summaryrefslogtreecommitdiff
path: root/librpc/idl/dns.idl
Commit message (Collapse)AuthorAgeFilesLines
* dnsserver: Tighten DNS name checkingGary Lockyer2017-08-151-0/+3
| | | | | | | | | | | Add checks for the maximum permitted length, maximum number of labels and the maximum label length. These extra checks will be used by the DNS wild card handling. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> BUG: https://bugzilla.samba.org/show_bug.cgi?id=12952
* librpc/dns: remove original_id from dns_fake_tsig_recRalph Boehme2016-06-161-1/+0
| | | | | | | | | | | Cf RFC2845, 3.4.2. "TSIG Variables", the request id (original_id) is not used in the MAC calculation. This also explains the mysterious 2 bytes padding. Bug: https://bugzilla.samba.org/show_bug.cgi?id=11520 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* librpc/dns: don't compress strings in TKEY and TSIG responsesRalph Boehme2016-06-161-3/+3
| | | | | | | | | | | | | | | Certain DNS clients fail TSIG record MAC validation if the TSIG record contains compressed strings. Windows DNS server behaviour seems to be to not send compressed names in TKEY and TSIG records. This patch ensures we conform to this behaviour. Bug: https://bugzilla.samba.org/show_bug.cgi?id=11520 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
* CVE-2016-0771: dns.idl: make use of dnsp_hinfoStefan Metzmacher2016-03-101-8/+1
| | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11128 BUG: https://bugzilla.samba.org/show_bug.cgi?id=11686 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* CVE-2016-0771: s4:dns_server: fix idl for dns_txt_recordStefan Metzmacher2016-03-101-4/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | From RFC 1035: 3.3.14. TXT RDATA format +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+ / TXT-DATA / +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+ where: TXT-DATA One or more <character-string>s. TXT RRs are used to hold descriptive text. The semantics of the text depends on the domain where it is found. Each record contains an array of strings instead of just one string. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11128 BUG: https://bugzilla.samba.org/show_bug.cgi?id=11686 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* CVE-2016-0771: s4:librpc: python_dns and python_dcerpc_dnsp doesn't require ↵Stefan Metzmacher2016-03-101-1/+1
| | | | | | | | | | | client bindings BUG: https://bugzilla.samba.org/show_bug.cgi?id=11686 BUG: https://bugzilla.samba.org/show_bug.cgi?id=11128 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* idl: Add DNS HINFO record supportKai Blin2013-05-261-0/+8
| | | | | | | | | | | Not sure if we need this, bug samba.org specifies it, so this can cause ANY queries against samba.org to fail. Signed-off-by: Kai Blin <kai@samba.org> Reviewed-by: Michael Adam <obnox@samba.org> Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Sun May 26 20:05:38 CEST 2013 on sn-devel-104
* idl: Add DNS RP record support as per RFC 1183Kai Blin2013-05-261-0/+7
| | | | | | | | Not sure if we need this, but samba.org specifies it, so this could cause ANY queries against samba.org to fail. Signed-off-by: Kai Blin <kai@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* idl: Add support for parsing OPT recordsKai Blin2013-05-261-0/+8
| | | | | Signed-off-by: Kai Blin <kai@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* s4 dns: Create IDL entry for TSIG-like record needed for signature checkKai Blin2012-09-051-0/+14
|
* s4 dns: Revert erroneous push from wrong branchKai Blin2012-09-051-14/+0
| | | | | | | I've pushed the wrong branch for this, sorry about that. Autobuild-User(master): Kai Blin <kai@samba.org> Autobuild-Date(master): Wed Sep 5 14:10:54 CEST 2012 on sn-devel-104
* s4 dns: Handle GSS-TSIG signaturesKai Blin2012-09-051-0/+14
|
* s4 dns: Add TSIG and TKEY records to idlKai Blin2012-05-081-11/+56
|
* s4 dns: Implement RFC-compatible update prescanKai Blin2011-12-171-3/+4
|
* s4 dns: the opcode is called OPCODE_UPDATE in the RFC, not OPCODE_REGISTERKai Blin2011-11-041-1/+1
|
* dns: Move the dns_srv_record to the correct place in the idl fileKai Blin2011-10-021-7/+7
| | | | | Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Sun Oct 2 13:35:49 CEST 2011 on sn-devel-104
* dns: Add support for TXT record to idl fileKai Blin2011-10-021-0/+6
|
* dns: The QCLASS is called IN, not IPKai Blin2011-09-281-1/+1
|
* s4 dns: More work on updatesKai Blin2010-10-231-1/+1
|
* s4 dns: Better error handling when parsing invalid or unknown recordsKai Blin2010-10-231-1/+3
|
* s4 dns: Reply to a name request with an A record.Kai Blin2010-10-231-7/+36
| | | | The first real answer to a DNS request. Still uses hardcoded reply.
* ndr dns: Add simple parserKai Blin2010-10-231-4/+5
|
* dns/nbt: Fix spelling of the "authoritative" flag.Kai Blin2010-10-231-1/+1
|
* idl: Add idl describing DNS structuresKai Blin2010-10-231-0/+155