Mark Andrews
f749dec99d
3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialise
...
buffers with constant data. [RT #32064 ]
Squashed commit of the following:
commit 3433b96bf11f8c90ccbe412f01d02a6d8bbc2d33
Author: Mark Andrews <marka@isc.org >
Date: Sat Dec 8 12:41:16 2012 +1100
isc_buffer_init -> isc_buffer_constinit
commit c22dbcc1122a0a44f7b46068e0ccbc25353a57d5
Author: Mark Andrews <marka@isc.org >
Date: Sat Dec 8 12:38:39 2012 +1100
isc_buffer_init -> isc_buffer_constinit
commit 900820416c45c1887d0d22d7a010df60a903bd56
Author: Mark Andrews <marka@isc.org >
Date: Sat Dec 8 12:24:19 2012 +1100
remove isc_buffer_reconstinit
commit f815711c17b05f9961786a90b9bae902d3c01494
Author: Mark Andrews <marka@isc.org >
Date: Wed Dec 5 15:42:57 2012 +1100
add isc_buffer_constinit
2012-12-08 12:53:31 +11:00
Mark Andrews
38b709b4a9
3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
...
list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
[RT #31336 ]
2012-10-16 12:40:51 +11:00
Evan Hunt
89ef143e3f
fix coverity issues
...
3388. [bug] Fixed several Coverity warnings. [RT #30996 ]
2012-10-02 23:50:20 -07:00
Evan Hunt
ff3c2231e1
handle nonexistent managed-keys-directory
...
3378. [bug] Handle missing 'managed-keys-directory' better.
[RT #30625 ]
2012-09-25 18:28:39 -07:00
Mark Andrews
ac6f11a584
3353. [bug] Use a single task for task exclusive operations.
...
[RT #29872 ]
2012-07-19 23:59:28 +10:00
Vernon Schryver
07d51fa5ba
Squashed commit of the following:
...
commit 4d29cea2ea05491a7afebc343e41d9b6ad58f068
commit 3211da9716e5ecc0bb758666db70a667ca5a944e
commit 884b6f5d5e9b1f50757c606adafabe382b90c80b
commit 53f82565f72f091a46caed754db160e4a7a2d161
Merge: 8f73664 9698f42
commit 8f73664e7bdc04f766ddcccfb5fc5f857a22326a
for rt26172
Add
- optional "recursive-only yes|no" to the response-policy statement
- optional max-policy-ttl to limit the lies that "recursive-only no"
can introduce into resolvers' caches
- test that queries with RD=0 are not rewritten by default
- performance smoke test
Change encoding of PASSTHRU action to "rpz-passthru".
(The old encoding is still accepted.)
Fix rt26180 assert botch in zone_findrdataset() in this branch
as well.
Fix missing signatures on NOERROR results despite RPZ hits
when there are signatures and the client asks for DNSSEC,
2012-05-31 01:47:47 +00:00
Mark Andrews
f0c93bef30
3306. [bug] Improve DNS64 reverse zone performance. [RT #28563 ]
...
3305. [func] Add wire format lookup method to sdb. [RT #28563 ]
2012-04-11 12:33:08 +10:00
Evan Hunt
15601edb93
3286. [bug] Managed key maintenance timer could fail to start
...
after 'rndc reconfig'. [RT #26786 ]
2012-02-22 00:33:33 +00:00
Automatic Updater
f228a6b6cf
update copyright notice
2012-02-06 23:45:58 +00:00
Evan Hunt
2a2657427f
3277. [bug] Make sure automatic key maintenance is started
...
when "auto-dnssec maintain" is turned on during
"rndc reconfig". [RT #26805 ]
2012-02-06 21:27:52 +00:00
Mark Andrews
0700fb6e22
3256. [bug] Disable empty zones for lwresd -C. [RT #27139 ]
2011-12-22 08:25:16 +00:00
Mark Andrews
65f3e99e21
3209. [func] Add "dnssec-lookaside 'no'". [RT #24858 ]
2011-11-07 00:31:48 +00:00
Mark Andrews
cecf9557f2
3171. [bug] Exclusively lock the task when adding a zone using
...
