Commit graph

5774 commits

Author SHA1 Message Date
Andreas Gustafsson
08133a2dbe This is "the glue fix". It changes the additional data lookup
algorithm to more closely follow RFC1035, so that root servers will
provide a more complete set of name server glue addresses in ccTLD
referral responses.

For non-referral responses, the server no longer uses glue as
additional data.

For referral responses, the servers now looks for glue A/AAAA/A6 RRs
in the zone where the NS RRs reside, even in the case where this is
different from the zone where the A/AAAA/A6 RRs would have resided had
they been authoritative data.

A6 chains included as additional info may not yet fully follow these
rules.
2000-07-06 01:00:46 +00:00
Michael Sawyer
c3c6770e53 Add nsupdate/ixfr test suite 2000-07-06 00:54:03 +00:00
Brian Wellington
61e7208704 memory leak 2000-07-05 23:42:08 +00:00
Michael Sawyer
38cf6e52ce Lots of style changes.
Clean up what appears to be a varient of the race condition, this one set
off in nslookup.
2000-07-05 23:28:32 +00:00
Brian Wellington
5ddea03e3e Log a message in addition to setting a failure code when kill -TERM doesn't
kill a server.
2000-07-05 23:28:07 +00:00
Brian Wellington
54b9dc7739 Add support for setting the server and/or zone 2000-07-05 23:24:18 +00:00
Andreas Gustafsson
4defd73fca This is "the glue fix". It changes the additional data lookup
algorithm to more closely follow RFC1035, so that root servers will
provide a more complete set of name server glue addresses in ccTLD
referral responses.

For non-referral responses, the server no longer uses glue as
additional data.

For referral responses, the servers now looks for glue A/AAAA/A6 RRs
in the zone where the NS RRs reside, even in the case where this is
different from the zone where the A/AAAA/A6 RRs would have resided had
they been authoritative data.

A6 chains included as additional info may not yet fully follow these
rules.
2000-07-05 23:10:06 +00:00
Andreas Gustafsson
66465da5d1 work around NetBSD /bin/sh bug, with the side effect of making the
test script shorter
2000-07-05 22:13:56 +00:00
Andreas Gustafsson
c6ab6ca3fd moved linux_keepcaps() call and check for Linux nonroot caps back
to earlier locations; use a separate boolean flag for keeping track of whether a
UID switch was requested rather than overloading the UID value zero
2000-07-05 22:03:42 +00:00
Brian Wellington
58208669bc Should sleep for a while between kill -TERM and kill -KILL 2000-07-05 20:56:11 +00:00
Andreas Gustafsson
b7b5dd0d10 treat all responses to AXFR requests as AXFR responses 2000-07-05 20:28:34 +00:00
Michael Graff
8681403c16 Shut up a gcc warning 2000-07-05 20:26:46 +00:00
Andreas Gustafsson
aade2614cb work around NetBSD /bin/sh bug, with the side effect of making the
test script shorter
2000-07-05 19:42:34 +00:00
Andreas Gustafsson
24139527f3 lots of style changes; no functional change 2000-07-05 19:31:26 +00:00
Brian Wellington
5618f70327 Modify the tests so that if any server doesn't die with a TERM signal,
it's an error.
2000-07-05 18:49:06 +00:00
Brian Wellington
bb915db969 Check to see that kill actually kills the server. If not, it's an error,
so print a message, increment status, and kill -9 the server.
2000-07-05 18:16:39 +00:00
Mark Andrews
29e59609b9 Add "SOA not at top of zone" test. 2000-07-05 00:35:36 +00:00
Mark Andrews
8c1aa8573d 308. [bug] Treat a SOA record not at top of zone as an error
when loading a zone. (RT #154)
2000-07-04 04:28:44 +00:00
Mark Andrews
3cf456d58e zone_get_from_db() now does as much as is possible. 2000-07-04 04:21:38 +00:00
Mark Andrews
84cb41f729 new error code DNS_R_NOTZONETOP 2000-07-04 03:59:54 +00:00
Brian Wellington
b2dcacc728 Fix the hang on ^C problem by not calling isc_app_start(), since
isc_app_run() wasn't being called anyway.  Also some more cosmetic
cleanup.
2000-07-04 02:33:29 +00:00
Mark Andrews
84b8fdfeac Add not soa not top of zone test 2000-07-04 02:28:23 +00:00
David Lawrence
24675e8e13 In dns_dispatch_createtcp(), REQUIRE() that attributes not include
DNS_DISPATCHATTR_UDP, and document that requirement as well as the
existing requirement for needing DNS_DISPATCHATTR_TCP.

