Commit Graph
142 Commits
Author SHA1 Message Date
Mark Andrews 55b1dda9d8 2640. [security] A specially crafted update packet will cause named
to exit. [RT #20000]
2009-07-28 15:57:26 +00:00
Mark Andrews 99f0cd7dc1 2591. [bug] named could die when processing a update in
removed_orphaned_ds(). [RT #19507]
2009-04-30 07:02:57 +00:00
Automatic Updater 2a6997e72c update copyright notice 2009-01-19 23:46:17 +00:00
Mark Andrews 0f4ec602dd spelling 2009-01-19 00:36:29 +00:00
Automatic Updater d53d756c84 update copyright notice 2008-11-20 23:46:03 +00:00
Mark Andrews a696315d19 2485. [bug] Change update's the handling of obscured RRSIG
records.  Not all orphand DS records were being
                        removed. [RT #18828]
2008-11-20 01:24:16 +00:00
Mark Andrews 458d1cf9a0 2331. [bug] Failure to regenerate any signatures was not being reported
or past back to the UPDATE client. [RT #17570]
2008-02-07 03:16:08 +00:00
Automatic Updater fcef5293d2 update copyright notice 2008-01-17 23:46:05 +00:00
Automatic Updater 9a581e09eb update copyright notice 2008-01-02 23:46:02 +00:00
Mark Andrews b3eb875aad 2284. [bug] Memory leak in UPDATE prerequisite processing.
[RT #17377]
2008-01-02 04:44:56 +00:00
Automatic Updater beb9fabda3 update copyright notice 2007-08-28 07:20:06 +00:00
Mark Andrews bc8b82523f 2219. [bug] Apply zone consistancy checks to additions, not
removals, when updating. [RT #17049]
2007-08-28 00:08:49 +00:00
Automatic Updater dc6337ec77 update copyright notice 2007-05-18 23:46:28 +00:00
Mark Andrews 514ba8adb0 2183. [bug] dnssec-signzone didn't handle offline private keys
well.  [RT #16832]
2007-05-18 05:59:26 +00:00
Mark Andrews cb6bc372d8 2001. [func] Check the KSK flag when updating a dynamic zone.
New zone option "update-check-ksk yes;".  [RT #15817]
2006-03-06 01:38:01 +00:00
Mark Andrews bf3bbdc9b6 1999. [func] Implement "rrset-order fixed". [RT #13662] 2006-03-03 00:56:53 +00:00
Mark Andrews 586f82c999 update copyright notice 2006-01-06 00:01:43 +00:00
Mark Andrews d71329a7df 1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
[RT #15465]
2006-01-05 03:21:54 +00:00
Mark Andrews b9a8524f2f 1923. [bug] ns_client_detach() called too early. [RT #15499] 2005-10-07 04:07:54 +00:00
Mark Andrews 59606dc362 seperate out sibling glue checks 2005-08-25 00:05:47 +00:00
Mark Andrews 066f566317 1862. [func] Add additional zone data constancy checks.
named-checkzone has extended checking of NS, MX and
                        SRV record and the hosts they reference.
                        named has extended post zone load checks.
                        New zone options: check-mx and integrity-check.
                        [RT #4940]
2005-05-19 04:59:57 +00:00
Rob Austein 372edff338 1851. [doc] Doxygen comment markup. [RT #11398] 2005-04-27 05:02:59 +00:00
Mark Andrews 7150e2289b update copyright 2005-01-11 01:39:40 +00:00
Mark Andrews 4238db360a 1794. [func] Named and named-checkzone can now both check for
non-terminal wildcard records.
2005-01-10 00:05:32 +00:00
Mark Andrews 983e56a9a0 1742. [bug] Deleting all records at a node then adding a
previously existing record, in a single UPDATE
                        transaction, failed to leave / regenerate the
                        associated RRSIG records. [RT #12788]
2004-10-21 01:34:16 +00:00
Mark Andrews 38364a5555 1741. [bug] Deleting all records at a node in a secure zone
using a update-policy grant failed. [RT #12787]
2004-10-12 22:01:52 +00:00
Mark Andrews 0f42634aea 1690. [bug] Delay detaching view from the client until UPDATE
processing completes when shutting down. [RT #11714]
2004-07-23 02:57:24 +00:00
