bin/named/zoneconf.c

	zoneconf.c revision 2bd70b68227f7141ba6b4d813cf84f94e68c1809
/*
 * Copyright (C) 1999, 2000  Internet Software Consortium.
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM
 * DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL
 * INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT,
 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
 * FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
 * NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION
 * WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

/* $Id: zoneconf.c,v 1.71 2000/11/18 02:54:22 gson Exp $ */

#include <config.h>

#include <isc/mem.h>
#include <isc/string.h>     /* Required for HP/UX (and others?) */
#include <isc/util.h>

#include <dns/acl.h>
#include <dns/ssu.h>
#include <dns/zone.h>
#include <dns/zoneconf.h>

/*
 * These are BIND9 server defaults, not necessarily identical to the
 * library defaults defined in zone.c.
 */
#define MAX_XFER_TIME (2*3600)  /* Documented default is 2 hours. */
#define DNS_DEFAULT_IDLEIN 3600     /* 1 hour */
#define DNS_DEFAULT_IDLEOUT 3600    /* 1 hour */

#define RETERR(x) do { \
    isc_result_t _r = (x); \
    if (_r != ISC_R_SUCCESS) \
        return (_r); \
    } while (0)

/*
 * Convenience function for configuring a single zone ACL.
 */
static isc_result_t
configure_zone_acl(dns_c_zone_t *czone, dns_c_ctx_t *cctx, dns_c_view_t *cview,
           dns_aclconfctx_t *aclconfctx, dns_zone_t *zone,
           isc_result_t (*getcacl)(dns_c_zone_t *,
                       dns_c_ipmatchlist_t **),
           isc_result_t (*getviewcacl)(dns_c_view_t *
                           , dns_c_ipmatchlist_t **),
           isc_result_t (*getglobalcacl)(dns_c_ctx_t *,
                         dns_c_ipmatchlist_t **),
           void (*setzacl)(dns_zone_t *, dns_acl_t *),
           void (*clearzacl)(dns_zone_t *))
{
    isc_result_t result;
    dns_c_ipmatchlist_t *cacl;
    dns_acl_t *dacl = NULL;
    result = (*getcacl)(czone, &cacl);
    if (result == ISC_R_NOTFOUND && getviewcacl != NULL && cview != NULL) {
        result = (*getviewcacl)(cview, &cacl);
    }
    if (result == ISC_R_NOTFOUND && getglobalcacl != NULL) {
        result = (*getglobalcacl)(cctx, &cacl);
    }
    if (result == ISC_R_SUCCESS) {
        result = dns_acl_fromconfig(cacl, cctx, aclconfctx,
                       dns_zone_getmctx(zone), &dacl);
        dns_c_ipmatchlist_detach(&cacl);
        if (result != ISC_R_SUCCESS)
            return (result);
        (*setzacl)(zone, dacl);
        dns_acl_detach(&dacl);
        return (ISC_R_SUCCESS);
    } else if (result == ISC_R_NOTFOUND) {
        (*clearzacl)(zone);
        return (ISC_R_SUCCESS);
    } else {
        return (result);
    }
}

/*
 * Conver a config file zone type into a server zone type.
 */
static dns_zonetype_t
dns_zonetype_fromconf(dns_c_zonetype_t cztype) {
    switch (cztype) {
    case dns_c_zone_master:
        return dns_zone_master;
    case dns_c_zone_slave:
        return dns_zone_slave;
    case dns_c_zone_stub:
        return dns_zone_stub;
    default:
        /*
         * Hint and forward zones are not really zones;
         * they should never get this far.
         */
        INSIST(0);
        return (dns_zone_none); /*NOTREACHED*/
    }
}

/*
 * Helper function for strtoargv().  Pardon the gratuitous recursion.
 */
static isc_result_t
strtoargvsub(isc_mem_t *mctx, char *s, unsigned int *argcp,
         char ***argvp, unsigned int n)
{
    isc_result_t result;

