prep 9.11.5rc1

diff --git a/CHANGES b/CHANGES
index 704e5132f4c8771a51054eb5a3963dd2a4798514..486f0df83c2a5de7388a1a37790a3adfc2f8e8ae 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+       --- 9.11.5rc1 released ---
+
 5038.  [bug]           Chaosnet addresses were compared incorrectly.
                        [GL #562]
 

diff --git a/README b/README
index 07d3b95e2e3266ba872fab85abd2837906f7e04b..c27c307faa9752a756a8e4a93b564f30db27b28c 100644 (file)
--- a/README
+++ b/README
@@ -250,6 +250,15 @@ BIND 9.11.4
 BIND 9.11.4 is a maintenance release, and addresses the security flaw
 disclosed in CVE-2018-5738.
 
+BIND 9.11.5
+
+BIND 9.11.5 is a maintenance release, and also addresses CVE-2018-5741 by
+correcting faulty documentation and introducing the following new feature:
+
+  * New krb5-selfsub and ms-selfsub rule types for update-policy
+    statements allow updating of subdomains based on a Kerberos or Active
+    Directory machine principal.
+
 Building BIND
 
 BIND requires a UNIX or Linux system with an ANSI C compiler, basic POSIX

diff --git a/README.md b/README.md
index 291c22105ced8dedde0ebfe6e951826cf1f1f3ac..5c72e1959ed0b9093c1f02c7fdbb890ef76f2ac5 100644 (file)
--- a/README.md
+++ b/README.md
@@ -266,6 +266,16 @@ disclosed in CVE-2017-3145.
 BIND 9.11.4 is a maintenance release, and addresses the security flaw
 disclosed in CVE-2018-5738.
 
+#### BIND 9.11.5
+
+BIND 9.11.5 is a maintenance release, and also addresses CVE-2018-5741
+by correcting faulty documentation and introducing the following new
+feature:
+
+* New `krb5-selfsub` and `ms-selfsub` rule types for `update-policy`
+  statements allow updating of subdomains based on a Kerberos or
+  Active Directory machine principal.
+
 ### <a name="build"/> Building BIND
 
 BIND requires a UNIX or Linux system with an ANSI C compiler, basic POSIX

diff --git a/bin/named/named.conf.5 b/bin/named/named.conf.5
index cb21f43f770bb07d7cb4f1bec0e2b25ab7645608..2f3f7895844975d50a1c30be93b1be02575eab7f 100644 (file)
--- a/bin/named/named.conf.5
+++ b/bin/named/named.conf.5
@@ -891,10 +891,10 @@ view \fIstring\fR [ \fIclass\fR ] {
                    | slave | static\-stub | stub );
                update\-check\-ksk \fIboolean\fR;
                update\-policy ( local | { ( deny | grant ) \fIstring\fR (
-                   6to4\-self | external | krb5\-self | krb5\-subdomain |
-                   ms\-self | ms\-subdomain | name | self | selfsub |
-                   selfwild | subdomain | tcp\-self | wildcard | zonesub )
-                   [ \fIstring\fR ] \fIrrtypelist\fR; \&.\&.\&. };
+                   6to4\-self | external | krb5\-self | krb5\-selfsub |
+                   krb5\-subdomain | ms\-self | ms\-selfsub | ms\-subdomain |
+                   name | self | selfsub | selfwild | subdomain | tcp\-self
+                   | wildcard | zonesub ) [ \fIstring\fR ] \fIrrtypelist\fR; \&.\&.\&. };
                use\-alt\-transfer\-source \fIboolean\fR;
                zero\-no\-soa\-ttl \fIboolean\fR;
                zone\-statistics ( full | terse | none | \fIboolean\fR );
@@ -996,9 +996,10 @@ zone \fIstring\fR [ \fIclass\fR ] {
            | static\-stub | stub );
        update\-check\-ksk \fIboolean\fR;
        update\-policy ( local | { ( deny | grant ) \fIstring\fR ( 6to4\-self |
-           external | krb5\-self | krb5\-subdomain | ms\-self | ms\-subdomain
-           | name | self | selfsub | selfwild | subdomain | tcp\-self |
-           wildcard | zonesub ) [ \fIstring\fR ] \fIrrtypelist\fR; \&.\&.\&. };
+           external | krb5\-self | krb5\-selfsub | krb5\-subdomain | ms\-self
+           | ms\-selfsub | ms\-subdomain | name | self | selfsub | selfwild
+           | subdomain | tcp\-self | wildcard | zonesub ) [ \fIstring\fR ]
+           \fIrrtypelist\fR; \&.\&.\&. };
        use\-alt\-transfer\-source \fIboolean\fR;
        zero\-no\-soa\-ttl \fIboolean\fR;
        zone\-statistics ( full | terse | none | \fIboolean\fR );

diff --git a/bin/named/named.conf.docbook b/bin/named/named.conf.docbook
index f8c94eb3d84e39b9252395fee2514a594fd37973..a4bd6894f64068f6295db1a7a170562bf048262f 100644 (file)
--- a/bin/named/named.conf.docbook
+++ b/bin/named/named.conf.docbook
@@ -863,10 +863,10 @@ view <replaceable>string</replaceable> [ <replaceable>class</replaceable> ] {
                    | slave | static-stub | stub );
                update-check-ksk <replaceable>boolean</replaceable>;
                update-policy ( local | { ( deny | grant ) <replaceable>string</replaceable> (
-                   6to4-self | external | krb5-self | krb5-subdomain |
-                   ms-self | ms-subdomain | name | self | selfsub |
-                   selfwild | subdomain | tcp-self | wildcard | zonesub )
-                   [ <replaceable>string</replaceable> ] <replaceable>rrtypelist</replaceable>; ... };
+                   6to4-self | external | krb5-self | krb5-selfsub |
+                   krb5-subdomain | ms-self | ms-selfsub | ms-subdomain |
+                   name | self | selfsub | selfwild | subdomain | tcp-self
+                   | wildcard | zonesub ) [ <replaceable>string</replaceable> ] <replaceable>rrtypelist</replaceable>; ... };
                use-alt-transfer-source <replaceable>boolean</replaceable>;
                zero-no-soa-ttl <replaceable>boolean</replaceable>;
                zone-statistics ( full | terse | none | <replaceable>boolean</replaceable> );
@@ -964,9 +964,10 @@ zone <replaceable>string</replaceable> [ <replaceable>class</replaceable> ] {
            | static-stub | stub );
        update-check-ksk <replaceable>boolean</replaceable>;
        update-policy ( local | { ( deny | grant ) <replaceable>string</replaceable> ( 6to4-self |
-           external | krb5-self | krb5-subdomain | ms-self | ms-subdomain
-           | name | self | selfsub | selfwild | subdomain | tcp-self |
-           wildcard | zonesub ) [ <replaceable>string</replaceable> ] <replaceable>rrtypelist</replaceable>; ... };
+           external | krb5-self | krb5-selfsub | krb5-subdomain | ms-self
+           | ms-selfsub | ms-subdomain | name | self | selfsub | selfwild
+           | subdomain | tcp-self | wildcard | zonesub ) [ <replaceable>string</replaceable> ]
+           <replaceable>rrtypelist</replaceable>; ... };
        use-alt-transfer-source <replaceable>boolean</replaceable>;
        zero-no-soa-ttl <replaceable>boolean</replaceable>;
        zone-statistics ( full | terse | none | <replaceable>boolean</replaceable> );

