zoneconf.c revision dafcb997e390efa4423883dafd100c975c4095d6
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer/*
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * Copyright (C) 2004 Internet Systems Consortium, Inc. ("ISC")
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer * Copyright (C) 1999-2003 Internet Software Consortium.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * Permission to use, copy, modify, and distribute this software for any
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * purpose with or without fee is hereby granted, provided that the above
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer * copyright notice and this permission notice appear in all copies.
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer *
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer * PERFORMANCE OF THIS SOFTWARE.
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer */
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer/* $Id: zoneconf.c,v 1.110 2004/03/05 04:57:49 marka Exp $ */
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <config.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <isc/buffer.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <isc/file.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <isc/mem.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <isc/print.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <isc/string.h> /* Required for HP/UX (and others?) */
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <isc/util.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <dns/acl.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <dns/fixedname.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <dns/log.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <dns/name.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <dns/rdatatype.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <dns/ssu.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <dns/view.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <dns/zone.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <named/config.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <named/globals.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <named/log.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <named/server.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#include <named/zoneconf.h>
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer/*
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer * These are BIND9 server defaults, not necessarily identical to the
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer * library defaults defined in zone.c.
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer */
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer#define RETERR(x) do { \
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer isc_result_t _r = (x); \
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer if (_r != ISC_R_SUCCESS) \
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer return (_r); \
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer } while (0)
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
313b0ea9f258edd8530f4454c69e6ba194280162Tinderbox User/*
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer * Convenience function for configuring a single zone ACL.
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer */
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayerstatic isc_result_t
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayerconfigure_zone_acl(cfg_obj_t *zconfig, cfg_obj_t *vconfig, cfg_obj_t *config,
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer const char *aclname, ns_aclconfctx_t *actx,
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews dns_zone_t *zone,
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer void (*setzacl)(dns_zone_t *, dns_acl_t *),
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer void (*clearzacl)(dns_zone_t *))
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews{
bbb3705e4cbdacf7cf6da7e448d79d97fdab2411Mark Andrews isc_result_t result;
bbb3705e4cbdacf7cf6da7e448d79d97fdab2411Mark Andrews cfg_obj_t *maps[4];
bbb3705e4cbdacf7cf6da7e448d79d97fdab2411Mark Andrews cfg_obj_t *aclobj = NULL;
bbb3705e4cbdacf7cf6da7e448d79d97fdab2411Mark Andrews int i = 0;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer dns_acl_t *dacl = NULL;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer if (zconfig != NULL)
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer maps[i++] = cfg_tuple_get(zconfig, "options");
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer if (vconfig != NULL)
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews maps[i++] = cfg_tuple_get(vconfig, "options");
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews if (config != NULL) {
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews cfg_obj_t *options = NULL;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer (void)cfg_map_get(config, "options", &options);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer if (options != NULL)
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer maps[i++] = options;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer }
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer maps[i] = NULL;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer result = ns_config_get(maps, aclname, &aclobj);
bbb3705e4cbdacf7cf6da7e448d79d97fdab2411Mark Andrews if (aclobj == NULL) {
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer (*clearzacl)(zone);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer return (ISC_R_SUCCESS);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer }
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer result = ns_acl_fromconfig(aclobj, config, actx,
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer dns_zone_getmctx(zone), &dacl);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer if (result != ISC_R_SUCCESS)
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer return (result);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer (*setzacl)(zone, dacl);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer dns_acl_detach(&dacl);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer return (ISC_R_SUCCESS);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer}
5cf0c559489d741ee5c7943ece47e40567bb0ba9Mark Andrews
5cf0c559489d741ee5c7943ece47e40567bb0ba9Mark Andrews/*
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer * Parse the zone update-policy statement.
