2 * Copyright (C) 2004, 2006 Internet Systems Consortium, Inc. ("ISC")
3 * Copyright (C) 2001-2003 Internet Software Consortium.
5 * Permission to use, copy, modify, and distribute this software for any
6 * purpose with or without fee is hereby granted, provided that the above
7 * copyright notice and this permission notice appear in all copies.
9 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
10 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
11 * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
12 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
13 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
14 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
15 * PERFORMANCE OF THIS SOFTWARE.
18 /* $Id: config.c,v 1.11.2.4.8.32 2006/02/28 06:32:53 marka Exp $ */
25 #include <isc/buffer.h>
28 #include <isc/region.h>
29 #include <isc/result.h>
30 #include <isc/sockaddr.h>
33 #include <isccfg/namedconf.h>
35 #include <dns/fixedname.h>
37 #include <dns/rdataclass.h>
38 #include <dns/rdatatype.h>
42 #include <named/config.h>
43 #include <named/globals.h>
45 static char defaultconf
[] = "\
47 # blackhole {none;};\n"
49 " coresize default;\n\
54 " deallocate-on-exit true;\n\
56 dump-file \"named_dump.db\";\n\
58 has-old-clients false;\n\
59 heartbeat-interval 60;\n\
60 host-statistics no;\n\
61 interface-interval 60;\n\
63 listen-on-v6 {none;};\n\
64 match-mapped-addresses no;\n\
65 memstatistics-file \"named.memstats\";\n\
66 multiple-cnames no;\n\
67 # named-xfer <obsolete>;\n\
68 # pid-file \"" NS_LOCALSTATEDIR
"/named.pid\"; /* or /lwresd.pid */\n\
70 recursing-file \"named.recursing\";\n\
74 random-device \"" PATH_RANDOMDEV
"\";\n\
78 recursive-clients 1000;\n\
79 rrset-order {order cyclic;};\n\
81 serial-query-rate 20;\n\
83 statistics-file \"named.stats\";\n\
84 statistics-interval 60;\n\
86 tcp-listen-queue 3;\n\
87 # tkey-dhkey <none>\n\
88 # tkey-gssapi-credential <none>\n\
89 # tkey-domain <none>\n\
90 transfers-per-ns 2;\n\
93 treat-cr-as-space true;\n\
96 edns-udp-size 4096;\n\
99 allow-notify {none;};\n\
100 allow-update-forwarding {none;};\n\
101 allow-recursion {any;};\n\
102 # allow-v6-synthesis <obsolete>;\n\
105 auth-nxdomain false;\n\
106 minimal-responses false;\n\
108 provide-ixfr true;\n\
109 request-ixfr true;\n\
112 additional-from-auth true;\n\
113 additional-from-cache true;\n\
114 query-source address *;\n\
115 query-source-v6 address *;\n\
117 notify-source-v6 *;\n\
118 cleaning-interval 60;\n\
121 max-ncache-ttl 10800; /* 3 hours */\n\
122 max-cache-ttl 604800; /* 1 week */\n\
123 transfer-format many-answers;\n\
125 check-names master fail;\n\
126 check-names slave warn;\n\
127 check-names response ignore;\n\
128 dnssec-enable no; /* Make yes for 9.4. */ \n\
132 allow-query {any;};\n\
133 allow-transfer {any;};\n\
135 # also-notify <none>\n\
138 # forwarders <none>\n\
139 maintain-ixfr-base no;\n\
140 # max-ixfr-log-size <obsolete>\n\
141 transfer-source *;\n\
142 transfer-source-v6 *;\n\
143 alt-transfer-source *;\n\