diff --git a/bin/named/named.conf.html b/bin/named/named.conf.html
index cfcfe69b83dcec49bce6ca88301dcc28221cceb3..d3144942bc40c5af9b704bdd2b224608148b2aaf 100644 (file)
--- a/bin/named/named.conf.html
+++ b/bin/named/named.conf.html
@@ -856,10 +856,10 @@ view
                    | slave | static-stub | stub );<br>
                update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
                update-policy ( local | { ( deny | grant ) <em class="replaceable"><code>string</code></em> (<br>
-                   6to4-self | external | krb5-self | krb5-subdomain |<br>
-                   ms-self | ms-subdomain | name | self | selfsub |<br>
-                   selfwild | subdomain | tcp-self | wildcard | zonesub )<br>
-                   [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
+                   6to4-self | external | krb5-self | krb5-selfsub |<br>
+                   krb5-subdomain | ms-self | ms-selfsub | ms-subdomain |<br>
+                   name | self | selfsub | selfwild | subdomain | tcp-self<br>
+                   | wildcard | zonesub ) [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
                use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
                zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
                zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
@@ -958,9 +958,10 @@ zone
            | static-stub | stub );<br>
        update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
        update-policy ( local | { ( deny | grant ) <em class="replaceable"><code>string</code></em> ( 6to4-self |<br>
-           external | krb5-self | krb5-subdomain | ms-self | ms-subdomain<br>
-           | name | self | selfsub | selfwild | subdomain | tcp-self |<br>
-           wildcard | zonesub ) [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
+           external | krb5-self | krb5-selfsub | krb5-subdomain | ms-self<br>
+           | ms-selfsub | ms-subdomain | name | self | selfsub | selfwild<br>
+           | subdomain | tcp-self | wildcard | zonesub ) [ <em class="replaceable"><code>string</code></em> ]<br>
+           <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
        use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
        zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
        zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>

diff --git a/bin/rndc/rndc.8 b/bin/rndc/rndc.8
index 38d23df44c68e9a502bcfb253aad0cda16e3b10b..a7e2dc610d6de50e95bc4c04275f63aa85050545 100644 (file)
--- a/bin/rndc/rndc.8
+++ b/bin/rndc/rndc.8
@@ -310,7 +310,7 @@ See also
 \fBrndc trace\fR\&.
 .RE
 .PP
-\fBnta \fR\fB[( \-d | \-f | \-r | \-l \fIduration\fR)]\fR\fB \fR\fB\fIdomain\fR\fR\fB \fR\fB[\fIview\fR]\fR\fB \fR
+\fBnta \fR\fB[( \-class \fIclass\fR | \-dump | \-force | \-remove | \-lifetime \fIduration\fR)]\fR\fB \fR\fB\fIdomain\fR\fR\fB \fR\fB[\fIview\fR]\fR\fB \fR
 .RS 4
 Sets a DNSSEC negative trust anchor (NTA) for
 \fBdomain\fR, with a lifetime of
@@ -342,7 +342,7 @@ option\&. TTL\-style suffixes can be used to specify the lifetime in seconds, mi
 to zero is equivalent to
 \fB\-remove\fR\&.
 .sp
-If
+If the
 \fB\-dump\fR
 is used, any other arguments are ignored, and a list of existing NTAs is printed (note that this may include NTAs that are expired but have not yet been cleaned up)\&.
 .sp
@@ -354,11 +354,16 @@ option in the Administrator Reference Manual for details)\&. If data can be vali
 \fB\-force\fR
 overrides this behavior and forces an NTA to persist for its entire lifetime, regardless of whether data could be validated if the NTA were not present\&.
 .sp
+The view class can be specified with
+\fB\-class\fR\&. The default is class
+\fBIN\fR, which is the only class for which DNSSEC is currently supported\&.
+.sp
 All of these options can be shortened, i\&.e\&., to
 \fB\-l\fR,
 \fB\-r\fR,
-\fB\-d\fR, and
-\fB\-f\fR\&.
+\fB\-d\fR,
+\fB\-f\fR, and
+\fB\-c\fR\&.
 .RE
 .PP
 \fBquerylog\fR [ on | off ]

diff --git a/bin/rndc/rndc.html b/bin/rndc/rndc.html
index c4694bdc566dfeb583f233341f78fcf85580b064..4bb7649b3527b0ce18aeb526fbd74dcba6fd28b3 100644 (file)
--- a/bin/rndc/rndc.html
+++ b/bin/rndc/rndc.html
@@ -417,7 +417,7 @@
          </p>
        </dd>
 <dt><span class="term"><strong class="userinput"><code>nta
-       [<span class="optional">( -d | -f | -r | -l <em class="replaceable"><code>duration</code></em>)</span>]
+           [<span class="optional">( -class <em class="replaceable"><code>class</code></em> | -dump | -force | -remove | -lifetime <em class="replaceable"><code>duration</code></em>)</span>]
        <em class="replaceable"><code>domain</code></em>
        [<span class="optional"><em class="replaceable"><code>view</code></em></span>]
        </code></strong></span></dt>
@@ -465,7 +465,7 @@
            is equivalent to <code class="option">-remove</code>.
          </p>
          <p>
-           If <code class="option">-dump</code> is used, any other arguments
+           If the <code class="option">-dump</code> is used, any other arguments
            are ignored, and a list of existing NTAs is printed
            (note that this may include NTAs that are expired but
            have not yet been cleaned up).
@@ -482,10 +482,15 @@
            lifetime, regardless of whether data could be
            validated if the NTA were not present.
          </p>
+         <p>
+           The view class can be specified with <code class="option">-class</code>.
+           The default is class <strong class="userinput"><code>IN</code></strong>, which is
+           the only class for which DNSSEC is currently supported.
+         </p>
          <p>
            All of these options can be shortened, i.e., to
            <code class="option">-l</code>, <code class="option">-r</code>, <code class="option">-d</code>,
-           and <code class="option">-f</code>.
+           <code class="option">-f</code>, and <code class="option">-c</code>.
          </p>
        </dd>
 <dt><span class="term"><strong class="userinput"><code>querylog</code></strong> [<span class="optional"> on | off </span>] </span></dt>

diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html
index 47fe522cce1a7e4018811a74edcbc0b30791a925..dfcf90d4c3e812195d3b68a195255d7ebfbe69f3 100644 (file)
--- a/doc/arm/Bv9ARM.ch01.html
+++ b/doc/arm/Bv9ARM.ch01.html
@@ -616,6 +616,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html
index 457e7cb2d1ed98aa9ce9f7f49430d090d931b3eb..f4e3c66bfba34e3beec4ddb468507eb5dd87fa23 100644 (file)
--- a/doc/arm/Bv9ARM.ch02.html
+++ b/doc/arm/Bv9ARM.ch02.html
@@ -151,6 +151,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html
index 7beeef4a201b99b3ca71d4a47efc3d90fc71602d..814a9a5630ff189c08ab1245622b72285999eba5 100644 (file)
--- a/doc/arm/Bv9ARM.ch03.html
+++ b/doc/arm/Bv9ARM.ch03.html
@@ -759,6 +759,6 @@ controls {
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html
index bb97165b350fb93e37367f5fad10ced9eab3f4cd..099c3c006fd4a4488303a12f5821b53aaba38b91 100644 (file)
--- a/doc/arm/Bv9ARM.ch04.html
+++ b/doc/arm/Bv9ARM.ch04.html
@@ -2867,6 +2867,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html
index 3615fed566383eb60f60ee2f5124526705001832..132257539120e85b28ad0df222dfbe635e0a5271 100644 (file)
--- a/doc/arm/Bv9ARM.ch05.html
+++ b/doc/arm/Bv9ARM.ch05.html
@@ -142,6 +142,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html
index 085daa7311f40cf3bf1021605cdacb1df3b35ccf..edf1480044b17fdf00be101d87d17df0701f161c 100644 (file)
--- a/doc/arm/Bv9ARM.ch06.html
+++ b/doc/arm/Bv9ARM.ch06.html
@@ -4687,6 +4687,11 @@ options {
                   <span class="command"><strong>slave</strong></span> zones respectively.
                   It is off by default.
                 </p>
+                <p>
+                  Note: if inline signing is enabled for a zone, the
+                  user-provided <span class="command"><strong>ixfr-from-differences</strong></span>
+                  setting is ignored for that zone.
+                </p>
               </dd>
 <dt><span class="term"><span class="command"><strong>multi-master</strong></span></span></dt>
 <dd>
@@ -9171,7 +9176,7 @@ view "external" {
        <span class="command"><strong>sig-signing-type</strong></span> <em class="replaceable"><code>integer</code></em>;
        <span class="command"><strong>sig-validity-interval</strong></span> <em class="replaceable"><code>integer</code></em> [ <em class="replaceable"><code>integer</code></em> ];
        <span class="command"><strong>update-check-ksk</strong></span> <em class="replaceable"><code>boolean</code></em>;
-       <span class="command"><strong>update-policy</strong></span> ( local | { ( deny | grant ) <em class="replaceable"><code>string</code></em> ( 6to4-self | external | krb5-self | krb5-subdomain | ms-self | ms-subdomain | name | self | selfsub | selfwild | subdomain | tcp-self | wildcard | zonesub ) [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };
+       <span class="command"><strong>update-policy</strong></span> ( local | { ( deny | grant ) <em class="replaceable"><code>string</code></em> ( 6to4-self | external | krb5-self | krb5-selfsub | krb5-subdomain | ms-self | ms-selfsub | ms-subdomain | name | self | selfsub | selfwild | subdomain | tcp-self | wildcard | zonesub ) [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };
        <span class="command"><strong>zero-no-soa-ttl</strong></span> <em class="replaceable"><code>boolean</code></em>;
        <span class="command"><strong>zone-statistics</strong></span> ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );
 };
@@ -10397,7 +10402,7 @@ example.com. NS ns2.example.net.
               has been used to create a shared secret, the identity of
               the key used to authenticate the TKEY exchange will be
               used as the identity of the shared secret.  Some rule types
-              use indentities matching the client's Kerberos principal
+              use identities matching the client's Kerberos principal
               (e.g, <strong class="userinput"><code>"host/machine@REALM"</code></strong>) or
               Windows realm (<strong class="userinput"><code>machine$@REALM</code></strong>).
             </p>
@@ -10417,12 +10422,13 @@ example.com. NS ns2.example.net.
               the rules are checked for each existing record type.
             </p>
             <p>
-              The <em class="replaceable"><code>ruletype</code></em> field has 13
+              The <em class="replaceable"><code>ruletype</code></em> field has 16
               values:
               <code class="varname">name</code>, <code class="varname">subdomain</code>,
               <code class="varname">wildcard</code>, <code class="varname">self</code>,
               <code class="varname">selfsub</code>, <code class="varname">selfwild</code>,
               <code class="varname">krb5-self</code>, <code class="varname">ms-self</code>,
+              <code class="varname">krb5-selfsub</code>, <code class="varname">ms-selfsub</code>,
               <code class="varname">krb5-subdomain</code>,
               <code class="varname">ms-subdomain</code>,
               <code class="varname">tcp-self</code>, <code class="varname">6to4-self</code>,
@@ -10567,12 +10573,41 @@ example.com. NS ns2.example.net.
                     </td>
 <td>
                       <p>
-                        This rule takes a Windows machine principal
-                        (machine$@REALM) for machine in REALM and
-                        and converts it machine.realm allowing the machine
-                        to update machine.realm.  The REALM to be matched
-                        is specified in the <em class="replaceable"><code>identity</code></em>
-                        field.  The name field should be set to "."
+                        When a client sends an UPDATE using a Windows
+                        machine principal (for example, 'machine$@REALM'),
+                        this rule allows records with the absolute name
+                        of 'machine.REALM' to be updated.
+                      </p>
+                      <p>
+                        The realm to be matched is specified in the
+                        <em class="replaceable"><code>identity</code></em> field.
+                      </p>
+                      <p>
+                        The <em class="replaceable"><code>name</code></em> field has
+                        no effect on this rule; it should be set to "."
+                        as a placeholder.
+                      </p>
+                      <p>
+                        For example,
+                        <strong class="userinput"><code>grant EXAMPLE.COM ms-self . A AAAA</code></strong>
+                        allows any machine with a valid principal in
+                        the realm <strong class="userinput"><code>EXAMPLE.COM</code></strong> to update
+                        its own address records.
+                      </p>
+                    </td>
+</tr>
+<tr>
+<td>
+                      <p>
+                        <code class="varname">ms-selfsub</code>
+                      </p>
+                    </td>
+<td>
+                      <p>
+                        This is similar to <span class="command"><strong>ms-self</strong></span>
+                        except it also allows updates to any subdomain of
+                        the name specified in the Windows machine
+                        principal, not just to the name itself.
                       </p>
                     </td>
 </tr>
@@ -10584,13 +10619,32 @@ example.com. NS ns2.example.net.
                     </td>
 <td>
                       <p>
-                        This rule takes a Windows machine principal
-                        (machine$@REALM) for machine in REALM and
-                        converts it to machine.realm allowing the machine
-                        to update subdomains of machine.realm.  The REALM
-                        to be matched is specified in the
+                        When a client sends an UPDATE using a Windows
+                        machine principal (for example, 'machine$@REALM'),
+                        this rule allows any machine in the specified
+                        realm to update any record in the zone or in a
+                        specified subdomain of the zone.
+                      </p>
+                      <p>
+                        The realm to be matched is specified in the
                         <em class="replaceable"><code>identity</code></em> field.
                       </p>
+                      <p>
+                        The <em class="replaceable"><code>name</code></em> field
+                        specifies the subdomain that may be updated.
+                        If set to "." (or any other name at or above
+                        the zone apex), any name in the zone can be
+                        updated.
+                      </p>
+                      <p>
+                        For example, if <span class="command"><strong>update-policy</strong></span>
+                        for the zone "example.com" includes
+                        <strong class="userinput"><code>grant EXAMPLE.COM ms-subdomain hosts.example.com. A AAAA</code></strong>,
+                        any machine with a valid principal in
+                        the realm <strong class="userinput"><code>EXAMPLE.COM</code></strong> will
+                        be able to update address records at or below
+                        "hosts.example.com".
+                      </p>
                     </td>
 </tr>
 <tr>
@@ -10601,12 +10655,47 @@ example.com. NS ns2.example.net.
                     </td>
 <td>
                       <p>
-                        This rule takes a Kerberos machine principal
-                        (host/machine@REALM) for machine in REALM and
-                        and converts it machine.realm allowing the machine
-                        to update machine.realm.  The REALM to be matched
-                        is specified in the <em class="replaceable"><code>identity</code></em>
-                        field. The name field should be set to "."
+                        When a client sends an UPDATE using a
+                        Kerberos machine principal (for example,
+                        'host/machine@REALM'), this rule allows
+                        records with the absolute name of 'machine'
+                        to be updated provided it has been authenticated
+                        by REALM.  This is similar but not identical
+                        to <span class="command"><strong>ms-self</strong></span> due to the
+                        'machine' part of the Kerberos principal
+                        being an absolute name instead of a unqualified
+                        name.
+                      </p>
+                      <p>
+                        The realm to be matched is specified in the
+                        <em class="replaceable"><code>identity</code></em> field.
+                      </p>
+                      <p>
+                        The <em class="replaceable"><code>name</code></em> field has
+                        no effect on this rule; it should be set to "."
+                        as a placeholder.
+                      </p>
+                      <p>
+                        For example,
+                        <strong class="userinput"><code>grant EXAMPLE.COM krb5-self . A AAAA</code></strong>
+                        allows any machine with a valid principal in
+                        the realm <strong class="userinput"><code>EXAMPLE.COM</code></strong> to update
+                        its own address records.
+                      </p>
+                    </td>
+</tr>
+<tr>
+<td>
+                      <p>
+                        <code class="varname">krb5-selfsub</code>
+                      </p>
+                    </td>
+<td>
+                      <p>
+                        This is similar to <span class="command"><strong>krb5-self</strong></span>
+                        except it also allows updates to any subdomain of
+                        the name specified in the 'machine' part of the
+                        Kerberos principal, not just to the name itself.
                       </p>
                     </td>
 </tr>
@@ -10618,13 +10707,11 @@ example.com. NS ns2.example.net.
                     </td>
 <td>
                       <p>
-                        This rule takes a Kerberos machine principal
-                        (host/machine@REALM) for machine in REALM and
-                        converts it to machine.realm allowing the machine
-                        to update subdomains of machine.realm.  The REALM
-                        to be matched is specified in the
-                        <em class="replaceable"><code>identity</code></em> field. The
-                        name field should be set to "."
+                        This rule is identical to
+                        <span class="command"><strong>ms-subdomain</strong></span>, except that it works
+                        with Kerberos machine principals (i.e.,
+                        'host/machine@REALM') rather than Windows machine
+                        principals.
                       </p>
                     </td>
 </tr>
@@ -14573,6 +14660,6 @@ HOST-127.EXAMPLE. MX 0 .
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html
index 4b347c1252e53612653d749dc7a47b6ebabc9dea..188aa50d6387cce04f4f51ecc9272426ec3bf481 100644 (file)
--- a/doc/arm/Bv9ARM.ch07.html
+++ b/doc/arm/Bv9ARM.ch07.html
@@ -399,6 +399,6 @@ allow-query { !{ !10/8; any; }; key example; };
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html
index e99a4d2328675e86d5af0761d8d4c052a18dee5a..8671c7d487c1fa0702feaf3cdba679fd979092a1 100644 (file)
--- a/doc/arm/Bv9ARM.ch08.html
+++ b/doc/arm/Bv9ARM.ch08.html
@@ -136,6 +136,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html
index ac1bcdb2a75d83531cf07c5f5d1c1d030c8d6051..a2058e027d88bca0a05458c94f640efc5d8a0430 100644 (file)
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -36,7 +36,7 @@
 <div class="toc">
 <p><b>Table of Contents</b></p>
 <dl class="toc">
-<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.4-P1</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.5rc1</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
@@ -54,7 +54,7 @@
 </div>
       <div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.4-P1</h2></div></div></div>
+<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.5rc1</h2></div></div></div>
   
