mirror of
https://github.com/isc-projects/bind9.git
synced 2026-04-27 17:17:22 -04:00
416 lines
11 KiB
C
416 lines
11 KiB
C
/*
|
|
* Copyright (C) 1999 Internet Software Consortium.
|
|
*
|
|
* Permission to use, copy, modify, and distribute this software for any
|
|
* purpose with or without fee is hereby granted, provided that the above
|
|
* copyright notice and this permission notice appear in all copies.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM DISCLAIMS
|
|
* ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
|
|
* OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL INTERNET SOFTWARE
|
|
* CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
|
|
* DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
|
|
* PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
|
|
* ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
|
|
* SOFTWARE.
|
|
*/
|
|
|
|
#include <config.h>
|
|
|
|
#include <isc/assertions.h>
|
|
#include <isc/error.h>
|
|
#include <isc/mem.h>
|
|
#include <isc/result.h>
|
|
|
|
#include <dns/aclconf.h>
|
|
#include <dns/types.h>
|
|
#include <dns/zone.h>
|
|
#include <dns/zoneconf.h>
|
|
|
|
/* XXX copied from zone.c */
|
|
#define MAX_XFER_TIME (2*3600) /* Documented default is 2 hours. */
|
|
|
|
/*
|
|
* Convenience function for configuring a single zone ACL.
|
|
*/
|
|
static isc_result_t
|
|
configure_zone_acl(dns_c_zone_t *czone, dns_c_ctx_t *cctx,
|
|
dns_aclconfctx_t *aclconfctx, dns_zone_t *zone,
|
|
isc_result_t (*getcacl)(dns_c_zone_t *, dns_c_ipmatchlist_t **),
|
|
void (*setzacl)(dns_zone_t *, dns_acl_t *),
|
|
void (*clearzacl)(dns_zone_t *))
|
|
{
|
|
isc_result_t result;
|
|
dns_c_ipmatchlist_t *cacl;
|
|
dns_acl_t *dacl = NULL;
|
|
result = (*getcacl)(czone, &cacl);
|
|
if (result == ISC_R_SUCCESS) {
|
|
result = dns_acl_fromconfig(cacl, cctx, aclconfctx,
|
|
dns_zone_getmctx(zone), &dacl);
|
|
dns_c_ipmatchlist_detach(&cacl);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
(*setzacl)(zone, dacl);
|
|
dns_acl_detach(&dacl);
|
|
return (ISC_R_SUCCESS);
|
|
} else if (result == ISC_R_NOTFOUND) {
|
|
(*clearzacl)(zone);
|
|
return (ISC_R_SUCCESS);
|
|
} else {
|
|
return (result);
|
|
}
|
|
}
|
|
|
|
isc_result_t
|
|
dns_zone_configure(isc_log_t *lctx, dns_c_ctx_t *ctx, dns_aclconfctx_t *ac,
|
|
dns_c_zone_t *czone, dns_zone_t *zone)
|
|
{
|
|
isc_result_t result;
|
|
isc_boolean_t boolean;
|
|
const char *filename = NULL;
|
|
dns_c_severity_t severity;
|
|
dns_c_iplist_t *iplist = NULL;
|
|
dns_c_pubkey_t *pubkey = NULL;
|
|
dns_c_pklist_t *pubkeylist = NULL;
|
|
isc_uint32_t i;
|
|
isc_sockaddr_t sockaddr;
|
|
isc_int32_t maxxfr;
|
|
isc_int32_t idle;
|
|
in_port_t port;
|
|
const char *origin;
|
|
isc_sockaddr_t sockaddr_any;
|
|
|
|
ctx = ctx; /* unused */
|
|
lctx = lctx; /* XXX unused */
|
|
|
|
isc_sockaddr_fromin6(&sockaddr_any, &in6addr_any, 0);
|
|
dns_zone_setclass(zone, czone->zclass);
|
|
|
|
origin = NULL;
|
|
result = dns_c_zone_getname(czone, &origin);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
/* XXX casting away const */
|
|
result = dns_zone_setorigin(zone, (char *) origin);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
|
|
/* XXX needs to be an zone option */
|
|
result = dns_zone_setdbtype(zone, "rbt");
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
|
|
switch (czone->ztype) {
|
|
case dns_c_zone_master:
|
|
dns_zone_settype(zone, dns_zone_master);
|
|
result = dns_c_zone_getfile(czone, &filename);
|
|
if (result != ISC_R_SUCCESS)
|
|
return (result);
|
|
|
|
result = dns_zone_setdatabase(zone, filename);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
|
|
result = dns_c_zone_getchecknames(czone, &severity);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setchecknames(zone, severity);
|
|
else
|
|
dns_zone_setchecknames(zone, dns_c_severity_fail);
|
|
|
|
result = configure_zone_acl(czone, ctx, ac, zone,
|
|
dns_c_zone_getallowupd,
|
|
dns_zone_setupdateacl,
|
|
dns_zone_clearupdateacl);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