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer */
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayerstatic isc_result_t
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayerconfigure_zone_ssutable(cfg_obj_t *zconfig, dns_zone_t *zone) {
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer cfg_obj_t *updatepolicy = NULL;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer cfg_listelt_t *element, *element2;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer dns_ssutable_t *table = NULL;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer isc_mem_t *mctx = dns_zone_getmctx(zone);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer isc_result_t result;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer (void)cfg_map_get(zconfig, "update-policy", &updatepolicy);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer if (updatepolicy == NULL)
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer return (ISC_R_SUCCESS);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer result = dns_ssutable_create(mctx, &table);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer if (result != ISC_R_SUCCESS)
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer return (result);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer for (element = cfg_list_first(updatepolicy);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer element != NULL;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer element = cfg_list_next(element))
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews {
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer cfg_obj_t *stmt = cfg_listelt_value(element);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer cfg_obj_t *mode = cfg_tuple_get(stmt, "mode");
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer cfg_obj_t *identity = cfg_tuple_get(stmt, "identity");
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer cfg_obj_t *matchtype = cfg_tuple_get(stmt, "matchtype");
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer cfg_obj_t *dname = cfg_tuple_get(stmt, "name");
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews cfg_obj_t *typelist = cfg_tuple_get(stmt, "types");
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews char *str;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer isc_boolean_t grant = ISC_FALSE;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer unsigned int mtype = DNS_SSUMATCHTYPE_NAME;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer dns_fixedname_t fname, fident;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer isc_buffer_t b;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer dns_rdatatype_t *types;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer unsigned int i, n;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
bbb3705e4cbdacf7cf6da7e448d79d97fdab2411Mark Andrews str = cfg_obj_asstring(mode);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer if (strcasecmp(str, "grant") == 0)
bbb3705e4cbdacf7cf6da7e448d79d97fdab2411Mark Andrews grant = ISC_TRUE;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer else if (strcasecmp(str, "deny") == 0)
bbb3705e4cbdacf7cf6da7e448d79d97fdab2411Mark Andrews grant = ISC_FALSE;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer else
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer INSIST(0);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer str = cfg_obj_asstring(matchtype);