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
@@ -177,6 +177,15 @@
          necessary.
        </p>
       </li>
+<li class="listitem">
+       <p>
+         Two new update policy rule types have been added
+         <span class="command"><strong>krb5-selfsub</strong></span> and <span class="command"><strong>ms-selfsub</strong></span>
+         which allow machines with Kerberos principals to update
+         the name space at or below the machine names identified
+         in the respective principals.
+       </p>
+      </li>
 </ul></div>
   </div>
 
@@ -214,6 +223,14 @@
          matching <span class="command"><strong>cookie-secret</strong></span>.
        </p>
       </li>
+<li class="listitem">
+       <p>
+         The <span class="command"><strong>rndc nta</strong></span> command could not differentiate
+         between views of the same name but different class; this
+         has been corrected with the addition of a <span class="command"><strong>-class</strong></span>
+         option. [GL #105]
+       </p>
+      </li>
 </ul></div>
   </div>
 
@@ -221,6 +238,15 @@
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
     <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+       <p>
+         When a negative trust anchor was added to multiple views
+         using <span class="command"><strong>rndc nta</strong></span>, the text returned via
+         <span class="command"><strong>rndc</strong></span> was incorrectly truncated after the
+         first line, making it appear that only one NTA had been
+         added. This has been fixed. [GL #105]
+       </p>
+      </li>
 <li class="listitem">
        <p>
          <span class="command"><strong>named</strong></span> now rejects excessively large
@@ -280,6 +306,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html
index faaf24389c786f6edd4574713da6903a86c2cb62..8ec661fd0716400ba01eff6a5ea59080c7a68c25 100644 (file)
--- a/doc/arm/Bv9ARM.ch10.html
+++ b/doc/arm/Bv9ARM.ch10.html
@@ -148,6 +148,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html
index beafa148d57837af89b032c769ceefc9b8146e6a..ed3f20d80007cf918a9391c629d54138557ea023 100644 (file)
--- a/doc/arm/Bv9ARM.ch11.html
+++ b/doc/arm/Bv9ARM.ch11.html
@@ -914,6 +914,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html
index 546dce80c87e67e89f8cbdb0d8b82d6d364a4cf2..20a3f40b769c5118ddc6395ecdb17f39db4963a7 100644 (file)
--- a/doc/arm/Bv9ARM.ch12.html
+++ b/doc/arm/Bv9ARM.ch12.html
@@ -533,6 +533,6 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch13.html b/doc/arm/Bv9ARM.ch13.html
index 5190275f7d94ab9bb8d7116ac550a96dff46a9ed..4cbc4031683439825a85c1c521ad95022bff81da 100644 (file)
--- a/doc/arm/Bv9ARM.ch13.html
+++ b/doc/arm/Bv9ARM.ch13.html
@@ -213,6 +213,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html
index 298ad7a2be0bdb3a20710aee82caa452fe081339..06aea32836991549178353b291d35bc71f471457 100644 (file)
--- a/doc/arm/Bv9ARM.html
+++ b/doc/arm/Bv9ARM.html
@@ -32,7 +32,7 @@
 <div>
 <div><h1 class="title">
 <a name="id-1"></a>BIND 9 Administrator Reference Manual</h1></div>
-<div><p class="releaseinfo">BIND Version 9.11.4-P1</p></div>
+<div><p class="releaseinfo">BIND Version 9.11.5rc1</p></div>
 <div><p class="copyright">Copyright © 2000-2018 Internet Systems Consortium, Inc. ("ISC")</p></div>
 </div>
 <hr>
@@ -241,7 +241,7 @@
 </dl></dd>
 <dt><span class="appendix"><a href="Bv9ARM.ch09.html">A. Release Notes</a></span></dt>
 <dd><dl>
-<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.4-P1</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.5rc1</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
@@ -443,6 +443,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf
index 23a0fbcf4b3d202ac9beceeabdda787dd0066f74..024b256d01e927184c4ef5bee759d426f2c5ee10 100644 (file)
Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ

diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html
index 2f8a78a94797b3055b5d6a4b8fb6856e3e60bf54..be73c41628314bfe3fee8547b7fdd2d532cf23cf 100644 (file)
--- a/doc/arm/man.arpaname.html
+++ b/doc/arm/man.arpaname.html
@@ -91,6 +91,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html
index 96f18cd36b1b9447080aeeaf8210ab6158b3d587..f47db3b162d52b792f3c0ff890175fa009a1b2a4 100644 (file)
--- a/doc/arm/man.ddns-confgen.html
+++ b/doc/arm/man.ddns-confgen.html
@@ -236,6 +236,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html
index 5c723b509e958a15460666dcf426e2e057a54b8f..fb49fca2a188f55ccff1d2a2a5933533b4db6240 100644 (file)
--- a/doc/arm/man.delv.html
+++ b/doc/arm/man.delv.html
@@ -624,6 +624,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html
index 3340eae54b7c49728943bffba40e1b760504f316..f87b75eb0eed5e110a28294609a40c014d432824 100644 (file)
--- a/doc/arm/man.dig.html
+++ b/doc/arm/man.dig.html
@@ -1108,6 +1108,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html
index 51cf2d8460509d4abe82c5bf08ca13daec41a8b2..9a0d2d1653f27a35e9589b78805ba862a64ceed6 100644 (file)
--- a/doc/arm/man.dnssec-checkds.html
+++ b/doc/arm/man.dnssec-checkds.html
@@ -148,6 +148,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html
index df738dfe6b77f1f1b2e3a506bdb9c59cb1f12a93..8ed91bf057368a901a9b720809d3a131ce53dbad 100644 (file)
--- a/doc/arm/man.dnssec-coverage.html
+++ b/doc/arm/man.dnssec-coverage.html
@@ -270,6 +270,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html
index 5332f50dde305819ba672040bdc10db7b0f5c40c..81a46ddc719abef6ff2486d03bbc05845d13b4c2 100644 (file)
--- a/doc/arm/man.dnssec-dsfromkey.html
+++ b/doc/arm/man.dnssec-dsfromkey.html
@@ -289,6 +289,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html
index 179e1ada88be016c0db07f99d41c02217abce658..d6a9e68c54c9078a943150992aeb542111018b10 100644 (file)
--- a/doc/arm/man.dnssec-importkey.html
+++ b/doc/arm/man.dnssec-importkey.html
@@ -250,6 +250,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html
index 3db6c8c492c1ebaba9b398a3edbcf64cf7357bf0..0d1ba18f072954891719601465662b8bf410fc19 100644 (file)
--- a/doc/arm/man.dnssec-keyfromlabel.html
+++ b/doc/arm/man.dnssec-keyfromlabel.html
@@ -492,6 +492,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html
index a6e773cab5cb0afd085ee7f54681391737adc187..cf960ec230bb2eb4198c625f661a89dbae0acf1e 100644 (file)
--- a/doc/arm/man.dnssec-keygen.html
+++ b/doc/arm/man.dnssec-keygen.html
@@ -579,6 +579,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-keymgr.html b/doc/arm/man.dnssec-keymgr.html
index 9af7c869d197b11a20137ea7e8be2fc0ae37c289..971d65ca496b322c743b2f615662a1add9466996 100644 (file)
--- a/doc/arm/man.dnssec-keymgr.html
+++ b/doc/arm/man.dnssec-keymgr.html
@@ -398,6 +398,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html
index a8b52aa39316bf9f4db5fdbea97e09022852da01..65776811407cfe61f36e22a0e4311e23be1f2016 100644 (file)
--- a/doc/arm/man.dnssec-revoke.html
+++ b/doc/arm/man.dnssec-revoke.html
@@ -171,6 +171,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html
index e470c4aee914b044b81ac8418c5c690776f40ba9..0c7ca75df3bce8edc214d14583adfcfb3821827e 100644 (file)
--- a/doc/arm/man.dnssec-settime.html
+++ b/doc/arm/man.dnssec-settime.html
@@ -349,6 +349,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html
index 0646be01a70c02d96842edd22782617452178139..9895b58b553139d0110dda75046b08fd4e541e15 100644 (file)
--- a/doc/arm/man.dnssec-signzone.html
+++ b/doc/arm/man.dnssec-signzone.html
@@ -708,6 +708,6 @@ db.example.com.signed
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html
index 3089a56341a87cd67a3f85551fc7bc62637af537..636f9b5df2d7ea9af3b9d62514cba6370d8cf001 100644 (file)
--- a/doc/arm/man.dnssec-verify.html
+++ b/doc/arm/man.dnssec-verify.html
@@ -202,6 +202,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html
index 0285a125d5d3f991a0ef5ed7a4970aca862ab31b..8cf97096ada52aaca071a2015ec8bbc52d931bb1 100644 (file)
--- a/doc/arm/man.dnstap-read.html
+++ b/doc/arm/man.dnstap-read.html
@@ -134,6 +134,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html
index f8295bdbd9addd091d56a99b8284727fccce7a07..1126b145d3d7179edbfd019932dc7f4042fff486 100644 (file)
--- a/doc/arm/man.genrandom.html
+++ b/doc/arm/man.genrandom.html
@@ -127,6 +127,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html
index 6d06ea9cbd93fc95e58d66102e02a5c56ced84af..12f503d5d1d26775a53e5e9e72ae51627b3a3668 100644 (file)
--- a/doc/arm/man.host.html
+++ b/doc/arm/man.host.html
@@ -366,6 +366,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html
index 92895339947cf47a86a06d10c3d5796a67aa90b3..6e589f9f0947e32538fcfc839c7d8b6ece682ddf 100644 (file)
--- a/doc/arm/man.isc-hmac-fixup.html
+++ b/doc/arm/man.isc-hmac-fixup.html
@@ -126,6 +126,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.lwresd.html b/doc/arm/man.lwresd.html
index 496c7cae2a7c9f1602517827b5ce6da7fc9951e9..4b575564e5da86a64fddf5ee211699725713a4e8 100644 (file)
--- a/doc/arm/man.lwresd.html
+++ b/doc/arm/man.lwresd.html
@@ -329,6 +329,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.mdig.html b/doc/arm/man.mdig.html
index 59c17df00952572ba6ffa4852ef41714b50c80c1..e835839f236ce80bc069930703feb20293198e08 100644 (file)
--- a/doc/arm/man.mdig.html
+++ b/doc/arm/man.mdig.html
@@ -609,6 +609,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html
index b7da4b6e68b740d9a322766ae4ea166714a4bdd1..0d7744fdaeaabdda70394537934f9f8212ae202c 100644 (file)
--- a/doc/arm/man.named-checkconf.html
+++ b/doc/arm/man.named-checkconf.html
@@ -192,6 +192,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html
index 2c087be3a23160ab17763a88c3d6d59b47b35d4f..fc6b12392c79184d26c14da63caf189aaaddc63b 100644 (file)
--- a/doc/arm/man.named-checkzone.html
+++ b/doc/arm/man.named-checkzone.html
@@ -463,6 +463,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html
index 78f9983494876e70a919e1be8d912fdf24f062d3..e282b298946686386da69f49fa46d979ddc989e0 100644 (file)
--- a/doc/arm/man.named-journalprint.html
+++ b/doc/arm/man.named-journalprint.html
@@ -117,6 +117,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-nzd2nzf.html b/doc/arm/man.named-nzd2nzf.html
index 5caf67ca10dcc9f98da1b24b1e208b6cc39e9442..db715f62aab61f0f8fc7ee37357bee1d695e4e4a 100644 (file)
--- a/doc/arm/man.named-nzd2nzf.html
+++ b/doc/arm/man.named-nzd2nzf.html
@@ -119,6 +119,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html
index ed4c2de056d8079b6ccc65203a1c186e08eb7586..038af4a764062d233ef89efe4016c705f0775c0b 100644 (file)
--- a/doc/arm/man.named-rrchecker.html
+++ b/doc/arm/man.named-rrchecker.html
@@ -121,6 +121,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html
index f42d62a067eb05ca36a35f4efa641e10ce0af975..61bd9ed60d9d3342b91253d174ad5934783a599e 100644 (file)
--- a/doc/arm/man.named.conf.html
+++ b/doc/arm/man.named.conf.html
@@ -874,10 +874,10 @@ view
                    | slave | static-stub | stub );<br>
                update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
                update-policy ( local | { ( deny | grant ) <em class="replaceable"><code>string</code></em> (<br>
-                   6to4-self | external | krb5-self | krb5-subdomain |<br>
-                   ms-self | ms-subdomain | name | self | selfsub |<br>
-                   selfwild | subdomain | tcp-self | wildcard | zonesub )<br>
-                   [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
+                   6to4-self | external | krb5-self | krb5-selfsub |<br>
+                   krb5-subdomain | ms-self | ms-selfsub | ms-subdomain |<br>
+                   name | self | selfsub | selfwild | subdomain | tcp-self<br>
+                   | wildcard | zonesub ) [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
