BIND 10 #1643: TSIG configuration syntax should be as consistent as possible for auth and xfrout

BIND 10 Development do-not-reply at isc.org
Mon Feb 20 19:02:08 UTC 2012


#1643: TSIG configuration syntax should be as consistent as possible for auth and
xfrout
-------------------------------------+-------------------------------------
                   Reporter:         |                 Owner:  UnAssigned
  jinmei                             |                Status:  reviewing
                       Type:         |             Milestone:
  defect                             |  Sprint-20120221
                   Priority:  major  |            Resolution:
                  Component:         |             Sensitive:  0
  configuration                      |           Sub-Project:  DNS
                   Keywords:         |  Estimated Difficulty:  5
            Defect Severity:  N/A    |           Total Hours:  0
Feature Depending on Ticket:         |
        Add Hours to Ticket:  0      |
                  Internal?:  0      |
-------------------------------------+-------------------------------------
Changes (by vorner):

 * owner:  vorner => UnAssigned
 * status:  accepted => reviewing


Comment:

 It should be ready for review. The branch contains some framework changes,
 namely:
  * Ability to add a remote config by its name instead of a spec file.
  * Port of C++ tsig keyring, keeping up to date to the global keyring (it
 was not wrapped, because we have a separate incompatible implementation of
 the config session in python).
  * The actual changes to xfrout.

 If needed be, the steps could be reviewed separately (with borders between
 them at c540444d6220133977db22de4c0adc116afd24a6 and
 73506bcbd64a043f7e66c193a15b2d09a0a47bf0, the last 2 commits are fixes
 when trying it out and documentation).

 I guess it should have a changelog, more because user needs to remove old
 configuration option from xfrout:
 {{{
 [func]*         vorner
 Xfrout now uses the global TSIG keyring, instead of its own. This means
 the
 keys need to be set only once (in tsig_keys/keys). However, the old
 configuration of Xfrout/tsig_kes need to be removed for Xfrout to work.
 }}}

-- 
Ticket URL: <http://bind10.isc.org/ticket/1643#comment:5>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list