freebsd-dev/contrib/bind/bin/named/ns_init.c
Peter Wemm 6b6ac9438f Import bind v8.2.2.p5, minus the crypto for the time being. The bind
package does have BXA export approval, but the licensing strings on the
dnssafe code are a bit unpleasant.  The crypto is easy to restore and bind
will run without it - just without full dnssec support.

Obtained from:	The Internet Software Consortium (www.isc.org)
1999-11-30 02:43:11 +00:00

565 lines
14 KiB
C

#if !defined(lint) && !defined(SABER)
static const char sccsid[] = "@(#)ns_init.c 4.38 (Berkeley) 3/21/91";
static const char rcsid[] = "$Id: ns_init.c,v 8.63 1999/10/15 19:49:04 vixie Exp $";
#endif /* not lint */
/*
* Copyright (c) 1986, 1990
* The Regents of the University of California. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
* 3. All advertising materials mentioning features or use of this software
* must display the following acknowledgement:
* This product includes software developed by the University of
* California, Berkeley and its contributors.
* 4. Neither the name of the University nor the names of its contributors
* may be used to endorse or promote products derived from this software
* without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*/
/*
* Portions Copyright (c) 1993 by Digital Equipment Corporation.
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies, and that
* the name of Digital Equipment Corporation not be used in advertising or
* publicity pertaining to distribution of the document or software without
* specific, written prior permission.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND DIGITAL EQUIPMENT CORP. DISCLAIMS ALL
* WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES
* OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL DIGITAL EQUIPMENT
* CORPORATION BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
* DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
* PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
* ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
* SOFTWARE.
*/
/*
* Portions Copyright (c) 1996-1999 by Internet Software Consortium.
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM DISCLAIMS
* ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
* OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL INTERNET SOFTWARE
* CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
* DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
* PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
* ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
* SOFTWARE.
*/
#include "port_before.h"
#include <sys/types.h>
#include <sys/param.h>
#include <sys/socket.h>
#include <sys/stat.h>
#include <sys/un.h>
#include <netinet/in.h>
#include <arpa/nameser.h>
#include <arpa/inet.h>
#include <ctype.h>
#include <errno.h>
#include <resolv.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <syslog.h>
#include <time.h>
#include <isc/eventlib.h>
#include <isc/logging.h>
#include <isc/memcluster.h>
#include <isc/dst.h>
#include "port_after.h"
#include "named.h"
#ifdef DEBUG
static void content_zone(int, int);
#endif
/*
* Set new refresh time for zone. Use a random number in the last half of
* the refresh limit; we want it to be substantially correct while still
* preventing slave synchronization.
*/
void
ns_refreshtime(struct zoneinfo *zp, time_t timebase) {
u_long refresh = (zp->z_refresh > 0) ? zp->z_refresh : INIT_REFRESH;
time_t half = (refresh + 1) / 2;
zp->z_time = timebase + half + (rand() % half);
}
/*
* Set new retry time for zone.
*/
void
ns_retrytime(struct zoneinfo *zp, time_t timebase) {
zp->z_time = timebase + zp->z_retry;
}
/*
* Read configuration file and save it as internal state.
*/
void
ns_init(const char *conffile) {
struct zoneinfo *zp;
static int loads = 0; /* number of times loaded */
ns_debug(ns_log_config, 1, "ns_init(%s)", conffile);
gettime(&tt);
if (loads == 0) {
/* Init zone data. */
zones = NULL;
INIT_LIST(freezones);
INIT_LIST(reloadingzones);
nzones = 0;
make_new_zones();
/* Init cache. */
zones[0].z_type = z_cache;
zones[0].z_origin = savestr("", 1);
/* Allocate cache hash table, formerly the root hash table. */
hashtab = savehash((struct hashbuf *)NULL);
/* Allocate root-hints/file-cache hash table. */
fcachetab = savehash((struct hashbuf *)NULL);
/* Init other misc stuff. */
dst_init();
init_configuration();
} else {
/* Mark previous zones as not yet found in boot file. */
block_signals();
for (zp = &zones[1]; zp < &zones[nzones]; zp++)
if (zp->z_type != z_nil) {
zp->z_flags &= ~Z_FOUND;
if (LINKED(zp, z_reloadlink))
UNLINK(reloadingzones, zp,
z_reloadlink);
}
unblock_signals();
}
#ifdef DEBUG
if (debug >= 3) {
ns_debug(ns_log_config, 3, "content of zones before loading");
content_zone(nzones - 1, 3);
}
#endif
load_configuration(conffile);
/* Erase all old zones that were not found. */
for (zp = &zones[0]; zp < &zones[nzones]; zp++) {
if (zp->z_type == z_cache)
continue;
if (zp->z_type != z_nil && (zp->z_flags & Z_FOUND) == 0)
remove_zone(zp, "removed");
}
/* Reload parent zones of zones removed */
for (zp = &zones[0]; zp < &zones[nzones]; zp++) {
if (zp->z_type == z_cache)
continue;
if (zp->z_type != z_nil &&
(zp->z_flags & Z_PARENT_RELOAD) != 0) {
zp->z_flags &= ~Z_PARENT_RELOAD;
purgeandload(zp);
}
}
#ifdef DEBUG
if (debug >= 2) {
ns_debug(ns_log_config, 2, "content of zones after loading");
content_zone(nzones-1, 2);
}
#endif
ns_debug(ns_log_config, 1, "exit ns_init()");
loads++;
}
void
zoneinit(struct zoneinfo *zp) {
struct stat sb;
int result;
/*
* Try to load zone from backup file,
* if one was specified and it exists.
