Commit Graph
1814 Commits
Author SHA1 Message Date
Automatic Updater db69d5d53c update copyright notice 2011-01-06 23:47:00 +00:00
Evan Hunt 3916872f37 3003. [experimental] Added update-policy match type "external",
enabliing named to defer the decision of whether to
			allow a dynamic update to an external daemon.
			(Contributed by Andrew Tridgell.) [RT #22758]
2011-01-06 23:24:39 +00:00
Automatic Updater 1da9dbcf48 update copyright notice 2011-01-04 23:47:14 +00:00
Evan Hunt 79bf7c874b 3001. [func] Added a default trust anchor for the root zone, which
can be switched on by setting "dnssec-validation auto;"
			in the named.conf options. [RT #21727]
2011-01-03 23:45:08 +00:00
Mark Andrews ac78c47210 ! test -n -> test -z 2010-12-27 13:38:43 +00:00
Automatic Updater 6764a1403a update copyright notice 2010-12-24 23:47:05 +00:00
Mark Andrews cd86950664 exit 255 2010-12-24 07:27:15 +00:00
Evan Hunt d9ad0a55bb 3000. [bug] More TKEY/GSS fixes:
- nsupdate can now get the default realm from
			   the user's Kerberos principal
			 - corrected gsstest compilation flags
			 - improved documentation
			 - fixed some NULL dereferences
			[RT #22795]
2010-12-24 02:20:47 +00:00
Mark Andrews 37dee1ff94 2999. [func] Add GOST support (RFC 5933). [RT #20639] 2010-12-23 04:08:00 +00:00
Automatic Updater ca103999e6 update copyright notice 2010-12-20 23:47:21 +00:00
Evan Hunt 950aa1d752 When a prereq.sh file determines that a test can't run because the feature
to be tested was not configured in at build time, it can now return 255,
and run.sh will print "R:SKIPPED" instead of "R:UNTESTED".  Robie will be
able to flag this as green rather than yellow.
2010-12-20 21:35:45 +00:00
Evan Hunt 8fda09fc85 Changed $(command) to command in tests.sh for compatibility with
older bourne shells.
2010-12-20 18:37:07 +00:00
Mark Andrews e11d10bbcc example.nil.zone -> example.nil.db 2010-12-19 23:39:28 +00:00
Automatic Updater 941c0792f2 update copyright notice 2010-12-18 23:47:11 +00:00
Evan Hunt 6c3eff861d tsiggss test needed a prereq.sh file. (Committing without review because
the script is simple, no one is available, and I want to shut robie up.)
2010-12-18 16:48:41 +00:00
Mark Andrews 0faa11ab77 clean first 2010-12-18 11:45:01 +00:00
Evan Hunt af903e5008 Added files to clean.sh scripts that have been left around after tests run.
Skipping the ticket/review steps because the change is trivial.
2010-12-18 02:12:44 +00:00
Evan Hunt 71bd858d8e 2989. [func] Added support for writable DLZ zones. (Contributed
by Andrew Tridgell of the Samba project.) [RT #22629]

2988.	[experimental]	Added a "dlopen" DLZ driver, allowing the creation
			of external DLZ drivers that can be loaded as
			shared objects at runtime rather than linked with
			named.  Currently this is switched on via a
			compile-time option, "configure --with-dlz-dlopen".
			Note: the syntax for configuring DLZ zones
			is likely to be refined in future releases.
			(Contributed by Andrew Tridgell of the Samba
			project.) [RT #22629]

2987.	[func]		Improve ease of configuring TKEY/GSS updates by
			adding a "tkey-gssapi-keytab" option.  If set,
			updates will be allowed with any key matching
			a principal in the specified keytab file.
			"tkey-gssapi-credential" is no longer required
			and is expected to be deprecated.  (Contributed
			by Andrew Tridgell of the Samba project.)
			[RT #22629]
2010-12-18 01:56:23 +00:00
Mark Andrews 273757406a .zone -> .db 2010-12-17 00:57:39 +00:00
Tatuya JINMEI 神明達哉 743bbdc18f 2947. [func] Add new zone type "static-stub". It's like a stub
zone, but the nameserver names and/or their IP
			addresses are statically configured. [RT #21474]

