ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
5,898 Commits 589 Branches 805 Tags
de73f221e6f0941a12aa2ab91ef7c1ffa321632b
Commit Graph
2017 Commits
Author SHA1 Message Date
Michael Sawyer de73f221e6 Parenthesis error in trace mode. 
(To see delegations in +trace, you need to do +trace +authority in dig. Should
this be defaulted?)
 2000-07-12 00:42:54 +00:00
Andreas Gustafsson 969b3374ed no space between function name and arg list 2000-07-12 00:22:57 +00:00
Michael Sawyer b95b59db26 Increase max wait time for transfer to Retry time + 1 minute, since some 
OS's appear to drop UDP packets and not get the initial SOA reply.
 2000-07-11 23:42:56 +00:00
David Lawrence eae2a15326 use ns_g_server->aclenv to match localhost and localnets in the allow{} clause 2000-07-11 23:02:32 +00:00
David Lawrence ce2be9b721 329. [func] omapi_auth_register() now takes a size_t argument for 
the length of a key's secret data.  Previously
			OMAPI only stored secrets up to the first NUL byte.

This change was made to cope with decoded base64 secrets, so in this
revision omapiconf.c and rndc.c also decode the secret.
 2000-07-11 22:03:12 +00:00
James Brister adade77942 326. [func] 'keys' in an 'inet' control statement is now 
required and must have at least one item in it.

                        warning is issued if a 'unix' control channel is
                        defined (not supported).
 2000-07-11 19:09:10 +00:00
Michael Sawyer 1b4e3f88bb Minor typo in error result 2000-07-11 17:49:02 +00:00
Michael Sawyer 6331b9a45e Don't try and reset timers which aren't being used. 2000-07-11 17:35:49 +00:00
Mark Andrews 6c3371d89a Add test for leading zero in SOA serial 2000-07-11 02:40:58 +00:00
David Lawrence 37ea500c8a use base64 for secret in sample config 2000-07-11 01:31:06 +00:00
David Lawrence 87983da955 use configure-generated sysconfdir, add version string 2000-07-11 01:30:56 +00:00
David Lawrence 3734f3f1ba -k flag changed to -y to be compatible with dig and nsupdate. 
(... since I have to update the ARM anyway ...)
 2000-07-11 00:37:58 +00:00
Brian Wellington 7f2ac7414c Test that a query for a security root succeeds. 2000-07-11 00:36:44 +00:00
David Lawrence 32d6b7bbfb use base64 for the secret; describe how base64 secrets can be made; clarify 
the interaction of some of the statements and the command line;
clarify the double quote rules
 2000-07-11 00:23:38 +00:00
Brian Wellington e09caeceef print the test info before executing the test 2000-07-10 23:46:50 +00:00
Brian Wellington 60f0c97c90 fix broken shell code 2000-07-10 23:05:51 +00:00
David Lawrence acc859e12c updated to describe current options 2000-07-10 23:04:42 +00:00
Michael Sawyer 796b1656b6 pulldown: 
If the testsock.pl test fails, try 5 times (2 seconds between tries) in case
a server took some time to fully free the port.  (Appears to be an occasional
problem on Solaris)
 2000-07-10 22:49:46 +00:00
David Lawrence a9ec4f7ca5 confparser allows the keys clause to be missing from the controls statement, 
but it is really required.  warn when it is absent and skip the channel.
 2000-07-10 22:04:08 +00:00
David Lawrence 3a72577619 include named/omapi.h 2000-07-10 22:02:38 +00:00
David Lawrence 77e38fb51c the presence of a "unix" control channel type in named.conf caused all hell 
to break loose
 2000-07-10 21:49:00 +00:00
Brian Wellington b872e86042 Describe all the tests that are run and indicate which ones fail. 2000-07-10 21:40:16 +00:00
Andreas Gustafsson 04d58db327 321. [bug] When synthesizing a CNAME RR for a DNAME 
response, query_addcname() failed to intitialize
                        the type and class of the CNAME dns_rdata_t,
                        causing random failures.
 2000-07-10 18:33:25 +00:00
Brian Wellington 3ce3305278 Remove a race condition where the final event could be posted before 
isc_app_run started.
 2000-07-10 18:02:31 +00:00
Michael Sawyer 2386f92414 Change the default timeouts to 30 seconds. 
Change the semantics of timeout under TCP mode.
(touch the interval every rcv'd packet, plus increase the timeout greatly
once in the XFR)
 2000-07-10 17:25:59 +00:00
Andreas Gustafsson 0282c5fd48 export RNDC 2000-07-10 17:01:15 +00:00
Andreas Gustafsson 880b031d5b use typedef to avoid multiple identical but incompatible 
struct definitions for ISC_LIST(ns_omapilistener_t), so that
ISC_LIST_APPENDLIST can be used
 2000-07-10 16:47:48 +00:00
David Lawrence 27c1fa93a0 use rndc instead of kill to reload the servers ... with the added benefit 
that now the body of this test should pass on BSD/OS
 2000-07-10 11:39:51 +00:00
David Lawrence 2c6d0da369 set $RNDC 2000-07-10 11:38:48 +00:00
David Lawrence 5096958739 320. [func] Multiple rndc changes: parses an rndc.conf file, 
uses authentication to talk to named, command
			line syntax changed.  This will all be described
			in the ARM.
[RT #145]
 2000-07-10 11:38:37 +00:00
David Lawrence 84f4e4a656 319. [func] The named.conf "controls" statement is now used 
to configure the OMAPI command channel.
[RT #145]
 2000-07-10 11:35:02 +00:00
David Lawrence 74c2797077 added I: lines to describe the test's progress 2000-07-09 16:33:09 +00:00
David Lawrence fdebae8397 nsupdate now finishes by sending a final newline, so don't echo another one 2000-07-09 16:27:30 +00:00
David Lawrence e60f5a146d remove the correct dig.out and stub zone files generated by the test 2000-07-09 16:18:39 +00:00
David Lawrence d9d2eb181b send final newline to stdout, not stderr. 
minor style changes (lines > 79 columns, a few cases where the function
name was separated from the opening parenthesis by a space).
 2000-07-09 16:17:13 +00:00
David Lawrence 904579f844 ignore named.run 2000-07-09 16:11:12 +00:00
David Lawrence 2925f690b3 if a server has to be kill -KILLed, remove its pidfile after the signal is sent 2000-07-09 15:55:01 +00:00
David Lawrence 37d5999904 "make test" depends on subdirs getting all compiled 2000-07-09 15:54:21 +00:00
Mark Andrews ddc12c6129 Add non-empty blank line test. 2000-07-09 12:48:43 +00:00
Brian Wellington ba6ea42c36 Send all errors to stderr and the prompt to stdout 2000-07-09 06:25:49 +00:00
David Lawrence 5709b77c8c return non-zero if the rcodes differ 2000-07-08 16:37:43 +00:00
David Lawrence c634c94d67 added "I:" info lines for each stage of the test 2000-07-08 16:37:18 +00:00
David Lawrence 45f0cd2b4b use full dig output; let digcomp sort it all out. in particular, digcomp 
really wants to get the server status.

