Log a message when "ixfr-from-differences" is set for an inline-signed zone

For inline-signed zones, the value of "ixfr-from-differences" is
hardcoded to:

  - "yes" for the raw version of the zone,
  - "no" for the signed version of the zone.

In other words, any user-provided "ixfr-from-differences" setting is
effectively ignored for an inline-signed zone.  Ensure the user is aware
of that by adding a note to the ARM and logging a message when an
"ixfr-from-differences" option is found at the zone level.

(cherry picked from commit 087157d14fb201a61207599698097b08bbc6feae)

diff --git a/bin/named/server.c b/bin/named/server.c
index cddcb7efba94e02b2656f40fc28a304ec378fe8e..cb1d74437c302395f1f39bda96c91904069a0462 100644 (file)
--- a/bin/named/server.c
+++ b/bin/named/server.c
@@ -5726,6 +5726,7 @@ configure_zone(const cfg_obj_t *config, const cfg_obj_t *zconfig,
        const cfg_obj_t *typeobj = NULL;
        const cfg_obj_t *forwarders = NULL;
        const cfg_obj_t *forwardtype = NULL;
+       const cfg_obj_t *ixfrfromdiffs = NULL;
        const cfg_obj_t *only = NULL;
        const cfg_obj_t *signing = NULL;
        const cfg_obj_t *viewobj = NULL;
@@ -6077,6 +6078,15 @@ configure_zone(const cfg_obj_t *config, const cfg_obj_t *zconfig,
                        dns_zone_setstats(raw, named_g_server->zonestats);
                        CHECK(dns_zone_link(zone, raw));
                }
+               if (cfg_map_get(zoptions, "ixfr-from-differences",
+                               &ixfrfromdiffs) == ISC_R_SUCCESS)
+               {
+                       isc_log_write(named_g_lctx, NAMED_LOGCATEGORY_GENERAL,
+                                     NAMED_LOGMODULE_SERVER, ISC_LOG_INFO,
+                                     "zone '%s': 'ixfr-from-differences' is "
+                                     "ignored for inline-signed zones",
+                                     zname);
+               }
        }
 
        /*

diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
index b4f9ba660ba12b8624e752d0f9158cac4b77c2bf..ae89cc0856e94ab79049eb879d3472a6fb9061c5 100644 (file)
--- a/doc/arm/Bv9ARM-book.xml
+++ b/doc/arm/Bv9ARM-book.xml
@@ -6503,6 +6503,11 @@ options {
                  <command>slave</command> zones respectively.
                  It is off by default.
                </para>
+               <para>
+                 Note: if inline signing is enabled for a zone, the
+                 user-provided <command>ixfr-from-differences</command>
+                 setting is ignored for that zone.
+               </para>
              </listitem>
            </varlistentry>