    /* Discard leading whitespace. */
    while (*s == ' ' || *s == '\t')
        s++;

    if (*s == '\0') {
        /* We have reached the end of the string. */
        *argcp = n;
        *argvp = isc_mem_get(mctx, n * sizeof(char *));
        if (*argvp == NULL)
            return (ISC_R_NOMEMORY);
    } else {
        char *p = s;
        while (*p != ' ' && *p != '\t' && *p != '\0')
            p++;
        if (*p != '\0')
            *p++ = '\0';

        result = strtoargvsub(mctx, p, argcp, argvp, n + 1);
        if (result != ISC_R_SUCCESS)
            return (result);
        (*argvp)[n] = s;
    }
    return (ISC_R_SUCCESS);
}

/*
 * Tokenize the string "s" into whitespace-separated words,
 * return the number of words in '*argcp' and an array
 * of pointers to the words in '*argvp'.  The caller
 * must free the array using isc_mem_put().  The string
 * is modified in-place.
 */
static isc_result_t
strtoargv(isc_mem_t *mctx, char *s, unsigned int *argcp, char ***argvp) {
    return (strtoargvsub(mctx, s, argcp, argvp, 0));
}

isc_result_t
dns_zone_configure(dns_c_ctx_t *cctx, dns_c_view_t *cview,
           dns_c_zone_t *czone, dns_aclconfctx_t *ac,
           dns_zone_t *zone)
{
    isc_result_t result;
    const char *filename = NULL;
    dns_notifytype_t notifytype;
#ifdef notyet
    dns_c_severity_t severity;
#endif
    dns_c_iplist_t *iplist;
    isc_sockaddr_t sockaddr;
    isc_uint32_t uintval;
    isc_sockaddr_t sockaddr_any4, sockaddr_any6;
    dns_ssutable_t *ssutable = NULL;
    char *cpval;
    unsigned int dbargc;
    char **dbargv;
    static char default_dbtype[] = "rbt";
    isc_mem_t *mctx = dns_zone_getmctx(zone);
    dns_dialuptype_t dialup;
    isc_boolean_t statistics;

    isc_sockaddr_any(&sockaddr_any4);
    isc_sockaddr_any6(&sockaddr_any6);

    /*
     * Configure values common to all zone types.
     */

    dns_zone_setclass(zone, czone->zclass);

    dns_zone_settype(zone, dns_zonetype_fromconf(czone->ztype));

    cpval = NULL;
    result = dns_c_zone_getdatabase(czone, &cpval);
#ifdef notyet
    if (result != ISC_R_SUCCESS && cview != NULL)
        result = dns_c_view_getdatabase(cview, &cpval);
    if (result != ISC_R_SUCCESS)
        result = dns_c_ctx_getdatabase(cview, &cpval);
#endif
    if (result != ISC_R_SUCCESS)
        cpval = default_dbtype;
    RETERR(strtoargv(mctx, cpval, &dbargc, &dbargv));
    /*
     * ANSI C is strange here.  There is no logical reason why (char **)
     * cannot be promoted automatically to (const char * const *) by the
     * compiler w/o generating a warning.
     */
    RETERR(dns_zone_setdbtype(zone, dbargc, (const char * const *)dbargv));
    isc_mem_put(mctx, dbargv, dbargc * sizeof(*dbargv));

    result = dns_c_zone_getfile(czone, &filename);
    if (result != ISC_R_SUCCESS)
        filename = NULL;
    RETERR(dns_zone_setfile(zone, filename));

#ifdef notyet
    result = dns_c_zone_getchecknames(czone, &severity);
    if (result == ISC_R_SUCCESS)
        dns_zone_setchecknames(zone, severity);
    else
        dns_zone_setchecknames(zone, dns_c_severity_warn);
#endif