                use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
                zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
                zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
@@ -976,9 +976,10 @@ zone
            | static-stub | stub );<br>
        update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
        update-policy ( local | { ( deny | grant ) <em class="replaceable"><code>string</code></em> ( 6to4-self |<br>
-           external | krb5-self | krb5-subdomain | ms-self | ms-subdomain<br>
-           | name | self | selfsub | selfwild | subdomain | tcp-self |<br>
-           wildcard | zonesub ) [ <em class="replaceable"><code>string</code></em> ] <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
+           external | krb5-self | krb5-selfsub | krb5-subdomain | ms-self<br>
+           | ms-selfsub | ms-subdomain | name | self | selfsub | selfwild<br>
+           | subdomain | tcp-self | wildcard | zonesub ) [ <em class="replaceable"><code>string</code></em> ]<br>
+           <em class="replaceable"><code>rrtypelist</code></em>; ... };<br>
        use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
        zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
        zone-statistics ( full | terse | none | <em class="replaceable"><code>boolean</code></em> );<br>
@@ -1035,6 +1036,6 @@ zone
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html
index ee18a158887ff9732f4606c678e75a4e89cd3075..93107800cbd730b18618c9fc1d80ade689cb2663 100644 (file)
--- a/doc/arm/man.named.html
+++ b/doc/arm/man.named.html
@@ -490,6 +490,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html
index 8099b0b2439f2054d8fdb538bce0d070efbe16d9..9d7012614505692778a8fac3eefae829d8c04e6f 100644 (file)
--- a/doc/arm/man.nsec3hash.html
+++ b/doc/arm/man.nsec3hash.html
@@ -131,6 +131,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.nslookup.html b/doc/arm/man.nslookup.html
index 955e78b820dfb650153a228f1d9f2256fc28eb2e..b9ff131172186f2a81a6ed7b20eadd91204696b5 100644 (file)
--- a/doc/arm/man.nslookup.html
+++ b/doc/arm/man.nslookup.html
@@ -419,6 +419,6 @@ nslookup -query=hinfo  -timeout=10
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html
index 7940d1ba6f6f42e3949bcf8ade0500c2497c0759..3b78aae4a373c91546a36aae648e57f1fa23b9c1 100644 (file)
--- a/doc/arm/man.nsupdate.html
+++ b/doc/arm/man.nsupdate.html
@@ -817,6 +817,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-destroy.html b/doc/arm/man.pkcs11-destroy.html
index 1bcf34ade4caa310535b89344e718dadcadb38e9..856c43c89648bffcf48b2f5957e1ef22db0402c3 100644 (file)
--- a/doc/arm/man.pkcs11-destroy.html
+++ b/doc/arm/man.pkcs11-destroy.html
@@ -162,6 +162,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-keygen.html b/doc/arm/man.pkcs11-keygen.html
index ba10853498c374621c955f190a66cbf6ef098358..9f130e311f2c547c9886cdd46c4123b0ed55769e 100644 (file)
--- a/doc/arm/man.pkcs11-keygen.html
+++ b/doc/arm/man.pkcs11-keygen.html
@@ -200,6 +200,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-list.html b/doc/arm/man.pkcs11-list.html
index 557c27f0451092b38c48fe65dc4389bd2489ab25..7860ed9ce23d5db26941b154222623495dc54242 100644 (file)
--- a/doc/arm/man.pkcs11-list.html
+++ b/doc/arm/man.pkcs11-list.html
@@ -158,6 +158,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-tokens.html b/doc/arm/man.pkcs11-tokens.html
index 9cd50686adfdb0c4bb5f72e1ea01c72d9479a01d..38f7566f3cc3db552642d194d24f166e4327e384 100644 (file)
--- a/doc/arm/man.pkcs11-tokens.html
+++ b/doc/arm/man.pkcs11-tokens.html
@@ -119,6 +119,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html
index b13633fe4567351d26810fb7506f01b21711bd08..92a08dcce9658c602a9b90fee57b18b397088f4c 100644 (file)
--- a/doc/arm/man.rndc-confgen.html
+++ b/doc/arm/man.rndc-confgen.html
@@ -277,6 +277,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html
index 59b3e3940ea6927c01dadfbbc66aee335d083d8c..ddc419c582ddbc722b616a2cd8f48c781b43c03d 100644 (file)
--- a/doc/arm/man.rndc.conf.html
+++ b/doc/arm/man.rndc.conf.html
@@ -268,6 +268,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html
index 9c7154328388ea8c261ecd4062d5b6b066c627d4..b29cc243469caa2344cfee06affb98c4b1435377 100644 (file)
--- a/doc/arm/man.rndc.html
+++ b/doc/arm/man.rndc.html
@@ -435,7 +435,7 @@
          </p>
        </dd>
 <dt><span class="term"><strong class="userinput"><code>nta
-       [<span class="optional">( -d | -f | -r | -l <em class="replaceable"><code>duration</code></em>)</span>]
+           [<span class="optional">( -class <em class="replaceable"><code>class</code></em> | -dump | -force | -remove | -lifetime <em class="replaceable"><code>duration</code></em>)</span>]
        <em class="replaceable"><code>domain</code></em>
        [<span class="optional"><em class="replaceable"><code>view</code></em></span>]
        </code></strong></span></dt>
@@ -483,7 +483,7 @@
            is equivalent to <code class="option">-remove</code>.
          </p>
          <p>
-           If <code class="option">-dump</code> is used, any other arguments
+           If the <code class="option">-dump</code> is used, any other arguments
            are ignored, and a list of existing NTAs is printed
            (note that this may include NTAs that are expired but
            have not yet been cleaned up).
@@ -500,10 +500,15 @@
            lifetime, regardless of whether data could be
            validated if the NTA were not present.
          </p>
+         <p>
+           The view class can be specified with <code class="option">-class</code>.
+           The default is class <strong class="userinput"><code>IN</code></strong>, which is
+           the only class for which DNSSEC is currently supported.
+         </p>
          <p>
            All of these options can be shortened, i.e., to
            <code class="option">-l</code>, <code class="option">-r</code>, <code class="option">-d</code>,
-           and <code class="option">-f</code>.
+           <code class="option">-f</code>, and <code class="option">-c</code>.
          </p>
        </dd>
 <dt><span class="term"><strong class="userinput"><code>querylog</code></strong> [<span class="optional"> on | off </span>] </span></dt>
@@ -889,6 +894,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4-P1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.5rc1 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/master.zoneopt.xml b/doc/arm/master.zoneopt.xml
index 7a0e76d18b9d6bf077b49a3f7e5843b034294aec..85df9bdb011d148490ae6373dacf4fb6b2da9575 100644 (file)
--- a/doc/arm/master.zoneopt.xml
+++ b/doc/arm/master.zoneopt.xml
@@ -62,7 +62,7 @@
        <command>sig-signing-type</command> <replaceable>integer</replaceable>;
        <command>sig-validity-interval</command> <replaceable>integer</replaceable> [ <replaceable>integer</replaceable> ];
        <command>update-check-ksk</command> <replaceable>boolean</replaceable>;
-       <command>update-policy</command> ( local | { ( deny | grant ) <replaceable>string</replaceable> ( 6to4-self | external | krb5-self | krb5-subdomain | ms-self | ms-subdomain | name | self | selfsub | selfwild | subdomain | tcp-self | wildcard | zonesub ) [ <replaceable>string</replaceable> ] <replaceable>rrtypelist</replaceable>; ... };
+       <command>update-policy</command> ( local | { ( deny | grant ) <replaceable>string</replaceable> ( 6to4-self | external | krb5-self | krb5-selfsub | krb5-subdomain | ms-self | ms-selfsub | ms-subdomain | name | self | selfsub | selfwild | subdomain | tcp-self | wildcard | zonesub ) [ <replaceable>string</replaceable> ] <replaceable>rrtypelist</replaceable>; ... };
        <command>zero-no-soa-ttl</command> <replaceable>boolean</replaceable>;
        <command>zone-statistics</command> ( full | terse | none | <replaceable>boolean</replaceable> );
 };

