Scott Mann
fad5116b3d
Remove the ixfr-from-differences side-effect which causes an AXFR and extend
...
request-ixfr to the zone level.
2011-09-06 22:29:33 +00:00
Evan Hunt
8a2ab2b920
3150. [func] Improved startup and reconfiguration time by
...
enabling zones to load in multiple threads. [RT #25333 ]
2011-09-02 21:15:39 +00:00
Mark Andrews
9198ab377b
3147. [func] Initial inline signing support. [RT #23657 ]
2011-08-30 05:16:15 +00:00
Evan Hunt
0127993480
3140. [func] New command "rndc flushtree <name>" clears the
...
specified name from the server cache along with
all names under it. [RT #19970 ]
2011-08-02 20:36:13 +00:00
Evan Hunt
cf63d32d55
3136. [func] Add RFC 1918 reverse zones to the list of built-in
...
empty zones switched on by the 'empty-zones-enable'
option. [RT #24990 ]
2011-07-28 03:18:17 +00:00
Automatic Updater
69f5c36b39
update copyright notice
2011-07-06 23:47:43 +00:00
Evan Hunt
42cf2ff7ba
3131. [func] Improve scalability by allocating one zone task
...
per 100 zones at startup time, rather than using a
fixed-size task table. [RT #24406 ]
2011-07-06 01:36:32 +00:00
Evan Hunt
e7220c9b84
3129. [bug] Named could crash on 'rndc reconfig' when
...
allow-new-zones was set to yes and named ACLs
were used, [RT #22739 ]
2011-06-17 07:05:02 +00:00
Evan Hunt
1063914c30
Fixed some problems from change #3084 that turned up after committing it;
...
"freeze" and "thaw" weren't working quite right when used without a
specific zone name.
2011-03-21 18:38:40 +00:00
Evan Hunt
d965c91f95
clarify "rndc sync" logging, add it to "rndc -h" output, per francis
...
review comments in rt22473.
2011-03-21 15:39:05 +00:00
Evan Hunt
7cb226ec34
3084. [func] A new command "rndc sync" dumps pending changes in
...
a dynamic zone to disk; "rndc sync -clean" also
removes the journal file after syncing. Also,
"rndc freeze" no longer removes journal files.
[RT #22473 ]
2011-03-21 07:22:14 +00:00
Mark Andrews
0874abad14
3069. [cleanup] Silence warnings messages from clang static analysis.
...
[RT #20256 ]
2011-03-11 06:11:27 +00:00
Evan Hunt
422009fe5b
3066. [func] The DLZ "dlopen" driver is now built by default,
...
no longer requiring a configure option. To
disable it, use "configure --without-dlopen".
Driver also supported on win32. [RT #23467 ]
2011-03-10 04:36:16 +00:00
Evan Hunt
f385bac3b9
3057. [bug] "rndc secroots" would abort after the first error
...
and so could miss some views. [RT #23488 ]
2011-03-03 16:16:47 +00:00
Evan Hunt
70c7f4fb4f
3053. [bug] Under a sustained high query load with a finite
...
max-cache-size, it was possible for cache memory
to be exhausted and not recovered. [RT #23371 ]
2011-03-03 04:42:25 +00:00
Mark Andrews
0e507dbb81
2039. [func] Redirect on NXDOMAIN support. [RT #23146 ]
2011-02-23 03:08:11 +00:00
Evan Hunt
29bd52e4ee
3021. [bug] Change #3010 was incomplete. [RT #22296 ]
2011-02-16 19:48:12 +00:00
Automatic Updater
784a904bd0
update copyright notice
2011-02-03 12:18:12 +00:00
Mark Andrews
000a8970f8
3011. [func] Change the default query timeout from 30 seconds
...
to 10. Allow setting this in named.conf using the new
'resolver-query-timeout' option, which specifies a max
time in seconds. 0 means 'default' and anything longer
than 30 will be silently set to 30. [RT #22852 ]
2011-02-03 05:41:55 +00:00
Evan Hunt
903b3c84e2
3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
...
for refreshing managed-keys. [RT #22296 ]
2011-02-03 00:21:55 +00:00
Mark Andrews
9d53927aa8
zone = NULL
2011-01-13 03:57:50 +00:00
Mark Andrews
87708bde16
3008. [func] Response policy zones (RPZ) support. [RT #21726 ]
2011-01-13 01:59:28 +00:00
Automatic Updater
135bcc2e42
update copyright notice
2011-01-11 23:47:14 +00:00
Mark Andrews
433e06a25c
3006. [func] Allow dynamically generated TSIG keys to be preserved
...
across restarts of named. Initially this is for
TSIG keys generated using GSSAPI. [RT #22639 ]
2011-01-10 05:32:04 +00:00
Mark Andrews
dc4fa197dd
3004. [func] DNS64 reverse support. [RT #22769 ]
2011-01-07 04:31:39 +00:00
Evan Hunt
5a87f3439e
Initialize a pointer to NULL in order to to silence a compiler warning.
...
Committing without review because the change is trivial.
