Mark Andrews
18d208a4a2
3265. [bug] Address lock order reversal with inline-signing
...
support. [27557]
2012-01-25 02:46:53 +00:00
Mark Andrews
59162a5b5c
silence 'Assigned value is always the same as the existing value' warnings
2012-01-21 22:51:27 +00:00
Automatic Updater
edb4393ef5
update copyright notice
2012-01-10 23:46:58 +00:00
Evan Hunt
9a02019889
3264. [bug] Automatic regeneration of signatures in an
...
inline-signing zone could stall when the server
was restarted. [RT #27344 ]
3263. [bug] "rndc sync" did not affect the unsigned side of an
inline-signing zone. [RT #27337 ]
2012-01-10 18:13:37 +00:00
Mark Andrews
53e7766f7d
remove logit
2011-12-22 12:58:13 +00:00
Mark Andrews
83878aaa47
3256. [bug] Disable empty zones for lwresd -C. [RT #27139 ]
...
3255. [func] No longer require that a empty zones be explicitly
enabled or that a empty zone is disabled for
RFC 1918 empty zones to be configured. [RT #27139 ]
2011-12-22 08:22:18 +00:00
Mark Andrews
56dc4c6730
3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
...
[RT #26632 ]
2011-12-02 02:44:01 +00:00
Mark Andrews
9bd876a683
3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684 ]
2011-11-29 00:49:26 +00:00
Evan Hunt
5d23a6ac83
3214. [func] Add 'named -U' option to set the number of UDP
...
listener threads per interface. [RT #26485 ]
2011-11-09 18:44:04 +00:00
Mark Andrews
ac43690858
3209. [func] Add "dnssec-lookaside 'off'". [RT #24858 ]
2011-11-07 00:14:11 +00:00
Automatic Updater
0b85ae70e9
update copyright notice
2011-11-03 23:46:26 +00:00
Evan Hunt
f550b4b104
3201. [func] 'rndc querylog' can now be given an on/off parameter
...
instead of only being used as a toggle. [RT #18351 ]
2011-11-03 23:05:31 +00:00
Mark Andrews
5b7e96d3a7
add if (list)
2011-10-29 06:22:51 +00:00
Automatic Updater
d68503046d
update copyright notice
2011-10-28 12:08:04 +00:00
Evan Hunt
9c03f13e18
3185. [func] New 'rndc signing' option for auto-dnssec zones:
...
- 'rndc signing -list' displays the current
state of signing operations
- 'rndc signing -clear' clears the signing state
records for keys that have fully signed the zone
- 'rndc signing -nsec3param' sets the NSEC3
parameters for the zone
The 'rndc keydone' syntax is removed. [RT #23729 ]
2011-10-28 06:20:07 +00:00
Mark Andrews
b1c6de5456
3177. [func] 'rndc keydone', remove the indicator record that
...
named has finished signing the zone with the
corresponding key. [RT #26206 ]
2011-10-25 01:54:22 +00:00
Mark Andrews
0a1009ae64
3171. [bug] Exclusively lock the task when adding a zone using
...
'rndc addzone'. [RT #25600 ]
2011-10-14 05:38:50 +00:00
Evan Hunt
793814f807
3164. [func] Enable DLZ modules to retrieve client information,
...
so that responses can be changed depending on the
source address of the query. [RT #25768 ]
2011-10-11 00:09:03 +00:00
Evan Hunt
1219f8d194
3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
...
the config file before pausing the server. [RT #21373 ]
2011-09-23 18:08:01 +00:00
Scott Mann
fad5116b3d
Remove the ixfr-from-differences side-effect which causes an AXFR and extend
...
request-ixfr to the zone level.
2011-09-06 22:29:33 +00:00
Evan Hunt
8a2ab2b920
3150. [func] Improved startup and reconfiguration time by
...
enabling zones to load in multiple threads. [RT #25333 ]
2011-09-02 21:15:39 +00:00
Mark Andrews
9198ab377b
3147. [func] Initial inline signing support. [RT #23657 ]
2011-08-30 05:16:15 +00:00
Evan Hunt
0127993480
3140. [func] New command "rndc flushtree <name>" clears the
...
specified name from the server cache along with
all names under it. [RT #19970 ]
2011-08-02 20:36:13 +00:00
Evan Hunt
cf63d32d55
3136. [func] Add RFC 1918 reverse zones to the list of built-in
...
empty zones switched on by the 'empty-zones-enable'
option. [RT #24990 ]
2011-07-28 03:18:17 +00:00
Automatic Updater
69f5c36b39
update copyright notice
2011-07-06 23:47:43 +00:00
Evan Hunt
42cf2ff7ba
3131. [func] Improve scalability by allocating one zone task
...
per 100 zones at startup time, rather than using a
fixed-size task table. [RT #24406 ]
2011-07-06 01:36:32 +00:00
Evan Hunt
e7220c9b84
3129. [bug] Named could crash on 'rndc reconfig' when
...
allow-new-zones was set to yes and named ACLs
were used, [RT #22739 ]
2011-06-17 07:05:02 +00:00
Evan Hunt
1063914c30
Fixed some problems from change #3084 that turned up after committing it;
...
