Commit Graph
2271 Commits
Author SHA1 Message Date
Evan Hunt 0127993480 3140. [func] New command "rndc flushtree <name>" clears the
specified name from the server cache along with
			all names under it. [RT #19970]
2011-08-02 20:36:13 +00:00
Automatic Updater 2f17ad4545 update copyright notice 2011-07-28 23:47:59 +00:00
Mark Andrews 16f3aeab3c move declaration to start of function 2011-07-28 11:16:04 +00:00
Mark Andrews 31f46f1869 3138. [bug] Address memory leaks and out-of-order operations when
shutting named down. [RT #25210]
2011-07-28 04:27:27 +00:00
Evan Hunt f07b2fccaf 3137. [func] Improve hardware scalability by allowing multiple
worker threads to process incoming UDP packets.
			This can significantly increase query throughput
			on some systems.  [RT #22992]
2011-07-28 04:04:37 +00:00
Evan Hunt cf63d32d55 3136. [func] Add RFC 1918 reverse zones to the list of built-in
empty zones switched on by the 'empty-zones-enable'
			option. [RT #24990]
2011-07-28 03:18:17 +00:00
Automatic Updater 69f5c36b39 update copyright notice 2011-07-06 23:47:43 +00:00
Evan Hunt 42cf2ff7ba 3131. [func] Improve scalability by allocating one zone task
per 100 zones at startup time, rather than using a
			fixed-size task table. [RT #24406]
2011-07-06 01:36:32 +00:00
Mark Andrews a69070d8fa 3130. [func] Support alternate methods for managing a dynamic
zone's serial number.  Two methods are currently
                        defined using serial-update-method, "increment"
                        (default) and "unixtime".  [RT #23849]
2011-07-01 02:25:48 +00:00
Automatic Updater 313b4dc3b2 update copyright notice 2011-06-17 23:47:49 +00:00
Evan Hunt e7220c9b84 3129. [bug] Named could crash on 'rndc reconfig' when
allow-new-zones was set to yes and named ACLs
			were used, [RT #22739]
2011-06-17 07:05:02 +00:00
Automatic Updater 0f467ed4d4 update copyright notice 2011-06-10 23:47:32 +00:00
Evan Hunt 79ce3a9e82 3128. [func] Inserting an NSEC3PARAM via dynamic update in an
auto-dnssec zone that has not been signed yet
			will cause it to be signed with the specified NSEC3
			parameters when keys are activated.  The
			NSEC3PARAM record will not appear in the zone until
			it is signed, but the parameters will be stored.
			[RT #23684]
2011-06-10 01:51:09 +00:00
Mark Andrews 475b1ed9cc 3126. [security] Using DNAME record to generate replacements caused
RPZ to exit with a assertion failure. [RT #23766]
2011-06-09 03:10:17 +00:00
Mark Andrews b64e3b8358 3125. [security] Using wildcard CNAME records as a replacement with
RPZ caused named to exit with a assertion failure.
                        [RT #24715]
2011-06-09 00:42:51 +00:00
Evan Hunt 6de9744cf9 3124. [bug] Use an rdataset attribute flag to indicate
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
2011-06-08 22:13:51 +00:00
Evan Hunt bfe32d08c5 3116. [func] New 'dnssec-update-mode' option controls updates
of DNSSEC records in signed dynamic zones.  Set to
			'no-resign' to disable automatic RRSIG regeneration
			while retaining the ability to sign new or changed
			data. [RT #24533]
2011-05-23 20:10:03 +00:00
Mark Andrews c0984ac8bd 3115. [bug] Named could fail to return requested data when
following a CNAME that points into the same zone.
                        [RT #2445]
2011-05-20 05:09:30 +00:00
Automatic Updater d9c707589a regen HEAD 2011-05-09 01:14:47 +00:00
Evan Hunt ac21f918f2 3109. [func] The also-notify option now uses the same syntax
as a zone's masters clause.  This means it is
			now possible to specify a TSIG key to use when
			sending notifies to a given server, or to include
			an explicit named masters list in an also-notfiy
			statement.  [RT #23508]
2011-05-06 21:23:51 +00:00
Mark Andrews fe646be4b7 set/reset client->signer. change 3106 used it before it was set 2011-05-05 23:44:52 +00:00
Evan Hunt 9eea4c5cbd 3106. [func] When logging client requests, include the name of
the TSIG key if any. [RT #23619]
2011-05-05 20:04:24 +00:00
Evan Hunt 39f2d1a96a 3102. [func] New 'dnssec-loadkeys-interval' option configures
how often, in minutes, to check the key repository
			for updates when using automatic key maintenance.
			Default is every 60 minutes (formerly hard-coded
			to 12 hours). [RT #23744]

