Commit Graph

296 Commits

Author SHA1 Message Date
James Brister
475c936d4c 314. [func] Inet controls named.conf statement can now have
any non-negative number of keys specified.
2000-07-07 23:11:48 +00:00
Brian Wellington
d8c8722f28 313. [bug] When parsing resolv.conf, don't terminate on an
error.  Instead, parse as much as possible, but
                        still return an error if one was found.
2000-07-07 18:58:46 +00:00
Brian Wellington
4b7167e96a 312. [bug] Increase the number of allowed elements in the
resolv.conf search path from 6 to 8.  If there
                        are more than this, ignore the remainder rather
                        than returning a failure in lwres_conf_parse.
2000-07-07 18:24:11 +00:00
Brian Wellington
a4b496f2ab 311. [bug] lwres_conf_parse failed when the first line of
resolv.conf was empty or a comment.
2000-07-07 18:16:46 +00:00
James Brister
952e9025b0 310. [func] Changes to named.conf "controls" statement (inet
subtype only)

                          - support "keys" clause

                                controls {
                                   inet * port 1024
                                        allow { any; } keys { "foo"; }
                                }

                          - allow "port xxx" to be left out of statement,
                            in which case it defaults to omapi's default port
                            of 953.
2000-07-07 13:56:14 +00:00
Andreas Gustafsson
08133a2dbe This is "the glue fix". It changes the additional data lookup
algorithm to more closely follow RFC1035, so that root servers will
provide a more complete set of name server glue addresses in ccTLD
referral responses.

For non-referral responses, the server no longer uses glue as
additional data.

For referral responses, the servers now looks for glue A/AAAA/A6 RRs
in the zone where the NS RRs reside, even in the case where this is
different from the zone where the A/AAAA/A6 RRs would have resided had
they been authoritative data.

A6 chains included as additional info may not yet fully follow these
rules.
2000-07-06 01:00:46 +00:00
Mark Andrews
8c1aa8573d 308. [bug] Treat a SOA record not at top of zone as an error
when loading a zone. (RT #154)
2000-07-04 04:28:44 +00:00
David Lawrence
96ab25294b 307. [bug] When canceling a query, the resolver didn't check for
isc_socket_sendto() calls that did not yet have their
			completion events posted, so it could (rarely) end up
			destroying the query context and then want to use
			it again when the send event posted, triggering an
			assertion as it tried to cancel an already-canceled
			query.  (RT #77)

... so now the resolver counts the number of outstanding isc_socket_sendto()s
and only destroys the query context when there are no more.
2000-07-04 01:19:20 +00:00
Brian Wellington
e68de4a7db 306. [bug] Reading HMAC-MD5 private key files didn't work. 2000-07-03 23:27:45 +00:00
Andreas Gustafsson
c4252cd10b style 2000-07-03 22:14:43 +00:00
Andreas Gustafsson
5aa96829fd style 2000-07-03 22:04:47 +00:00
Brian Wellington
e2894b0e50 304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers
are listed in resolv.conf, silently ignore them
                        instead of returning failure.
2000-07-03 20:13:12 +00:00
Mark Andrews
845e0b5f96 303. [bug] add additional sanity checks to differentiate a AXFR
response vs a IXFR response. (RT #157)
2000-07-03 13:33:05 +00:00
Mark Andrews
b6747cf19d 302. [bug] MXNAME should be large enough to hold any legal domain
name in presentation format + terminating NULL.
2000-07-03 05:26:50 +00:00
Mark Andrews
1318ddb52d 301. [bug] uninitalised pointer host:printmessage(). (RT #159) 2000-07-03 05:10:14 +00:00
David Lawrence
de8e189332 300. [bug] Using both <isc/net.h> and <lwres/net.h> didn't work
on platforms lacking IPv6 because each included their
			own ipv6 header file for the missing definitions.  Now
			each library's ipv6.h defines the wrapper symbol of
			the other (ISC_IPV6_H and LWRES_IPV6_H).
2000-07-01 01:41:54 +00:00
David Lawrence
202991557a 299. [cleanup] Get the user and group information before changing the
root directory, so the administrator does not need to
			keep a copy of the user and group databases in the
			chroot'ed environment.  Suggested by Hakan Olsson.
2000-07-01 00:48:06 +00:00
Andreas Gustafsson
1c823819b7 removed unnecessary locking in ns_interface_shutdown() that
caused the server to deadlock on shutdown on the Alphas
2000-06-30 15:57:47 +00:00
Brian Wellington
e405739af2 297. [bug] Specifying a key name that wasn't fully qualified
in certain parts of the config file could cause
                        an assertion.
2000-06-30 15:39:23 +00:00
Andreas Gustafsson
b719a598e7 make install didn't work when using separate build dir 2000-06-30 01:11:49 +00:00
Andreas Gustafsson
428b78e56d RT #153: when invoked with type==CNAME and a message
not constructed by dns_message_parse(), dns_message_findname() failed to
find anything due to checking for attribute bits set only by dns_message_parse().
This caused an infinite loop when constructing the response to an ANY query
at a CNAME in a secure zone.
2000-06-29 19:49:43 +00:00
Mark Andrews
b74e73c5b4 294. [bug] If we run out of space in while processing glue
when reading a master file and commit "current name"
			reverts to "name_current" instead of staying as
			"name_glue".
2000-06-29 15:55:19 +00:00
Mark Andrews
323b6387ce 293. [port] Add support for freebsd 4.0 system tests. 2000-06-29 15:28:23 +00:00
Andreas Gustafsson
d68e4b66b1 added missing CHANGES entry:
292.   [bug]           Due to problems with the way some operating systems
                        handle simultaneous listening on IPv4 and IPv6
                        addresses, the server no longer listens on IPv6
                        addresses by default.  To revert to the previous
                        behavior, specify "listen-on-v6 { any; };" in
                        the config file.
2000-06-28 21:42:15 +00:00
Andreas Gustafsson
e44d56866b 291. [func] Caching servers no longer send outgoing queries
over TCP just because the incoming recursive query
                        was a TCP one.
2000-06-28 19:44:01 +00:00
Michael Sawyer
84c4c99c9e 290. [cleanup] +twiddle option to dig (for testing only) removed. 2000-06-28 18:20:44 +00:00
David Lawrence
0df2335526 typos 2000-06-28 16:51:13 +00:00
David Lawrence
f204bdd8e6 289. [cleanup] dig is now installed in $bindir instead of $sbindir.
host is now installed in $bindir.  (Be sure to remove
			any $sbindir/dig from a previous release.)