also added "I:" info lines for each stage of the test
 2000-07-08 16:36:29 +00:00
David Lawrence 2dc34dc3de removed a.root-servers.nil A record as out of zone for .mil 2000-07-08 16:29:47 +00:00
David Lawrence b575462ccb test that out-of-zone glue records are not returned 2000-07-08 16:29:05 +00:00
David Lawrence d319a11e58 use full dig output so digcomp can get the server status response 2000-07-08 16:27:24 +00:00
Brian Wellington 66b84e8952 - test insecurity proofs 
- use digcomp.pl's ability to check rcode
- generate less unneeded output
- use separate output files for each test, so that output isn't deleted
 2000-07-08 00:39:17 +00:00
Brian Wellington 71954c9571 I lied. This should be the last change to the setuid() code. Call 
initgroups() from ns_os_inituserinfo, and make sure that Linux initially has
the CAP_SETGID capability set so that it doesn't fail.
 2000-07-08 00:12:21 +00:00
Brian Wellington c336121fb5 Hopefully the last change to the setuid code. Only call initgroups() 
if getuid() == 0.  Don't call ns_os_changeuser() more than once (it
could happen on Linux).

The code in its current form doesn't check for root before calling
setgid() or setuid(), since they'll fail and print reasonable error
messages (unless -u is supplied with the non-root user that ran named,
in which case it would succeed).  The call to initgroups() would fail for
non root, so it shouldn't be tried.

The previous (as of a few days ago) code just ignored the -u parameter
when named was run as non-root.  This was not good.
 2000-07-07 23:53:35 +00:00
Andreas Gustafsson 722cac3cdc worked around NetBSD /bin/sh bug, making the 
script shorter in the process
 2000-07-07 23:18:51 +00:00