No need to pull up.
2000-07-04 01:48:13 +00:00
Andreas Gustafsson
a074e41b97 style and new comments; no functional change 2000-07-04 01:33:47 +00:00
Brian Wellington
9e37579870 Check that zone->view is not NULL before checking that zone->view->adb is not
NULL.  It appears that zone maintenance can occur when the zone is shutting
down and the view pointer is NULL.  We don't want to do zone maintenance in
this case.
2000-07-04 01:32:40 +00:00
David Lawrence
c7c2522a32 query-replace-o in error message; no need to pull up since no code in 9.0.0
will use the function in which the error appears
2000-07-04 01:29:48 +00:00
David Lawrence
a53efa1718 nrdc->rndc typo, uses TCP not UDP 2000-07-04 01:25:01 +00:00
David Lawrence
c43deb8aac typo 2000-07-04 01:24:06 +00:00
David Lawrence
afbf0f0d77 Have Emacs automatically use shell mode to edit configure.in. 2000-07-04 01:20:53 +00:00
David Lawrence
96ab25294b 307. [bug] When canceling a query, the resolver didn't check for
isc_socket_sendto() calls that did not yet have their
			completion events posted, so it could (rarely) end up
			destroying the query context and then want to use
			it again when the send event posted, triggering an
			assertion as it tried to cancel an already-canceled
			query.  (RT #77)

... so now the resolver counts the number of outstanding isc_socket_sendto()s
and only destroys the query context when there are no more.
2000-07-04 01:19:20 +00:00
Brian Wellington
9a68d61341 Implement -k keyfile and fix -y keyname:secret 2000-07-03 23:42:48 +00:00
Brian Wellington
e68de4a7db 306. [bug] Reading HMAC-MD5 private key files didn't work. 2000-07-03 23:27:45 +00:00
Andreas Gustafsson
b3e4ce3059 alternative fix to 303. [RT #157] 2000-07-03 22:42:36 +00:00
Andreas Gustafsson
c4252cd10b style 2000-07-03 22:14:43 +00:00
Andreas Gustafsson
5aa96829fd style 2000-07-03 22:04:47 +00:00
Brian Wellington
7408b050c0 Don't use the search list by default. This makes dig 9 compatible with
dig 8 (although not the dig 8 manpage).
2000-07-03 21:52:13 +00:00
Andreas Gustafsson
d8560fb7ff [RT #155]
305. [bug]             When reloading the server with a config file
                        containing a syntax error, it could catch an
                        assertion failure trying to perform zone
                        maintenance on tentatively created zones whose
                        views were never fully configured and lacked
                        an address database.
2000-07-03 20:21:53 +00:00
Brian Wellington
e2894b0e50 304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers
are listed in resolv.conf, silently ignore them
                        instead of returning failure.
2000-07-03 20:13:12 +00:00
Brian Wellington
cbc6e83597 Use lwres_net_ntop now that including both lwres/net.h and isc/net.h is
possible
2000-07-03 20:08:13 +00:00
Brian Wellington
1e105376dd linux_keepcaps() was called without checking the various defines that
surrounded the function definition.
2000-07-03 20:00:44 +00:00
Brian Wellington
79e873be59 The reordering of code in the last change broke linux, since the determination
of whether we could call setuid() was moved after the check.
2000-07-03 18:28:38 +00:00
Andreas Gustafsson
855bda3de3 new joint ISC/BSDI copyright message as requested by
Paul Borman <prb@bsdi.com>
2000-07-03 17:44:22 +00:00
Andreas Gustafsson
6f21eab314 util/conf.sh no longer exists 2000-07-03 17:25:30 +00:00
Mark Andrews
845e0b5f96 303. [bug] add additional sanity checks to differentiate a AXFR
response vs a IXFR response. (RT #157)
2000-07-03 13:33:05 +00:00
Mark Andrews
b6747cf19d 302. [bug] MXNAME should be large enough to hold any legal domain
name in presentation format + terminating NULL.
2000-07-03 05:26:50 +00:00
Mark Andrews
1318ddb52d 301. [bug] uninitalised pointer host:printmessage(). (RT #159) 2000-07-03 05:10:14 +00:00
Mark Andrews
989000eadd Add $include tests. 2000-07-03 03:08:22 +00:00
David Lawrence
de8e189332 300. [bug] Using both <isc/net.h> and <lwres/net.h> didn't work
on platforms lacking IPv6 because each included their
			own ipv6 header file for the missing definitions.  Now
			each library's ipv6.h defines the wrapper symbol of
			the other (ISC_IPV6_H and LWRES_IPV6_H).
2000-07-01 01:41:54 +00:00
David Lawrence
202991557a 299. [cleanup] Get the user and group information before changing the
root directory, so the administrator does not need to
			keep a copy of the user and group databases in the
			chroot'ed environment.  Suggested by Hakan Olsson.
2000-07-01 00:48:06 +00:00
Brian Wellington
6dd953f666 including both <lwres/lwres.h> and <lwres/net.h> doesn't work, but
lwres_net_ntop only works when <lwres/net.h> is included.  For now,
don't include <lwres/net.h> and call inet_pton instead.
2000-07-01 00:22:00 +00:00