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer if (strcasecmp(str, "name") == 0)
5cf0c559489d741ee5c7943ece47e40567bb0ba9Mark Andrews mtype = DNS_SSUMATCHTYPE_NAME;
24e0175a62f15a33a04f98571603873bd097b54aDanny Mayer else if (strcasecmp(str, "subdomain") == 0)
mtype = DNS_SSUMATCHTYPE_SUBDOMAIN;
else if (strcasecmp(str, "wildcard") == 0)
mtype = DNS_SSUMATCHTYPE_WILDCARD;
else if (strcasecmp(str, "self") == 0)
mtype = DNS_SSUMATCHTYPE_SELF;
else
INSIST(0);
dns_fixedname_init(&fident);
str = cfg_obj_asstring(identity);
isc_buffer_init(&b, str, strlen(str));
isc_buffer_add(&b, strlen(str));
result = dns_name_fromtext(dns_fixedname_name(&fident), &b,
dns_rootname, ISC_FALSE, NULL);
if (result != ISC_R_SUCCESS) {
cfg_obj_log(identity, ns_g_lctx, ISC_LOG_ERROR,
"'%s' is not a valid name", str);
goto cleanup;
}
dns_fixedname_init(&fname);
str = cfg_obj_asstring(dname);
isc_buffer_init(&b, str, strlen(str));
isc_buffer_add(&b, strlen(str));
result = dns_name_fromtext(dns_fixedname_name(&fname), &b,
dns_rootname, ISC_FALSE, NULL);
if (result != ISC_R_SUCCESS) {
cfg_obj_log(identity, ns_g_lctx, ISC_LOG_ERROR,
"'%s' is not a valid name", str);
goto cleanup;
}
n = ns_config_listcount(typelist);
if (n == 0)
types = NULL;
else {
types = isc_mem_get(mctx, n * sizeof(dns_rdatatype_t));
if (types == NULL) {
result = ISC_R_NOMEMORY;
goto cleanup;
}
}
i = 0;
for (element2 = cfg_list_first(typelist);
element2 != NULL;
element2 = cfg_list_next(element2))
{
cfg_obj_t *typeobj;
isc_textregion_t r;
INSIST(i < n);
typeobj = cfg_listelt_value(element2);
str = cfg_obj_asstring(typeobj);
r.base = str;
r.length = strlen(str);
result = dns_rdatatype_fromtext(&types[i++], &r);
if (result != ISC_R_SUCCESS) {
cfg_obj_log(identity, ns_g_lctx, ISC_LOG_ERROR,
"'%s' is not a valid type", str);
isc_mem_put(mctx, types,
n * sizeof(dns_rdatatype_t));
goto cleanup;
}
}
INSIST(i == n);
result = dns_ssutable_addrule(table, grant,
dns_fixedname_name(&fident),
mtype,
dns_fixedname_name(&fname),
n, types);
if (types != NULL)
isc_mem_put(mctx, types, n * sizeof(dns_rdatatype_t));
if (result != ISC_R_SUCCESS) {
goto cleanup;
}
}
result = ISC_R_SUCCESS;
dns_zone_setssutable(zone, table);
cleanup:
dns_ssutable_detach(&table);
return (result);
}
/*
* Convert a config file zone type into a server zone type.
*/
static inline dns_zonetype_t
zonetype_fromconfig(cfg_obj_t *map) {
cfg_obj_t *obj = NULL;
isc_result_t result;
result = cfg_map_get(map, "type", &obj);
INSIST(result == ISC_R_SUCCESS);
return (ns_config_getzonetype(obj));
}
/*
* Helper function for strtoargv(). Pardon the gratuitous recursion.
*/
static isc_result_t
strtoargvsub(isc_mem_t *mctx, char *s, unsigned int *argcp,
char ***argvp, unsigned int n)
{
isc_result_t result;
/* Discard leading whitespace. */
while (*s == ' ' || *s == '\t')
s++;
if (*s == '\0') {
/* We have reached the end of the string. */
*argcp = n;
*argvp = isc_mem_get(mctx, n * sizeof(char *));
if (*argvp == NULL)
return (ISC_R_NOMEMORY);
} else {
char *p = s;
while (*p != ' ' && *p != '\t' && *p != '\0')
p++;
if (*p != '\0')
*p++ = '\0';
result = strtoargvsub(mctx, p, argcp, argvp, n + 1);
if (result != ISC_R_SUCCESS)
return (result);
(*argvp)[n] = s;
}
return (ISC_R_SUCCESS);
}
/*
* Tokenize the string "s" into whitespace-separated words,
* return the number of words in '*argcp' and an array
* of pointers to the words in '*argvp'. The caller