|
|
result = configure_zone_acl(czone, ctx, ac, zone,
|
|
dns_c_zone_getallowquery,
|
|
dns_zone_setqueryacl,
|
|
dns_zone_clearqueryacl);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
|
|
result = configure_zone_acl(czone, ctx, ac, zone,
|
|
dns_c_zone_getallowquery,
|
|
dns_zone_setqueryacl,
|
|
dns_zone_clearqueryacl);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
|
|
result = configure_zone_acl(czone, ctx, ac, zone,
|
|
dns_c_zone_getallowtransfer,
|
|
dns_zone_setxfracl,
|
|
dns_zone_clearxfracl);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
|
|
result = dns_c_zone_getdialup(czone, &boolean);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setoption(zone, DNS_ZONE_O_DIALUP, boolean);
|
|
else
|
|
dns_zone_clearoption(zone, DNS_ZONE_O_DIALUP);
|
|
|
|
result = dns_c_zone_getnotify(czone, &boolean);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setoption(zone, DNS_ZONE_O_NOTIFY, boolean);
|
|
else
|
|
dns_zone_clearoption(zone, DNS_ZONE_O_NOTIFY);
|
|
|
|
result = dns_c_zone_getalsonotify(czone, &iplist);
|
|
if (result == ISC_R_SUCCESS) {
|
|
for (i = 0; i < iplist->nextidx; i++) {
|
|
result = dns_zone_addnotify(zone,
|
|
&iplist->ips[i]);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
}
|
|
} else
|
|
dns_zone_clearnotify(zone);
|
|
|
|
#if 1 /* XXX brister */
|
|
|
|
result = dns_c_zone_getpubkeylist(czone, &pubkeylist);
|
|
if (result == ISC_R_SUCCESS) {
|
|
pubkey = ISC_LIST_HEAD(pubkeylist->keylist);
|
|
}
|
|
dns_zone_setpubkey(zone, pubkey);
|
|
|
|
#else
|
|
|
|
result = dns_c_zone_getpubkey(czone, &pubkey);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setpubkey(zone, pubkey);
|
|
else
|
|
dns_zone_setpubkey(zone, NULL);
|
|
|
|
#endif
|
|
result = dns_c_zone_getmaxtranstimeout(czone, &maxxfr);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setmaxxfrout(zone, maxxfr);
|
|
else
|
|
dns_zone_setmaxxfrout(zone, MAX_XFER_TIME);
|
|
|
|
result = dns_c_zone_getmaxtransidleout(czone, &idle);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setidleout(zone, idle);
|
|
else
|
|
dns_zone_setidleout(zone, 0);
|
|
|
|
break;
|
|
|
|
|
|
case dns_c_zone_forward:
|
|
#ifdef notyet
|
|
/*
|
|
* forward zones are still in a state of flux
|
|
*/
|
|
czone->u.fzone.check_names; /* XXX unused in BIND 8 */
|
|
czone->u.fzone.forward; /* XXX*/
|
|
czone->u.fzone.forwarders; /* XXX*/
|
|
#endif
|
|
break;
|
|
|
|
case dns_c_zone_slave:
|
|
dns_zone_settype(zone, dns_zone_slave);
|
|
result = dns_c_zone_getfile(czone, &filename);
|
|
if (result != ISC_R_SUCCESS)
|
|
return (result);
|
|
result = dns_zone_setdatabase(zone, filename);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
|
|
result = dns_c_zone_getchecknames(czone, &severity);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setchecknames(zone, severity);
|
|
else
|
|
dns_zone_setchecknames(zone, dns_c_severity_warn);
|
|
|
|
result = configure_zone_acl(czone, ctx, ac, zone,
|
|
dns_c_zone_getallowquery,
|
|
dns_zone_setqueryacl,
|
|
dns_zone_clearqueryacl);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
|
|
#if 1 /* XXX brister */
|
|
|
|
result = dns_c_zone_getpubkeylist(czone, &pubkeylist);
|
|
if (result == ISC_R_SUCCESS) {
|
|
pubkey = ISC_LIST_HEAD(pubkeylist->keylist);
|
|
}
|
|
dns_zone_setpubkey(zone, pubkey);
|
|
|
|
#else
|
|
|
|
result = dns_c_zone_getpubkey(czone, &pubkey);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setpubkey(zone, pubkey);
|
|
else
|
|
dns_zone_setpubkey(zone, NULL);
|
|
|
|
#endif
|
|
|
|
result = dns_c_zone_getmasterport(czone, &port);
|
|
if (result != ISC_R_SUCCESS)
|
|
port = 53;
|
|
dns_zone_setmasterport(zone, port);
|
|
|
|
result = dns_c_zone_getmasterips(czone, &iplist);
|
|
if (result == ISC_R_SUCCESS) {
|
|
for (i = 0; i < iplist->nextidx; i++) {
|
|
result = dns_zone_addmaster(zone,
|
|
&iplist->ips[i]);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
}
|
|
} else
|
|
dns_zone_clearmasters(zone);
|
|
|
|
result = dns_c_zone_getmaxtranstimein(czone, &maxxfr);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setmaxxfrin(zone, maxxfr);