(for 9.8.0)
2010-12-16 09:51:30 +00:00
Evan Hunt bbedadf76a 2985. [bug] Add a regression test for change #2896. [RT #21324] 2010-12-15 18:44:37 +00:00
Mark Andrews 9f9b7f0e8d 2982. [bug] Reference count dst keys. dst_key_attach() can be used
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
2010-12-09 00:54:34 +00:00
Automatic Updater b8a9a7bef2 update copyright notice 2010-12-08 23:51:56 +00:00
Mark Andrews b9f2d007c5 2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991] 2010-12-08 05:01:00 +00:00
Mark Andrews e334405421 2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991] 2010-12-08 02:46:17 +00:00
Automatic Updater a4b8846651 update copyright notice 2010-12-07 23:47:02 +00:00
Mark Andrews 8aee18709f 2980. [bug] named didn't properly handle UPDATES that changed the
TTL of the NSEC3PARAM RRset. [RT #22363]
2010-12-07 02:53:34 +00:00
Mark Andrews 82f0630bae 2977. [bug] 'nsupdate -l' report if the session key is missing.
[RT #21670]
2010-12-03 00:37:33 +00:00
Automatic Updater 326a702a35 update copyright notice 2010-12-02 23:46:56 +00:00
Mark Andrews c87f15dac8 2976. [bug] named die on exit after negotiating a GSS-TSIG key. [RT #3415] 2010-12-02 23:22:42 +00:00
Automatic Updater e085624e0f update copyright notice 2010-11-30 23:46:55 +00:00
Evan Hunt b5b934a0bb 2974. [bug] Some vaild UPDATE requests could fail due to a
consistency check examining the existing version
			of the zone rather than the new version resulting
			from the UPDATE. [RT #22413]
2010-11-30 02:27:08 +00:00
Automatic Updater 33cc94f04c update copyright notice 2010-11-17 23:47:09 +00:00
Mark Andrews d48730a446 2970. [security] Adding a NO DATA negative cache entry failed to clear
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
2010-11-16 06:46:44 +00:00
Shawn Routhier 380c874925 Fix acl type processing so that allow-query works in options and view
statements.  Also add a new set of tests to verify proper functioning.
[RT #22418]
2010-11-16 01:37:39 +00:00
Mark Andrews a27b3757fd 2968. [security] Named could fail to prove a data set was insecure
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
2010-11-16 01:14:51 +00:00
Mark Andrews 13dae6ff58 silence 'Null terminator in string initializer ignored.' warning 2010-10-04 22:27:41 +00:00
Automatic Updater 9b367fcfe6 update copyright notice 2010-09-29 23:47:05 +00:00
Mark Andrews 34f010449c #include <isc/print.h> 2010-09-29 04:30:13 +00:00
Mark Andrews 2015023399 2965. [func] Test HMAC functions using test data from RFC 2104 and RFC 4634. [RT #21702] 2010-09-29 04:00:16 +00:00
Mark Andrews ed83fa75f5 2963. [security] The allow-query acl was being applied instead of the
allow-query-cache acl to cache lookups. [RT #22114]
2010-09-24 05:09:03 +00:00
Mark Andrews 165501a801 simplify grep 2010-09-15 23:22:02 +00:00
Evan Hunt cff5da57d6 The "resolver" test was failing on systems with old versions of "grep". 2010-09-15 15:45:07 +00:00
Automatic Updater 3255640981 update copyright notice 2010-09-15 12:38:36 +00:00
Mark Andrews 082f42dcf2 2960. [func] Check that named accepts non-authoritative answers.
[RT #21594]
2010-09-15 12:07:56 +00:00
Mark Andrews c75523bcb3 2959. [func] Check that named starts with a missing masterfile.
[RT #22076]

2958.   [bug]           named failed to start with a missing master file.
                        [RT #22076]
2010-09-15 03:32:34 +00:00
Mark Andrews 240a7dc59d 2951. [bug] named failed to generate a correct signed response
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
2010-09-07 00:58:36 +00:00
Automatic Updater dac2623103 update copyright notice 2010-08-25 23:46:37 +00:00
Mark Andrews 17be07ab81 2948. [port] MacOS: provide a mechanism to configure the test
interfaces at reboot. See bin/tests/system/README
                        for details.
2010-08-25 04:51:51 +00:00
Automatic Updater 7202b5cf66 update copyright notice 2010-08-17 23:46:46 +00:00