'rndc addzone'. [RT #25600 ]
2011-10-14 05:45:20 +00:00
Evan Hunt
6a4d92efe5
3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
...
the config file before pausing the server. [RT #21373 ]
2011-10-07 04:42:49 +00:00
Evan Hunt
2f87b8f081
3136. [func] Add RFC 1918 reverse zones to the list of built-in
...
empty zones switched on by the 'empty-zones-enable'
option. [RT #24990 ]
2011-08-02 04:58:46 +00:00
Automatic Updater
677d6d88ec
update copyright notice
2011-07-08 23:47:16 +00:00
Scott Mann
5ed57781a8
9.8.1b3
2011-07-08 22:57:26 +00:00
Evan Hunt
8c22e52db1
3129. [bug] Named could crash on 'rndc reconfig' when
...
allow-new-zones was set to yes and named ACLs
were used, [RT #22739 ]
2011-06-17 07:04:32 +00:00
Mark Andrews
ac6edf67d5
3069. [cleanup] Silence warnings messages from clang static analysis.
...
[RT #20256 ]
2011-03-11 06:47:09 +00:00
Evan Hunt
b2b2a5f7e5
3066. [func] The DLZ "dlopen" driver is now built by default,
...
no longer requiring a configure option. To
disable it, use "configure --without-dlopen".
(Note: driver not supported on win32.) [RT #23467 ]
2011-03-10 04:29:18 +00:00
Evan Hunt
bcfe6d5d75
3057. [bug] "rndc secroots" would abort after the first error
...
and so could miss some views. [RT #23488 ]
2011-03-03 16:18:12 +00:00
Evan Hunt
8590157237
3053. [bug] Under a sustained high query load with a finite
...
max-cache-size, it was possible for cache memory
to be exhausted and not recovered. [RT #23371 ]
2011-03-03 04:43:02 +00:00
Evan Hunt
8920c09ea3
3021. [bug] Change #3010 was incomplete. [RT #22296 ]
2011-02-16 19:46:12 +00:00
Automatic Updater
ddbe4c63e4
update copyright notice
2011-02-03 12:17:50 +00:00
Mark Andrews
ea09a134fd
3011. [func] Change the default query timeout from 30 seconds
...
to 10. Allow setting this in named.conf using the new
'resolver-query-timeout' option, which specifies a max
time in seconds. 0 means 'default' and anything longer
than 30 will be silently set to 30. [RT #22852 ]
2011-02-03 05:50:08 +00:00
Evan Hunt
4bfb1e97f5
3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
...
for refreshing managed-keys. [RT #22296 ]
2011-02-03 00:20:51 +00:00
Mark Andrews
9d53927aa8
zone = NULL
2011-01-13 03:57:50 +00:00
Mark Andrews
87708bde16
3008. [func] Response policy zones (RPZ) support. [RT #21726 ]
2011-01-13 01:59:28 +00:00
Automatic Updater
135bcc2e42
update copyright notice
2011-01-11 23:47:14 +00:00
Mark Andrews
433e06a25c
3006. [func] Allow dynamically generated TSIG keys to be preserved
...
across restarts of named. Initially this is for
TSIG keys generated using GSSAPI. [RT #22639 ]
2011-01-10 05:32:04 +00:00
Mark Andrews
dc4fa197dd
3004. [func] DNS64 reverse support. [RT #22769 ]
2011-01-07 04:31:39 +00:00
Evan Hunt
5a87f3439e
Initialize a pointer to NULL in order to to silence a compiler warning.
...
Committing without review because the change is trivial.