* must free the array using isc_mem_put(). The string
* is modified in-place.
*/
static isc_result_t
strtoargv(isc_mem_t *mctx, char *s, unsigned int *argcp, char ***argvp) {
return (strtoargvsub(mctx, s, argcp, argvp, 0));
}
static void
checknames(dns_zonetype_t ztype, cfg_obj_t **maps, cfg_obj_t **objp) {
const char *zone = NULL;
cfg_listelt_t *element;
cfg_obj_t *type;
cfg_obj_t *value;
cfg_obj_t *check;
int i;
switch (ztype) {
case dns_zone_slave: zone = "slave"; break;
case dns_zone_master: zone = "master"; break;
default:
INSIST(0);
}
for (i = 0; maps[i] != NULL; i++) {
check = NULL;
cfg_map_get(maps[i], "check-names", &check);
if (check != NULL && !cfg_obj_islist(check)) {
*objp = check;
return;
}
for (element = cfg_list_first(check);
element != NULL;
element = cfg_list_next(element)) {
value = cfg_listelt_value(element);
type = cfg_tuple_get(value, "type");
if (strcasecmp(cfg_obj_asstring(type), zone) == 0) {
*objp = cfg_tuple_get(value, "mode");
return;
}
}
}
}
isc_result_t
ns_zone_configure(cfg_obj_t *config, cfg_obj_t *vconfig, cfg_obj_t *zconfig,
ns_aclconfctx_t *ac, dns_zone_t *zone)
{
isc_result_t result;
char *zname;
dns_rdataclass_t zclass;
dns_rdataclass_t vclass;
cfg_obj_t *maps[5];
cfg_obj_t *zoptions = NULL;
cfg_obj_t *options = NULL;
cfg_obj_t *obj;
const char *filename = NULL;
dns_notifytype_t notifytype = dns_notifytype_yes;
isc_sockaddr_t *addrs;
dns_name_t **keynames;
isc_uint32_t count;
char *cpval;
unsigned int dbargc;
char **dbargv;
static char default_dbtype[] = "rbt";
isc_mem_t *mctx = dns_zone_getmctx(zone);
dns_dialuptype_t dialup = dns_dialuptype_no;
dns_zonetype_t ztype;
int i;
isc_int32_t journal_size;
isc_boolean_t multi;
isc_boolean_t alt;
dns_view_t *view;
isc_boolean_t check = ISC_FALSE, fail = ISC_FALSE;
i = 0;
if (zconfig != NULL) {
zoptions = cfg_tuple_get(zconfig, "options");
maps[i++] = zoptions;
}
if (vconfig != NULL)
maps[i++] = cfg_tuple_get(vconfig, "options");
if (config != NULL) {
(void)cfg_map_get(config, "options", &options);
if (options != NULL)
maps[i++] = options;
}
maps[i++] = ns_g_defaults;
maps[i++] = NULL;
if (vconfig != NULL)
RETERR(ns_config_getclass(cfg_tuple_get(vconfig, "class"),
dns_rdataclass_in, &vclass));
else
vclass = dns_rdataclass_in;
/*
* Configure values common to all zone types.
*/
zname = cfg_obj_asstring(cfg_tuple_get(zconfig, "name"));
RETERR(ns_config_getclass(cfg_tuple_get(zconfig, "class"),
vclass, &zclass));
dns_zone_setclass(zone, zclass);
ztype = zonetype_fromconfig(zoptions);
dns_zone_settype(zone, ztype);
obj = NULL;
result = cfg_map_get(zoptions, "database", &obj);
if (result == ISC_R_SUCCESS)
cpval = cfg_obj_asstring(obj);
else
cpval = default_dbtype;
RETERR(strtoargv(mctx, cpval, &dbargc, &dbargv));
/*
* ANSI C is strange here. There is no logical reason why (char **)
* cannot be promoted automatically to (const char * const *) by the
* compiler w/o generating a warning.
*/
RETERR(dns_zone_setdbtype(zone, dbargc, (const char * const *)dbargv));
isc_mem_put(mctx, dbargv, dbargc * sizeof(*dbargv));
obj = NULL;
result = cfg_map_get(zoptions, "file", &obj);
if (result == ISC_R_SUCCESS)
filename = cfg_obj_asstring(obj);
RETERR(dns_zone_setfile(zone, filename));
if (ztype == dns_zone_slave)
RETERR(configure_zone_acl(zconfig, vconfig, config,
"allow-notify", ac, zone,
dns_zone_setnotifyacl,
dns_zone_clearnotifyacl));
/*
* XXXAG This probably does not make sense for stubs.