144 alt-transfer-source-v6 *;\n\
145 max-transfer-time-in 120;\n\
146 max-transfer-time-out 120;\n\
147 max-transfer-idle-in 60;\n\
148 max-transfer-idle-out 60;\n\
149 max-retry-time 1209600; /* 2 weeks */\n\
150 min-retry-time 500;\n\
151 max-refresh-time 2419200; /* 4 weeks */\n\
152 min-refresh-time 300;\n\
154 sig-validity-interval 30; /* days */\n\
155 zone-statistics false;\n\
156 max-journal-size unlimited;\n\
157 ixfr-from-differences false;\n\
162 # Zones in the \"_bind\" view are NOT counted is the count of zones.\n\
164 view \"_bind\" chaos {\n\
168 zone \"version.bind\" chaos {\n\
170 database \"_builtin version\";\n\
173 zone \"hostname.bind\" chaos {\n\
175 database \"_builtin hostname\";\n\
178 zone \"authors.bind\" chaos {\n\
180 database \"_builtin authors\";\n\
182 zone \"id.server\" chaos {\n\
184 database \"_builtin id\";\n\
190 ns_config_parsedefaults(cfg_parser_t
*parser
, cfg_obj_t
**conf
) {
193 isc_buffer_init(&b
, defaultconf
, sizeof(defaultconf
) - 1);
194 isc_buffer_add(&b
, sizeof(defaultconf
) - 1);
195 return (cfg_parse_buffer(parser
, &b
, &cfg_type_namedconf
, conf
));
199 ns_config_get(const cfg_obj_t
**maps
, const char *name
, const cfg_obj_t
**obj
) {
204 return (ISC_R_NOTFOUND
);
205 if (cfg_map_get(maps
[i
], name
, obj
) == ISC_R_SUCCESS
)
206 return (ISC_R_SUCCESS
);
211 ns_checknames_get(const cfg_obj_t
**maps
, const char *which
,
212 const cfg_obj_t
**obj
)
214 const cfg_listelt_t
*element
;
215 const cfg_obj_t
*checknames
;
216 const cfg_obj_t
*type
;
217 const cfg_obj_t
*value
;
222 return (ISC_R_NOTFOUND
);
224 if (cfg_map_get(maps
[i
], "check-names", &checknames
) == ISC_R_SUCCESS
) {
226 * Zone map entry is not a list.
228 if (checknames
!= NULL
&& !cfg_obj_islist(checknames
)) {
230 return (ISC_R_SUCCESS
);
232 for (element
= cfg_list_first(checknames
);
234 element
= cfg_list_next(element
)) {
235 value
= cfg_listelt_value(element
);
236 type
= cfg_tuple_get(value
, "type");
237 if (strcasecmp(cfg_obj_asstring(type
), which
) == 0) {
238 *obj
= cfg_tuple_get(value
, "mode");
239 return (ISC_R_SUCCESS
);
248 ns_config_listcount(const cfg_obj_t
*list
) {
249 const cfg_listelt_t
*e
;
252 for (e
= cfg_list_first(list
); e
!= NULL
; e
= cfg_list_next(e
))
259 ns_config_getclass(const cfg_obj_t
*classobj
, dns_rdataclass_t defclass
,
260 dns_rdataclass_t
*classp
) {
265 if (!cfg_obj_isstring(classobj
)) {
267 return (ISC_R_SUCCESS
);
269 str
= cfg_obj_asstring(classobj
);
270 DE_CONST(str
, r
.base
);
271 r
.length
= strlen(str
);
272 result
= dns_rdataclass_fromtext(classp
, &r
);
273 if (result
!= ISC_R_SUCCESS
)
274 cfg_obj_log(classobj
, ns_g_lctx
, ISC_LOG_ERROR
,
275 "unknown class '%s'", str
);
280 ns_config_gettype(const cfg_obj_t
*typeobj
, dns_rdatatype_t deftype
,
281 dns_rdatatype_t
*typep
) {
286 if (!cfg_obj_isstring(typeobj
)) {
288 return (ISC_R_SUCCESS
);
290 str
= cfg_obj_asstring(typeobj
);
291 DE_CONST(str
, r
.base
);
292 r
.length
= strlen(str
);
293 result