#ifndef NOMINUM_PUBLIC
    if (czone->ztype == dns_c_zone_slave)
        RETERR(configure_zone_acl(czone, cctx, cview, ac, zone,
                      dns_c_zone_getallownotify,
                      dns_c_view_getallownotify,
                      dns_c_ctx_getallownotify,
                      dns_zone_setnotifyacl,
                      dns_zone_clearnotifyacl));
#endif /* NOMINUM_PUBLIC */
    /*
     * XXXAG This probably does not make sense for stubs.
     */
    RETERR(configure_zone_acl(czone, cctx, cview, ac, zone,
                  dns_c_zone_getallowquery,
                  dns_c_view_getallowquery,
                  dns_c_ctx_getallowquery,
                  dns_zone_setqueryacl,
                  dns_zone_clearqueryacl));

    result = dns_c_zone_getdialup(czone, &dialup);
    if (result != ISC_R_SUCCESS && cview != NULL)
        result = dns_c_view_getdialup(cview, &dialup);
    if (result != ISC_R_SUCCESS)
        result = dns_c_ctx_getdialup(cctx, &dialup);
    if (result != ISC_R_SUCCESS)
        dialup = dns_dialuptype_no;
    dns_zone_setdialup(zone, dialup);

    result = dns_c_zone_getstatistics(czone, &statistics);
    if (result != ISC_R_SUCCESS && cview != NULL)
        result = dns_c_view_getstatistics(cview, &statistics);
    if (result != ISC_R_SUCCESS)
        result = dns_c_ctx_getstatistics(cctx, &statistics);
    if (result != ISC_R_SUCCESS)
        statistics = ISC_FALSE;
    if (statistics)
        dns_zone_startcounting(zone);
    else
        dns_zone_stopcounting(zone);

#ifndef NOMINUM_PUBLIC
    if (czone->ztype != dns_c_zone_stub) {
        result = dns_c_zone_getmaxnames(czone, &uintval);
        if (result != ISC_R_SUCCESS && cview != NULL)
            result = dns_c_view_getmaxnames(cview, &uintval);
        if (result != ISC_R_SUCCESS)
            result = dns_c_ctx_getmaxnames(cctx, &uintval);
        if (result != ISC_R_SUCCESS)
            uintval = 0;
        dns_zone_setmaxnames(zone, uintval);
    }

    if (czone->ztype == dns_c_zone_slave) {
        isc_boolean_t boolean;

        result = dns_c_zone_getnotifyforward(czone, &boolean);
        if (result != ISC_R_SUCCESS && cview != NULL)
            result = dns_c_view_getnotifyforward(cview, &boolean);
        if (result != ISC_R_SUCCESS)
            result = dns_c_ctx_getnotifyforward(cctx, &boolean);
        if (result != ISC_R_SUCCESS)
            boolean = ISC_FALSE;
        dns_zone_setoption(zone, DNS_ZONEOPT_NOTIFYFORWARD, boolean);
    }
#endif /* NOMINUM_PUBLIC */

    /*
     * Configure master functionality.  This applies
     * to primary masters (type "master") and slaves
     * acting as masters (type "slave"), but not to stubs.
     */
    if (czone->ztype != dns_c_zone_stub) {
        result = dns_c_zone_getnotify(czone, &notifytype);
        if (result != ISC_R_SUCCESS && cview != NULL)
            result = dns_c_view_getnotify(cview, &notifytype);
        if (result != ISC_R_SUCCESS)
            result = dns_c_ctx_getnotify(cctx, &notifytype);
        if (result != ISC_R_SUCCESS)
            notifytype = dns_notifytype_yes;
        dns_zone_setnotifytype(zone, notifytype);

        iplist = NULL;
        result = dns_c_zone_getalsonotify(czone, &iplist);
        if (result != ISC_R_SUCCESS && cview != NULL)
            result = dns_c_view_getalsonotify(cview, &iplist);
        if (result != ISC_R_SUCCESS)
            result = dns_c_ctx_getalsonotify(cctx, &iplist);
        if (result == ISC_R_SUCCESS) {
            result = dns_zone_setalsonotify(zone, iplist->ips,
                                iplist->nextidx);
            dns_c_iplist_detach(&iplist);
            if (result != ISC_R_SUCCESS)
                return (result);

        } else
            RETERR(dns_zone_setalsonotify(zone, NULL, 0));