*/
RETERR(configure_zone_acl(zconfig, vconfig, config,
"allow-query", ac, zone,
dns_zone_setqueryacl,
dns_zone_clearqueryacl));
obj = NULL;
result = ns_config_get(maps, "dialup", &obj);
INSIST(result == ISC_R_SUCCESS);
if (cfg_obj_isboolean(obj)) {
if (cfg_obj_asboolean(obj))
dialup = dns_dialuptype_yes;
else
dialup = dns_dialuptype_no;
} else {
char *dialupstr = cfg_obj_asstring(obj);
if (strcasecmp(dialupstr, "notify") == 0)
dialup = dns_dialuptype_notify;
else if (strcasecmp(dialupstr, "notify-passive") == 0)
dialup = dns_dialuptype_notifypassive;
else if (strcasecmp(dialupstr, "refresh") == 0)
dialup = dns_dialuptype_refresh;
else if (strcasecmp(dialupstr, "passive") == 0)
dialup = dns_dialuptype_passive;
else
INSIST(0);
}
dns_zone_setdialup(zone, dialup);
obj = NULL;
result = ns_config_get(maps, "zone-statistics", &obj);
INSIST(result == ISC_R_SUCCESS);
RETERR(dns_zone_setstatistics(zone, cfg_obj_asboolean(obj)));
/*
* Configure master functionality. This applies
* to primary masters (type "master") and slaves
* acting as masters (type "slave"), but not to stubs.
*/
if (ztype != dns_zone_stub) {
obj = NULL;
result = ns_config_get(maps, "notify", &obj);
INSIST(result == ISC_R_SUCCESS);
if (cfg_obj_isboolean(obj)) {
if (cfg_obj_asboolean(obj))
notifytype = dns_notifytype_yes;
else
notifytype = dns_notifytype_no;
} else {
char *notifystr = cfg_obj_asstring(obj);
if (strcasecmp(notifystr, "explicit") == 0)
notifytype = dns_notifytype_explicit;
else
INSIST(0);
}
dns_zone_setnotifytype(zone, notifytype);
obj = NULL;
result = ns_config_get(maps, "also-notify", &obj);
if (result == ISC_R_SUCCESS) {
isc_sockaddr_t *addrs = NULL;
isc_uint32_t addrcount;
result = ns_config_getiplist(config, obj, 0, mctx,
&addrs, &addrcount);
if (result != ISC_R_SUCCESS)
return (result);
result = dns_zone_setalsonotify(zone, addrs,
addrcount);
ns_config_putiplist(mctx, &addrs, addrcount);
if (result != ISC_R_SUCCESS)
return (result);
} else
RETERR(dns_zone_setalsonotify(zone, NULL, 0));
obj = NULL;
result = ns_config_get(maps, "notify-source", &obj);
INSIST(result == ISC_R_SUCCESS);
RETERR(dns_zone_setnotifysrc4(zone, cfg_obj_assockaddr(obj)));
ns_add_reserved_dispatch(ns_g_server, cfg_obj_assockaddr(obj));
obj = NULL;
result = ns_config_get(maps, "notify-source-v6", &obj);
INSIST(result == ISC_R_SUCCESS);
RETERR(dns_zone_setnotifysrc6(zone, cfg_obj_assockaddr(obj)));
ns_add_reserved_dispatch(ns_g_server, cfg_obj_assockaddr(obj));
RETERR(configure_zone_acl(zconfig, vconfig, config,
"allow-transfer", ac, zone,
dns_zone_setxfracl,
dns_zone_clearxfracl));
obj = NULL;
result = ns_config_get(maps, "max-transfer-time-out", &obj);
INSIST(result == ISC_R_SUCCESS);
dns_zone_setmaxxfrout(zone, cfg_obj_asuint32(obj) * 60);
