mirror of
https://github.com/isc-projects/bind9.git
synced 2026-03-24 11:25:08 -04:00
01bc805f89
Ensure all shell system tests are executed with the errexit option set. This prevents unchecked return codes from commands in the test from interfering with the tests, since any failures need to be handled explicitly.
88 lines
2.7 KiB
Bash
88 lines
2.7 KiB
Bash
#!/bin/sh
|
|
|
|
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# SPDX-License-Identifier: MPL-2.0
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
#
|
|
# See the COPYRIGHT file distributed with this work for additional
|
|
# information regarding copyright ownership.
|
|
|
|
set -e
|
|
|
|
. ../conf.sh
|
|
|
|
DIGOPTS="+tcp -p ${PORT}"
|
|
|
|
status=0
|
|
echo_i "check that the stub zone has been saved to disk"
|
|
for i in 1 2 3 4 5 6 7 8 9 20
|
|
do
|
|
[ -f ns3/child.example.st ] && break
|
|
sleep 1
|
|
done
|
|
[ -f ns3/child.example.st ] || { status=1; echo_i "failed"; }
|
|
|
|
for pass in 1 2
|
|
do
|
|
|
|
echo_i "trying an axfr that should be denied (NOTAUTH) (pass=$pass)"
|
|
ret=0
|
|
$DIG $DIGOPTS child.example. @10.53.0.3 axfr > dig.out.ns3 || ret=1
|
|
grep "; Transfer failed." dig.out.ns3 > /dev/null || ret=1
|
|
[ $ret = 0 ] || { status=1; echo_i "failed"; }
|
|
|
|
echo_i "look for stub zone data without recursion (should not be found) (pass=$pass)"
|
|
for i in 1 2 3 4 5 6 7 8 9
|
|
do
|
|
ret=0
|
|
$DIG $DIGOPTS +norec data.child.example. \
|
|
@10.53.0.3 txt > dig.out.ns3 || ret=1
|
|
grep "status: NOERROR" dig.out.ns3 > /dev/null || ret=1
|
|
[ $ret = 0 ] && break
|
|
sleep 1
|
|
done
|
|
digcomp knowngood.dig.out.norec dig.out.ns3 || ret=1
|
|
[ $ret = 0 ] || { status=1; echo_i "failed"; }
|
|
|
|
echo_i "look for stub zone data with recursion (should be found) (pass=$pass)"
|
|
ret=0
|
|
$DIG $DIGOPTS +noauth +noadd data.child.example. @10.53.0.3 txt > dig.out.ns3 || ret=1
|
|
digcomp knowngood.dig.out.rec dig.out.ns3 || ret=1
|
|
[ $ret = 0 ] || { status=1; echo_i "failed"; }
|
|
|
|
[ $pass = 1 ] && {
|
|
echo_i "stopping stub server"
|
|
stop_server ns3
|
|
|
|
echo_i "re-starting stub server"
|
|
start_server --noclean --restart --port ${PORT} ns3
|
|
}
|
|
done
|
|
|
|
echo_i "check that glue record is correctly transferred from primary when minimal-responses is on"
|
|
ret=0
|
|
# First ensure that zone data was transfered.
|
|
for i in 1 2 3 4 5 6 7; do
|
|
[ -f ns5/example.db ] && break
|
|
sleep 1
|
|
done
|
|
|
|
if [ -f ns5/example.db ]; then
|
|
# If NS glue wasn't transferred, this query would fail.
|
|
$DIG $DIGOPTS +nodnssec @10.53.0.5 target.example. txt > dig.out.ns5 || ret=1
|
|
grep 'target\.example.*TXT.*"test"' dig.out.ns5 > /dev/null || ret=1
|
|
# Ensure both ipv4 and ipv6 glue records were transferred.
|
|
grep -E 'ns4[[:space:]]+A[[:space:]]+10.53.0.4' ns5/example.db > /dev/null || ret=1
|
|
grep -E 'AAAA[[:space:]]+fd92:7065:b8e:ffff::4' ns5/example.db > /dev/null || ret=1
|
|
[ $ret = 0 ] || { status=1; echo_i "failed"; }
|
|
else
|
|
status=1
|
|
echo_i "failed: stub zone transfer failed ns4(primary) <---> ns5/example.db"
|
|
fi
|
|
|
|
echo_i "exit status: $status"
|
|
[ $status -eq 0 ] || exit 1
|