        RETERR(configure_zone_acl(czone, cctx, cview, ac, zone,
                      dns_c_zone_getallowtransfer,
                      dns_c_view_gettransferacl,
                      dns_c_ctx_getallowtransfer,
                      dns_zone_setxfracl,
                      dns_zone_clearxfracl));

        result = dns_c_zone_getmaxtranstimeout(czone, &uintval);
        if (result != ISC_R_SUCCESS && cview != NULL)
            result = dns_c_view_getmaxtransfertimeout(cview,
                                  &uintval);
        if (result != ISC_R_SUCCESS)
            result = dns_c_ctx_getmaxtransfertimeout(cctx,
                                 &uintval);
        if (result != ISC_R_SUCCESS)
            uintval = MAX_XFER_TIME;
        dns_zone_setmaxxfrout(zone, uintval);

        result = dns_c_zone_getmaxtransidleout(czone, &uintval);
        if (result != ISC_R_SUCCESS && cview != NULL)
            result = dns_c_view_getmaxtransferidleout(cview,
                                  &uintval);
        if (result != ISC_R_SUCCESS)
            result = dns_c_ctx_getmaxtransferidleout(cctx,
                                 &uintval);
        if (result != ISC_R_SUCCESS)
            uintval = DNS_DEFAULT_IDLEOUT;
        dns_zone_setidleout(zone, uintval);
    }

    /*
     * Configure update-related options.  These apply to
     * primary masters only.
     */
    if (czone->ztype == dns_c_zone_master) {
        RETERR(configure_zone_acl(czone, cctx, NULL, ac, zone,
                      dns_c_zone_getallowupd,
                      NULL, NULL,
                      dns_zone_setupdateacl,
                      dns_zone_clearupdateacl));

        result = dns_c_zone_getssuauth(czone, &ssutable);
        if (result == ISC_R_SUCCESS)
            dns_zone_setssutable(zone, ssutable);

        result = dns_c_zone_getsigvalidityinterval(czone, &uintval);
        if (result != ISC_R_SUCCESS && cview != NULL)
            result = dns_c_view_getsigvalidityinterval(cview,
                                  &uintval);
        if (result != ISC_R_SUCCESS)
            result = dns_c_ctx_getsigvalidityinterval(cctx,
                                 &uintval);
        if (result != ISC_R_SUCCESS)
            uintval = 30 * 24 * 3600;
        dns_zone_setsigvalidityinterval(zone, uintval);
    } else if (czone->ztype == dns_c_zone_slave) {
        RETERR(configure_zone_acl(czone, cctx, NULL, ac, zone,
                      dns_c_zone_getallowupdateforwarding,
                      dns_c_view_getallowupdateforwarding,
                      dns_c_ctx_getallowupdateforwarding,
                      dns_zone_setforwardacl,
                      dns_zone_clearforwardacl));
    }

    result = dns_c_zone_gettransfersource(czone, &sockaddr);
    if (result != ISC_R_SUCCESS && cview != NULL)
        result = dns_c_view_gettransfersource(cview, &sockaddr);
    if (result != ISC_R_SUCCESS)
        result = dns_c_ctx_gettransfersource(cctx, &sockaddr);
    if (result != ISC_R_SUCCESS)
        sockaddr = sockaddr_any4;
    dns_zone_setxfrsource4(zone, &sockaddr);

    result = dns_c_zone_gettransfersourcev6(czone, &sockaddr);
    if (result != ISC_R_SUCCESS && cview != NULL)
        result = dns_c_view_gettransfersourcev6(cview, &sockaddr);
    if (result != ISC_R_SUCCESS)
        result = dns_c_ctx_gettransfersourcev6(cctx, &sockaddr);
    if (result != ISC_R_SUCCESS)
        sockaddr = sockaddr_any6;
    dns_zone_setxfrsource6(zone, &sockaddr);

    /*
     * Configure slave functionality.
     */
    switch (czone->ztype) {
    case dns_c_zone_slave:
    case dns_c_zone_stub:
        iplist = NULL;
        result = dns_c_zone_getmasterips(czone, &iplist);
        if (result == ISC_R_SUCCESS)
#ifndef NOMINUM_PUBLIC
            result = dns_zone_setmasterswithkeys(zone,
                                 iplist->ips,
                                 iplist->keys,
                                 iplist->nextidx);
#else /* NOMINUM_PUBLIC */
            result = dns_zone_setmasters(zone, iplist->ips,
                             iplist->nextidx);
#endif /* NOMINUM_PUBLIC */
        else
            result = dns_zone_setmasters(zone, NULL, 0);
        RETERR(result);

