From sacadmin Mon Sep 25 04:22:44 2006 Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id k8PBMiov027840; Mon, 25 Sep 2006 04:22:44 -0700 (PDT) Received: (from darrenm@localhost) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6/Submit) id k8PBMiE6027831; Mon, 25 Sep 2006 04:22:44 -0700 (PDT) Date: Mon, 25 Sep 2006 04:22:44 -0700 (PDT) From: Darren J Moffat Message-Id: <200609251122.k8PBMiE6027831@sac.sfbay.sun.com> To: PSARC@sac.sfbay.sun.com Cc: stacey.marshall@sun.com Subject: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] Status: RO Content-Length: 16623 Template Version: @(#)onepager.txt 1.29 04/11/15 SMI 1. Introduction 1.1. Project/Component Working Name: BIND 9.3.3 server and utilities 1.2. Name of Document Author/Supplier: Stacey Marshall 1.3. Date of This Document: 22/Sep/06 1.4. Name of Major Document Customer(s)/Consumer(s): 1.4.1. The PAC or CPT you expect to review your project: Solaris PAC 1.4.2. The ARC(s) you expect to review your project: PSARC 1.4.3. The Director/VP who is "Sponsoring" this project: Chris.Armes@sun.com 1.4.4. The name of your business unit: OP/N1 Revenue Product Engineering 1.5. Email Aliases: 1.5.1. Responsible Manager: jim.j.moore@sun.com 1.5.2. Responsible Engineer: stacey.marshall@sun.com 1.5.3. Marketing Manager: 1.5.4. Interest List: 2. Project Summary 2.1. Project Description: BIND 9.3.3 is the most recent BIND 9 version available from the Internet Software Consortium (ISC). BIND 9.3.0 has a number of new features over 9.2 including: * DNSSEC is now Delegation Signer (DS) based, [[http://www.rfc-editor.org/rfc/rfc4033.txt][RFC4033]], [[http://www.rfc-editor.org/rfc/rfc4034.txt][RFC4034]] and [[http://www.rfc-editor.org/rfc/rfc4035.txt][RFC4035]]. This collection of RFCs is otherwise known as DNSSEC-bis. * DNSSEC Look-aside Validation (DLV) (experimental), [[http://www.rfc-editor.org/rfc/rfc4431.txt][RFC4431]] * check-names is now implemented. * rrset-order is more complete. * IPv4/IPv6 transition support, dual-stack-servers. * IXFR deltas can now be generated when loading master files, ixfr-from-differences. * It is now possible to specify the size of a journal, max-journal-size. * It is now possible to define a named set of master servers to be used in masters clause, "masters". * The advertised EDNS UDP size can now be set, "edns-udp-size". * libbind: corresponds to that from BIND 8.4.5. * BIND 9.3.3 is a maintenance release for BIND 9.3. 2.2. Risks and Assumptions: The ISC do not wish to add platform specific code to implement SMF properties. Thus we will provide a smf_method(5) script and relevant application properties to facilitate the new command line options. DNSSEC advancements continue to demand change to underlying tools which are used to maintain it. 2.3. Release Binding The Required release binding is Patch. The current intension is provide a patch for Solaris 10 as soon as possible. 3. Business Summary 3.1. Problem Area: The latest version of BIND is required to provide the latest security features and to be competitive with other operators and servers. Our current version of BIND 9, version 9.2.4 (PSARC 2004/669), has performance issues due to CR 6320428. BIND 9.3 includes command line options to workaround these issues. 3.2. Market/Requester: It is my experience that our customers want Sun to provide the latest version of BIND with Solaris. Customers do not wish to down-load BIND from the ISC as Sun *only* provides support for the release of BIND provided by Sun. Currently we know the following customers are requesting BIND 9.3.3 due to CR 6320428: * Kanatek technologies Inc. * Triton pcs Inc. * Tradelink Llc. * Rogers Communications Inc. 3.3. Business Justification: The ISC quickly made a work-around in BIND 9.3 for CR 6320428 which we should provide to our customers directly. Moving forward Sun has stated that we will provide the latest version of BIND 9 rather than make minor adjustments to our own version. 3.4. Competitive Analysis: None has been made. 3.5. Opportunity Window/Exposure: By providing BIND 9.2.4 in Solaris 10 I believe we took a calculated risk that has paid off. We now need to keep our promise and continue to deliver updates to BIND in a timely manner. 3.6. How will you know when you are done?: Sun Services no longer need to escalate to engineering to obtain a work-around. 4. Technical Description: 4.1. Details: Integrate ISCs BIND 9.3.3 into SFW and provide smf_method(5) script to map relevant command line options to new service application properties. 4.1.1. Comparison of BIND 9.3 with BIND 9.2 BIND 9.3.3 is a maintenance release for BIND 9.3. BIND 9.3.0 has a number of new features over 9.2 including: * DNSSEC is now Delegation Signer (DS) based, [[http://www.rfc-editor.org/rfc/rfc4033.txt][RFC4033]], [[http://www.rfc-editor.org/rfc/rfc4034.txt][RFC4034]] & [[http://www.rfc-editor.org/rfc/rfc4035.txt][RFC4035]]. This collection of RFCs is otherwise known as DNSSEC-bis. * DNSSEC Look-aside Validation (DLV) (experimental), [[http://www.rfc-editor.org/rfc/rfc4431.txt][RFC4431]] * check-names is now implemented. * rrset-order is more complete. * IPv4/IPv6 transition support, dual-stack-servers. * IXFR deltas can now be generated when loading master files, ixfr-from-differences. * It is now possible to specify the size of a journal, max-journal-size. * It is now possible to define a named set of master servers to be used in masters clause, "masters". * The advertised EDNS UDP size can now be set, "edns-udp-size". * libbind: corresponds to that from BIND 8.4.5. 4.1.2. BIND 9.3 New Functionality * DNSSEC-bis * Cryptographic algorithm RSASHA1 support. * Delegation Signer (DS) based. * Look-aside Validation (DLV) (experimental). * nsupdate generates SIG(0) signed messages and provides new command line options. * New options for 'named.conf' include * disable-algorithms * dnssec-lookaside * dnssec-must-be-secure * flush-zones-on-shutdown * ixfr-from-differences * multi-master * dnssec-enable * querylog * check-names (re-instated) * dual-stack-servers * allow-update-forwarding * alt-transfer-source * alt-transfer-source-v6 * use-alt-transfer-source * max-journal-size * tcp-listen-queue * avoid-v4-udp-ports * avoid-v6-udp-ports * edns-udp-size * hostname (chaos)' * servier-id (chaos) * Added Server statement grammar: * transfer-source * transfer-source-v6 * zone statement grammar: * multi-master * key-directory * check-names is implemented (from BIND 8). * BIND server process 'named' includes new command line options to overcome certain operating environment issues (Sun CR 6320428): * '-4' specifies to only send queries on IPv4 interfaces * '-6' specifies to only send queries on IPv6 interfaces. * dig(1M) has new command line options, -4, -6, +[no]aaflag, +[no]cl, +[no]ttlid, +tries=T and +retry=T * host(1M) has new command line options -4 and -6. * named-checkconf has additional command line options, -zj. * named-checkzone has additional command line options, -D, -k mode, -n mode, -o filename, -t directory and -w directory. * nsupdate(1M) has new command line options, -r udpretries, -t timeout and -u udptimeout. * rndc has several new subcommands and new subcommand options: * New subcommands include * freeze, thaw, notify, flushname, recursing * Subcommands with new options are: * dumpdb [-all|-cache|-zone] [view ...] * stop and halt commands have new -p (print process number). 4.1.3. Changes * 'dig' and 'nslookup name.' now report "Not Implemented" as NOTIMP rather than NOTIMPL. This will have impact on scripts that are looking for NOTIMPL. * DNSSEC tools provided by BIND 9.2.x are not compatible and are replaced where applicable. 4.1.4. Subtractions * Inverse IPv6 resolution, IPv6 hostname to address, only queries the ip6.arpa domain as the ip6.int domain is obsolete. Refer to RFC 3596. * allow-v6-synthesis (named.conf option) has been obsoleted. This option statement caused named to translate ip6.int requests to ip6.arpa requests. As the ip6.int domain is now obsolete this option has been removed. * IPv6 does not forward A6 lookups, deprecated by RFC 3363 * IPv6 "bitstring" not supported, primary will refuse to load zone files with binary labels. As deprecated by rfc3363 * Zones containing MD (Mail Destination) and MF (Mail Forwarder) will now be rejected. The MD and MF resource record (RR) types were originally introduced in RFC 882 and subsequently obsoleted in RFC 1035 by the MX RR. * Obsoleted DNSSEC key-sets commands 'dnssec-makekeyset' and 'dnssec-signkey' have been removed. 4.2. Bug/RFE Number(s): 6414518 BIND 9.3 required for disable IPv4/IPv6 option 6461591 dns/server should not use its config file as a dependency 6461587 named(1M) CLI options should have corresponding SMF properties XXXXXXX BIND 9.3.3 manual page changes. 4.3. In Scope: nslookup(1M), dig(1M), host(1M) and some other DNS specific binaries are updated at the same time as the DNS server named(1M). Manual page changes will be provided as listed below. 4.4. Out of Scope: usr/lib/libresolv2: Our libresolv library is maintained separately from BIND as of Solaris 10. 