BIND 10 #1643: TSIG configuration syntax should be as consistent as possible for auth and xfrout
BIND 10 Development
do-not-reply at isc.org
Mon Feb 20 19:02:08 UTC 2012
#1643: TSIG configuration syntax should be as consistent as possible for auth and
xfrout
-------------------------------------+-------------------------------------
Reporter: | Owner: UnAssigned
jinmei | Status: reviewing
Type: | Milestone:
defect | Sprint-20120221
Priority: major | Resolution:
Component: | Sensitive: 0
configuration | Sub-Project: DNS
Keywords: | Estimated Difficulty: 5
Defect Severity: N/A | Total Hours: 0
Feature Depending on Ticket: |
Add Hours to Ticket: 0 |
Internal?: 0 |
-------------------------------------+-------------------------------------
Changes (by vorner):
* owner: vorner => UnAssigned
* status: accepted => reviewing
Comment:
It should be ready for review. The branch contains some framework changes,
namely:
* Ability to add a remote config by its name instead of a spec file.
* Port of C++ tsig keyring, keeping up to date to the global keyring (it
was not wrapped, because we have a separate incompatible implementation of
the config session in python).
* The actual changes to xfrout.
If needed be, the steps could be reviewed separately (with borders between
them at c540444d6220133977db22de4c0adc116afd24a6 and
73506bcbd64a043f7e66c193a15b2d09a0a47bf0, the last 2 commits are fixes
when trying it out and documentation).
I guess it should have a changelog, more because user needs to remove old
configuration option from xfrout:
{{{
[func]* vorner
Xfrout now uses the global TSIG keyring, instead of its own. This means
the
keys need to be set only once (in tsig_keys/keys). However, the old
configuration of Xfrout/tsig_kes need to be removed for Xfrout to work.
}}}
--
Ticket URL: <http://bind10.isc.org/ticket/1643#comment:5>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list