|
|
else
|
|
dns_zone_setmaxxfrin(zone, MAX_XFER_TIME);
|
|
|
|
result = dns_c_zone_gettransfersource(czone, &sockaddr);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setxfrsource(zone, &sockaddr);
|
|
else
|
|
dns_zone_setxfrsource(zone, &sockaddr_any);
|
|
|
|
result = dns_c_zone_getmaxtransidlein(czone, &idle);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setidlein(zone, idle);
|
|
else
|
|
dns_zone_setidlein(zone, 0);
|
|
|
|
result = dns_c_zone_getmaxtranstimeout(czone, &maxxfr);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setmaxxfrout(zone, maxxfr);
|
|
else
|
|
dns_zone_setmaxxfrout(zone, MAX_XFER_TIME);
|
|
|
|
result = dns_c_zone_getmaxtransidleout(czone, &idle);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setidleout(zone, idle);
|
|
else
|
|
dns_zone_setidleout(zone, 0);
|
|
|
|
break;
|
|
|
|
case dns_c_zone_stub:
|
|
dns_zone_settype(zone, dns_zone_stub);
|
|
result = dns_c_zone_getfile(czone, &filename);
|
|
if (result != ISC_R_SUCCESS)
|
|
return (result);
|
|
result = dns_zone_setdatabase(zone, filename);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
|
|
result = dns_c_zone_getchecknames(czone, &severity);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setchecknames(zone, severity);
|
|
else
|
|
dns_zone_setchecknames(zone, dns_c_severity_warn);
|
|
|
|
result = configure_zone_acl(czone, ctx, ac, zone,
|
|
dns_c_zone_getallowquery,
|
|
dns_zone_setqueryacl,
|
|
dns_zone_clearqueryacl);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
|
|
#if 1 /* XXX brister */
|
|
|
|
result = dns_c_zone_getpubkeylist(czone, &pubkeylist);
|
|
if (result == ISC_R_SUCCESS) {
|
|
pubkey = ISC_LIST_HEAD(pubkeylist->keylist);
|
|
}
|
|
dns_zone_setpubkey(zone, pubkey);
|
|
|
|
#else
|
|
|
|
result = dns_c_zone_getpubkey(czone, &pubkey);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setpubkey(zone, pubkey);
|
|
else
|
|
dns_zone_setpubkey(zone, NULL);
|
|
|
|
#endif
|
|
|
|
result = dns_c_zone_getmasterport(czone, &port);
|
|
if (result != ISC_R_SUCCESS)
|
|
port = 53;
|
|
dns_zone_setmasterport(zone, port);
|
|
|
|
result = dns_c_zone_getmasterips(czone, &iplist);
|
|
if (result == ISC_R_SUCCESS) {
|
|
for (i = 0; i < iplist->nextidx; i++) {
|
|
result = dns_zone_addmaster(zone,
|
|
&iplist->ips[i]);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
}
|
|
} else
|
|
dns_zone_clearmasters(zone);
|
|
|
|
result = dns_c_zone_getmaxtranstimein(czone, &maxxfr);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setmaxxfrin(zone, maxxfr);
|
|
else
|
|
dns_zone_setmaxxfrin(zone, MAX_XFER_TIME);
|
|
|
|
result = dns_c_zone_gettransfersource(czone, &sockaddr);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setxfrsource(zone, &sockaddr);
|
|
else
|
|
dns_zone_setxfrsource(zone, &sockaddr_any);
|
|
|
|
result = dns_c_zone_getmaxtransidlein(czone, &idle);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setidlein(zone, idle);
|
|
else
|
|
dns_zone_setidlein(zone, 0);
|
|
|
|
break;
|
|
|
|
case dns_c_zone_hint:
|
|
dns_zone_settype(zone, dns_zone_hint);
|
|
result = dns_c_zone_getfile(czone, &filename);
|
|
if (result != ISC_R_SUCCESS)
|
|
return (result);
|
|
result = dns_zone_setdatabase(zone, filename);
|
|
if (result != DNS_R_SUCCESS)
|
|
return (result);
|
|
|
|
result = dns_c_zone_getchecknames(czone, &severity);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setchecknames(zone, severity);
|
|
else
|
|
dns_zone_setchecknames(zone, dns_c_severity_fail);
|
|
|
|
#if 1 /* XXX brister */
|
|
|
|
result = dns_c_zone_getpubkeylist(czone, &pubkeylist);
|
|
if (result == ISC_R_SUCCESS) {
|
|
pubkey = ISC_LIST_HEAD(pubkeylist->keylist);
|
|
}
|
|
dns_zone_setpubkey(zone, pubkey);
|
|
|
|
#else
|
|
|
|
result = dns_c_zone_getpubkey(czone, &pubkey);
|
|
if (result == ISC_R_SUCCESS)
|
|
dns_zone_setpubkey(zone, pubkey);
|
|
else
|
|
dns_zone_setpubkey(zone, NULL);
|
|
|
|
#endif
|
|
break;
|
|
|
|
}
|
|
|
|
return (DNS_R_SUCCESS);
|
|
}
|
|
|