diff --git a/doc/arm/notes.html b/doc/arm/notes.html
index 30c0cba47c9e22f2c9bc48f9edf1797874e32dad..4c14a471e89df8e4403ac42ecc112b7af1f8f8b9 100644 (file)
--- a/doc/arm/notes.html
+++ b/doc/arm/notes.html
@@ -15,7 +15,7 @@
 
   <div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.2"></a>Release Notes for BIND Version 9.11.4-P1</h2></div></div></div>
+<a name="id-1.2"></a>Release Notes for BIND Version 9.11.5rc1</h2></div></div></div>
   
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
@@ -138,6 +138,15 @@
          necessary.
        </p>
       </li>
+<li class="listitem">
+       <p>
+         Two new update policy rule types have been added
+         <span class="command"><strong>krb5-selfsub</strong></span> and <span class="command"><strong>ms-selfsub</strong></span>
+         which allow machines with Kerberos principals to update
+         the name space at or below the machine names identified
+         in the respective principals.
+       </p>
+      </li>
 </ul></div>
   </div>
 
@@ -175,6 +184,14 @@
          matching <span class="command"><strong>cookie-secret</strong></span>.
        </p>
       </li>
+<li class="listitem">
+       <p>
+         The <span class="command"><strong>rndc nta</strong></span> command could not differentiate
+         between views of the same name but different class; this
+         has been corrected with the addition of a <span class="command"><strong>-class</strong></span>
+         option. [GL #105]
+       </p>
+      </li>
 </ul></div>
   </div>
 
@@ -182,6 +199,15 @@
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
     <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+       <p>
+         When a negative trust anchor was added to multiple views
+         using <span class="command"><strong>rndc nta</strong></span>, the text returned via
+         <span class="command"><strong>rndc</strong></span> was incorrectly truncated after the
+         first line, making it appear that only one NTA had been
+         added. This has been fixed. [GL #105]
+       </p>
+      </li>
 <li class="listitem">
        <p>
          <span class="command"><strong>named</strong></span> now rejects excessively large

diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf
index 5e347585b4cd7f53f6abf5f63696278508686377..1f410a896ed4e90c86ae21cd18b89db37c176da2 100644 (file)
Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ

diff --git a/doc/arm/notes.txt b/doc/arm/notes.txt
index 621a25e117df694f1756f8558e89997fc844ce54..1e2ffeca7ba4bec014aac24e011ad5167ac0fab5 100644 (file)
--- a/doc/arm/notes.txt
+++ b/doc/arm/notes.txt
@@ -1,4 +1,4 @@
-Release Notes for BIND Version 9.11.4-P1
+Release Notes for BIND Version 9.11.5rc1
 
 Introduction
 
@@ -72,6 +72,11 @@ New Features
     security mechanism, and should not be disabled unless absolutely
     necessary.
 
+  * Two new update policy rule types have been added krb5-selfsub and
+    ms-selfsub which allow machines with Kerberos principals to update the
+    name space at or below the machine names identified in the respective
+    principals.
+
 Removed Features
 
   * named will now log a warning if the old BIND now can be compiled
@@ -88,8 +93,17 @@ Feature Changes
     Any others are used to accept old server cookies or those generated by
     other servers using the matching cookie-secret.
 