2011-01-07 00:50:06 +00:00
Automatic Updater
1da9dbcf48
update copyright notice
2011-01-04 23:47:14 +00:00
Evan Hunt
79bf7c874b
3001. [func] Added a default trust anchor for the root zone, which
...
can be switched on by setting "dnssec-validation auto;"
in the named.conf options. [RT #21727 ]
2011-01-03 23:45:08 +00:00
Evan Hunt
71bd858d8e
2989. [func] Added support for writable DLZ zones. (Contributed
...
by Andrew Tridgell of the Samba project.) [RT #22629 ]
2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
of external DLZ drivers that can be loaded as
shared objects at runtime rather than linked with
named. Currently this is switched on via a
compile-time option, "configure --with-dlz-dlopen".
Note: the syntax for configuring DLZ zones
is likely to be refined in future releases.
(Contributed by Andrew Tridgell of the Samba
project.) [RT #22629 ]
2987. [func] Improve ease of configuring TKEY/GSS updates by
adding a "tkey-gssapi-keytab" option. If set,
updates will be allowed with any key matching
a principal in the specified keytab file.
"tkey-gssapi-credential" is no longer required
and is expected to be deprecated. (Contributed
by Andrew Tridgell of the Samba project.)
[RT #22629 ]
2010-12-18 01:56:23 +00:00
Mark Andrews
9f9b7f0e8d
2982. [bug] Reference count dst keys. dst_key_attach() can be used
...
increment the reference count.
Note: dns_tsigkey_createfromkey() callers should now
always call dst_key_free() rather than setting it
to NULL on success. [RT #22672 ]
2010-12-09 00:54:34 +00:00
Automatic Updater
b8a9a7bef2
update copyright notice
2010-12-08 23:51:56 +00:00
Mark Andrews
e334405421
2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991 ]
2010-12-08 02:46:17 +00:00
Mark Andrews
c87f15dac8
2976. [bug] named die on exit after negotiating a GSS-TSIG key. [RT #3415 ]
2010-12-02 23:22:42 +00:00
Shawn Routhier
380c874925
Fix acl type processing so that allow-query works in options and view
...
statements. Also add a new set of tests to verify proper functioning.
[RT #22418 ]
2010-11-16 01:37:39 +00:00
Automatic Updater
7041e86986
update copyright notice
2010-09-24 08:31:23 +00:00
Mark Andrews
ed83fa75f5
2963. [security] The allow-query acl was being applied instead of the
...
allow-query-cache acl to cache lookups. [RT #22114 ]
2010-09-24 05:09:03 +00:00
Mark Andrews
b5fd149e7e
silence signed/unsigned warning hpux
2010-08-24 01:00:31 +00:00
Mark Andrews
38abdbf816
2945. [doc] Update empty-zones list in ARM. [RT #21772 ]
...
2944. [maint] Remove ORCHID prefix from built in empty zones.
[RT #21772 ]
2010-08-20 00:13:26 +00:00
Automatic Updater
f428e385a4
update copyright notice
2010-08-16 23:46:52 +00:00
Mark Andrews
c6f4972c74
2943. [func] Add support to load new keys into managed zones
...
without signing immediately with "rndc loadkeys".
Add support to link keys with "dnssec-keygen -S"
and "dnssec-settime -S". [RT #21351 ]
2010-08-16 22:21:07 +00:00
Francis Dupont
7641867b4c
fix win32 build
2010-08-13 14:33:31 +00:00
Evan Hunt
cfd262045c
2936. [func] Improved configuration syntax and multiple-view
...
support for addzone/delzone feature (see change
#2930 ). Removed "new-zone-file" option, replaced
with "allow-new-zones (yes|no)". The new-zone-file
for each view is now created automatically, with
a filename generated from a hash of the view name.
It is no longer necessary to "include" the
new-zone-file in named.conf; this happens
automatically. Zones that were not added via
"rndc addzone" can no longer be removed with
"rndc delzone". [RT #19447 ]
2010-08-11 18:14:20 +00:00
Mark Andrews
7b830cb17f
while (1) -> for (;;) to silence compiler warning
2010-07-20 04:52:21 +00:00
Mark Andrews
0ddcd0c0ce
format/arg mismatch solaris
2010-07-20 04:46:49 +00:00
Mark Andrews
7a8d1e1e2e
0 -> 0U
2010-07-19 06:13:28 +00:00
Mark Andrews
dfbda37366
silence compiler warnings about (char) as index to array
2010-07-19 04:13:38 +00:00
Automatic Updater
a90aca78aa
update copyright notice
2010-07-11 23:46:54 +00:00
Evan Hunt
86dcc40058
2930. [experimental] New "rndc addzone" and "rndc delzone" commads
...
allow dynamic addition and deletion of zones.
To enable this feature, specify a "new-zone-file"
option at the view or options level in named.conf.
Zone configuration information for the new zones
will be written into that file. To make the new
zones persist after a restart, "include" the file
into named.conf in the appropriate view. (Note:
This feature is not yet documented, and its syntax
is expected to change.) [RT #19447 ]
2010-07-11 00:12:57 +00:00
Automatic Updater
cf309ffeee
update copyright notice
2010-06-25 23:46:51 +00:00
Mark Andrews
bf13e709db
2924. [func] 'rndc secroots' dump a combined summary of the
...
current managed keys combined with trusted keys.
[RT #20904 ]
2010-06-25 03:24:05 +00:00