Mark Andrews d8b30c39c0 1686. [bug] Named sent a extraneous NOTIFY when it received a
redundant UPDATE request. [RT #11943]
2004-07-20 07:39:03 +00:00
Mark Andrews 029f8dce4d 1670. [func] Log UPDATE requests to slave zones without an acl as
"disabled" at debug level 3. [RT# 11657]
2004-06-21 00:42:36 +00:00
Mark Andrews 673d278aa3 1649. [bug] Silence "unexpected non-minimal diff" message.
[RT #11206]
2004-06-04 03:45:45 +00:00
Mark Andrews 57311e5df8 1633. [bug] named should return NOTIMP to update requests to a
slaves without a allow-update-forwarding acl specified.
                        [RT #11331]
2004-05-12 06:39:15 +00:00
Mark Andrews 2ec5372082 1625. [bug] named failed to load/transfer RFC2535 signed zones
which contained CNAMES. [RT# 11237]
2004-05-05 01:32:37 +00:00
Mark Andrews 3bdf0a6885 hide ((isc_event_t **) (void *)) cast using a macro, ISC_EVENT_PTR. 2004-04-15 02:04:05 +00:00
Mark Andrews dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews 2047977ce2 1586. [func] "check-names" is now implemented. 2004-02-27 20:41:51 +00:00
Mark Andrews daa73eae70 silence punned messages 2004-02-03 00:59:05 +00:00
Mark Andrews 93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Mark Andrews 64cc9c8818 1421. [func] Differentiate updates that don't succeed due to
prerequisites (unsuccessful) vs other reasons
                        (failed).
developer: marka
reviews: explorer
2003-01-21 05:18:11 +00:00
Mark Andrews c314efc295 add comment 2003-01-10 02:37:44 +00:00
Michael Graff 4411b9b6e7 pull down rt3507 (work by Mark, checked by me) 2002-11-12 21:52:44 +00:00
Mark Andrews 59ab128c97 1400. [bug] Block the addition of wildcard NS records by IXFR
or UPDATE. [RT #3502]
developer: marka
reveiwer: ogud
2002-11-12 20:16:30 +00:00
Mark Andrews 6b25d2f7f7 developer: bwelling
reviewed: marka
1369.   [bug]           Adding an NS record as the lexicographically last
                        record in a secure zone didn't work.
2002-08-29 05:40:07 +00:00
Mark Andrews cc4928ec71 1219. [func] New category 'update-security'. 2002-06-12 06:29:49 +00:00
Mark Andrews 7c23b791f4 1301. [func] Log zone when unable to get private keys to update
zone.  Log zone when NXT records are missing from
                        secure zone.
2002-05-24 06:26:04 +00:00
Mark Andrews a7038d1a05 copyrights 2002-02-20 03:35:59 +00:00
Andreas Gustafsson 48b0f5ff87 1191. [bug] A dynamic update removing the last non-apex name in
a secure zone would fail. [RT #2399]
2002-01-22 22:26:45 +00:00
Brian Wellington cde7dfea4c 1190. [func] Add the "rndc freeze" and"rndc unfreeze" commands.
[RT #2394]

Basically, "freeze" disables dynamic updates to a zone, syncs the journal
file into the master file, and removes the journal.  This allows manual
edits of a dynamic zone file without stopping the server, since the
zone is temporarily considered non-dynamic.  "unfreeze" re-enables dynamic
updates to a zone.

So, instead of the old:
	rndc stop
	edit master file
	remove journal
	restart server
you can now do:
	rndc freeze zone
	edit master file
	rndc reload zone
	rndc unfreeze zone
which doesn't require stopping the server.

About everyone here at the secure dynamic update workshop wanted this.
It will be documented soon.
2002-01-22 22:05:59 +00:00
Andreas Gustafsson ec52edeff2 missing format string argument; add format checking 2002-01-22 21:45:07 +00:00
Brian Wellington 15033eed4d make a few dynamic update log messages more informative 2002-01-22 16:05:51 +00:00
Brian Wellington a5c077e40c 1181. [func] Add the "key-directory" configuration statement,
which allows the server to look for online signing
			keys in alternate directories.
2002-01-21 11:00:25 +00:00