2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 22:15:20 +00:00
Commit Graph

5832 Commits

Author SHA1 Message Date
Brian Wellington
ca93ad9b9e If we're asking for a key and need to call dns_view_findzonecut(), set
the DNS_DB_NOEXACT flag.  This means that the resolver will start look for the
key at or above the parent zone, and will return the key set from the parent
zone if key sets are present in both the parent and child.
2000-07-06 02:33:43 +00:00
Andreas Gustafsson
770dd208fa work around NetBSD /bin/sh bug, with the side effect of making the
test script shorter
2000-07-06 02:33:42 +00:00
Brian Wellington
baeb4bcf32 In query_find(), if we're looking up a key and dns_db_find() returns
DNS_R_DELEGATION, don't use the domain & ns set found by dns_db_find().
This means that a recursive server will not immediately ask the child zone
for a key set at the apex; the resolver will determine who to ask.
2000-07-06 02:27:26 +00:00
Michael Sawyer
313b7db2ce Add NSUPDATE to conf.sh.in, not conf.sh... 2000-07-06 02:10:46 +00:00
Andreas Gustafsson
249763bcbf added glue test 2000-07-06 02:06:02 +00:00
Andreas Gustafsson
afb2c39d2d added glue test 2000-07-06 01:28:08 +00:00
Andreas Gustafsson
8993565982 if the file nsN/namedopts exists, use it to set named
command line options
2000-07-06 01:26:05 +00:00
Michael Sawyer
0819ae2ca5 Use limits.h/INT_MAX instead of the deprecated values.h/MAXINT 2000-07-06 01:02:42 +00:00
Andreas Gustafsson
08133a2dbe This is "the glue fix". It changes the additional data lookup
algorithm to more closely follow RFC1035, so that root servers will
provide a more complete set of name server glue addresses in ccTLD
referral responses.

For non-referral responses, the server no longer uses glue as
additional data.

For referral responses, the servers now looks for glue A/AAAA/A6 RRs
in the zone where the NS RRs reside, even in the case where this is
different from the zone where the A/AAAA/A6 RRs would have resided had
they been authoritative data.

A6 chains included as additional info may not yet fully follow these
rules.
2000-07-06 01:00:46 +00:00
Michael Sawyer
c3c6770e53 Add nsupdate/ixfr test suite 2000-07-06 00:54:03 +00:00
Brian Wellington
61e7208704 memory leak 2000-07-05 23:42:08 +00:00
Michael Sawyer
38cf6e52ce Lots of style changes.
Clean up what appears to be a varient of the race condition, this one set
off in nslookup.
2000-07-05 23:28:32 +00:00
Brian Wellington
5ddea03e3e Log a message in addition to setting a failure code when kill -TERM doesn't
kill a server.
2000-07-05 23:28:07 +00:00
Brian Wellington
54b9dc7739 Add support for setting the server and/or zone 2000-07-05 23:24:18 +00:00
Andreas Gustafsson
4defd73fca This is "the glue fix". It changes the additional data lookup
algorithm to more closely follow RFC1035, so that root servers will
provide a more complete set of name server glue addresses in ccTLD
referral responses.

For non-referral responses, the server no longer uses glue as
additional data.

For referral responses, the servers now looks for glue A/AAAA/A6 RRs
in the zone where the NS RRs reside, even in the case where this is
different from the zone where the A/AAAA/A6 RRs would have resided had
they been authoritative data.

A6 chains included as additional info may not yet fully follow these
rules.
2000-07-05 23:10:06 +00:00
Andreas Gustafsson
66465da5d1 work around NetBSD /bin/sh bug, with the side effect of making the
test script shorter
2000-07-05 22:13:56 +00:00
Andreas Gustafsson
c6ab6ca3fd moved linux_keepcaps() call and check for Linux nonroot caps back
to earlier locations; use a separate boolean flag for keeping track of whether a
UID switch was requested rather than overloading the UID value zero
2000-07-05 22:03:42 +00:00
Brian Wellington
58208669bc Should sleep for a while between kill -TERM and kill -KILL 2000-07-05 20:56:11 +00:00
Andreas Gustafsson
b7b5dd0d10 treat all responses to AXFR requests as AXFR responses 2000-07-05 20:28:34 +00:00
Michael Graff
8681403c16 Shut up a gcc warning 2000-07-05 20:26:46 +00:00
Andreas Gustafsson
aade2614cb work around NetBSD /bin/sh bug, with the side effect of making the
test script shorter
2000-07-05 19:42:34 +00:00
Andreas Gustafsson
24139527f3 lots of style changes; no functional change 2000-07-05 19:31:26 +00:00
Brian Wellington
5618f70327 Modify the tests so that if any server doesn't die with a TERM signal,
it's an error.
2000-07-05 18:49:06 +00:00
Brian Wellington
bb915db969 Check to see that kill actually kills the server. If not, it's an error,
so print a message, increment status, and kill -9 the server.
2000-07-05 18:16:39 +00:00
Mark Andrews
29e59609b9 Add "SOA not at top of zone" test. 2000-07-05 00:35:36 +00:00
Mark Andrews
8c1aa8573d 308. [bug] Treat a SOA record not at top of zone as an error
when loading a zone. (RT #154)
2000-07-04 04:28:44 +00:00
Mark Andrews
3cf456d58e zone_get_from_db() now does as much as is possible. 2000-07-04 04:21:38 +00:00
Mark Andrews
84cb41f729 new error code DNS_R_NOTZONETOP 2000-07-04 03:59:54 +00:00
Brian Wellington
b2dcacc728 Fix the hang on ^C problem by not calling isc_app_start(), since
isc_app_run() wasn't being called anyway.  Also some more cosmetic
cleanup.
2000-07-04 02:33:29 +00:00
Mark Andrews
84b8fdfeac Add not soa not top of zone test 2000-07-04 02:28:23 +00:00
David Lawrence
24675e8e13 In dns_dispatch_createtcp(), REQUIRE() that attributes not include
DNS_DISPATCHATTR_UDP, and document that requirement as well as the
existing requirement for needing DNS_DISPATCHATTR_TCP.