= dns_rdatatype_fromtext(typep
, &r
);
294 if (result
!= ISC_R_SUCCESS
)
295 cfg_obj_log(typeobj
, ns_g_lctx
, ISC_LOG_ERROR
,
296 "unknown type '%s'", str
);
301 ns_config_getzonetype(const cfg_obj_t
*zonetypeobj
) {
302 dns_zonetype_t ztype
= dns_zone_none
;
305 str
= cfg_obj_asstring(zonetypeobj
);
306 if (strcasecmp(str
, "master") == 0)
307 ztype
= dns_zone_master
;
308 else if (strcasecmp(str
, "slave") == 0)
309 ztype
= dns_zone_slave
;
310 else if (strcasecmp(str
, "stub") == 0)
311 ztype
= dns_zone_stub
;
318 ns_config_getiplist(const cfg_obj_t
*config
, const cfg_obj_t
*list
,
319 in_port_t defport
, isc_mem_t
*mctx
,
320 isc_sockaddr_t
**addrsp
, isc_uint32_t
*countp
)
323 const cfg_obj_t
*addrlist
;
324 const cfg_obj_t
*portobj
;
325 const cfg_listelt_t
*element
;
326 isc_sockaddr_t
*addrs
;
330 INSIST(addrsp
!= NULL
&& *addrsp
== NULL
);
331 INSIST(countp
!= NULL
);
333 addrlist
= cfg_tuple_get(list
, "addresses");
334 count
= ns_config_listcount(addrlist
);
336 portobj
= cfg_tuple_get(list
, "port");
337 if (cfg_obj_isuint32(portobj
)) {
338 isc_uint32_t val
= cfg_obj_asuint32(portobj
);
339 if (val
> ISC_UINT16_MAX
) {
340 cfg_obj_log(portobj
, ns_g_lctx
, ISC_LOG_ERROR
,
341 "port '%u' out of range", val
);
342 return (ISC_R_RANGE
);
344 port
= (in_port_t
) val
;
345 } else if (defport
!= 0)
348 result
= ns_config_getport(config
, &port
);
349 if (result
!= ISC_R_SUCCESS
)
353 addrs
= isc_mem_get(mctx
, count
* sizeof(isc_sockaddr_t
));
355 return (ISC_R_NOMEMORY
);
357 for (element
= cfg_list_first(addrlist
);
359 element
= cfg_list_next(element
), i
++)
362 addrs
[i
] = *cfg_obj_assockaddr(cfg_listelt_value(element
));
363 if (isc_sockaddr_getport(&addrs
[i
]) == 0)
364 isc_sockaddr_setport(&addrs
[i
], port
);
371 return (ISC_R_SUCCESS
);
375 ns_config_putiplist(isc_mem_t
*mctx
, isc_sockaddr_t
**addrsp
,
378 INSIST(addrsp
!= NULL
&& *addrsp
!= NULL
);
380 isc_mem_put(mctx
, *addrsp
, count
* sizeof(isc_sockaddr_t
));
385 get_masters_def(const cfg_obj_t
*cctx
, const char *name
,
386 const cfg_obj_t
**ret
)
389 const cfg_obj_t
*masters
= NULL
;
390 const cfg_listelt_t
*elt
;
392 result
= cfg_map_get(cctx
, "masters", &masters
);
393 if (result
!= ISC_R_SUCCESS
)
395 for (elt
= cfg_list_first(masters
);
397 elt
= cfg_list_next(elt
)) {
398 const cfg_obj_t
*list
;
399 const char *listname
;
401 list
= cfg_listelt_value(elt
);
402 listname
= cfg_obj_asstring(cfg_tuple_get(list
, "name"));
404 if (strcasecmp(listname
, name
) == 0) {
406 return (ISC_R_SUCCESS
);
409 return (ISC_R_NOTFOUND
);
413 ns_config_getipandkeylist(const cfg_obj_t
*config
, const cfg_obj_t
*list
,
414 isc_mem_t
*mctx
, isc_sockaddr_t
**addrsp
,
415 dns_name_t
***keysp
, isc_uint32_t
*countp
)
417 isc_uint32_t addrcount
= 0, keycount
= 0, i
= 0;
418 isc_uint32_t listcount
= 0, l
= 0, j
;
419 isc_uint32_t stackcount
= 0, pushed
= 0;
421 const cfg_listelt_t
*element
;
422 const cfg_obj_t
*addrlist
;
423 const cfg_obj_t
*portobj
;
425 dns_fixedname_t fname
;
426 isc_sockaddr_t
*addrs
