Commit Graph

70 Commits

Author SHA1 Message Date
Tinderbox User
981e64275f update copyright notice / whitespace 2015-09-14 23:45:49 +00:00
Evan Hunt
abfa2247af [v9_10] spurious spaces in named-checkconf -p
4205.	[bug]		'named-checkconf -p' could include unwanted spaces
			when printing tuples with unset optional fields.
			[RT #40731]
2015-09-14 08:53:17 -07:00
Tinderbox User
03e2c07f24 update copyright notice / whitespace 2015-09-10 23:46:55 +00:00
Mark Andrews
0978e56fd3 4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
[RT #40603]

(cherry picked from commit 075a3d60c2)
2015-09-09 17:57:11 +10:00
Mark Andrews
74b964fabe 4194. [bug] named-checkconf -p failed to properly print a port
range.  [RT #40634]

(cherry picked from commit fbd9aaa58c)
2015-09-09 16:49:54 +10:00
Tinderbox User
73b5671cdf update copyright notice / whitespace 2015-08-12 23:45:54 +00:00
Mark Andrews
c911ee6769 4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
[RT #40265]

(cherry picked from commit 151f1bcd5e)
2015-08-12 19:06:31 +10:00
Tinderbox User
167beb6aa5 update copyright notice / whitespace 2015-01-08 23:45:50 +00:00
Mark Andrews
b1e4b4c0c8 4031. [bug] named-checkconf -z failed to report a missing file
with a hint zone. [RT #38294]

(cherry picked from commit d1f1f13c7f)
2015-01-08 19:20:04 +11:00
Evan Hunt
835ec62f82 [v9_10] add redirect zone to checkconf -z test 2014-10-09 18:30:50 -07:00
Mark Andrews
eeafb33f52 3958. [bug] Detect when writeable files have multiple references
in named.conf. [RT #37172]

(cherry picked from commit 386d6c08167bc048dfd20e3bba051a5f9d3cc545)
2014-09-29 10:51:14 +10:00
Evan Hunt
3df390931e [v9_10] fixes to checkconf test, HIP casecompare
3933.	[bug]		Corrected the implementation of dns_rdata_casecompare()
			for the HIP rdata type.  [RT #36911]

3932.	[test]		Improved named-checkconf tests. [RT #36911]

(cherry picked from commit 0c2313eb36)
2014-08-27 21:36:46 -07:00
Mark Andrews
6ba941664d 3899. [bug] "request-ixfr" is only applicable to slave and redirect
zones. [RT #36608]

Conflicts:
	CHANGES
2014-07-25 14:25:32 +10:00
Evan Hunt
baad8d9fd8 [master] allow null "file" for DLZ or alternate db zones
3803.	[bug]		"named-checkconf -z" incorrectly rejected zones
			using alternate data sources for not having a "file"
			option. [RT #35685]
2014-04-07 13:29:56 -07:00
Tinderbox User
180d8b0eec update copyright notice 2014-03-30 23:46:03 +00:00
Mukund Sivaraman
ef9334d745 3795. [bug] Make named-checkconf detect raw masterfiles for
hint zones and reject them. [RT #35268]

Squashed commit of the following:

commit 5b0254711d6b77940d6217b9131b9d401df8a866
Author: Mukund Sivaraman <muks@isc.org>
Date:   Fri Mar 28 02:09:01 2014 +0530

    Remove redundant helper function

commit a4341c1a2ba830c8cee1def57a533f987f67c3dc
Author: Mark Andrews <marka@isc.org>
Date:   Thu Jan 30 10:08:17 2014 +1100

