1633. [bug] named should return NOTIMP to update requests to a

                        slaves without a allow-update-forwarding acl specified.
                        [RT #11331]

diff --git a/CHANGES b/CHANGES
index 60497957ec9cefb26fda46138a020ff83d247e26..40314bbfb532cdf786a82512bf6f0234a3f2817f 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+1633.  [bug]           named should return NOTIMP to update requests to a
+                       slaves without a allow-update-forwarding acl specified.
+                       [RT #11331]
+
 1632.  [bug]           nsupdate failed to send prerequisite only UPDATE
                        messages. [RT #11288]
 

diff --git a/bin/named/update.c b/bin/named/update.c
index 501bdaef64269b37d257c1c9b836397edde52a7a..b884f61a00d5204f9bce43e3d2b8786c58b9afab 100644 (file)
--- a/bin/named/update.c
+++ b/bin/named/update.c
@@ -15,7 +15,7 @@
  * PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: update.c,v 1.88.2.8 2004/04/15 02:16:25 marka Exp $ */
+/* $Id: update.c,v 1.88.2.9 2004/05/12 06:39:11 marka Exp $ */
 
 #include <config.h>
 
@@ -1973,6 +1973,10 @@ ns_update_start(ns_client_t *client, isc_result_t sigresult) {
                CHECK(send_update_event(client, zone));
                break;
        case dns_zone_slave:
+               if (dns_zone_getforwardacl(zone) == NULL) {
+                       result = DNS_R_NOTIMP;
+                       goto failure;
+               }
                CHECK(ns_client_checkacl(client, "update forwarding",
                                         dns_zone_getforwardacl(zone),
                                         ISC_FALSE, ISC_LOG_ERROR));