mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 14:35:26 +00:00
Code Issues Releases Wiki Activity

obey the allow-update forwarding option for both signed and unsigned updates;

Browse Source 
fold the upforwd system test README file and nsupdate input files into the tests.sh script;
other minor cleanup of the upforwd test
This commit is contained in:
Andreas Gustafsson
2000-12-01 21:37:17 +00:00
parent 72a10307e1
commit a3e41e3c03
9 changed files with 56 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
bin/named/update.c
View File

@@ -15,7 +15,7 @@
* WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: update.c,v 1.74 2000/11/22 02:49:57 gson Exp $ */
/* $Id: update.c,v 1.75 2000/12/01 21:37:08 gson Exp $ */
#include <config.h>
@@ -1889,31 +1889,13 @@ ns_update_start(ns_client_t *client, isc_result_t sigresult) {
if (sigresult != ISC_R_SUCCESS)
FAIL(sigresult);
CHECK(send_update_event(client, zone));
break; /* OK. */
break;
case dns_zone_slave:
if (dns_message_gettsig(client->message, NULL) == NULL) {
dns_acl_t *forwardacl;
/*
* We only REFUSE if policy is explicitly set and
* we fail to match.
*/
forwardacl = dns_zone_getforwardacl(zone);
if (forwardacl == NULL) {
FAILS(DNS_R_NOTIMP,
"unsigned updates not forwarded (noacl)");
} else {
result = ns_client_checkacl(client,
"update-forward",
forwardacl,
ISC_FALSE,
ISC_LOG_INFO);
if (result != ISC_R_SUCCESS)
FAIL(DNS_R_REFUSED);
}
}
CHECK(ns_client_checkacl(client, "update forwarding",
dns_zone_getforwardacl(zone),
ISC_FALSE, ISC_LOG_ERROR));
CHECK(send_forward_event(client, zone));
break; /* OK. */
break;
default:
FAILC(DNS_R_NOTAUTH,
"not authoritative for update zone");