2011-01-07 00:50:06 +00:00
Automatic Updater
1da9dbcf48
update copyright notice
2011-01-04 23:47:14 +00:00
Evan Hunt
79bf7c874b
3001. [func] Added a default trust anchor for the root zone, which
...
can be switched on by setting "dnssec-validation auto;"
in the named.conf options. [RT #21727 ]
2011-01-03 23:45:08 +00:00
Evan Hunt
71bd858d8e
2989. [func] Added support for writable DLZ zones. (Contributed
...
by Andrew Tridgell of the Samba project.) [RT #22629 ]
2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
of external DLZ drivers that can be loaded as
shared objects at runtime rather than linked with
named. Currently this is switched on via a
compile-time option, "configure --with-dlz-dlopen".
Note: the syntax for configuring DLZ zones
is likely to be refined in future releases.
(Contributed by Andrew Tridgell of the Samba
project.) [RT #22629 ]
2987. [func] Improve ease of configuring TKEY/GSS updates by
adding a "tkey-gssapi-keytab" option. If set,
updates will be allowed with any key matching
a principal in the specified keytab file.
"tkey-gssapi-credential" is no longer required
and is expected to be deprecated. (Contributed
by Andrew Tridgell of the Samba project.)
[RT #22629 ]
2010-12-18 01:56:23 +00:00
Mark Andrews
9f9b7f0e8d
2982. [bug] Reference count dst keys. dst_key_attach() can be used
...
increment the reference count.
Note: dns_tsigkey_createfromkey() callers should now
always call dst_key_free() rather than setting it
to NULL on success. [RT #22672 ]
2010-12-09 00:54:34 +00:00
Automatic Updater
b8a9a7bef2
update copyright notice
2010-12-08 23:51:56 +00:00
Mark Andrews
e334405421
2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991 ]
2010-12-08 02:46:17 +00:00
Mark Andrews
c87f15dac8
2976. [bug] named die on exit after negotiating a GSS-TSIG key. [RT #3415 ]
2010-12-02 23:22:42 +00:00
Shawn Routhier
380c874925
Fix acl type processing so that allow-query works in options and view
...
statements. Also add a new set of tests to verify proper functioning.
[RT #22418 ]
2010-11-16 01:37:39 +00:00
Automatic Updater
7041e86986
update copyright notice
2010-09-24 08:31:23 +00:00
Mark Andrews
ed83fa75f5
2963. [security] The allow-query acl was being applied instead of the
...
allow-query-cache acl to cache lookups. [RT #22114 ]
2010-09-24 05:09:03 +00:00
Mark Andrews
b5fd149e7e
silence signed/unsigned warning hpux
2010-08-24 01:00:31 +00:00
Mark Andrews
38abdbf816
2945. [doc] Update empty-zones list in ARM. [RT #21772 ]
...
2944. [maint] Remove ORCHID prefix from built in empty zones.
[RT #21772 ]
2010-08-20 00:13:26 +00:00
Automatic Updater
f428e385a4
update copyright notice
2010-08-16 23:46:52 +00:00
Mark Andrews
c6f4972c74
2943. [func] Add support to load new keys into managed zones
...
without signing immediately with "rndc loadkeys".
Add support to link keys with "dnssec-keygen -S"
and "dnssec-settime -S". [RT #21351 ]
2010-08-16 22:21:07 +00:00
Francis Dupont
7641867b4c
fix win32 build
2010-08-13 14:33:31 +00:00
Evan Hunt
cfd262045c
2936. [func] Improved configuration syntax and multiple-view
...
support for addzone/delzone feature (see change
#2930 ). Removed "new-zone-file" option, replaced
with "allow-new-zones (yes|no)". The new-zone-file
for each view is now created automatically, with
a filename generated from a hash of the view name.
It is no longer necessary to "include" the
new-zone-file in named.conf; this happens
automatically. Zones that were not added via
"rndc addzone" can no longer be removed with
"rndc delzone". [RT #19447 ]
2010-08-11 18:14:20 +00:00
Mark Andrews
7b830cb17f
while (1) -> for (;;) to silence compiler warning
2010-07-20 04:52:21 +00:00
Mark Andrews
0ddcd0c0ce
format/arg mismatch solaris
2010-07-20 04:46:49 +00:00