* If not, or if the data are out of date,
* we will refresh the zone from a primary
* immediately.
*/
if (zp->z_source == NULL)
return;
result = stat(zp->z_source, &sb);
if (result != -1) {
ns_stopxfrs(zp);
purge_zone(zp->z_origin, hashtab, zp->z_class);
}
if (result == -1 ||
db_load(zp->z_source, zp->z_origin, zp, NULL, ISNOTIXFR))
{
/*
* Set zone to be refreshed immediately.
*/
zp->z_refresh = INIT_REFRESH;
zp->z_retry = INIT_REFRESH;
if ((zp->z_flags & (Z_QSERIAL|Z_XFER_RUNNING)) == 0) {
zp->z_time = tt.tv_sec;
sched_zone_maint(zp);
}
} else {
zp->z_flags |= Z_AUTH;
zp->z_flags &= ~Z_NEED_RELOAD;
ns_refreshtime(zp, tt.tv_sec);
sched_zone_maint(zp);
}
}
/*
* Purge the zone and reload all parent zones. This needs to be done when
* we unload a zone, since the child zone will have stomped the parent's
* delegation to that child when it was first loaded.
*/
void
do_reload(const char *domain, int type, int class, int mark) {
struct zoneinfo *zp;
ns_debug(ns_log_config, 1, "do_reload: %s %d %d %d",
*domain ? domain : ".", type, class, mark);
/*
* Check if the zone has changed type. If so, we might not need to
* do any purging or parent reloading.
*
* If the new zone is a master zone, then it will have purged the
* old data and loaded, so we don't need to do anything.
*
* If the new zone is a slave or stub zone and has successfully loaded,
* then we don't need to do anything either.
*
* NOTE: we take care not to match ourselves.
*/
zp = find_zone(domain, class);
if (zp != NULL &&
(type != z_master && zp->z_type == z_master) ||
(type != z_slave && zp->z_type == z_slave && zp->z_serial != 0) ||
(type != z_stub && zp->z_type == z_stub && zp->z_serial != 0))
return;
/*
* Clean up any leftover data.
*/
purge_zone(domain, hashtab, class);
/*
* Reload
*/
while (*domain) {
const char *s;
int escaped;
/*
* XXX this is presentation level hair and belongs elsewhere.
*/
escaped = 0;
for (s = domain; *s != '\0'; s++) {
if (!escaped) {
if (*s == '.')
break;
else if (*s == '\\')
escaped = 1;
} else
escaped = 0;
}
if (*s != '\0')
domain = s + 1; /* skip label and its separator */
else
domain = ""; /* root zone */
zp = find_zone(domain, class);
if (zp != NULL) {
ns_debug(ns_log_config, 1, "do_reload: matched %s",
*domain ? domain : ".");
if (mark)
zp->z_flags |= Z_PARENT_RELOAD;
else
purgeandload(zp);
break;
}
}
}
void
purgeandload(struct zoneinfo *zp) {
if (zp->z_type == Z_HINT)
purge_zone(zp->z_origin, fcachetab, zp->z_class);
else
purge_zone(zp->z_origin, hashtab, zp->z_class);
zp->z_flags &= ~Z_AUTH;
switch (zp->z_type) {
case Z_SECONDARY:
case Z_STUB:
zoneinit(zp);
break;
case Z_PRIMARY:
if (db_load(zp->z_source, zp->z_origin, zp, 0, ISNOTIXFR) == 0)
zp->z_flags |= Z_AUTH;
break;
case Z_HINT:
case Z_CACHE:
(void)db_load(zp->z_source, zp->z_origin, zp, 0, ISNOTIXFR);
break;
}
}
#ifdef DEBUG
/* prints out the content of zones */
static void
content_zone(int end, int level) {
int i;
for (i = 0; i <= end; i++) {
printzoneinfo(i, ns_log_config, level);
}
}
#endif
enum context
ns_ptrcontext(owner)
const char *owner;
{
if (ns_samedomain(owner, "in-addr.arpa") ||
ns_samedomain(owner, "ip6.int"))
return (hostname_ctx);
return (domain_ctx);
}
enum context
ns_ownercontext(type, transport)
int type;
enum transport transport;
{
enum context context = domain_ctx;
switch (type) {
case T_A:
case T_WKS:
case T_MX:
switch (transport) {
case update_trans:
case primary_trans:
case secondary_trans:
context = owner_ctx;
break;
case response_trans:
context = hostname_ctx;