        result = dns_c_zone_getmaxtranstimein(czone, &uintval);
        if (result != ISC_R_SUCCESS)
            result = dns_c_ctx_getmaxtransfertimein(cctx,
                                &uintval);
        if (result != ISC_R_SUCCESS)
            uintval = MAX_XFER_TIME;
        dns_zone_setmaxxfrin(zone, uintval);

        result = dns_c_zone_getmaxtransidlein(czone, &uintval);
        if (result != ISC_R_SUCCESS)
            result = dns_c_ctx_getmaxtransferidlein(cctx,
                                &uintval);
        if (result != ISC_R_SUCCESS)
            uintval = DNS_DEFAULT_IDLEIN;
        dns_zone_setidlein(zone, uintval);

        result = dns_c_zone_getmaxrefreshtime(czone, &uintval);
        if (result != ISC_R_SUCCESS && cview != NULL)
            result = dns_c_view_getmaxrefreshtime(cview, &uintval);
        if (result != ISC_R_SUCCESS)
            result = dns_c_ctx_getmaxrefreshtime(cctx, &uintval);
        if (result != ISC_R_SUCCESS)
            uintval = DNS_ZONE_MAXREFRESH;
        dns_zone_setmaxrefreshtime(zone, uintval);

        result = dns_c_zone_getminrefreshtime(czone, &uintval);
        if (result != ISC_R_SUCCESS && cview != NULL)
            result = dns_c_view_getminrefreshtime(cview, &uintval);
        if (result != ISC_R_SUCCESS)
            result = dns_c_ctx_getminrefreshtime(cctx, &uintval);
        if (result != ISC_R_SUCCESS)
            uintval = DNS_ZONE_MINREFRESH;
        dns_zone_setminrefreshtime(zone, uintval);

        result = dns_c_zone_getmaxretrytime(czone, &uintval);
        if (result != ISC_R_SUCCESS && cview != NULL)
            result = dns_c_view_getmaxretrytime(cview, &uintval);
        if (result != ISC_R_SUCCESS)
            result = dns_c_ctx_getmaxretrytime(cctx, &uintval);
        if (result != ISC_R_SUCCESS)
            uintval = DNS_ZONE_MAXRETRY;
        dns_zone_setmaxretrytime(zone, uintval);

        result = dns_c_zone_getminretrytime(czone, &uintval);
        if (result != ISC_R_SUCCESS && cview != NULL)
            result = dns_c_view_getminretrytime(cview, &uintval);
        if (result != ISC_R_SUCCESS)
            result = dns_c_ctx_getminretrytime(cctx, &uintval);
        if (result != ISC_R_SUCCESS)
            uintval = DNS_ZONE_MINRETRY;
        dns_zone_setminretrytime(zone, uintval);

        break;

    default:
        break;
    }

    return (ISC_R_SUCCESS);
}

isc_boolean_t
dns_zone_reusable(dns_zone_t *zone, dns_c_zone_t *czone) {
    const char *cfilename;
    const char *zfilename;

    if (dns_zonetype_fromconf(czone->ztype) != dns_zone_gettype(zone))
        return (ISC_FALSE);

    cfilename = NULL;
    (void) dns_c_zone_getfile(czone, &cfilename);
    zfilename = dns_zone_getfile(zone);
    if (cfilename == NULL || zfilename == NULL ||
        strcmp(cfilename, zfilename) != 0)
        return (ISC_FALSE);

    return (ISC_TRUE);
}

isc_result_t
dns_zonemgr_configure(dns_c_ctx_t *cctx, dns_zonemgr_t *zmgr) {
    isc_uint32_t val;
    isc_result_t result;

    result = dns_c_ctx_gettransfersin(cctx, &val);
    if (result != ISC_R_SUCCESS)
        val = 10;
    dns_zonemgr_settransfersin(zmgr, val);

    result = dns_c_ctx_gettransfersperns(cctx, &val);
    if (result != ISC_R_SUCCESS)
        val = 2;
    dns_zonemgr_settransfersperns(zmgr, val);

    return (ISC_R_SUCCESS);
}