3101.	[bug]		Zones using automatic key maintenance could fail
			to check the key repository for updates. [RT #23744]
2011-04-29 21:37:15 +00:00
Automatic Updater 46ce2f7b60 update copyright notice 2011-04-27 23:47:26 +00:00
Evan Hunt 76db58eb81 3100. [security] Certain response policy zone configurations could
trigger an INSIST when receiving a query of type
			RRSIG. [RT #24280]
2011-04-27 17:46:47 +00:00
Evan Hunt 7a2173839c 3099. [test] "dlz" system test now runs but gives R:SKIPPED if
not compiled with --with-dlz-filesystem.  [RT #24146]

3098.	[bug]		DLZ zones were answering without setting the AA bit.
			[RT #24146]
2011-04-19 22:30:52 +00:00
Evan Hunt 319b8a1488 3092. [bug] Signatures for records at the zone apex could go
stale due to an incorrect timer setting. [RT #23769]

3091.	[bug]		Fixed a bug in which zone keys that were published
			and then subsequently activated could fail to trigger
			automatic signing. [RT #22991]
2011-03-25 23:53:02 +00:00
Automatic Updater 6333ba02a5 update copyright notice 2011-03-21 23:47:21 +00:00
Evan Hunt 1063914c30 Fixed some problems from change #3084 that turned up after committing it;
"freeze" and "thaw" weren't working quite right when used without a
specific zone name.
2011-03-21 18:38:40 +00:00
Evan Hunt d965c91f95 clarify "rndc sync" logging, add it to "rndc -h" output, per francis
review comments in rt22473.
2011-03-21 15:39:05 +00:00
Evan Hunt 7cb226ec34 3084. [func] A new command "rndc sync" dumps pending changes in
a dynamic zone to disk; "rndc sync -clean" also
			removes the journal file after syncing.  Also,
			"rndc freeze" no longer removes journal files.
			[RT #22473]
2011-03-21 07:22:14 +00:00
Francis Dupont a8e6a8cd6c fix too long with dname error 2011-03-18 21:12:19 +00:00
Francis Dupont 50f64cf0e5 silent compiler warnings for DLZ exernal driver support and example 2011-03-17 09:25:54 +00:00
Automatic Updater c1aef54e14 update copyright notice 2011-03-12 04:59:49 +00:00
Mark Andrews 4f587beb8e 3071. [bug] has_nsec could be used unintialised in
update.c:next_active. [RT #20256]
2011-03-11 12:51:40 +00:00
Mark Andrews 0874abad14 3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
2011-03-11 06:11:27 +00:00
Mark Andrews 2d96b63d31 3067. [bug] ixfr-from-differences {master|slave}; failed to
select the master/slave zones.  [RT #23580]
2011-03-11 00:43:54 +00:00
Automatic Updater cf786a52ce update copyright notice 2011-03-10 23:47:50 +00:00
Evan Hunt 422009fe5b 3066. [func] The DLZ "dlopen" driver is now built by default,
no longer requiring a configure option.  To
			disable it, use "configure --without-dlopen".
                        Driver also supported on win32.  [RT #23467]
2011-03-10 04:36:16 +00:00
Francis Dupont 228bddfc12 update do_authors_lookup() 2011-03-07 15:29:32 +00:00
Automatic Updater 0e27506ce3 update copyright notice 2011-03-05 23:52:31 +00:00
Mark Andrews 7d09a0190b add #include <isc/file.h> 2011-03-05 03:03:57 +00:00
Scott Mann 32babe43eb Ensure that log files are plain files. (RT #22771) 2011-03-04 14:07:03 +00:00
Evan Hunt f385bac3b9 3057. [bug] "rndc secroots" would abort after the first error
and so could miss some views. [RT #23488]
2011-03-03 16:16:47 +00:00
Evan Hunt 70c7f4fb4f 3053. [bug] Under a sustained high query load with a finite
max-cache-size, it was possible for cache memory
			to be exhausted and not recovered. [RT #23371]
2011-03-03 04:42:25 +00:00
Mark Andrews 88c63fe9c7 3039. [bug] Save and restore the gid when creating creating
named.pid at startup. [RT #23290]
2011-03-02 00:02:54 +00:00
Automatic Updater ddc163d532 regen 2011-02-28 23:31:05 +00:00
Automatic Updater 1c743aa176 regen 2011-02-27 23:30:42 +00:00
Automatic Updater 8a8d38eb8e regen HEAD 2011-02-24 01:14:22 +00:00
Automatic Updater 45caada8cb update copyright notice 2011-02-23 23:47:20 +00:00