Commit Graph
5783 Commits
Author SHA1 Message Date
Andreas Gustafsson 457a63f3b8 missing colon in glue_test rule 2000-07-06 04:36:55 +00:00
Brian Wellington ca93ad9b9e If we're asking for a key and need to call dns_view_findzonecut(), set
the DNS_DB_NOEXACT flag.  This means that the resolver will start look for the
key at or above the parent zone, and will return the key set from the parent
zone if key sets are present in both the parent and child.
2000-07-06 02:33:43 +00:00
Andreas Gustafsson 770dd208fa work around NetBSD /bin/sh bug, with the side effect of making the
test script shorter
2000-07-06 02:33:42 +00:00
Brian Wellington baeb4bcf32 In query_find(), if we're looking up a key and dns_db_find() returns
DNS_R_DELEGATION, don't use the domain & ns set found by dns_db_find().
This means that a recursive server will not immediately ask the child zone
for a key set at the apex; the resolver will determine who to ask.
2000-07-06 02:27:26 +00:00
Michael Sawyer 313b7db2ce Add NSUPDATE to conf.sh.in, not conf.sh... 2000-07-06 02:10:46 +00:00
Andreas Gustafsson 249763bcbf added glue test 2000-07-06 02:06:02 +00:00
Andreas Gustafsson afb2c39d2d added glue test 2000-07-06 01:28:08 +00:00
Andreas Gustafsson 8993565982 if the file nsN/namedopts exists, use it to set named
command line options
2000-07-06 01:26:05 +00:00
Michael Sawyer 0819ae2ca5 Use limits.h/INT_MAX instead of the deprecated values.h/MAXINT 2000-07-06 01:02:42 +00:00
Andreas Gustafsson 08133a2dbe This is "the glue fix". It changes the additional data lookup
algorithm to more closely follow RFC1035, so that root servers will
provide a more complete set of name server glue addresses in ccTLD
referral responses.

For non-referral responses, the server no longer uses glue as
additional data.

For referral responses, the servers now looks for glue A/AAAA/A6 RRs
in the zone where the NS RRs reside, even in the case where this is
different from the zone where the A/AAAA/A6 RRs would have resided had
they been authoritative data.

A6 chains included as additional info may not yet fully follow these
rules.
2000-07-06 01:00:46 +00:00
Michael Sawyer c3c6770e53 Add nsupdate/ixfr test suite 2000-07-06 00:54:03 +00:00
Brian Wellington 61e7208704 memory leak 2000-07-05 23:42:08 +00:00
Michael Sawyer 38cf6e52ce Lots of style changes.
Clean up what appears to be a varient of the race condition, this one set
off in nslookup.
2000-07-05 23:28:32 +00:00
Brian Wellington 5ddea03e3e Log a message in addition to setting a failure code when kill -TERM doesn't
kill a server.
2000-07-05 23:28:07 +00:00
Brian Wellington 54b9dc7739 Add support for setting the server and/or zone 2000-07-05 23:24:18 +00:00
Andreas Gustafsson 4defd73fca This is "the glue fix". It changes the additional data lookup
algorithm to more closely follow RFC1035, so that root servers will
provide a more complete set of name server glue addresses in ccTLD
referral responses.

For non-referral responses, the server no longer uses glue as
additional data.

For referral responses, the servers now looks for glue A/AAAA/A6 RRs
in the zone where the NS RRs reside, even in the case where this is
different from the zone where the A/AAAA/A6 RRs would have resided had
they been authoritative data.

