- added LRU expiration for generated TSIGs
- added the ability to use a non-default realm
- added new "realm" keyword in nsupdate
- limited lifetime of generated keys to 1 hour
or the lifetime of the context (whichever is
smaller)
[RT #19737]
optional second argument.
I had noticed a few days ago that the ARM grammar for sig-validity-interval
was missing the optional second number. I saw an email again about
this today. This is for part of my RT #19931.
Not adding a CHANGES entry for this (because feature itself was
already documented.)
This is for v9_6. (Already did HEAD.)
(No structure change here.)
(Note that the "Organization of This Document" is somewhat wrong,
but I am not fixing this yet as I have to consider my restructuring
ideas for ARM first.)
Add formatting tags around syntax that was missing. Be consistent.
Remove a few paragraph breaks before "For example:".
Fix typo "will will".
Change description of pid-file to not mislead (since other programs
don't parse named.conf to figure out the PID file :)
Remove some unneeded commas.
Minor grammar fixes.
Clarify edns-udp-size to say "... to control the size of packets received."
Reformatted that paragragh too (in docbook, not rendered version.
(TODO: cross-reference these descriptions.)
Hyphenate "built-in" to be consistent.
Remove space in "100000" (for style). (Some use space, period, comma
for thousands.)
Capitalize TTL in one place.
Say that the -t option is "for named". (Reformat that paragraph in
docbook while here.)
named is in /usr/local/sbin not /usr/local/bin for example.
BIND 8 is deprecated. Don't publicly say we do security-related patches
for BIND 4 or BIND 8.
(Note I have many, many more improvements to do. Trying to catch up on
all my uncommitted fixes some dating back to 2007. I originally
planned to not backport these from HEAD to v9_6, v9_5, and v9_4,
but now I am doing that.)
So be consistent.
Add formatting for a configuration option.
Add formatting for a filename.
Uppercase "DNSSEC" in a couple places.
syslog "logs" (not "prints").
Also add formatting for some command line options. (NOTE: this is not
consistent yet, as some use <command> and some use <option> -- need
to define this in a style guide.)
definition sections. This is just to be in alphabetical order
(was: ..., masters, options, statistics-channels, server,
trusted-keys, ...). No content changes.
Note that the indention doesn't match up, but that was wrong before
my commit here.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
This allows the owner of the containing directory
to be set, for "named -u" support, and allows there
to be a permanent symbolic link in the path, for
"named -t" support. [RT #18306]