4.5. Interfaces: Using taxonomy attributes from PSARC 2005/220: Interface Stability Level Notes ================================================================== /lib/svc/method/dns-server Committed smf_method(5) script SMF Application options: ip_interfaces Volatile Experimental listen_on_port Uncommitted debug_level Uncommitted threads Uncommitted chroot_dir Uncommitted configuration_file Uncommitted SMF property config_data Removed /usr/sbin/dnssec-makekeyset Removed Was external /usr/sbin/dnssec-signkey Removed Was external The above SMF interface are: * ip_interfaces: specifies which IP transport BIND will transmit on. Possible values are 'IPv4' or 'IPv6'. Any other setting assumes 'all', the default. Equivalent command line option '-4' or '-6'. Note, this option provides interim relief from CR 6320428. * listen_on_port: Specifies the default UDP and TCP port which will be used to listen for DNS requests. Equivalent command line option '-p ' * debug_level: Specifies the default debug level. The default is 0; no debugging. The Higher the number the more verbose debug information becomes. Equivalent command line option '-d '. * threads: Specifies the number of cpu worker threads to create. The default of 0 causes named to try and determine the number of CPUs present and create one thread per CPU. Equivalent command line option '-n '. * chroot_dir: Change the root directory using chroot(2) to directory after processing the command line arguments, but before reading the configuration file. Equivalent command line option '-t '. Note, the chroot user is specified * configuration_file: Specifies the configuration file to use in place of the default /etc/named.conf file. An empty sting value denotes the default is to be used. Equivalent command line option '-c ' 4.6. Doc Impact: dig(1M) host(1M) named-checkconf(1M) named-checkzone(1M) named(1M) nslookup(1M) nsupdate(1M) rndc-confgen(1M) 4.7. Admin/Config Impact: Relevant named(1M) command line options will be configurable via specific SMF properties removing the requirement to overload the start/exec property with the command line options. Command line options will still be accepted but should be avoided. The existence of /etc/named.conf will no longer be a trigger to start named. 4.8. HA Impact: None. 4.9. I18N/L10N Impact: No. 4.10. Packaging & Delivery: BIND 9 can continue to be shipped in SUNWbind with source in SUNWbindS. 4.11. Security Impact: Provides DNS with RFC 4033, 4034 and 4035 features. 4.12. Dependencies: BIND 9.x is dependent on OpenSSL which is available in the SFW consolidation. 5. Reference Documents: * CR 6320428 sendto() should return errors up the stack http://monaco.sfbay.sun.com/detail.jsf?cr=6320428 * BIND 9 Administrator Reference Manual http://www.nominum.com/content/documents/bind9arm.pdf * RFC 882 Domain Names - Concepts and Facilities http://www.ietf.org/rfc/rfc882.txt * RFC 1035 Domain Names - Implementation and Specification http://www.ietf.org/rfc/rfc1035.txt * RFC 3363 Representing IPv6 addresses in the DNS http://www.ietf.org/rfc/rfc3363.txt * RFC 3596 DNS Extensions to Support IPv6 http://www.ietf.org/rfc/rfc3596.txt * RFC 4431 DNSSEC Lookaside Validation (DLV) (experimental), http://www.ietf.org/rfc/rfc4431.txt * RFC 4033 DNS Security Introduction and Requirements http://www.ietf.org/rfc/rfc4033.txt * RFC 4034 Resource Records for the DNS Security Extensions http://www.ietf.org/rfc/rfc4034.txt * RFC 4035 Protocol Modifications for the DNS Security Extensions http://www.ietf.org/rfc/rfc4035.txt 6. Resources and Schedule: 6.1. Projected Availability: // October 2006 - Q1FY06 6.2. Cost of Effort: 3 months, one persons engineering, including process and documentation. 6.3. Cost of Capital Resources: No new capital resources required. 6.4. Product Approval Committee requested information: 6.4.1. Consolidation or Component Name: SFW 6.4.3. Type of CPT Review and Approval expected: FastTrack 6.4.4. Project Boundary Conditions: N/A 6.4.5. Is this a necessary project for OEM agreements: No. 6.4.6. Notes: See dependencies section above. 6.4.7. Target RTI Date/Release: October 2006 6.4.8. Target Code Design Review Date: September 2006 6.4.9. Update approval addition: N/A 6.5. ARC review type: FastTrack 7. Prototype Availability: 7.1. Prototype Availability: Workspace: /net/enospc.uk/export/esc_data/1/1-12681143/ws/bind.9.3.3-sfwNV/ 7.2. Prototype Cost: 33 Engineering days (including documentation and research). 8. Historical Interface taxonomy summary For Completeness the following table is a summary of the interface taxonomy introduced here and from PSARC 2004/363 and 2004/669. Summary of Interfaces for dns/server ==================================== Interface Classification Notes ========================================================================== SUNWbind SUNWbindr Uncommitted Package names. /usr/sbin/named Committed Executable path. /usr/sbin/in.named Obsolete Executable path. named/in.named command line Uncommitted /usr/sbin/ndc Obsolete Link retained. /usr/sbin/rndc Volatile Executable path and command line. rndc output Volatile Output text. /usr/sbin/rndc-confgen Volatile Executable path and command line. /etc/named.conf Volatile Configuration syntax. /usr/sbin/host Volatile /usr/sbin/nslookup Volatile /usr/sbin/dnssec-keygen Volatile /usr/sbin/dnssec-makekeyset Removed Was Volatile. /usr/sbin/dnssec-signkey Removed Was Volatile. /usr/sbin/dnssec-signzone Volatile /usr/sbin/nsupdate Volatile solaris.smf.manage.bind Committed Authorisation for bind9. /lib/svc/method/dns-server Committed svc:/network/dns/server:default Committed FMRI. options:ip_interfaces Volatile Experimental. options:listen_on_port Uncommitted options:debug_level Uncommitted options:threads Uncommitted options:chroot_dir Uncommitted options:configuration_file Uncommitted config_data:* Removed 6465493 rndc(1M) restart command could work with svc.startd(1M) From sacadmin Mon Sep 25 05:00:24 2006 Received: from phorcys.east.sun.com (phorcys.East.Sun.COM [129.148.174.143]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id k8PC0OYv023864; Mon, 25 Sep 2006 05:00:24 -0700 (PDT) Received: from phorcys.east.sun.com (localhost [127.0.0.1]) by phorcys.east.sun.com (8.13.8+Sun/8.13.8) with ESMTP id k8PC2jPg006822; Mon, 25 Sep 2006 08:02:45 -0400 (EDT) Received: (from carlsonj@localhost) by phorcys.east.sun.com (8.13.8+Sun/8.13.8/Submit) id k8PC2img006819; Mon, 25 Sep 2006 08:02:44 -0400 (EDT) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <17687.50532.625166.507779@gargle.gargle.HOWL> Date: Mon, 25 Sep 2006 08:02:44 -0400 From: James Carlson To: Darren J Moffat Cc: PSARC@sac.sfbay.sun.com, stacey.marshall@sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] In-Reply-To: <200609251122.k8PBMiE6027831@sac.sfbay.sun.com> References: <200609251122.k8PBMiE6027831@sac.sfbay.sun.com> X-Mailer: VM 7.01 under Emacs 21.3.1 Status: RO Content-Length: 1582 Darren J Moffat writes: > 4.1.3. Changes > 4.1.4. Subtractions There are quite a few incompatible changes here, but I'm going to assume that these are just things that nobody would ever have used so the likely impact is zero. (If it's anything other than that, I don't see how this could get a patch release binding.) In particular, I assume nobody running S10 really cares about DNSSEC. > 4.7. Admin/Config Impact: [...] > The existence of /etc/named.conf will no longer be a trigger > to start named. I don't see how we could justify changing something like that in a patch. Please explain. > /usr/sbin/named Committed Executable path. Given that it's started by SMF, there's not much reason for this to be Committed. > /usr/sbin/rndc Volatile Executable path and > command line. > /etc/named.conf Volatile Configuration syntax. That doesn't match our previous agreement on named. I don't think we can downgrade our support for the DNS configuration interfaces without obsoleting them. > /lib/svc/method/dns-server Committed No. That should not be exposed at all. It should be Project Private. 'Committed' says that we'll have a man page for this internal implementation detail. -- James Carlson, KISS Network Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 From sacadmin Mon Sep 25 07:13:11 2006 Received: from nis-uk.uk.sun.com (nis-uk.UK.Sun.COM [129.156.85.41]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id k8PEDAlL009053; Mon, 25 Sep 2006 07:13:11 -0700 (PDT) Received: from enospc.uk.sun.com (enospc [129.156.173.14]) by nis-uk.uk.sun.com (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id k8PED8Mm006732; Mon, 25 Sep 2006 15:13:08 +0100 (BST) Received: from [129.156.173.199] (estale [129.156.173.199]) by enospc.uk.sun.com (8.13.6+Sun/8.13.3/CTE 3.0) with ESMTP id k8PED74x010574; Mon, 25 Sep 2006 15:13:07 +0100 (BST) Message-ID: <4517E3F3.4090501@sun.com> Date: Mon, 25 Sep 2006 15:13:07 +0100 From: Stacey Marshall User-Agent: Thunderbird 1.5.0.5 (X11/20060829) MIME-Version: 1.0 To: James Carlson CC: Darren J Moffat , PSARC@sac.sfbay.sun.com, Stacey Marshall Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] References: <200609251122.k8PBMiE6027831@sac.sfbay.sun.com> <17687.50532.625166.507779@gargle.gargle.HOWL> In-Reply-To: <17687.50532.625166.507779@gargle.gargle.HOWL> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms050208080000070708070005" Status: RO Content-Length: 7617 This is a cryptographically signed message in MIME format. --------------ms050208080000070708070005 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit James Carlson wrote: > Darren J Moffat writes: > >> 4.1.3. Changes >> 4.1.4. Subtractions >> > > There are quite a few incompatible changes here, but I'm going to > assume that these are just things that nobody would ever have used so > the likely impact is zero. (If it's anything other than that, I don't > see how this could get a patch release binding.) > > In particular, I assume nobody running S10 really cares about DNSSEC. > Yes, It's fair to say that. > >> 4.7. Admin/Config Impact: >> > [...] > >> The existence of /etc/named.conf will no longer be a trigger >> to start named. >> > > I don't see how we could justify changing something like that in a > patch. Please explain. > My original intention was to modify named such that it used the smf dependency pathname as the configuration pathname, as currently the two are not linked. However a conversation on OpenSolaris forum [1] lead me to CR *6240573 "most file:// dependencies should really be scripted checks". *Hence I was removing the dependency. The package/patch installation would need to check if the configuration files exists (the dependency) and disable dns/server if it does not exist. If it suits I can leave the dependency in both the Marketing and patch release, or just the patch release. What is preferred? 