 288.	[func]		rndc is now installed by "make install" into $sbindir.

 287.	[bug]		rndc now works again as "rndc 127.1 reload" (for
			only that task).  Parsing its configuration file and
			using digital signatures for authentication has been
			disabled until named supports the "controls" statment,
			post-9.0.0.

Items 287 and 288 address issues raised in RT #145.
2000-06-28 16:37:43 +00:00
Andreas Gustafsson
8b31f5630f 286. [bug] On Solaris 2, when named inherited a signal state
where SIGHUP had the SIG_IGN action, SIGHUP would
                        be ignored rather than causing the server to reload
                        its configuration.
2000-06-28 04:09:41 +00:00
David Lawrence
13c32cb589 285. [bug] A change made to the dst API for beta4 inadvertently
broke OMAPI's creation of a dst key from an incoming
			message, causing an assertion to be triggered.  Fixed.
2000-06-28 03:09:44 +00:00
Andreas Gustafsson
822f118444 284. [func] The DNSSEC key generation and signing tools now
generate randomness from keyboard input on systems
                        that lack /dev/random.

 283.   [cleanup]       The 'lwresd' program is now a link to 'named'.
2000-06-27 21:08:39 +00:00
James Brister
8775909be9 282. [bug] lexer now returns ISC_R_RANGE if parsed integer is
too big for an usigned long.
2000-06-23 22:32:10 +00:00
James Brister
406ce0cd96 281. [bug] fixed list of recognised config file category names. 2000-06-23 22:30:02 +00:00
David Lawrence
9151d6e15c tabify and auto-enable hard tabs for emacs users. 2000-06-23 21:25:47 +00:00
Brian Wellington
a797a75953 isc-config.sh 2000-06-23 21:21:56 +00:00
David Lawrence
17d91fddb3 279. [bug] Private omapi function symbols shared between
two or more files in libomapi.a were not namespace
                        protected using the ISC convention of starting with
                        the library name and two underscores ("omapi__"...)
2000-06-23 20:19:02 +00:00
David Lawrence
a38e5f0695 278. [bug] bin/named/logconf.c:category_fromconf() didn't take
note of when isc_log_categorybyname() wasn't able
                        to find the category name and would then apply the
                        channel list of the unknown category to all categories.
2000-06-23 17:59:08 +00:00
David Lawrence
c244584cad 276. [bug] isc_log_categorybyname() and isc_log_modulebyname()
would fail to find the first member of any category
                        or module array apart from the internal defaults.
                        Thus, for example, the "notify" category was improperly
                        configured by named.

This resolves RT #132, "Logging channels definition problems."
2000-06-23 17:52:20 +00:00
Mark Andrews
abeb505bb6 276. [bug] dig now supports maximum sized TCP messages. 2000-06-23 16:53:53 +00:00
Andreas Gustafsson
727eef0cbc 79 columns 2000-06-23 01:52:28 +00:00
Andreas Gustafsson
57b3597444 275. [bug] The definition of lwres_gai_strerror() was missing the
lwres_ prefix.
2000-06-23 01:50:48 +00:00
Brian Wellington
9952491975 TSIG AXFR verify failed when talking to a BIND 8 server. 2000-06-23 01:18:53 +00:00
Andreas Gustafsson
26c86a6fc8 273. [func] The default for the 'transfer-format' option is
now 'many-answers'.  This will break zone transfers
                        to BIND 4.9.5 and older unless there is an explicit
                        'one-answer' configuration.
2000-06-23 01:08:29 +00:00
Andreas Gustafsson
b3157263ee 272. [bug] The sending of large TCP responses was canceled
in mid-transmission due to a race condition
                        caused by the failure to set the client object's
                        newstate variable correctly when transitioning
                        to the working state.
2000-06-22 01:14:38 +00:00
Brian Wellington
b90d3f516f isc_os_ncpus() 2000-06-22 01:10:11 +00:00
Mark Andrews
b35a009df8 270. [func] Allow maximum sized TCP answers. 2000-06-22 00:05:11 +00:00
Andreas Gustafsson
7bb1e299e1 269. [bug] Failed DNSSEC validations could cause an assertion
failure by causing clone_results() to be called with
                        with hevent->node == NULL.
2000-06-21 22:47:38 +00:00
Andreas Gustafsson
482b9dae17 added plain text version of ARM 2000-06-21 22:31:19 +00:00
Michael Sawyer
34ea3c6fd9 267. [func] Nsupdate is now provided in the distribution. 2000-06-21 20:52:39 +00:00
Mark Andrews
8ae26e9f87 typo 2000-06-21 00:03:49 +00:00