A6 chains included as additional info may not yet fully follow these
rules.
2000-07-05 23:10:06 +00:00
Andreas Gustafsson 66465da5d1 work around NetBSD /bin/sh bug, with the side effect of making the
test script shorter
2000-07-05 22:13:56 +00:00
Andreas Gustafsson c6ab6ca3fd moved linux_keepcaps() call and check for Linux nonroot caps back
to earlier locations; use a separate boolean flag for keeping track of whether a
UID switch was requested rather than overloading the UID value zero
2000-07-05 22:03:42 +00:00
Brian Wellington 58208669bc Should sleep for a while between kill -TERM and kill -KILL 2000-07-05 20:56:11 +00:00
Andreas Gustafsson b7b5dd0d10 treat all responses to AXFR requests as AXFR responses 2000-07-05 20:28:34 +00:00
Michael Graff 8681403c16 Shut up a gcc warning 2000-07-05 20:26:46 +00:00
Andreas Gustafsson aade2614cb work around NetBSD /bin/sh bug, with the side effect of making the
test script shorter
2000-07-05 19:42:34 +00:00
Andreas Gustafsson 24139527f3 lots of style changes; no functional change 2000-07-05 19:31:26 +00:00
Brian Wellington 5618f70327 Modify the tests so that if any server doesn't die with a TERM signal,
it's an error.
2000-07-05 18:49:06 +00:00
Brian Wellington bb915db969 Check to see that kill actually kills the server. If not, it's an error,
so print a message, increment status, and kill -9 the server.
2000-07-05 18:16:39 +00:00
Mark Andrews 29e59609b9 Add "SOA not at top of zone" test. 2000-07-05 00:35:36 +00:00
Mark Andrews 8c1aa8573d 308. [bug] Treat a SOA record not at top of zone as an error
when loading a zone. (RT #154)
2000-07-04 04:28:44 +00:00
Mark Andrews 3cf456d58e zone_get_from_db() now does as much as is possible. 2000-07-04 04:21:38 +00:00
Mark Andrews 84cb41f729 new error code DNS_R_NOTZONETOP 2000-07-04 03:59:54 +00:00
Brian Wellington b2dcacc728 Fix the hang on ^C problem by not calling isc_app_start(), since
isc_app_run() wasn't being called anyway.  Also some more cosmetic
cleanup.
2000-07-04 02:33:29 +00:00
Mark Andrews 84b8fdfeac Add not soa not top of zone test 2000-07-04 02:28:23 +00:00
David Lawrence 24675e8e13 In dns_dispatch_createtcp(), REQUIRE() that attributes not include
DNS_DISPATCHATTR_UDP, and document that requirement as well as the
existing requirement for needing DNS_DISPATCHATTR_TCP.

No need to pull up.
2000-07-04 01:48:13 +00:00
Andreas Gustafsson a074e41b97 style and new comments; no functional change 2000-07-04 01:33:47 +00:00
Brian Wellington 9e37579870 Check that zone->view is not NULL before checking that zone->view->adb is not
NULL.  It appears that zone maintenance can occur when the zone is shutting
down and the view pointer is NULL.  We don't want to do zone maintenance in
this case.
2000-07-04 01:32:40 +00:00
David Lawrence c7c2522a32 query-replace-o in error message; no need to pull up since no code in 9.0.0
will use the function in which the error appears
2000-07-04 01:29:48 +00:00
David Lawrence a53efa1718 nrdc->rndc typo, uses TCP not UDP 2000-07-04 01:25:01 +00:00
David Lawrence c43deb8aac typo 2000-07-04 01:24:06 +00:00
David Lawrence afbf0f0d77 Have Emacs automatically use shell mode to edit configure.in. 2000-07-04 01:20:53 +00:00
David Lawrence 96ab25294b 307. [bug] When canceling a query, the resolver didn't check for
isc_socket_sendto() calls that did not yet have their
			completion events posted, so it could (rarely) end up
			destroying the query context and then want to use
			it again when the send event posted, triggering an
			assertion as it tried to cancel an already-canceled
			query.  (RT #77)

... so now the resolver counts the number of outstanding isc_socket_sendto()s
and only destroys the query context when there are no more.
2000-07-04 01:19:20 +00:00
Brian Wellington 9a68d61341 Implement -k keyfile and fix -y keyname:secret 2000-07-03 23:42:48 +00:00
Brian Wellington e68de4a7db 306. [bug] Reading HMAC-MD5 private key files didn't work. 2000-07-03 23:27:45 +00:00
Andreas Gustafsson b3e4ce3059 alternative fix to 303. [RT #157] 2000-07-03 22:42:36 +00:00
Andreas Gustafsson c4252cd10b style 2000-07-03 22:14:43 +00:00
Andreas Gustafsson 5aa96829fd style 2000-07-03 22:04:47 +00:00
Brian Wellington 7408b050c0 Don't use the search list by default. This makes dig 9 compatible with
dig 8 (although not the dig 8 manpage).
2000-07-03 21:52:13 +00:00
Andreas Gustafsson d8560fb7ff [RT #155]
305. [bug]             When reloading the server with a config file
                        containing a syntax error, it could catch an
                        assertion failure trying to perform zone
                        maintenance on tentatively created zones whose
                        views were never fully configured and lacked
                        an address database.
2000-07-03 20:21:53 +00:00
Brian Wellington e2894b0e50 304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers
are listed in resolv.conf, silently ignore them
                        instead of returning failure.
2000-07-03 20:13:12 +00:00
Brian Wellington cbc6e83597 Use lwres_net_ntop now that including both lwres/net.h and isc/net.h is
possible
2000-07-03 20:08:13 +00:00
Brian Wellington 1e105376dd linux_keepcaps() was called without checking the various defines that
surrounded the function definition.
2000-07-03 20:00:44 +00:00
Brian Wellington 79e873be59 The reordering of code in the last change broke linux, since the determination
of whether we could call setuid() was moved after the check.
2000-07-03 18:28:38 +00:00