1: http://www.opensolaris.org/jive/thread.jspa?messageID=52194쯢 > >> /usr/sbin/named Committed Executable path. >> > > Given that it's started by SMF, there's not much reason for this to be > Committed. > > >> /usr/sbin/rndc Volatile Executable path and >> command line. >> /etc/named.conf Volatile Configuration syntax. >> > > That doesn't match our previous agreement on named. I don't think we > can downgrade our support for the DNS configuration interfaces without > obsoleting them. > This is then an error on my behalf. I was simply presenting a summary of what I understood to be the current release taxonomy using the latest terminology. > >> /lib/svc/method/dns-server Committed >> > > No. That should not be exposed at all. It should be Project Private. > > 'Committed' says that we'll have a man page for this internal > implementation detail. > > OK, my mistake. As the examples scripts I looked at gave a usage output I presumed incorrectly that it would be Committed. Stacey Marshall. --------------ms050208080000070708070005 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJGzCC AugwggJRoAMCAQICEBIaUdarLfVEHkEv7IpOltAwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UE BhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMT I1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA2MDMwMjE0NTczNFoX DTA3MDMwMjE0NTczNFowSTEfMB0GA1UEAxMWVGhhd3RlIEZyZWVtYWlsIE1lbWJlcjEmMCQG CSqGSIb3DQEJARYXc3RhY2V5Lm1hcnNoYWxsQHN1bi5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1+aJnHddlyThWy+7Sjb7UHvDO+R9dO781eRUlOsvpxsC/cFuQlpx0 AH9YjNypjiY9HvrGiJsG7Srhr8qFkZ3GfN/BeLLqTupZ8vvs9q42tXj12qpQLoOdAruFqu0p zMak9/x7kb4HiBzBCfHKjm6Bcuwaoc9ZEGyMjDQxMivuFyo/jRJLKFV98sgoyUx21FducPTw ibaA7jDVOa8pv4vbO1eie5Oc679Fq0HU9xUm9j1A7MzBP87Wv0DB0+PkF6VEkZ9svCb4WZeH TmCJfl5JXGksiwe4M2GmmlCoQMoe5DOf1qthvfeiLKnTjZ0JkPKsoTfIIX2NGZ++DpxMRei5 AgMBAAGjNDAyMCIGA1UdEQQbMBmBF3N0YWNleS5tYXJzaGFsbEBzdW4uY29tMAwGA1UdEwEB /wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAc6K6KyuYy+UQFvrQ6Z99CSMaTOA9AIIotC3KOgkV GTAe5XyF86e/EZYLZOAjhiV9NgulYiu7KeOYT1sRY4MyOVT/eGhVctGVGzNgjLL2WKVOHxof Xxhq/WnKyeqrWkscUNWN805gDZTB5xpKuTgqlQQs280Ve4v1HTyXR+Hr5pcwggLoMIICUaAD AgECAhASGlHWqy31RB5BL+yKTpbQMA0GCSqGSIb3DQEBBAUAMGIxCzAJBgNVBAYTAlpBMSUw IwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUg UGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQTAeFw0wNjAzMDIxNDU3MzRaFw0wNzAzMDIx NDU3MzRaMEkxHzAdBgNVBAMTFlRoYXd0ZSBGcmVlbWFpbCBNZW1iZXIxJjAkBgkqhkiG9w0B CQEWF3N0YWNleS5tYXJzaGFsbEBzdW4uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAtfmiZx3XZck4Vsvu0o2+1B7wzvkfXTu/NXkVJTrL6cbAv3BbkJacdAB/WIzcqY4m PR76xoibBu0q4a/KhZGdxnzfwXiy6k7qWfL77PauNrV49dqqUC6DnQK7hartKczGpPf8e5G+ B4gcwQnxyo5ugXLsGqHPWRBsjIw0MTIr7hcqP40SSyhVffLIKMlMdtRXbnD08Im2gO4w1Tmv Kb+L2ztXonuTnOu/RatB1PcVJvY9QOzMwT/O1r9AwdPj5BelRJGfbLwm+FmXh05giX5eSVxp LIsHuDNhpppQqEDKHuQzn9arYb33oiyp042dCZDyrKE3yCF9jRmfvg6cTEXouQIDAQABozQw MjAiBgNVHREEGzAZgRdzdGFjZXkubWFyc2hhbGxAc3VuLmNvbTAMBgNVHRMBAf8EAjAAMA0G CSqGSIb3DQEBBAUAA4GBAHOiuisrmMvlEBb60OmffQkjGkzgPQCCKLQtyjoJFRkwHuV8hfOn vxGWC2TgI4YlfTYLpWIruynjmE9bEWODMjlU/3hoVXLRlRszYIyy9lilTh8aH18Yav1pysnq q1pLHFDVjfNOYA2UwecaSrk4KpUELNvNFXuL9R08l0fh6+aXMIIDPzCCAqigAwIBAgIBDTAN BgkqhkiG9w0BAQUFADCB0TELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTES MBAGA1UEBxMJQ2FwZSBUb3duMRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UE CxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBl cnNvbmFsIEZyZWVtYWlsIENBMSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0 aGF3dGUuY29tMB4XDTAzMDcxNzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQDEpjxVc1X7TrnKmVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAK MNcCY1osiRVwjt3J8CuFWqo/cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTX p6a7n2XRxSpUhQ9IBH+nttE8YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYB Af8CAQAwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBl cnNvbmFsRnJlZW1haWxDQS5jcmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYD VQQDExFQcml2YXRlTGFiZWwyLTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2as Zw9/r6y+whehQ5aUnX9MIbj4Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSe JVCUYsfbJ3FXJY3dqZw5jowgT2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHT HUb/XV9lTzGCA2QwggNgAgEBMHYwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBD b25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFp bCBJc3N1aW5nIENBAhASGlHWqy31RB5BL+yKTpbQMAkGBSsOAwIaBQCgggHDMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTA2MDkyNTE0MTMwN1owIwYJKoZI hvcNAQkEMRYEFK6lnsHfe8oZTiJUovMjkpnvJZQoMFIGCSqGSIb3DQEJDzFFMEMwCgYIKoZI hvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3 DQMCAgEoMIGFBgkrBgEEAYI3EAQxeDB2MGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3 dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJl ZW1haWwgSXNzdWluZyBDQQIQEhpR1qst9UQeQS/sik6W0DCBhwYLKoZIhvcNAQkQAgsxeKB2 MGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQu MSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQQIQEhpR1qst 9UQeQS/sik6W0DANBgkqhkiG9w0BAQEFAASCAQAyO4SH9/IkA44zfiadx4jy0K6h87DYxljJ 55EMvv3kITCBEdMIW+rUrBNtaZ3C7RlgaxCGSHUpL5z5xoW3rp++O15r4zJHcriUIAxs47Jy 5jBXnZwnE/ASGEG9I5+RIrAIy4034lQHS830nLfoM9PysUsFybuDvtN6aUYkOdhpWYPlQAVj 0+gXuQpuPe/Wdpll+clAGf6JrNg6caRqHyrDSmERZdoqKVesEzTzuXNlwGU3FinVA8rF4UI5 idSKFzt49jS8QHe2mE3nUrHTpiF2KKn7Sq9fOIkV8PghY/q8O8CVQGmwsfHXSMLbDtmuCP/7 /y6kFUnEeICrZtT8EM8fAAAAAAAA --------------ms050208080000070708070005-- From sacadmin Mon Sep 25 07:40:47 2006 Received: from phorcys.east.sun.com (phorcys.East.Sun.COM [129.148.174.143]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id k8PEelDW016995; Mon, 25 Sep 2006 07:40:47 -0700 (PDT) Received: from phorcys.east.sun.com (localhost [127.0.0.1]) by phorcys.east.sun.com (8.13.8+Sun/8.13.8) with ESMTP id k8PEh8h0008005; Mon, 25 Sep 2006 10:43:08 -0400 (EDT) Received: (from carlsonj@localhost) by phorcys.east.sun.com (8.13.8+Sun/8.13.8/Submit) id k8PEh8s2008002; Mon, 25 Sep 2006 10:43:08 -0400 (EDT) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <17687.60156.465936.461547@gargle.gargle.HOWL> Date: Mon, 25 Sep 2006 10:43:08 -0400 From: James Carlson To: Stacey Marshall Cc: Darren J Moffat , PSARC@sac.sfbay.sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] In-Reply-To: <4517E3F3.4090501@sun.com> References: <200609251122.k8PBMiE6027831@sac.sfbay.sun.com> <17687.50532.625166.507779@gargle.gargle.HOWL> <4517E3F3.4090501@sun.com> X-Mailer: VM 7.01 under Emacs 21.3.1 Status: RO Content-Length: 2634 Stacey Marshall writes: > >> The existence of /etc/named.conf will no longer be a trigger > >> to start named. > >> > > > > I don't see how we could justify changing something like that in a > > patch. Please explain. > > > My original intention was to modify named such that it used the smf > dependency pathname as the configuration pathname, as currently the two > are not linked. However a conversation on OpenSolaris forum [1] lead me > to CR *6240573 "most file:// > dependencies should really be scripted checks". *Hence I was removing > the dependency. Perhaps I misunderstand. Will you be removing the preinstall/postinstall logic that checks for /etc/named.conf, writes the /tmp/sunwbindr_dns_ file, and enables the server automatically on upgrade? If not, then there's no problem. > If it suits I can leave the dependency in both the Marketing and patch > release, or just the patch release. What is preferred? Splitting it out into minor binding (marketing release) would make sense if the above packaging change needs to be done. If not, then I think no split would be needed. > >> /usr/sbin/rndc Volatile Executable path and > >> command line. > >> /etc/named.conf Volatile Configuration syntax. > >> > > > > That doesn't match our previous agreement on named. I don't think we > > can downgrade our support for the DNS configuration interfaces without > > obsoleting them. > > > This is then an error on my behalf. I was simply presenting a summary > of what I understood to be the current release taxonomy using the latest > terminology. The current man pages lack the usually required documentation, but our previous agreement was that /etc/named.conf was "Evolving," which maps into "Committed" in the new taxonomy. The only exceptions are for "experimental," "debugging," or "deprecated" keywords and features. > > 'Committed' says that we'll have a man page for this internal > > implementation detail. > > > > > OK, my mistake. As the examples scripts I looked at gave a usage output > I presumed incorrectly that it would be Committed. The existence of usage output doesn't by itself make it a documented interface. The only official documentation on the system is in the man pages. -- James Carlson, KISS Network Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 From sacadmin Mon Sep 25 09:38:45 2006 Received: from nis-uk.uk.sun.com (nis-uk.UK.Sun.COM [129.156.85.41]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id k8PGciqv016298; Mon, 25 Sep 2006 09:38:44 -0700 (PDT) Received: from enospc.uk.sun.com (enospc [129.156.173.14]) by nis-uk.uk.sun.com (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id k8PGcgp1020831; Mon, 25 Sep 2006 17:38:42 +0100 (BST) Received: from [129.156.173.199] (estale [129.156.173.199]) by enospc.uk.sun.com (8.13.6+Sun/8.13.3/CTE 3.0) with ESMTP id k8PGcfHq009796; Mon, 25 Sep 2006 17:38:41 +0100 (BST) Message-ID: <45180610.3060308@sun.com> Date: Mon, 25 Sep 2006 17:38:40 +0100 From: Stacey Marshall User-Agent: Thunderbird 1.5.0.5 (X11/20060829) MIME-Version: 1.0 To: James Carlson CC: Darren J Moffat , PSARC@sac.sfbay.sun.com, Stacey Marshall Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] References: <200609251122.k8PBMiE6027831@sac.sfbay.sun.com> <17687.50532.625166.507779@gargle.gargle.HOWL> <4517E3F3.4090501@sun.com> <17687.60156.465936.461547@gargle.gargle.HOWL> In-Reply-To: <17687.60156.465936.461547@gargle.gargle.HOWL> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms040606000108090607070605" Status: RO Content-Length: 9362 This is a cryptographically signed message in MIME format. --------------ms040606000108090607070605 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit James Carlson wrote: > Stacey Marshall writes: > >>>> The existence of /etc/named.conf will no longer be a trigger >>>> to start named. >>>> >>>> >>> I don't see how we could justify changing something like that in a >>> patch. Please explain. >>> >>> >> My original intention was to modify named such that it used the smf >> dependency pathname as the configuration pathname, as currently the two >> are not linked. However a conversation on OpenSolaris forum [1] lead me >> to CR *6240573 "most file:// >> dependencies should really be scripted checks". *Hence I was removing >> the dependency. >> > > Perhaps I misunderstand. > > Will you be removing the preinstall/postinstall logic that checks for > /etc/named.conf, writes the /tmp/sunwbindr_dns_ file, and enables the > server automatically on upgrade? > No. the intention was not to remove preinstall/postinstall, this would have to stay. The intent is to remove config_data entry from svc:/network/dns/server:default > If not, then there's no problem. > > >> If it suits I can leave the dependency in both the Marketing and patch >> release, or just the patch release. What is preferred? >> > > Splitting it out into minor binding (marketing release) would make > sense if the above packaging change needs to be done. If not, then I > think no split would be needed. > > >>>> /usr/sbin/rndc Volatile Executable path and >>>> command line. >>>> /etc/named.conf Volatile Configuration syntax. >>>> >>>> >>> That doesn't match our previous agreement on named. I don't think we >>> can downgrade our support for the DNS configuration interfaces without >>> obsoleting them. >>> >>> >> This is then an error on my behalf. I was simply presenting a summary >> of what I understood to be the current release taxonomy using the latest >> terminology. >> > > The current man pages lack the usually required documentation, but our > previous agreement was that /etc/named.conf was "Evolving," which maps > into "Committed" in the new taxonomy. > As I had to go through the ARC archives to find the taxonomy levels I thought that I would provide the summary. Revised accordingly from your comments: Summary of Interfaces for dns/server ==================================== Interface Classification Notes --------------------------------+----------------+------------------------ SUNWbind SUNWbindr Uncommitted Package names. /usr/sbin/named Committed Executable path. /usr/sbin/in.named Obsolete Executable path. named/in.named command line Uncommitted /usr/sbin/ndc Obsolete Link retained. /usr/sbin/rndc Committed Executable path and command line. rndc output Volatile Output text. /usr/sbin/rndc-confgen Volatile Executable path and command line. /etc/named.conf Committed Configuration syntax. /usr/sbin/host Volatile /usr/sbin/nslookup Volatile /usr/sbin/dnssec-keygen Volatile - /usr/sbin/dnssec-makekeyset Removed Was Volatile. - /usr/sbin/dnssec-signkey Removed Was Volatile. /usr/sbin/dnssec-signzone Volatile /usr/sbin/nsupdate Volatile solaris.smf.manage.bind Committed Authorisation for bind9. + /lib/svc/method/dns-server Project Private smf_method(5) script svc:/network/dns/server:default Committed FMRI. + options:ip_interfaces Volatile Experimental -4/-9 + options:listen_on_port Uncommitted Equated to -p #port + options:debug_level Uncommitted Equated to -d #value + options:threads Uncommitted Equated to -n #cpus + options:chroot_dir Uncommitted Equated to -t pathname + options:configuration_file Uncommitted Equated to -c pathname - config_data:* Removed Key: + Added. - Removed. --------------ms040606000108090607070605 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJGzCC AugwggJRoAMCAQICEBIaUdarLfVEHkEv7IpOltAwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UE BhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMT I1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA2MDMwMjE0NTczNFoX DTA3MDMwMjE0NTczNFowSTEfMB0GA1UEAxMWVGhhd3RlIEZyZWVtYWlsIE1lbWJlcjEmMCQG CSqGSIb3DQEJARYXc3RhY2V5Lm1hcnNoYWxsQHN1bi5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1+aJnHddlyThWy+7Sjb7UHvDO+R9dO781eRUlOsvpxsC/cFuQlpx0 AH9YjNypjiY9HvrGiJsG7Srhr8qFkZ3GfN/BeLLqTupZ8vvs9q42tXj12qpQLoOdAruFqu0p zMak9/x7kb4HiBzBCfHKjm6Bcuwaoc9ZEGyMjDQxMivuFyo/jRJLKFV98sgoyUx21FducPTw ibaA7jDVOa8pv4vbO1eie5Oc679Fq0HU9xUm9j1A7MzBP87Wv0DB0+PkF6VEkZ9svCb4WZeH TmCJfl5JXGksiwe4M2GmmlCoQMoe5DOf1qthvfeiLKnTjZ0JkPKsoTfIIX2NGZ++DpxMRei5 AgMBAAGjNDAyMCIGA1UdEQQbMBmBF3N0YWNleS5tYXJzaGFsbEBzdW4uY29tMAwGA1UdEwEB /wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAc6K6KyuYy+UQFvrQ6Z99CSMaTOA9AIIotC3KOgkV GTAe5XyF86e/EZYLZOAjhiV9NgulYiu7KeOYT1sRY4MyOVT/eGhVctGVGzNgjLL2WKVOHxof Xxhq/WnKyeqrWkscUNWN805gDZTB5xpKuTgqlQQs280Ve4v1HTyXR+Hr5pcwggLoMIICUaAD AgECAhASGlHWqy31RB5BL+yKTpbQMA0GCSqGSIb3DQEBBAUAMGIxCzAJBgNVBAYTAlpBMSUw IwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUg UGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQTAeFw0wNjAzMDIxNDU3MzRaFw0wNzAzMDIx NDU3MzRaMEkxHzAdBgNVBAMTFlRoYXd0ZSBGcmVlbWFpbCBNZW1iZXIxJjAkBgkqhkiG9w0B CQEWF3N0YWNleS5tYXJzaGFsbEBzdW4uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAtfmiZx3XZck4Vsvu0o2+1B7wzvkfXTu/NXkVJTrL6cbAv3BbkJacdAB/WIzcqY4m PR76xoibBu0q4a/KhZGdxnzfwXiy6k7qWfL77PauNrV49dqqUC6DnQK7hartKczGpPf8e5G+ B4gcwQnxyo5ugXLsGqHPWRBsjIw0MTIr7hcqP40SSyhVffLIKMlMdtRXbnD08Im2gO4w1Tmv Kb+L2ztXonuTnOu/RatB1PcVJvY9QOzMwT/O1r9AwdPj5BelRJGfbLwm+FmXh05giX5eSVxp LIsHuDNhpppQqEDKHuQzn9arYb33oiyp042dCZDyrKE3yCF9jRmfvg6cTEXouQIDAQABozQw MjAiBgNVHREEGzAZgRdzdGFjZXkubWFyc2hhbGxAc3VuLmNvbTAMBgNVHRMBAf8EAjAAMA0G CSqGSIb3DQEBBAUAA4GBAHOiuisrmMvlEBb60OmffQkjGkzgPQCCKLQtyjoJFRkwHuV8hfOn vxGWC2TgI4YlfTYLpWIruynjmE9bEWODMjlU/3hoVXLRlRszYIyy9lilTh8aH18Yav1pysnq q1pLHFDVjfNOYA2UwecaSrk4KpUELNvNFXuL9R08l0fh6+aXMIIDPzCCAqigAwIBAgIBDTAN BgkqhkiG9w0BAQUFADCB0TELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTES MBAGA1UEBxMJQ2FwZSBUb3duMRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UE CxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBl cnNvbmFsIEZyZWVtYWlsIENBMSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0 aGF3dGUuY29tMB4XDTAzMDcxNzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQDEpjxVc1X7TrnKmVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAK MNcCY1osiRVwjt3J8CuFWqo/cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTX p6a7n2XRxSpUhQ9IBH+nttE8YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYB Af8CAQAwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBl cnNvbmFsRnJlZW1haWxDQS5jcmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYD VQQDExFQcml2YXRlTGFiZWwyLTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2as Zw9/r6y+whehQ5aUnX9MIbj4Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSe JVCUYsfbJ3FXJY3dqZw5jowgT2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHT HUb/XV9lTzGCA2QwggNgAgEBMHYwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBD b25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFp bCBJc3N1aW5nIENBAhASGlHWqy31RB5BL+yKTpbQMAkGBSsOAwIaBQCgggHDMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTA2MDkyNTE2Mzg0MFowIwYJKoZI hvcNAQkEMRYEFBHhT3uGNi8Lu6I91nZTchYgr7GXMFIGCSqGSIb3DQEJDzFFMEMwCgYIKoZI hvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3 DQMCAgEoMIGFBgkrBgEEAYI3EAQxeDB2MGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3 dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJl ZW1haWwgSXNzdWluZyBDQQIQEhpR1qst9UQeQS/sik6W0DCBhwYLKoZIhvcNAQkQAgsxeKB2 MGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQu MSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQQIQEhpR1qst 9UQeQS/sik6W0DANBgkqhkiG9w0BAQEFAASCAQCkH1VT2MVyC4kx7avJUxpZ4741LsUJhZPQ JT3T1TRcF3mra3ewclgichethFdaU8RmgpD9YPJURecY4w/V+ejCX2WVaoVD3Ft8rCIYNauK eX0b8W0L8onZctzqLd+R7OTPhmEAFTPD2mZ6B25G9urGlATkHWAp9kONtcPyENUlC5nT8m6b g1JldXDpjeT+nHiUOYRTHsPpD0nlCj//bAeOgKhwzsMrZuHZSloJkthGmLfYmlCq3uLUqtRM ETtBKiPsFYrOAuPN/X2LADtXBa9nndsIsY/Oj68hDEVusgh9qC25tvT+OUIgvLtfGEX1fVRO u/+/VH+PKnRFyuXOgufYAAAAAAAA --------------ms040606000108090607070605-- From sacadmin Mon Sep 25 09:43:12 2006 Received: from phorcys.east.sun.com (phorcys.East.Sun.COM [129.148.174.143]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id k8PGhC71021595; Mon, 25 Sep 2006 09:43:12 -0700 (PDT) Received: from phorcys.east.sun.com (localhost [127.0.0.1]) by phorcys.east.sun.com (8.13.8+Sun/8.13.8) with ESMTP id k8PGjXHd008589; Mon, 25 Sep 2006 12:45:33 -0400 (EDT) Received: (from carlsonj@localhost) by phorcys.east.sun.com (8.13.8+Sun/8.13.8/Submit) id k8PGjX1h008586; Mon, 25 Sep 2006 12:45:33 -0400 (EDT) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <17688.1964.782970.880966@gargle.gargle.HOWL> Date: Mon, 25 Sep 2006 12:45:32 -0400 From: James Carlson To: Stacey Marshall Cc: Darren J Moffat , PSARC@sac.sfbay.sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] In-Reply-To: <45180610.3060308@sun.com> References: <200609251122.k8PBMiE6027831@sac.sfbay.sun.com> <17687.50532.625166.507779@gargle.gargle.HOWL> <4517E3F3.4090501@sun.com> <17687.60156.465936.461547@gargle.gargle.HOWL> <45180610.3060308@sun.com> X-Mailer: VM 7.01 under Emacs 21.3.1 Status: RO Content-Length: 764 Stacey Marshall writes: > > Will you be removing the preinstall/postinstall logic that checks for > > /etc/named.conf, writes the /tmp/sunwbindr_dns_ file, and enables the > > server automatically on upgrade? > > > No. the intention was not to remove preinstall/postinstall, this would > have to stay. > The intent is to remove config_data entry from > svc:/network/dns/server:default Got it; thanks. > As I had to go through the ARC archives to find the taxonomy levels I > thought that I would provide the summary. Looks good. -- James Carlson, KISS Network Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 From sacadmin Mon Sep 25 16:08:37 2006 Received: from engmail3mpk.sfbay.Sun.COM (engmail3mpk.SFBay.Sun.COM [129.146.11.26]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id k8PN8bfA003174; Mon, 25 Sep 2006 16:08:37 -0700 (PDT) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by engmail3mpk.sfbay.Sun.COM (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id k8PN8ZgD018480; Mon, 25 Sep 2006 16:08:35 -0700 (PDT) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id k8PNAlYq019387; Mon, 25 Sep 2006 16:10:48 -0700 (PDT) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id k8PNAlWK019386; Mon, 25 Sep 2006 16:10:47 -0700 (PDT) Date: Mon, 25 Sep 2006 16:10:47 -0700 (PDT) From: Gary Winiger Message-Id: <200609252310.k8PNAlWK019386@marduk.eng.sun.com> To: PSARC@sac.sfbay.sun.com, darrenm@sac.sfbay.sun.com Cc: stacey.marshall@sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] Status: RO Content-Length: 748 > 4.5. Interfaces: > * threads: Specifies the number of cpu worker threads to > create. The default of 0 causes named to try and determine > the number of CPUs present and create one thread per > CPU. Equivalent command line option '-n '. Does CPUs here equate to cores? Would one want to tune as fine as the number of threads supported by the CMT cores? Perhaps asked in a different way: How sensitive to performance is this option and how well is the estimate needed in a CMT environment? > 4.7. Admin/Config Impact: > The existence of /etc/named.conf will no longer be a trigger > to start named. Does bind still remain disabled and therefore SBD compliant with this change? Gary.. From sacadmin Tue Sep 26 04:49:52 2006 Received: from phorcys.east.sun.com (phorcys.East.Sun.COM [129.148.174.143]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id k8QBnpIt015545; Tue, 26 Sep 2006 04:49:51 -0700 (PDT) Received: from phorcys.east.sun.com (localhost [127.0.0.1]) by phorcys.east.sun.com (8.13.8+Sun/8.13.8) with ESMTP id k8QBqD3E011493; Tue, 26 Sep 2006 07:52:13 -0400 (EDT) Received: (from carlsonj@localhost) by phorcys.east.sun.com (8.13.8+Sun/8.13.8/Submit) id k8QBqD5N011490; Tue, 26 Sep 2006 07:52:13 -0400 (EDT) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <17689.5228.368608.438241@gargle.gargle.HOWL> Date: Tue, 26 Sep 2006 07:52:12 -0400 From: James Carlson To: Gary Winiger Cc: PSARC@sac.sfbay.sun.com, darrenm@sac.sfbay.sun.com, stacey.marshall@sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] In-Reply-To: <200609252310.k8PNAlWK019386@marduk.eng.sun.com> References: <200609252310.k8PNAlWK019386@marduk.eng.sun.com> X-Mailer: VM 7.01 under Emacs 21.3.1 Status: RO Content-Length: 1423 Gary Winiger writes: > > 4.5. Interfaces: > > > * threads: Specifies the number of cpu worker threads to > > create. The default of 0 causes named to try and determine > > the number of CPUs present and create one thread per > > CPU. Equivalent command line option '-n '. > > Does CPUs here equate to cores? Would one want to tune as fine > as the number of threads supported by the CMT cores? > Perhaps asked in a different way: How sensitive to performance > is this option and how well is the estimate needed in a CMT > environment? There's also the small problem of "when" -- does it really change the number of running threads when CPUs are off-lined or DR'd? Or does it just sample this information once at boot time? Really, I view this as little more than an amusing performance hack for the tweakers in the audience. Most web servers contain something similar, at the same level of granularity. It's unfortunate that it exposes internal implementation details as though an administrator should care, and it may even be possible to create some sort of dynamic per-application thread count optimizer, but that's probably not this project. -- James Carlson, KISS Network Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 From sacadmin Tue Sep 26 07:08:05 2006 Received: from nis-uk.uk.sun.com (nis-uk.UK.Sun.COM [129.156.85.41]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id k8QE84Je018132; Tue, 26 Sep 2006 07:08:04 -0700 (PDT) Received: from enospc.uk.sun.com (enospc [129.156.173.14]) by nis-uk.uk.sun.com (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id k8QE81id010075; Tue, 26 Sep 2006 15:08:01 +0100 (BST) Received: from [129.156.173.199] (estale [129.156.173.199]) by enospc.uk.sun.com (8.13.6+Sun/8.13.3/CTE 3.0) with ESMTP id k8QE80SE005821; Tue, 26 Sep 2006 15:08:01 +0100 (BST) Message-ID: <45193440.2070606@sun.com> Date: Tue, 26 Sep 2006 15:08:00 +0100 From: Stacey Marshall User-Agent: Thunderbird 1.5.0.5 (X11/20060829) MIME-Version: 1.0 To: Gary Winiger CC: PSARC@sac.sfbay.sun.com, darrenm@sac.sfbay.sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] References: <200609252310.k8PNAlWK019386@marduk.eng.sun.com> In-Reply-To: <200609252310.k8PNAlWK019386@marduk.eng.sun.com> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms050602040907010007030702" Status: RO Content-Length: 6145 This is a cryptographically signed message in MIME format. --------------ms050602040907010007030702 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Gary Winiger wrote: >> 4.5. Interfaces: >> > > >> * threads: Specifies the number of cpu worker threads to >> create. The default of 0 causes named to try and determine >> the number of CPUs present and create one thread per >> CPU. Equivalent command line option '-n '. >> > > Does CPUs here equate to cores? Would one want to tune as fine > as the number of threads supported by the CMT cores? > Perhaps asked in a different way: How sensitive to performance > is this option and how well is the estimate needed in a CMT > environment? > By default it simply relies on what is returned from sysconf() when called with (_SC_NPROCESSORS_ONLN) http://cvs.opensolaris.org/source/xref/sfw/usr/src/cmd/bind/bind-9.2.4/lib/isc/unix/os.c#32 The command line option '-n' simply allows the administrator to override the setting. As it uses threads we are using the word threads. > >> 4.7. Admin/Config Impact: >> > > >> The existence of /etc/named.conf will no longer be a trigger >> to start named. >> > > Does bind still remain disabled and therefore SBD compliant > with this change? > Yes. > Gary.. > Stacey --------------ms050602040907010007030702 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJGzCC AugwggJRoAMCAQICEBIaUdarLfVEHkEv7IpOltAwDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UE BhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMT I1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA2MDMwMjE0NTczNFoX DTA3MDMwMjE0NTczNFowSTEfMB0GA1UEAxMWVGhhd3RlIEZyZWVtYWlsIE1lbWJlcjEmMCQG CSqGSIb3DQEJARYXc3RhY2V5Lm1hcnNoYWxsQHN1bi5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1+aJnHddlyThWy+7Sjb7UHvDO+R9dO781eRUlOsvpxsC/cFuQlpx0 AH9YjNypjiY9HvrGiJsG7Srhr8qFkZ3GfN/BeLLqTupZ8vvs9q42tXj12qpQLoOdAruFqu0p zMak9/x7kb4HiBzBCfHKjm6Bcuwaoc9ZEGyMjDQxMivuFyo/jRJLKFV98sgoyUx21FducPTw ibaA7jDVOa8pv4vbO1eie5Oc679Fq0HU9xUm9j1A7MzBP87Wv0DB0+PkF6VEkZ9svCb4WZeH TmCJfl5JXGksiwe4M2GmmlCoQMoe5DOf1qthvfeiLKnTjZ0JkPKsoTfIIX2NGZ++DpxMRei5 AgMBAAGjNDAyMCIGA1UdEQQbMBmBF3N0YWNleS5tYXJzaGFsbEBzdW4uY29tMAwGA1UdEwEB /wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAc6K6KyuYy+UQFvrQ6Z99CSMaTOA9AIIotC3KOgkV GTAe5XyF86e/EZYLZOAjhiV9NgulYiu7KeOYT1sRY4MyOVT/eGhVctGVGzNgjLL2WKVOHxof Xxhq/WnKyeqrWkscUNWN805gDZTB5xpKuTgqlQQs280Ve4v1HTyXR+Hr5pcwggLoMIICUaAD AgECAhASGlHWqy31RB5BL+yKTpbQMA0GCSqGSIb3DQEBBAUAMGIxCzAJBgNVBAYTAlpBMSUw IwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUg UGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQTAeFw0wNjAzMDIxNDU3MzRaFw0wNzAzMDIx NDU3MzRaMEkxHzAdBgNVBAMTFlRoYXd0ZSBGcmVlbWFpbCBNZW1iZXIxJjAkBgkqhkiG9w0B CQEWF3N0YWNleS5tYXJzaGFsbEBzdW4uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAtfmiZx3XZck4Vsvu0o2+1B7wzvkfXTu/NXkVJTrL6cbAv3BbkJacdAB/WIzcqY4m PR76xoibBu0q4a/KhZGdxnzfwXiy6k7qWfL77PauNrV49dqqUC6DnQK7hartKczGpPf8e5G+ B4gcwQnxyo5ugXLsGqHPWRBsjIw0MTIr7hcqP40SSyhVffLIKMlMdtRXbnD08Im2gO4w1Tmv Kb+L2ztXonuTnOu/RatB1PcVJvY9QOzMwT/O1r9AwdPj5BelRJGfbLwm+FmXh05giX5eSVxp LIsHuDNhpppQqEDKHuQzn9arYb33oiyp042dCZDyrKE3yCF9jRmfvg6cTEXouQIDAQABozQw MjAiBgNVHREEGzAZgRdzdGFjZXkubWFyc2hhbGxAc3VuLmNvbTAMBgNVHRMBAf8EAjAAMA0G CSqGSIb3DQEBBAUAA4GBAHOiuisrmMvlEBb60OmffQkjGkzgPQCCKLQtyjoJFRkwHuV8hfOn vxGWC2TgI4YlfTYLpWIruynjmE9bEWODMjlU/3hoVXLRlRszYIyy9lilTh8aH18Yav1pysnq q1pLHFDVjfNOYA2UwecaSrk4KpUELNvNFXuL9R08l0fh6+aXMIIDPzCCAqigAwIBAgIBDTAN BgkqhkiG9w0BAQUFADCB0TELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTES MBAGA1UEBxMJQ2FwZSBUb3duMRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UE CxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBl cnNvbmFsIEZyZWVtYWlsIENBMSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0 aGF3dGUuY29tMB4XDTAzMDcxNzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQDEpjxVc1X7TrnKmVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAK MNcCY1osiRVwjt3J8CuFWqo/cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTX p6a7n2XRxSpUhQ9IBH+nttE8YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYB Af8CAQAwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBl cnNvbmFsRnJlZW1haWxDQS5jcmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYD VQQDExFQcml2YXRlTGFiZWwyLTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2as Zw9/r6y+whehQ5aUnX9MIbj4Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSe JVCUYsfbJ3FXJY3dqZw5jowgT2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHT HUb/XV9lTzGCA2QwggNgAgEBMHYwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBD b25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFp bCBJc3N1aW5nIENBAhASGlHWqy31RB5BL+yKTpbQMAkGBSsOAwIaBQCgggHDMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTA2MDkyNjE0MDgwMFowIwYJKoZI hvcNAQkEMRYEFKsopQWcQ1zCCK7vxAuP++Dtvg9NMFIGCSqGSIb3DQEJDzFFMEMwCgYIKoZI hvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3 DQMCAgEoMIGFBgkrBgEEAYI3EAQxeDB2MGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3 dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJl ZW1haWwgSXNzdWluZyBDQQIQEhpR1qst9UQeQS/sik6W0DCBhwYLKoZIhvcNAQkQAgsxeKB2 MGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQu MSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQQIQEhpR1qst 9UQeQS/sik6W0DANBgkqhkiG9w0BAQEFAASCAQBbG2ZSZrXSNZonG+7cOLCPjZZIcjVXOJbK 57Drfl0Wclbf5rmS4/84bYoTwsqX4NC8hBrbfmhmRW/9wsVD7cMHrLGcBZb1bEclGpIQyLWw 6gsPzSmndbxGcgaCJHxtyRhGGgTTvwIlUpgz7K4ZL8iS04rgDdY8sdT7VT2hKSFCacxg5H9W yE/Oh6AHetteeG73KJ4ZJOv2xne3QT4NHIrOBmpmKCCtSXb7BEwbx1kbN1o2rPrZvWeO6eft d8WpsndNLcdlX0NRVSSkTiZvVimbdaKFp6VeJif+JklGuxnW3hLCLujQHbFNN8bXAbX3n7Gh 7QeDlBPYukW9HeCqSeiMAAAAAAAA --------------ms050602040907010007030702-- From sacadmin Thu Oct 19 08:57:51 2006 Received: from sunmail2.sfbay.sun.com (sunmail2.SFBay.Sun.COM [129.149.246.180]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id k9JFvpUC011733 for ; Thu, 19 Oct 2006 08:57:51 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2.sfbay.sun.com (8.11.7p1+Sun/8.11.7/ENSMAIL,v2.2) with ESMTP id k9JFvmL19889; Thu, 19 Oct 2006 08:57:49 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0J7E00J0R4CA5100@brm-avmta-1.central.sun.com>; Thu, 19 Oct 2006 09:57:46 -0600 (MDT) Received: from gmp-ea-fw-1.sun.com ([129.156.42.5]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0J7E00GIA4C9C930@brm-avmta-1.central.sun.com>; Thu, 19 Oct 2006 09:57:46 -0600 (MDT) Received: from d1-emea-09.sun.com (d1-emea-09.sun.com [192.18.2.119] (may be forged)) by gmp-ea-fw-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9JFviJO028589; Thu, 19 Oct 2006 16:57:44 +0100 (BST) Received: from conversion-daemon.d1-emea-09.sun.com by d1-emea-09.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J7E00D0147SKA00@d1-emea-09.sun.com> (original mail from Darren.Moffat@Sun.COM); Thu, 19 Oct 2006 16:57:44 +0100 (BST) Received: from [129.156.173.21] by d1-emea-09.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J7E00CHO4C7QD20@d1-emea-09.sun.com>; Thu, 19 Oct 2006 16:57:44 +0100 (BST) Date: Thu, 19 Oct 2006 16:57:43 +0100 From: Darren J Moffat Subject: PSARC/2006/553 BIND 9.3.3 server and utilities Sender: Darren.Moffat@Sun.COM To: psarc@Sun.COM, stacey.marshall@Sun.COM Message-id: <4537A077.8080109@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 User-Agent: Thunderbird 1.5.0.5 (X11/20060912) Status: RO Content-Length: 50 This case has been approved. -- Darren J Moffat From sacadmin Fri Jun 15 01:28:14 2007 Received: from nis-uk.uk.sun.com (nis-uk.UK.Sun.COM [129.156.85.41]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l5F8SDMj019111 for ; Fri, 15 Jun 2007 01:28:14 -0700 (PDT) Received: from serinus.UK.Sun.COM (serinus [129.156.173.208]) by nis-uk.uk.sun.com (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id l5F8Qctt023796; Fri, 15 Jun 2007 09:26:38 +0100 (BST) Received: from [129.156.173.199] (estale [129.156.173.199]) by serinus.UK.Sun.COM (8.13.7+Sun/8.13.7/CTE 3.0) with ESMTP id l5F8QccS022239; Fri, 15 Jun 2007 09:26:38 +0100 (BST) Message-ID: <46724D3E.4000700@sun.com> Date: Fri, 15 Jun 2007 09:26:38 +0100 From: Stacey Marshall User-Agent: Thunderbird 2.0.0.0 (X11/20070508) MIME-Version: 1.0 To: Darren J Moffat CC: PSARC@sac.sfbay.sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Status: RO Content-Length: 5236 Hi Darren, I was just looking over the PSARC/2006/553 and I don't see this addition to the ARC case. I'm resending it with CC of PSARC@sac.sfbay.sun.com in the hope that it ends up in the mail folder for this case. Stace -------- Original Message -------- Message-ID: <45FAB219.2080903@sun.com> Date: Fri, 16 Mar 2007 15:04:57 +0000 From: Stacey Marshall User-Agent: Thunderbird 2.0b2 (X11/20070130) MIME-Version: 1.0 To: Darren J Moffat Subject: PSARC/2006/553 BIND 9.3.x server and utilities amendment Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit This information is Copyright 2006 Sun Microsystems, Inc. PSARC/2006/553 BIND 9.3.x server and utilities amendment Darren, as discussed, Stace In addition to SMF properties described in the original one-pager I would like to add another property named 'server' at stability level "Uncommitted". The 'server' option allows an administrator to specify an alternative binary that will be executed by the smf_method(5) script. Thus enabling the use of our svc:/network/dns/server method to customers using BIND not installed in /usr/sbin/named. The named(1M) man page will be amended with this property. Differences below from original case marked with '+': 4.5. Interfaces: Using taxonomy attributes from PSARC 2005/220: Interface Stability Level Notes ----------------------------+----------------+------------------- /lib/svc/method/dns-server Project Private smf_method(5) script SMF Application options: ip_interfaces Volatile Experimental listen_on_port Uncommitted debug_level Uncommitted threads Uncommitted chroot_dir Uncommitted configuration_file Uncommitted + server Uncommitted SMF property config_data Removed /usr/sbin/dnssec-makekeyset Removed Was external /usr/sbin/dnssec-signkey Removed Was external The above SMF interface are: * ip_interfaces: specifies which IP transport BIND will transmit on. Possible values are 'IPv4' or 'IPv6'. Any other setting assumes 'all', the default. Equivalent command line option '-4' or '-6'. Note, this option provides interim relief from CR 6320428. * listen_on_port: Specifies the default UDP and TCP port which will be used to listen for DNS requests. Equivalent command line option '-p ' * debug_level: Specifies the default debug level. The default is 0; no debugging. The Higher the number the more verbose debug information becomes. Equivalent command line option '-d '. * threads: Specifies the number of cpu worker threads to create. The default of 0 causes named to try and determine the number of CPUs present and create one thread per CPU. Equivalent command line option '-n '. * chroot_dir: Change the root directory using chroot(2) to directory after processing the command line arguments, but before reading the configuration file. Equivalent command line option '-t '. Note, the chroot user is specified * configuration_file: Specifies the configuration file to use in place of the default /etc/named.conf file. An empty sting value denotes the default is to be used. Equivalent command line option '-c ' + + * server: Specifies the executable binary that is executed by + smf_method(5) script usr/src/cmd/bind/dns-server.sh. If + unset the default /usr/sbin/named will be executed. 4.6. Doc Impact: dig(1M) host(1M) named-checkconf(1M) named-checkzone(1M) named(1M) nslookup(1M) nsupdate(1M) rndc-confgen(1M) -- Stacey Jonathan Marshall. Solaris Revenue Product Engineering, EMEA Sun Microsystems Limited. --------------------------------------------------------------------- http://blogs.sun.com/ace --------------------------------------------------------------------- -- Stacey Jonathan Marshall. Solaris Revenue Product Engineering, EMEA Sun Microsystems Limited. --------------------------------------------------------------------- http://blogs.sun.com/ace --------------------------------------------------------------------- From sacadmin Fri Jun 15 04:20:27 2007 Received: from phorcys.east.sun.com (phorcys.East.Sun.COM [129.148.174.143]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l5FBKRPr022301 for ; Fri, 15 Jun 2007 04:20:27 -0700 (PDT) Received: from phorcys.east.sun.com (localhost [127.0.0.1]) by phorcys.east.sun.com (8.14.1+Sun/8.14.1) with ESMTP id l5FBIqZw019372; Fri, 15 Jun 2007 07:18:52 -0400 (EDT) Received: (from carlsonj@localhost) by phorcys.east.sun.com (8.14.1+Sun/8.14.1/Submit) id l5FBIqfR019369; Fri, 15 Jun 2007 07:18:52 -0400 (EDT) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <18034.30108.806955.668140@gargle.gargle.HOWL> Date: Fri, 15 Jun 2007 07:18:52 -0400 From: James Carlson To: Stacey Marshall Cc: Darren J Moffat , PSARC@sac.sfbay.sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] In-Reply-To: <46724D3E.4000700@sun.com> References: <46724D3E.4000700@sun.com> X-Mailer: VM 7.01 under Emacs 21.3.1 Status: RO Content-Length: 1080 Stacey Marshall writes: > + > + * server: Specifies the executable binary that is executed by > + smf_method(5) script usr/src/cmd/bind/dns-server.sh. If > + unset the default /usr/sbin/named will be executed. I'm not going to derail over this issue, but that looks like a _lot_ of rope to be handing out, and looks like a hack for a different problem. Why do customers want to run a different copy of named? Is it because they don't trust us to compile the bits correctly? Is it because we don't (or can't) set the right compile-time flags? Is it because it takes too long to get fresh bits from us? Is it because they actually hack on the named source and want to deploy modified versions? I suspect that there are different (and better) fixes available for each of those than just telling customers: "here, you can roll your own." -- James