diff --git a/bin/named/server.c b/bin/named/server.c index 95b387e342..ad472112e2 100644 --- a/bin/named/server.c +++ b/bin/named/server.c @@ -14113,6 +14113,7 @@ do_modzone(named_server_t *server, ns_cfgctx_t *cfg, dns_view_t *view, dns_zone_t *zone = NULL; bool added; bool locked = false; + const cfg_obj_t *options = NULL; #ifndef HAVE_LMDB FILE *fp = NULL; cfg_obj_t *z; @@ -14220,17 +14221,13 @@ do_modzone(named_server_t *server, ns_cfgctx_t *cfg, dns_view_t *view, if (!added) { if (cfg->vconfig == NULL) { - result = delete_zoneconf( - view, cfg->conf_parser, cfg->config, - dns_zone_getorigin(zone), NULL, locked); + options = cfg->config; } else { - const cfg_obj_t *voptions = cfg_tuple_get(cfg->vconfig, - "options"); - result = delete_zoneconf( - view, cfg->conf_parser, voptions, - dns_zone_getorigin(zone), NULL, locked); + options = cfg_tuple_get(cfg->vconfig, "options"); } - + result = delete_zoneconf(view, cfg->conf_parser, options, + dns_zone_getorigin(zone), NULL, + locked); if (result != ISC_R_SUCCESS) { TCHECK(putstr(text, "former zone configuration " "not deleted: ")); @@ -14301,6 +14298,9 @@ do_modzone(named_server_t *server, ns_cfgctx_t *cfg, dns_view_t *view, TCHECK(putstr(text, zname)); TCHECK(putstr(text, "' reconfigured.")); } else { + CHECK(cfg_parser_mapadd(cfg->conf_parser, UNCONST(options), + UNCONST(zoneobj), "zone")); + TCHECK(putstr(text, "zone '")); TCHECK(putstr(text, zname)); TCHECK(putstr(text, "' must also be reconfigured in\n")); diff --git a/bin/tests/system/addzone/tests_rndc_modzone_without_add.py b/bin/tests/system/addzone/tests_rndc_modzone_without_add.py index 3658f5f518..b2a7335625 100644 --- a/bin/tests/system/addzone/tests_rndc_modzone_without_add.py +++ b/bin/tests/system/addzone/tests_rndc_modzone_without_add.py @@ -35,3 +35,22 @@ def test_rndc_modzone_without_add(ns3): raise_on_exception=False, ) assert cmd.rc == 0 + + # Confirm that the modzone took effect in 'rndc showzone'. + cmd = ns3.rndc("showzone .", raise_on_exception=False) + assert cmd.rc == 0 + assert 'allow-query { "none"; }' in cmd.out + + # Confirm that 'rndc modzone' still works after the first modzone. + # This was not the case before as the zone config was incorrectly + # removed in-memory after the first modzone. + cmd = ns3.rndc( + 'modzone . {type primary; file "redirect.db"; allow-query {any;};};', + raise_on_exception=False, + ) + assert cmd.rc == 0 + + # Confirm that the second modzone took effect in 'rndc showzone'. + cmd = ns3.rndc("showzone .", raise_on_exception=False) + assert cmd.rc == 0 + assert 'allow-query { "any"; }' in cmd.out