= NULL
;
427 dns_name_t
**keys
= NULL
;
428 const char **lists
= NULL
;
430 const cfg_listelt_t
*element
;
434 REQUIRE(addrsp
!= NULL
&& *addrsp
== NULL
);
435 REQUIRE(keysp
!= NULL
&& *keysp
== NULL
);
436 REQUIRE(countp
!= NULL
);
439 addrlist
= cfg_tuple_get(list
, "addresses");
440 portobj
= cfg_tuple_get(list
, "port");
441 if (cfg_obj_isuint32(portobj
)) {
442 isc_uint32_t val
= cfg_obj_asuint32(portobj
);
443 if (val
> ISC_UINT16_MAX
) {
444 cfg_obj_log(portobj
, ns_g_lctx
, ISC_LOG_ERROR
,
445 "port '%u' out of range", val
);
446 result
= ISC_R_RANGE
;
449 port
= (in_port_t
) val
;
451 result
= ns_config_getport(config
, &port
);
452 if (result
!= ISC_R_SUCCESS
)
456 result
= ISC_R_NOMEMORY
;
458 element
= cfg_list_first(addrlist
);
462 element
= cfg_list_next(element
))
464 const cfg_obj_t
*addr
;
465 const cfg_obj_t
*key
;
469 addr
= cfg_tuple_get(cfg_listelt_value(element
),
471 key
= cfg_tuple_get(cfg_listelt_value(element
), "key");
473 if (!cfg_obj_issockaddr(addr
)) {
474 const char *listname
= cfg_obj_asstring(addr
);
475 isc_result_t tresult
;
478 if (listcount
== l
) {
480 isc_uint32_t newlen
= listcount
+ 16;
481 size_t newsize
, oldsize
;
483 newsize
= newlen
* sizeof(*lists
);
484 oldsize
= listcount
* sizeof(*lists
);
485 new = isc_mem_get(mctx
, newsize
);
488 if (listcount
!= 0) {
489 memcpy(new, lists
, oldsize
);
490 isc_mem_put(mctx
, lists
, oldsize
);
496 for (j
= 0; j
< l
; j
++)
497 if (strcasecmp(lists
[j
], listname
) == 0)
501 tresult
= get_masters_def(config
, listname
, &list
);
502 if (tresult
== ISC_R_NOTFOUND
) {
503 cfg_obj_log(addr
, ns_g_lctx
, ISC_LOG_ERROR
,
504 "masters \"%s\" not found", listname
);
509 if (tresult
!= ISC_R_SUCCESS
)
511 lists
[l
++] = listname
;
513 if (stackcount
== pushed
) {
515 isc_uint32_t newlen
= stackcount
+ 16;
516 size_t newsize
, oldsize
;
518 newsize
= newlen
* sizeof(*stack
);
519 oldsize
= stackcount
* sizeof(*stack
);
520 new = isc_mem_get(mctx
, newsize
);
523 if (stackcount
!= 0) {
524 memcpy(new, stack
, oldsize
);
525 isc_mem_put(mctx
, stack
, oldsize
);
531 * We want to resume processing this list on the
534 stack
[pushed
].element
= cfg_list_next(element
);
535 stack
[pushed
].port
= port
;
540 if (i
== addrcount
) {
542 isc_uint32_t newlen
= addrcount
+ 16;
543 size_t newsize
, oldsize
;
545 newsize
= newlen
* sizeof(isc_sockaddr_t
);
546 oldsize
= addrcount
* sizeof(isc_sockaddr_t
);
547 new = isc_mem_get(mctx
, newsize
);
550 if (addrcount
!= 0) {
551 memcpy(new, addrs
, oldsize
);
552 isc_mem_put(mctx
, addrs
, oldsize
);
557 newsize
= newlen
* sizeof(dns_name_t
*);
558 oldsize
= keycount
* sizeof(dns_name_t
*);
559 new = isc_mem_get(mctx
, newsize
);
563 memcpy(new, keys
, oldsize
);
564 isc_mem_put(mctx
, keys
, oldsize
);
570 addrs
[i
] = *cfg_obj_assockaddr(addr
);
571 if (isc_sockaddr_getport(&addrs
[i
]) == 0)
572 isc_sockaddr_setport(&addrs
[i
], port
);
574 if (!cfg_obj_isstring(key
)) {
578 keys
[i
] = isc_mem_get(mctx
, sizeof(dns_name_t
));