obj = NULL;
result = ns_config_get(maps, "max-transfer-idle-out", &obj);
INSIST(result == ISC_R_SUCCESS);
dns_zone_setidleout(zone, cfg_obj_asuint32(obj) * 60);
obj = NULL;
result = ns_config_get(maps, "max-journal-size", &obj);
INSIST(result == ISC_R_SUCCESS);
dns_zone_setjournalsize(zone, -1);
if (cfg_obj_isstring(obj)) {
const char *str = cfg_obj_asstring(obj);
INSIST(strcasecmp(str, "unlimited") == 0);
journal_size = ISC_UINT32_MAX / 2;
} else {
isc_resourcevalue_t value;
value = cfg_obj_asuint64(obj);
if (value > ISC_UINT32_MAX / 2) {
cfg_obj_log(obj, ns_g_lctx,
ISC_LOG_ERROR,
"'max-journal-size "
"%" ISC_PRINT_QUADFORMAT "d' "
"is too large",
value);
RETERR(ISC_R_RANGE);
}
journal_size = (isc_uint32_t)value;
}
dns_zone_setjournalsize(zone, journal_size);
obj = NULL;
result = ns_config_get(maps, "ixfr-from-differences", &obj);
INSIST(result == ISC_R_SUCCESS);
dns_zone_setoption(zone, DNS_ZONEOPT_IXFRFROMDIFFS,
cfg_obj_asboolean(obj));
checknames(ztype, maps, &obj);
INSIST(obj != NULL);
if (strcasecmp(cfg_obj_asstring(obj), "warn") == 0) {
fail = ISC_FALSE;
check = ISC_TRUE;
} else if (strcasecmp(cfg_obj_asstring(obj), "fail") == 0) {
fail = check = ISC_TRUE;
} else if (strcasecmp(cfg_obj_asstring(obj), "ignore") == 0) {
fail = check = ISC_FALSE;
} else
INSIST(0);
dns_zone_setoption(zone, DNS_ZONEOPT_CHECKNAMES, check);
dns_zone_setoption(zone, DNS_ZONEOPT_CHECKNAMESFAIL, fail);
}
/*
* Configure update-related options. These apply to
* primary masters only.
*/
if (ztype == dns_zone_master) {
dns_acl_t *updateacl;
RETERR(configure_zone_acl(zconfig, vconfig, config,
"allow-update", ac, zone,
dns_zone_setupdateacl,
dns_zone_clearupdateacl));
updateacl = dns_zone_getupdateacl(zone);
if (updateacl != NULL && dns_acl_isinsecure(updateacl))
isc_log_write(ns_g_lctx, DNS_LOGCATEGORY_SECURITY,
NS_LOGMODULE_SERVER, ISC_LOG_WARNING,
"zone '%s' allows updates by IP "
"address, which is insecure",
zname);
RETERR(configure_zone_ssutable(zoptions, zone));
obj = NULL;
result = ns_config_get(maps, "sig-validity-interval", &obj);
INSIST(result == ISC_R_SUCCESS);
dns_zone_setsigvalidityinterval(zone,
cfg_obj_asuint32(obj) * 86400);
obj = NULL;
result = ns_config_get(maps, "key-directory", &obj);
if (result == ISC_R_SUCCESS) {
filename = cfg_obj_asstring(obj);
if (!isc_file_isabsolute(filename)) {
cfg_obj_log(obj, ns_g_lctx, ISC_LOG_ERROR,
"key-directory '%s' "
"is not absolute", filename);
return (ISC_R_FAILURE);
}
RETERR(dns_zone_setkeydirectory(zone, filename));
}
} else if (ztype == dns_zone_slave) {
RETERR(configure_zone_acl(zconfig, vconfig, config,
"allow-update-forwarding", ac, zone,
dns_zone_setforwardacl,
dns_zone_clearforwardacl));
}
/*
* Configure slave functionality.