break;
default:
panic("impossible condition in ns_ownercontext()",
NULL);
}
break;
case T_MB:
case T_MG:
context = mailname_ctx;
break;
default:
/* Nothing to do. */
break;
}
return (context);
}
int
ns_nameok(const struct qinfo *qry, const char *name, int class,
struct zoneinfo *zp, enum transport transport,
enum context context,
const char *owner,
struct in_addr source)
{
enum severity severity = not_set;
int ok = 1;
if (zp != NULL)
severity = zp->z_checknames;
if (severity == not_set)
severity = server_options->check_names[transport];
if (severity == ignore)
return (1);
switch (context) {
case domain_ctx:
ok = (class != C_IN) || res_dnok(name);
break;
case owner_ctx:
ok = (class != C_IN) || res_ownok(name);
break;
case mailname_ctx:
ok = res_mailok(name);
break;
case hostname_ctx:
ok = res_hnok(name);
break;
default:
ns_panic(ns_log_default, 1,
"unexpected context %d in ns_nameok", (int)context);
}
if (!ok) {
char *q, *s, *o;
if (source.s_addr == INADDR_ANY)
s = savestr(transport_strings[transport], 0);
else {
s = newstr(strlen(transport_strings[transport]) +
sizeof " from [000.000.000.000] for [000.000.000.000]", 0);
if (s)
if ( (transport == response_trans) &&
(qry != NULL) ) {
if ( qry->q_flags & Q_PRIMING ) {
sprintf(s, "%s from [%s] for priming",
transport_strings[transport],
inet_ntoa(source));
} else if ( qry->q_flags & Q_ZSERIAL ) {
sprintf(s, "%s from [%s] for soacheck",
transport_strings[transport],
inet_ntoa(source));
} else if ( qry->q_flags & Q_SYSTEM ) {
sprintf(s, "%s from [%s] for sysquery",
transport_strings[transport],
inet_ntoa(source));
} else {
q=strdup(inet_ntoa(qry->q_from.sin_addr));
sprintf(s, "%s from [%s] for [%s]",
transport_strings[transport],
inet_ntoa(source),
q != NULL ? q : "memget failed");
free(q);
}
} else {
sprintf(s, "%s from [%s]",
transport_strings[transport],
inet_ntoa(source));
}
}
if (ns_samename(owner, name) == 1)
o = savestr("", 0);
else {
const char *t = (*owner == '\0') ? "." : owner;
o = newstr(strlen(t) + sizeof " (owner \"\")", 0);
if (o)
sprintf(o, " (owner \"%s\")", t);
}
/*
* We use log_write directly here to avoid duplicating
* the message formatting and arguments.
*/
log_write(log_ctx, ns_log_default,
(transport != response_trans) ||
(o == NULL) || (s == NULL) ||
( (qry != NULL) &&
(qry->q_flags & (Q_PRIMING|Q_ZSERIAL)) ) ?
log_warning : log_info,
"%s name \"%s\"%s %s (%s) is invalid - %s",
context_strings[context],
name, o != NULL ? o : "[memget failed]",
p_class(class),
s != NULL ? s : "[memget failed]",
(severity == fail) ?
"rejecting" : "proceeding anyway");
if (severity == warn)
ok = 1;
if (s != NULL)
freestr(s);
if (o != NULL)
freestr(o);
}
return (ok);
}
int
ns_wildcard(const char *name) {
if (*name != '*')
return (0);
return (*++name == '\0');
}
void
ns_shutdown() {
struct zoneinfo *zp;
#ifdef BIND_NOTIFY
ns_unnotify();
#endif
/* Erase zones. */
for (zp = &zones[0]; zp < &zones[nzones]; zp++) {
if (zp->z_type) {
if (zp->z_type != z_hint && zp->z_type != z_cache) {
ns_stopxfrs(zp);
purge_zone(zp->z_origin, hashtab, zp->z_class);
} else if (zp->z_type == z_hint)
purge_zone(zp->z_origin, fcachetab,
zp->z_class);
free_zone_contents(zp, 1);
}
}
/* Erase the cache. */
clean_cache(hashtab, 1);
hashtab->h_cnt = 0; /* ??? */
rm_hash(hashtab);
hashtab = NULL;
clean_cache(fcachetab, 1);
fcachetab->h_cnt = 0; /* ??? */
rm_hash(fcachetab);
fcachetab = NULL;
if (zones != NULL)
memput(zones, nzones * sizeof *zones);
zones = NULL;
freeComplaints();
shutdown_configuration();
}