+  * The rndc nta command could not differentiate between views of the same
+    name but different class; this has been corrected with the addition of
+    a -class option. [GL #105]
+
 Bug Fixes
 
+  * When a negative trust anchor was added to multiple views using rndc
+    nta, the text returned via rndc was incorrectly truncated after the
+    first line, making it appear that only one NTA had been added. This
+    has been fixed. [GL #105]
+
   * named now rejects excessively large incremental (IXFR) zone transfers
     in order to prevent possible corruption of journal files which could
     cause named to abort when loading zones. [GL #339]

diff --git a/doc/misc/master.zoneopt b/doc/misc/master.zoneopt
index aa276dc24d519b53359c59fd2e49d90ca018eeb6..7152ed1de560519ae6a023f78c62d45a3d7a818e 100644 (file)
--- a/doc/misc/master.zoneopt
+++ b/doc/misc/master.zoneopt
@@ -50,7 +50,7 @@ zone <string> [ <class> ] {
        sig-signing-type <integer>;
        sig-validity-interval <integer> [ <integer> ];
        update-check-ksk <boolean>;
-       update-policy ( local | { ( deny | grant ) <string> ( 6to4-self | external | krb5-self | krb5-subdomain | ms-self | ms-subdomain | name | self | selfsub | selfwild | subdomain | tcp-self | wildcard | zonesub ) [ <string> ] <rrtypelist>; ... };
+       update-policy ( local | { ( deny | grant ) <string> ( 6to4-self | external | krb5-self | krb5-selfsub | krb5-subdomain | ms-self | ms-selfsub | ms-subdomain | name | self | selfsub | selfwild | subdomain | tcp-self | wildcard | zonesub ) [ <string> ] <rrtypelist>; ... };
        zero-no-soa-ttl <boolean>;
        zone-statistics ( full | terse | none | <boolean> );
 };

diff --git a/doc/misc/options b/doc/misc/options
index a3f9b6c64721cc8083ea808a4601030135e81a2b..ad6bbb269d35bc5cecd4980b4d4511763bc81a4c 100644 (file)
--- a/doc/misc/options
+++ b/doc/misc/options
@@ -770,10 +770,10 @@ view <string> [ <class> ] {
                     | slave | static-stub | stub );
                 update-check-ksk <boolean>;
                 update-policy ( local | { ( deny | grant ) <string> (
-                    6to4-self | external | krb5-self | krb5-subdomain |
-                    ms-self | ms-subdomain | name | self | selfsub |
-                    selfwild | subdomain | tcp-self | wildcard | zonesub )
-                    [ <string> ] <rrtypelist>; ... };
+                    6to4-self | external | krb5-self | krb5-selfsub |
+                    krb5-subdomain | ms-self | ms-selfsub | ms-subdomain |
+                    name | self | selfsub | selfwild | subdomain | tcp-self
+                    | wildcard | zonesub ) [ <string> ] <rrtypelist>; ... };
                 use-alt-transfer-source <boolean>;
                 zero-no-soa-ttl <boolean>;
                 zone-statistics ( full | terse | none | <boolean> );
@@ -872,9 +872,10 @@ zone <string> [ <class> ] {
             | static-stub | stub );
         update-check-ksk <boolean>;
         update-policy ( local | { ( deny | grant ) <string> ( 6to4-self |
-            external | krb5-self | krb5-subdomain | ms-self | ms-subdomain
-            | name | self | selfsub | selfwild | subdomain | tcp-self |
-            wildcard | zonesub ) [ <string> ] <rrtypelist>; ... };
+            external | krb5-self | krb5-selfsub | krb5-subdomain | ms-self
+            | ms-selfsub | ms-subdomain | name | self | selfsub | selfwild
+            | subdomain | tcp-self | wildcard | zonesub ) [ <string> ]
+            <rrtypelist>; ... };
         use-alt-transfer-source <boolean>;
         zero-no-soa-ttl <boolean>;
         zone-statistics ( full | terse | none | <boolean> );

diff --git a/lib/bind9/api b/lib/bind9/api
index 0f454b5e2270ac4c1dfc6c4a65232c1626638afe..79bb9ebfc73e4ec1a282749a9d6ca88d234685c2 100644 (file)
--- a/lib/bind9/api
+++ b/lib/bind9/api
@@ -8,6 +8,6 @@
 # 9.10-sub: 180-189
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
-LIBINTERFACE = 160
-LIBREVISION = 8
+LIBINTERFACE = 161
+LIBREVISION = 0
 LIBAGE = 0

diff --git a/lib/dns/api b/lib/dns/api
index bd4f358686e0ad8a10514460f2b83a76d10b0bab..dd8f92525adce4ec342c422d251e92f675d361ae 100644 (file)
--- a/lib/dns/api
+++ b/lib/dns/api
@@ -8,6 +8,6 @@
 # 9.10-sub: 180-189
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
-LIBINTERFACE = 1103
-LIBREVISION = 1
-LIBAGE = 1
+LIBINTERFACE = 1104
+LIBREVISION = 0
+LIBAGE = 0

diff --git a/lib/irs/api b/lib/irs/api
index d7c46cae2942d632307933ca6975aca829cda867..79bb9ebfc73e4ec1a282749a9d6ca88d234685c2 100644 (file)
--- a/lib/irs/api
+++ b/lib/irs/api
@@ -8,6 +8,6 @@
 # 9.10-sub: 180-189
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
-LIBINTERFACE = 160
-LIBREVISION = 5
+LIBINTERFACE = 161
+LIBREVISION = 0
 LIBAGE = 0

diff --git a/lib/isc/api b/lib/isc/api
index 8cdd04666fd1e2b1d524a83b80e0fdeebda6cbe8..7b1b2b1bb4bc47475012eda56543ab6bdb3a01b9 100644 (file)
--- a/lib/isc/api
+++ b/lib/isc/api
@@ -8,6 +8,6 @@
 # 9.10-sub: 180-189
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
-LIBINTERFACE = 169
-LIBREVISION = 3
+LIBINTERFACE = 1100
+LIBREVISION = 0
 LIBAGE = 0

diff --git a/lib/isccc/api b/lib/isccc/api
index bc911207e47f5b8f4ad512b69467593afa7c6bc2..79bb9ebfc73e4ec1a282749a9d6ca88d234685c2 100644 (file)
--- a/lib/isccc/api
+++ b/lib/isccc/api
@@ -8,6 +8,6 @@
 # 9.10-sub: 180-189
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
-LIBINTERFACE = 160
-LIBREVISION = 3
+LIBINTERFACE = 161
+LIBREVISION = 0
 LIBAGE = 0

diff --git a/lib/isccfg/api b/lib/isccfg/api
index 5da02bc2d46799f17f0c900ea9f6f7f4cdc3b987..4cbb63b6cd0f3e73b6a5fce5b61d1f7a985f1191 100644 (file)
--- a/lib/isccfg/api
+++ b/lib/isccfg/api
@@ -8,6 +8,6 @@
 # 9.10-sub: 180-189
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
-LIBINTERFACE = 162
-LIBREVISION = 1
-LIBAGE = 2
+LIBINTERFACE = 163
+LIBREVISION = 0
+LIBAGE = 0

diff --git a/lib/lwres/api b/lib/lwres/api
index bf0576b33316b82dbe4c5b24ae5a0ac7617bd15d..79bb9ebfc73e4ec1a282749a9d6ca88d234685c2 100644 (file)
--- a/lib/lwres/api
+++ b/lib/lwres/api
@@ -8,6 +8,6 @@
 # 9.10-sub: 180-189
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
-LIBINTERFACE = 160
-LIBREVISION = 2
+LIBINTERFACE = 161
+LIBREVISION = 0
 LIBAGE = 0

diff --git a/version b/version
index d449f9e197367c61134edce39a78b6e5e283ceff..2625ddd3dbeeb65d9975794077c194250e7a4f33 100644 (file)
--- a/version
+++ b/version
@@ -5,7 +5,7 @@ PRODUCT=BIND
 DESCRIPTION="(Extended Support Version)"
 MAJORVER=9
 MINORVER=11
-PATCHVER=4
-RELEASETYPE=-P
+PATCHVER=5
+RELEASETYPE=rc
 RELEASEVER=1
 EXTENSIONS=