    error out if masterfile-format raw is specified for a hint zone.
2014-03-31 04:55:37 +05:30
Evan Hunt
22e29471c7 [master] check allow-update in view/options
3787.	[bug]		The code that checks whether "auto-dnssec" is
			allowed was ignoring "allow-update" ACLs set at
			the options or view level. [RT #29536]
2014-03-12 21:36:01 -07:00
Mark Andrews
e676a59686 update copyrights 2014-02-20 10:53:11 +11:00
Evan Hunt
35f6a21f5f [master] max-zone-ttl
3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
2014-02-18 23:26:50 -08:00
Tinderbox User
aa7b16ec2a update copyright notice 2014-01-21 23:46:16 +00:00
Evan Hunt
e45d0508c3 [master] skip unnecesary also-notify data
3713.	[bug]		Save memory by not storing "also-notify" addresses
			in zone objects that are configured not to send
			notify requests. [RT #35195]
2014-01-20 15:53:51 -08:00
Mark Andrews
a7c412f37c update copyrights 2014-01-11 07:07:56 +11:00
Mark Andrews
ff6de396a9 3701. [func] named-checkconf can now suppress the printing of
shared secrets by specifying '-x'. [RT #34465]
2014-01-10 16:56:36 +11:00
Tinderbox User
9c61ab2c99 update copyright notice 2013-12-21 23:46:16 +00:00
Evan Hunt
c14ba71070 [master] warn if key-directory doesn't exist
3694.	[bug]		Warn when a key-directory is configured for a zone,
			but does not exist or is not a directory. [RT #35109]
2013-12-20 14:57:03 -08:00
Evan Hunt
d999ca28d4 [master] check hint files in named-checkconf -z
3676.	[bug]		"named-checkconf -z" now checks zones of type
			hint and redirect as well as master. [RT #35046]
2013-11-25 12:26:53 -08:00
Evan Hunt
434bfc3dfa [master] "in-view" zone option
3673.	[func]		New "in-view" zone option allows direct sharing
			of zones between views. [RT #32968]
2013-11-13 20:35:40 -08:00
Mark Andrews
2c089bf6d2 whitspace 2013-09-16 10:14:07 +10:00
Tinderbox User
099fa63e55 update copyright notice 2013-06-05 23:46:14 +00:00
Mark Andrews
1e34fe9044 3582. [bug] Silence false positive warning regarding missing file
directive for inline slave zones.  [RT #33662]
2013-06-04 11:34:03 +10:00
Tinderbox User
313b0ea9f2 update copyright notice 2013-03-23 23:46:06 +00:00
Evan Hunt
67adc03ef8 [master] add DSCP support
3535.	[func]		Add support for setting Differentiated Services Code
			Point (DSCP) values in named.  Most configuration
			options which take a "port" option (e.g.,
			listen-on, forwarders, also-notify, masters,
			notify-source, etc) can now also take a "dscp"
			option specifying a code point for use with
			outgoing traffic, if supported by the underlying
			OS. [RT #27596]
2013-03-22 14:05:33 -07:00
Evan Hunt
2a184ff865 [master] accept >4g max-{,a}cache-size
3506.	[func]		When setting "max-cache-size" and "max-acache-size",
			the keyword "unlimited" is no longer defined as equal
			to 4 gigabytes (except on 32-bit platforms); it
			means literally unlimited. [RT #32358]

3505.	[bug]		When setting "max-cache-size" and "max-acache-size",
			larger values than 4 gigabytes could not be set
			explicitly, though larger sizes were available
			when setting cache size to 0. This has been
			corrected; the full range is now available.
			[RT #32358]
2013-02-28 09:29:12 -08:00
Tinderbox User
bea3baa50c update copyright notice 2013-02-27 23:46:03 +00:00
Evan Hunt
40a7e85f3e [master] better zone-statistics syntax
3501.	[func]		zone-statistics now takes three options: full,
			terse, and none. "yes" and "no" are retained as
			synonyms for full and terse, respectively. [RT #29165]
2013-02-27 11:53:58 -08:00
Tinderbox User
573d78f3d5 update copyright notice 2013-02-21 23:45:56 +00:00
Evan Hunt
a81ae06ed3 [master] forbid inline-signing slave with no file
3491.	[bug]		Slave zones using inline-signing must specify a
			file name. [RT #31946]
2013-02-20 14:01:31 -08:00
Tinderbox User
d91e5a75df update copyright notice 2013-01-02 23:45:51 +00:00
Tinderbox User
024cf50d12 update copyright notice 2013-01-01 23:45:47 +00:00
Tinderbox User
aae306e914 update copyright notice 2012-12-07 23:45:48 +00:00
Evan Hunt
2b8bed6681 [master] multiple-dlz/dlz-nxdomain
3432.	[func]		Multiple DLZ databases can now be configured.
			DLZ databases are searched in the order configured,
			unless set to "search no", in which case a
			zone can be configured to be retrieved from a
			particular DLZ database by using a "dlz <name>"
			option in the zone statement.  DLZ databases can
			support type "master" and "redirect" zones.
			[RT #27597]
2012-12-06 12:39:52 -08:00
Evan Hunt
f46168b879 [master] allow dnssec options in inline-signing slaves
3408.	[bug]		Some DNSSEC-related options (update-check-ksk,
			dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
			are now legal in slave zones as long as
			inline-signing is in use. [RT #31078]
2012-10-26 16:14:59 -07:00
Tinderbox User
8e3eb3600a update copyright notice 2012-10-02 23:46:09 +00:00
Mark Andrews
aa49af836c 3385. [bug] named-checkconf didn't detect missing master lists
in also-notify clauses. [RT #30810]
2012-10-02 13:06:02 +10:00
Mark Andrews
076bda8c2e we didn't catch a zero option at the global level when views are active 2012-08-17 13:40:17 +10:00
Tinderbox User
36a3d08a72 update copyright notice 2012-08-15 23:46:02 +00:00
Evan Hunt
85705b4b5a allow "forward" and "forwarders" in static-stub
3363.	[bug]		Need to allow "forward" and "fowarders" options
			in static-stub zones; this had been overlooked.
			[RT #30482]
2012-08-15 13:08:15 -07:00
Evan Hunt
820fdd61dd properly range-check fields that do not allow 0
3362.	[bug]		Setting some option values to 0 in named.conf
			could trigger an assertion failure on startup.
			[RT #27730]
2012-08-13 22:39:42 -07:00
Evan Hunt
3f755529ee address memory leak with bad tsig secret
3359.	[bug]		An improperly-formed TSIG secret could cause a
                        memory leak. [RT #30607]
2012-08-10 20:15:59 -07:00
Tinderbox User
a3128c1995 update copyright notice 2012-06-29 23:45:57 +00:00