581 dns_name_init(keys
[i
], NULL
);
583 keystr
= cfg_obj_asstring(key
);
584 isc_buffer_init(&b
, keystr
, strlen(keystr
));
585 isc_buffer_add(&b
, strlen(keystr
));
586 dns_fixedname_init(&fname
);
587 result
= dns_name_fromtext(dns_fixedname_name(&fname
), &b
,
588 dns_rootname
, ISC_FALSE
, NULL
);
589 if (result
!= ISC_R_SUCCESS
)
591 result
= dns_name_dup(dns_fixedname_name(&fname
), mctx
,
593 if (result
!= ISC_R_SUCCESS
)
599 element
= stack
[pushed
].element
;
600 port
= stack
[pushed
].port
;
605 size_t newsize
, oldsize
;
607 newsize
= i
* sizeof(isc_sockaddr_t
);
608 oldsize
= addrcount
* sizeof(isc_sockaddr_t
);
610 new = isc_mem_get(mctx
, newsize
);
613 memcpy(new, addrs
, newsize
);
616 isc_mem_put(mctx
, addrs
, oldsize
);
620 newsize
= i
* sizeof(dns_name_t
*);
621 oldsize
= keycount
* sizeof(dns_name_t
*);
623 new = isc_mem_get(mctx
, newsize
);
626 memcpy(new, keys
, newsize
);
629 isc_mem_put(mctx
, keys
, oldsize
);
635 isc_mem_put(mctx
, lists
, listcount
* sizeof(*lists
));
637 isc_mem_put(mctx
, stack
, stackcount
* sizeof(*stack
));
639 INSIST(keycount
== addrcount
);
645 return (ISC_R_SUCCESS
);
649 isc_mem_put(mctx
, addrs
, addrcount
* sizeof(isc_sockaddr_t
));
651 for (j
= 0; j
<= i
; j
++) {
654 if (dns_name_dynamic(keys
[j
]))
655 dns_name_free(keys
[j
], mctx
);
656 isc_mem_put(mctx
, keys
[j
], sizeof(dns_name_t
));
658 isc_mem_put(mctx
, keys
, keycount
* sizeof(dns_name_t
*));
661 isc_mem_put(mctx
, lists
, listcount
* sizeof(*lists
));
663 isc_mem_put(mctx
, stack
, stackcount
* sizeof(*stack
));
668 ns_config_putipandkeylist(isc_mem_t
*mctx
, isc_sockaddr_t
**addrsp
,
669 dns_name_t
***keysp
, isc_uint32_t count
)
672 dns_name_t
**keys
= *keysp
;
674 INSIST(addrsp
!= NULL
&& *addrsp
!= NULL
);
676 isc_mem_put(mctx
, *addrsp
, count
* sizeof(isc_sockaddr_t
));
677 for (i
= 0; i
< count
; i
++) {
680 if (dns_name_dynamic(keys
[i
]))
681 dns_name_free(keys
[i
], mctx
);
682 isc_mem_put(mctx
, keys
[i
], sizeof(dns_name_t
));
684 isc_mem_put(mctx
, *keysp
, count
* sizeof(dns_name_t
*));
690 ns_config_getport(const cfg_obj_t
*config
, in_port_t
*portp
) {
691 const cfg_obj_t
*maps
[3];
692 const cfg_obj_t
*options
= NULL
;
693 const cfg_obj_t
*portobj
= NULL
;
697 (void)cfg_map_get(config
, "options", &options
);
701 maps
[i
++] = ns_g_defaults
;
704 result
= ns_config_get(maps
, "port", &portobj
);
705 INSIST(result
== ISC_R_SUCCESS
);
706 if (cfg_obj_asuint32(portobj
) >= ISC_UINT16_MAX
) {
707 cfg_obj_log(portobj
, ns_g_lctx
, ISC_LOG_ERROR
,
708 "port '%u' out of range",
709 cfg_obj_asuint32(portobj
));
710 return (ISC_R_RANGE
);
712 *portp
= (in_port_t
)cfg_obj_asuint32(portobj
);
713 return (ISC_R_SUCCESS
);
717 ns_config_getkeyalgorithm(const char *str
, dns_name_t
**name
)
719 if (strcasecmp(str
, "hmac-md5") == 0 ||
720 strcasecmp(str
, "hmac-md5.sig-alg.reg.int") == 0 ||
721 strcasecmp(str
, "hmac-md5.sig-alg.reg.int.") == 0)
724 *name
= dns_tsig_hmacmd5_name
;
725 return (ISC_R_SUCCESS
);
727 return (ISC_R_NOTFOUND
);