitialized variable 2001-01-09 22:10:32 +00:00
Brian Wellington
499b34cea0 copyright update 2001-01-09 22:01:04 +00:00
Andreas Gustafsson
576f85e5fd 673. [func] The server can now convert RFC1886-style recursive
lookup requests into RFC2874-style lookups, when
                        enabled using the new option "allow-v6-synthesis".
2001-01-09 18:26:01 +00:00
Andreas Gustafsson
4b0ed7a504 for loop style 2001-01-09 17:09:02 +00:00
Andreas Gustafsson
ad26c86891 checkpoint: IPv6 response synthesis implemented for the reverse
mapping case but still disabled due to lack of configurability
2001-01-09 06:48:47 +00:00
Mark Andrews
5bb4ceb2a6 668. [func] named-checkzone now reports multiple errors in master
files.
2001-01-09 00:43:24 +00:00
Brian Wellington
d119051ef7 667. [bug] On Linux, running named with the -u option and a
non-world-readable configuration file didn't work.
                        [RT #626]
2001-01-09 00:10:42 +00:00
Andreas Gustafsson
d405a8134b spacing 2001-01-08 23:50:34 +00:00
Andreas Gustafsson
812ed4efbb removed pointless cast 2001-01-08 23:45:57 +00:00
Andreas Gustafsson
10cd4cf39c several dynamic memory allocations used the size of the wrong structure
(which coincidentally had the same size as the right one)
2001-01-08 23:44:09 +00:00
Brian Wellington
93a6dd9d38 copy the origin in clone_lookup, not the truncation recovery code. 2001-01-08 23:40:29 +00:00
Brian Wellington
c9629cce66 +defname should not be the default. 2001-01-08 23:38:37 +00:00
Brian Wellington
9b0e404e5f 666. [bug] If a request is longer than 512 bytes, send it using
TCP.
2001-01-08 20:50:04 +00:00
Brian Wellington
fff07c1022 665. [bug] Signed responses were not sent when the size of the
TSIG + question exceeded the maximum message size.
                        [RT #628]
2001-01-08 20:36:14 +00:00
Brian Wellington
a89b2f024c grammar 2001-01-08 19:50:32 +00:00
Andreas Gustafsson
ec644b5e4b 661. fix failed to destroy transfer object after sending response 2001-01-08 18:03:45 +00:00
Andreas Gustafsson
4e13b2c33c deal with CNAME loops in AAAA synthesis 2001-01-07 23:36:56 +00:00
Andreas Gustafsson
501f6a2fa5 checkpoint: IPv6 response synthesis implemented for the forward
mapping case but still disabled due to lack of configurability
2001-01-07 22:18:00 +00:00
Andreas Gustafsson
b23f160d5b simplified handling of the query type, removing the final
vestiges of support for multiple queries per packet, in preparation
for AAAA synthesis code which needs to know the query type earlier
than it was previously available
2001-01-07 22:06:14 +00:00