[bind10-dev] XfrOut questions

[Michal 'vorner' Vaner]

Hello

I believe there are few strange things in XfrOut.

One of them is, every time I want to modify it, it takes quite a lot of time to
get trough it to find out where. I don't know why, maybe just the C++ is more
strict in its typing, so it is easier to follow.

Anyway, while reading trough it today, I found two concrete things:
• This is at the beginning of the program:

  try:
      from libutil_io_python import *
      from pydnspp import *
  except ImportError as e:
      # C++ loadable module may not be installed; even so the xfrout process
      # must keep running, so we warn about it and move forward.
      log.error(XFROUT_IMPORT, str(e))

  This makes sure the program starts even when it can't load the DNS library.
  I didn't try it, but I think it will simply crash the first time any request
  comes, since it won't be able to parse. Or, maybe the exception will be caught
  and the request dropped.

  But, the question is, why is it so important to have the program running even
  when it is completely useless, instead of being a nice program and complaining
  loudly that the installation is corrupted?

• Looking at the spec file, it seems XfrOut is using its own TSIG keyring instead of
  the global one. Is there any reason for this?

Does anybody know? Should these be changed?

With regards

-- 
_(){ _&_;};_

Michal 'vorner' Vaner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/bind10-dev/attachments/20110711/1d1c4775/attachment.bin>