"freeze" and "thaw" weren't working quite right when used without a
specific zone name.
2011-03-21 18:38:40 +00:00
Evan Hunt
d965c91f95
clarify "rndc sync" logging, add it to "rndc -h" output, per francis
...
review comments in rt22473.
2011-03-21 15:39:05 +00:00
Evan Hunt
7cb226ec34
3084. [func] A new command "rndc sync" dumps pending changes in
...
a dynamic zone to disk; "rndc sync -clean" also
removes the journal file after syncing. Also,
"rndc freeze" no longer removes journal files.
[RT #22473 ]
2011-03-21 07:22:14 +00:00
Mark Andrews
0874abad14
3069. [cleanup] Silence warnings messages from clang static analysis.
...
[RT #20256 ]
2011-03-11 06:11:27 +00:00
Evan Hunt
422009fe5b
3066. [func] The DLZ "dlopen" driver is now built by default,
...
no longer requiring a configure option. To
disable it, use "configure --without-dlopen".
Driver also supported on win32. [RT #23467 ]
2011-03-10 04:36:16 +00:00
Evan Hunt
f385bac3b9
3057. [bug] "rndc secroots" would abort after the first error
...
and so could miss some views. [RT #23488 ]
2011-03-03 16:16:47 +00:00
Evan Hunt
70c7f4fb4f
3053. [bug] Under a sustained high query load with a finite
...
max-cache-size, it was possible for cache memory
to be exhausted and not recovered. [RT #23371 ]
2011-03-03 04:42:25 +00:00
Mark Andrews
0e507dbb81
2039. [func] Redirect on NXDOMAIN support. [RT #23146 ]
2011-02-23 03:08:11 +00:00
Evan Hunt
29bd52e4ee
3021. [bug] Change #3010 was incomplete. [RT #22296 ]
2011-02-16 19:48:12 +00:00
Automatic Updater
784a904bd0
update copyright notice
2011-02-03 12:18:12 +00:00
Mark Andrews
000a8970f8
3011. [func] Change the default query timeout from 30 seconds
...
to 10. Allow setting this in named.conf using the new
'resolver-query-timeout' option, which specifies a max
time in seconds. 0 means 'default' and anything longer
than 30 will be silently set to 30. [RT #22852 ]
2011-02-03 05:41:55 +00:00
Evan Hunt
903b3c84e2
3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
...
for refreshing managed-keys. [RT #22296 ]
2011-02-03 00:21:55 +00:00
Mark Andrews
9d53927aa8
zone = NULL
2011-01-13 03:57:50 +00:00
Mark Andrews
87708bde16
3008. [func] Response policy zones (RPZ) support. [RT #21726 ]
2011-01-13 01:59:28 +00:00
Automatic Updater
135bcc2e42
update copyright notice
2011-01-11 23:47:14 +00:00
Mark Andrews
433e06a25c
3006. [func] Allow dynamically generated TSIG keys to be preserved
...
across restarts of named. Initially this is for
TSIG keys generated using GSSAPI. [RT #22639 ]
2011-01-10 05:32:04 +00:00
Mark Andrews
dc4fa197dd
3004. [func] DNS64 reverse support. [RT #22769 ]
2011-01-07 04:31:39 +00:00
Evan Hunt
5a87f3439e
Initialize a pointer to NULL in order to to silence a compiler warning.
...
Committing without review because the change is trivial.
2011-01-07 00:50:06 +00:00
Automatic Updater
1da9dbcf48
update copyright notice
2011-01-04 23:47:14 +00:00
Evan Hunt
79bf7c874b
3001. [func] Added a default trust anchor for the root zone, which
...
can be switched on by setting "dnssec-validation auto;"
in the named.conf options. [RT #21727 ]
2011-01-03 23:45:08 +00:00
Evan Hunt
71bd858d8e
2989. [func] Added support for writable DLZ zones. (Contributed
...
by Andrew Tridgell of the Samba project.) [RT #22629 ]
2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
of external DLZ drivers that can be loaded as
shared objects at runtime rather than linked with
named. Currently this is switched on via a
compile-time option, "configure --with-dlz-dlopen".
Note: the syntax for configuring DLZ zones
is likely to be refined in future releases.
(Contributed by Andrew Tridgell of the Samba
project.) [RT #22629 ]
2987. [func] Improve ease of configuring TKEY/GSS updates by
adding a "tkey-gssapi-keytab" option. If set,
updates will be allowed with any key matching
a principal in the specified keytab file.
"tkey-gssapi-credential" is no longer required
and is expected to be deprecated. (Contributed
by Andrew Tridgell of the Samba project.)
[RT #22629 ]
2010-12-18 01:56:23 +00:00
Mark Andrews
9f9b7f0e8d
2982. [bug] Reference count dst keys. dst_key_attach() can be used
...
increment the reference count.
Note: dns_tsigkey_createfromkey() callers should now
always call dst_key_free() rather than setting it
to NULL on success. [RT #22672 ]
2010-12-09 00:54:34 +00:00
Automatic Updater
b8a9a7bef2
update copyright notice
2010-12-08 23:51:56 +00:00