*/
switch (ztype) {
case dns_zone_slave:
case dns_zone_stub:
obj = NULL;
result = cfg_map_get(zoptions, "masters", &obj);
if (obj != NULL) {
addrs = NULL;
keynames = NULL;
RETERR(ns_config_getipandkeylist(config, obj, mctx,
&addrs, &keynames,
&count));
result = dns_zone_setmasterswithkeys(zone, addrs,
keynames, count);
ns_config_putipandkeylist(mctx, &addrs, &keynames,
count);
} else
result = dns_zone_setmasters(zone, NULL, 0);
RETERR(result);
multi = ISC_FALSE;
if (count > 1) {
obj = NULL;
result = ns_config_get(maps, "multi-master", &obj);
INSIST(result == ISC_R_SUCCESS);
multi = cfg_obj_asboolean(obj);
}
dns_zone_setoption(zone, DNS_ZONEOPT_MULTIMASTER, multi);
obj = NULL;
result = ns_config_get(maps, "max-transfer-time-in", &obj);
INSIST(result == ISC_R_SUCCESS);
dns_zone_setmaxxfrin(zone, cfg_obj_asuint32(obj) * 60);
obj = NULL;
result = ns_config_get(maps, "max-transfer-idle-in", &obj);
INSIST(result == ISC_R_SUCCESS);
dns_zone_setidlein(zone, cfg_obj_asuint32(obj) * 60);
obj = NULL;
result = ns_config_get(maps, "max-refresh-time", &obj);
INSIST(result == ISC_R_SUCCESS);
dns_zone_setmaxrefreshtime(zone, cfg_obj_asuint32(obj));
obj = NULL;
result = ns_config_get(maps, "min-refresh-time", &obj);
INSIST(result == ISC_R_SUCCESS);
dns_zone_setminrefreshtime(zone, cfg_obj_asuint32(obj));
obj = NULL;
result = ns_config_get(maps, "max-retry-time", &obj);
INSIST(result == ISC_R_SUCCESS);
dns_zone_setmaxretrytime(zone, cfg_obj_asuint32(obj));
obj = NULL;
result = ns_config_get(maps, "min-retry-time", &obj);
INSIST(result == ISC_R_SUCCESS);
dns_zone_setminretrytime(zone, cfg_obj_asuint32(obj));
obj = NULL;
result = ns_config_get(maps, "transfer-source", &obj);
INSIST(result == ISC_R_SUCCESS);
RETERR(dns_zone_setxfrsource4(zone, cfg_obj_assockaddr(obj)));
ns_add_reserved_dispatch(ns_g_server, cfg_obj_assockaddr(obj));
obj = NULL;
result = ns_config_get(maps, "transfer-source-v6", &obj);
INSIST(result == ISC_R_SUCCESS);
RETERR(dns_zone_setxfrsource6(zone, cfg_obj_assockaddr(obj)));
ns_add_reserved_dispatch(ns_g_server, cfg_obj_assockaddr(obj));
obj = NULL;
result = ns_config_get(maps, "alt-transfer-source", &obj);
INSIST(result == ISC_R_SUCCESS);
RETERR(dns_zone_setaltxfrsource4(zone, cfg_obj_assockaddr(obj)));
obj = NULL;
result = ns_config_get(maps, "alt-transfer-source-v6", &obj);
INSIST(result == ISC_R_SUCCESS);
RETERR(dns_zone_setaltxfrsource6(zone, cfg_obj_assockaddr(obj)));
obj = NULL;
(void)ns_config_get(maps, "use-alt-transfer-source", &obj);
if (obj == NULL) {
/*
* Default off when views are in use otherwise
* on for BIND 8 compatibility.
*/
view = dns_zone_getview(zone);
if (view != NULL && strcmp(view->name, "_default") == 0)
alt = ISC_TRUE;
else
alt = ISC_FALSE;
} else
alt = cfg_obj_asboolean(obj);
dns_zone_setoption(zone, DNS_ZONEOPT_USEALTXFRSRC, alt);
break;
default:
break;
}
return (ISC_R_SUCCESS);
}
isc_boolean_t
ns_zone_reusable(dns_zone_t *zone, cfg_obj_t *zconfig) {
cfg_obj_t *zoptions = NULL;
cfg_obj_t *obj = NULL;
const char *cfilename;
const char *zfilename;
zoptions = cfg_tuple_get(zconfig, "options");
if (zonetype_fromconfig(zoptions) != dns_zone_gettype(zone))
return (ISC_FALSE);
obj = NULL;
(void)cfg_map_get(zoptions, "file", &obj);
if (obj != NULL)
cfilename = cfg_obj_asstring(obj);
else
cfilename = NULL;
zfilename = dns_zone_getfile(zone);
if (!((cfilename == NULL && zfilename == NULL) ||
(cfilename != NULL && zfilename != NULL &&
strcmp(cfilename, zfilename) == 0)))
return (ISC_FALSE);
return (ISC_TRUE);
}