No need to pull up.
2000-07-04 01:48:13 +00:00
Andreas Gustafsson
a074e41b97 style and new comments; no functional change 2000-07-04 01:33:47 +00:00
Brian Wellington
9e37579870 Check that zone->view is not NULL before checking that zone->view->adb is not
NULL.  It appears that zone maintenance can occur when the zone is shutting
down and the view pointer is NULL.  We don't want to do zone maintenance in
this case.
2000-07-04 01:32:40 +00:00
David Lawrence
c7c2522a32 query-replace-o in error message; no need to pull up since no code in 9.0.0
will use the function in which the error appears
2000-07-04 01:29:48 +00:00
David Lawrence
a53efa1718 nrdc->rndc typo, uses TCP not UDP 2000-07-04 01:25:01 +00:00
David Lawrence
c43deb8aac typo 2000-07-04 01:24:06 +00:00
David Lawrence
afbf0f0d77 Have Emacs automatically use shell mode to edit configure.in. 2000-07-04 01:20:53 +00:00
David Lawrence
96ab25294b 307. [bug] When canceling a query, the resolver didn't check for
isc_socket_sendto() calls that did not yet have their
			completion events posted, so it could (rarely) end up
			destroying the query context and then want to use
			it again when the send event posted, triggering an
			assertion as it tried to cancel an already-canceled
			query.  (RT #77)

... so now the resolver counts the number of outstanding isc_socket_sendto()s
and only destroys the query context when there are no more.
2000-07-04 01:19:20 +00:00
Brian Wellington
9a68d61341 Implement -k keyfile and fix -y keyname:secret 2000-07-03 23:42:48 +00:00
Brian Wellington
e68de4a7db 306. [bug] Reading HMAC-MD5 private key files didn't work. 2000-07-03 23:27:45 +00:00
Andreas Gustafsson
b3e4ce3059 alternative fix to 303. [RT #157] 2000-07-03 22:42:36 +00:00
Andreas Gustafsson
c4252cd10b style 2000-07-03 22:14:43 +00:00
Andreas Gustafsson
5aa96829fd style 2000-07-03 22:04:47 +00:00
Brian Wellington
7408b050c0 Don't use the search list by default. This makes dig 9 compatible with
dig 8 (although not the dig 8 manpage).
2000-07-03 21:52:13 +00:00
Andreas Gustafsson
d8560fb7ff [RT #155]
305. [bug]             When reloading the server with a config file
                        containing a syntax error, it could catch an
                        assertion failure trying to perform zone
                        maintenance on tentatively created zones whose
                        views were never fully configured and lacked
                        an address database.
2000-07-03 20:21:53 +00:00
Brian Wellington
e2894b0e50 304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers
are listed in resolv.conf, silently ignore them
                        instead of returning failure.
2000-07-03 20:13:12 +00:00
Brian Wellington
cbc6e83597 Use lwres_net_ntop now that including both lwres/net.h and isc/net.h is
possible
2000-07-03 20:08:13 +00:00
Brian Wellington
1e105376dd linux_keepcaps() was called without checking the various defines that
surrounded the function definition.
2000-07-03 20:00:44 +00:00
Brian Wellington
79e873be59 The reordering of code in the last change broke linux, since the determination
of whether we could call setuid() was moved after the check.
2000-07-03 18:28:38 +00:00
Andreas Gustafsson
855bda3de3 new joint ISC/BSDI copyright message as requested by
Paul Borman <prb@bsdi.com>
2000-07-03 17:44:22 +00:00