Carlson, Solaris Networking Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 From sacadmin Fri Jun 15 06:33:40 2007 Received: from nis-uk.uk.sun.com (nis-uk.UK.Sun.COM [129.156.85.41]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l5FDXdGQ024674 for ; Fri, 15 Jun 2007 06:33:39 -0700 (PDT) Received: from serinus.UK.Sun.COM (serinus [129.156.173.208]) by nis-uk.uk.sun.com (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id l5FDW43i029477; Fri, 15 Jun 2007 14:32:04 +0100 (BST) Received: from [129.156.173.199] (estale [129.156.173.199]) by serinus.UK.Sun.COM (8.13.7+Sun/8.13.7/CTE 3.0) with ESMTP id l5FDW3hm003066; Fri, 15 Jun 2007 14:32:04 +0100 (BST) Message-ID: <467294D3.4030707@sun.com> Date: Fri, 15 Jun 2007 14:32:03 +0100 From: Stacey Marshall User-Agent: Thunderbird 2.0.0.0 (X11/20070508) MIME-Version: 1.0 To: James Carlson CC: Darren J Moffat , PSARC@sac.sfbay.sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] References: <46724D3E.4000700@sun.com> <18034.30108.806955.668140@gargle.gargle.HOWL> In-Reply-To: <18034.30108.806955.668140@gargle.gargle.HOWL> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Status: RO Content-Length: 1959 James Carlson wrote: > Stacey Marshall writes: > >> + >> + * server: Specifies the executable binary that is executed by >> + smf_method(5) script usr/src/cmd/bind/dns-server.sh. If >> + unset the default /usr/sbin/named will be executed. >> > > I'm not going to derail over this issue, but that looks like a _lot_ > of rope to be handing out, and looks like a hack for a different > problem. > > Why do customers want to run a different copy of named? Is it because > they don't trust us to compile the bits correctly? Is it because we > don't (or can't) set the right compile-time flags? Is it because it > takes too long to get fresh bits from us? Is it because they actually > hack on the named source and want to deploy modified versions? > > It does at first appear to be a horrible barnacle but I believe it is does enable us to better support our customer needs. Without this option if a customer wanted to run their own version of BIND they could just change the start/exec string. Or they could create their own service and or instance. Or worse they could modify the smf_method() script or simply overwrite usr/sbin/named. With this option we provide an alternative which allows services to easily see what has been done. > I suspect that there are different (and better) fixes available for > each of those than just telling customers: "here, you can roll your > own." > > The ISC currently provide BIND 9.2.8, BIND 9.3.4, BIND 9.4.1 and, to Forum members such as our selves, BIND 9.5 alpha. There are several reasons why we and our customers may want to run these versions before Sun officially support them, and we of course prefer them to run these versions on Solaris. -- Stacey Jonathan Marshall. Solaris Revenue Product Engineering, EMEA Sun Microsystems Limited. +44-(0)1252-426106 (x26106) --------------------------------------------------------------------- http://blogs.sun.com/ace From sacadmin Fri Jun 15 08:15:38 2007 Received: from sfbaymail2sca.sfbay.sun.com (sfbaymail2sca.SFBay.Sun.COM [129.145.155.42]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l5FFFb5s026802 for ; Fri, 15 Jun 2007 08:15:38 -0700 (PDT) Received: from brmea-mail-1.sun.com (brmea-mail-1.Sun.COM [192.18.98.31]) by sfbaymail2sca.sfbay.sun.com (8.13.6+Sun/8.12.10/ENSMAIL,v2.2) with ESMTP id l5FFE3Vn016320 for ; Fri, 15 Jun 2007 08:14:03 -0700 (PDT) Received: from fe-amer-09.sun.com ([192.18.108.183]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id l5FFE2Pe004463 for ; Fri, 15 Jun 2007 15:14:02 GMT Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JJO00801N0FST00@mail-amer.sun.com> (original mail from Torrey.McMahon@Sun.COM) for PSARC@sac.sfbay.sun.com; Fri, 15 Jun 2007 09:14:02 -0600 (MDT) Received: from [192.168.1.100] ([69.143.10.104]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JJO00M92NMU2BQI@mail-amer.sun.com>; Fri, 15 Jun 2007 09:13:45 -0600 (MDT) Date: Fri, 15 Jun 2007 11:13:44 -0400 From: Torrey McMahon Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] In-reply-to: <467294D3.4030707@sun.com> Sender: Torrey.McMahon@Sun.COM To: Stacey Marshall Cc: James Carlson , Darren J Moffat , PSARC@sac.sfbay.sun.com Message-id: <4672ACA8.50303@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <46724D3E.4000700@sun.com> <18034.30108.806955.668140@gargle.gargle.HOWL> <467294D3.4030707@sun.com> User-Agent: Thunderbird 2.0.0.4 (Windows/20070604) Status: RO Content-Length: 431 Stacey Marshall wrote: > The ISC currently provide BIND 9.2.8, BIND 9.3.4, BIND 9.4.1 and, to > Forum members such as our selves, BIND 9.5 alpha. There are several > reasons why we and our customers may want to run these versions before > Sun officially support them, and we of course prefer them to run these > versions on Solaris. > > Then wouldn't they just remove the Sun provided BIND packages and install their own? From sacadmin Fri Jun 15 08:29:46 2007 Received: from dm-uk-01.uk.sun.com (dm-uk-01.UK.Sun.COM [129.156.101.115]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l5FFTjXp026880 for ; Fri, 15 Jun 2007 08:29:46 -0700 (PDT) Received: from serinus.UK.Sun.COM (serinus.UK.Sun.COM [129.156.173.208]) by dm-uk-01.uk.sun.com (8.13.7+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id l5FFSBgY000569; Fri, 15 Jun 2007 16:28:11 +0100 (BST) Received: from [129.156.173.199] (estale [129.156.173.199]) by serinus.UK.Sun.COM (8.13.7+Sun/8.13.7/CTE 3.0) with ESMTP id l5FFSAK5007881; Fri, 15 Jun 2007 16:28:11 +0100 (BST) Message-ID: <4672B00A.2040000@sun.com> Date: Fri, 15 Jun 2007 16:28:10 +0100 From: Stacey Marshall User-Agent: Thunderbird 2.0.0.0 (X11/20070508) MIME-Version: 1.0 To: Torrey McMahon CC: PSARC@sac.sfbay.sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] References: <46724D3E.4000700@sun.com> <18034.30108.806955.668140@gargle.gargle.HOWL> <467294D3.4030707@sun.com> <4672ACA8.50303@sun.com> In-Reply-To: <4672ACA8.50303@sun.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Status: RO Content-Length: 696 Torrey McMahon wrote: > Stacey Marshall wrote: >> The ISC currently provide BIND 9.2.8, BIND 9.3.4, BIND 9.4.1 and, to >> Forum members such as our selves, BIND 9.5 alpha. There are several >> reasons why we and our customers may want to run these versions >> before Sun officially support them, and we of course prefer them to >> run these versions on Solaris. >> >> > > Then wouldn't they just remove the Sun provided BIND packages and > install their own? The non-sun versions don't provide a mechanism to start the service at boot. Where as we do, so it makes sense not to remove our version completely. That and our version also provide a host of other commands which we support. From sacadmin Fri Jun 15 09:05:52 2007 Received: from localhost.Central.Sun.COM (dhcp-uaus08-128-213.Central.Sun.COM [129.153.128.213]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l5FG5q9O028167 for ; Fri, 15 Jun 2007 09:05:52 -0700 (PDT) Received: from localhost.Central.Sun.COM (localhost [127.0.0.1]) by localhost.Central.Sun.COM (8.14.1+Sun/8.14.1) with ESMTP id l5FG3Ld5020817; Fri, 15 Jun 2007 11:03:21 -0500 (CDT) Received: (from nw141292@localhost) by localhost.Central.Sun.COM (8.14.1+Sun/8.14.1/Submit) id l5FG3LY0020816; Fri, 15 Jun 2007 11:03:21 -0500 (CDT) X-Authentication-Warning: localhost.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f Date: Fri, 15 Jun 2007 11:03:21 -0500 From: Nicolas Williams To: Stacey Marshall Cc: Torrey McMahon , PSARC@sac.sfbay.sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] Message-ID: <20070615160320.GK19770@Sun.COM> References: <46724D3E.4000700@sun.com> <18034.30108.806955.668140@gargle.gargle.HOWL> <467294D3.4030707@sun.com> <4672ACA8.50303@sun.com> <4672B00A.2040000@sun.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4672B00A.2040000@sun.com> User-Agent: Mutt/1.5.7i Status: RO Content-Length: 853 On Fri, Jun 15, 2007 at 04:28:10PM +0100, Stacey Marshall wrote: > >Then wouldn't they just remove the Sun provided BIND packages and > >install their own? > The non-sun versions don't provide a mechanism to start the service at > boot. Where as we do, so it makes sense not to remove our version > completely. That and our version also provide a host of other commands > which we support. Can't we contribute an SMF manifest to ISC with the BIND version as an instance name? To me the BIND version as part of the instance name makes a lot of sense ("svcs|grep bind", aha! now I know what's running, as opposed to having to use svccfg(1M) or svcprop(1) after using svcs(1)). (Unfortunately, IIRC the current situation is that additional instances can't be delivered as manifests -- you have to script the addition using svccfg(1M).) Nico -- From sacadmin Fri Jun 15 09:37:03 2007 Received: from phorcys.east.sun.com (phorcys.East.Sun.COM [129.148.174.143]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l5FGb3qT029536 for ; Fri, 15 Jun 2007 09:37:03 -0700 (PDT) Received: from phorcys.east.sun.com (localhost [127.0.0.1]) by phorcys.east.sun.com (8.14.1+Sun/8.14.1) with ESMTP id l5FGZUHp020199; Fri, 15 Jun 2007 12:35:30 -0400 (EDT) Received: (from carlsonj@localhost) by phorcys.east.sun.com (8.14.1+Sun/8.14.1/Submit) id l5FGZTbd020196; Fri, 15 Jun 2007 12:35:29 -0400 (EDT) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <18034.49105.721028.355036@gargle.gargle.HOWL> Date: Fri, 15 Jun 2007 12:35:29 -0400 From: James Carlson To: Stacey Marshall Cc: Torrey McMahon , PSARC@sac.sfbay.sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] In-Reply-To: <4672B00A.2040000@sun.com> References: <46724D3E.4000700@sun.com> <18034.30108.806955.668140@gargle.gargle.HOWL> <467294D3.4030707@sun.com> <4672ACA8.50303@sun.com> <4672B00A.2040000@sun.com> X-Mailer: VM 7.01 under Emacs 21.3.1 Status: RO Content-Length: 734 Stacey Marshall writes: > The non-sun versions don't provide a mechanism to start the service at > boot. Where as we do, so it makes sense not to remove our version > completely. That and our version also provide a host of other commands > which we support. I think it makes sense for them to supply their own manifest. If they don't, that's ok too, as the existing rc script method works fine. Aren't we supposed to be encouraging third parties to move to SMF? Isn't this an ideal opportunity for it? -- James Carlson, Solaris Networking Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 From sacadmin Fri Jun 15 12:37:30 2007 Received: from sfbaymail2sca.sfbay.sun.com (sfbaymail2sca.SFBay.Sun.COM [129.145.155.42]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l5FJbU3O004398 for ; Fri, 15 Jun 2007 12:37:30 -0700 (PDT) Received: from brmea-mail-1.sun.com (brmea-mail-1.Sun.COM [192.18.98.31]) by sfbaymail2sca.sfbay.sun.com (8.13.6+Sun/8.12.10/ENSMAIL,v2.2) with ESMTP id l5FJZuMv025511 for ; Fri, 15 Jun 2007 12:35:56 -0700 (PDT) Received: from fe-amer-03.sun.com ([192.18.108.177]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id l5FJZuE6019443 for ; Fri, 15 Jun 2007 19:35:56 GMT Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JJO00L01Z20NU00@mail-amer.sun.com> (original mail from Torrey.McMahon@Sun.COM) for PSARC@sac.sfbay.sun.com; Fri, 15 Jun 2007 13:35:56 -0600 (MDT) Received: from [192.168.1.100] ([69.143.10.104]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JJO008BSZQZ3UH5@mail-amer.sun.com>; Fri, 15 Jun 2007 13:35:25 -0600 (MDT) Date: Fri, 15 Jun 2007 15:35:26 -0400 From: Torrey McMahon Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] In-reply-to: <4672B00A.2040000@sun.com> Sender: Torrey.McMahon@Sun.COM To: Stacey Marshall Cc: PSARC@sac.sfbay.sun.com Message-id: <4672E9FE.5010807@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <46724D3E.4000700@sun.com> <18034.30108.806955.668140@gargle.gargle.HOWL> <467294D3.4030707@sun.com> <4672ACA8.50303@sun.com> <4672B00A.2040000@sun.com> User-Agent: Thunderbird 2.0.0.4 (Windows/20070604) Status: RO Content-Length: 1007 Stacey Marshall wrote: > Torrey McMahon wrote: >> Stacey Marshall wrote: >>> The ISC currently provide BIND 9.2.8, BIND 9.3.4, BIND 9.4.1 and, to >>> Forum members such as our selves, BIND 9.5 alpha. There are several >>> reasons why we and our customers may want to run these versions >>> before Sun officially support them, and we of course prefer them to >>> run these versions on Solaris. >>> >>> >> >> Then wouldn't they just remove the Sun provided BIND packages and >> install their own? > The non-sun versions don't provide a mechanism to start the service at > boot. Where as we do, so it makes sense not to remove our version > completely. That and our version also provide a host of other > commands which we support. Then shouldn't the non-Sun provided versions figure this out? I can imagine we'll get some interesting support calls like, "We're using the Sun service manifest with this version of BIND I found on a website. Please make it work..." Or am I missing something? From sacadmin Fri Jun 15 21:42:31 2007 Received: from sineb-mail-2.sun.com ([192.18.19.7]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l5G4gUnV019487 for ; Fri, 15 Jun 2007 21:42:31 -0700 (PDT) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id l5G4epHI026255 for ; Sat, 16 Jun 2007 04:40:51 GMT Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JJP00601OTQLF00@mail-apac.sun.com> (original mail from Darren.Reed@Sun.COM) for PSARC@sac.sfbay.sun.com; Sat, 16 Jun 2007 12:40:51 +0800 (SGT) Received: from [129.146.106.55] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JJP00DD3P019433@mail-apac.sun.com>; Sat, 16 Jun 2007 12:40:51 +0800 (SGT) Date: Fri, 15 Jun 2007 21:40:49 -0700 From: Darren.Reed@Sun.COM Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] In-reply-to: <46724D3E.4000700@sun.com> Sender: Darren.Reed@Sun.COM To: Stacey Marshall Cc: Darren J Moffat , PSARC@sac.sfbay.sun.com Message-id: <467369D1.5040903@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-Accept-Language: en-us, en References: <46724D3E.4000700@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.7) Gecko/20060120 Status: RO Content-Length: 1601 Stacey Marshall wrote: > ... > The above SMF interface are: > ... > * listen_on_port: Specifies the default UDP and TCP port which > will be used to listen for DNS requests. Equivalent command > line option '-p ' > > * debug_level: Specifies the default debug level. The default > is 0; no debugging. The Higher the number the more verbose > debug information becomes. Equivalent command line option > '-d '. > > * threads: Specifies the number of cpu worker threads to > create. The default of 0 causes named to try and determine > the number of CPUs present and create one thread per > CPU. Equivalent command line option '-n '. > > * chroot_dir: Change the root directory using chroot(2) to > directory after processing the command line arguments, but > before reading the configuration file. Equivalent command > line option '-t '. Note, the chroot user is > specified ...is specified where? > * configuration_file: Specifies the configuration file to use > in place of the default /etc/named.conf file. An empty > sting value denotes the default is to be used. Equivalent > command line option '-c ' The man page for named in Solaris 10 today has: named [-fgsv] [-c config-file] [-d debug-level] [-n #cpus] [-p port] [-t directory] [-u user] [-x cache-file] Is there any reason to not cover the "-u" and "-x" command line options with additional SMF properties? Darren From sacadmin Mon Jun 18 02:32:04 2007 Received: from nis-uk.uk.sun.com (nis-uk.UK.Sun.COM [129.156.85.41]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l5I9W37O005317 for ; Mon, 18 Jun 2007 02:32:03 -0700 (PDT) Received: from serinus.UK.Sun.COM (serinus [129.156.173.208]) by nis-uk.uk.sun.com (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id l5I9UOJ7029757; Mon, 18 Jun 2007 10:30:24 +0100 (BST) Received: from [129.156.173.199] (estale [129.156.173.199]) by serinus.UK.Sun.COM (8.13.7+Sun/8.13.7/CTE 3.0) with ESMTP id l5I9UOe5001886; Mon, 18 Jun 2007 10:30:24 +0100 (BST) Message-ID: <467650B0.2080803@sun.com> Date: Mon, 18 Jun 2007 10:30:24 +0100 From: Stacey Marshall User-Agent: Thunderbird 2.0.0.0 (X11/20070508) MIME-Version: 1.0 To: Darren.Reed@sun.com, Jimmo CC: Darren J Moffat , PSARC@sac.sfbay.sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] References: <46724D3E.4000700@sun.com> <467369D1.5040903@Sun.COM> In-Reply-To: <467369D1.5040903@Sun.COM> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Status: RO Content-Length: 3056 Gentleman, Ladies. Thank you for the interest in this project. Please be advised that it was integrated in snv_64. When I first proposed this project to Darren Moffat he informed me that as BIND 9.3 included new command line options they must have SMF properties. The ISC informed me that they did not have resources to apply SMF changes to BIND 9.3, but would consider adding changes supplied by Sun to BIND 9.5 or some future version. As 9.5 is an in development release this did not suit our customer needs and thus we settled for providing an smf_method script. Regarding future changes to BIND, my understanding is that Development engineering here at Sun is not investing in this area. While the bug backlog exists Revenue Product Engineering (the group I work for) will also not be investing in projects such as this. >> >> * chroot_dir: Change the root directory using chroot(2) to >> directory after processing the command line arguments, but >> before reading the configuration file. Equivalent command >> line option '-t '. Note, the chroot user is >> specified > > > ...is specified where? The correct paragraph did make it into the manual page: $ man named ... options/chroot_dir Specifies the directory to be used as the root directory after processing SMF properties and the command line arguments but before reading the configuration file. Use this property when using a chroot(2) environment. Synonymous to command line option -t pathname. When using chroot(2), named is unable to disable itself when receiving rndc(1M) stop or halt commands. Instead, you must use the svcadm(1M) disable command. ... In addition to the properties listed above, the following property can be used to invoke named as a user other than root: start/user Specifies the identity of the user that is invoking named. See smf_method(5) and chroot(2). > >> * configuration_file: Specifies the configuration file to use >> in place of the default /etc/named.conf file. An empty >> sting value denotes the default is to be used. Equivalent >> command line option '-c ' > > > The man page for named in Solaris 10 today has: > > named [-fgsv] [-c config-file] [-d debug-level] [-n #cpus] > [-p port] [-t directory] [-u user] [-x cache-file] > > Is there any reason to not cover the "-u" and "-x" command line > options with additional SMF properties? > > Darren Rather than provide an SMF property that equated to the '-u' option I was advised by SMF folks to use the start/user property in its place. The '-x' option is for developers use only. Options not include as SMF properties are -x, -f, -g and -v. Should they be required in some extraordinary circumstance those options may be appended to the options/server property; that was deliberately left undocumented. Stacey. From sacadmin Mon Jun 18 09:56:08 2007 Received: from localhost.Central.Sun.COM (dhcp-uaus08-128-213.Central.Sun.COM [129.153.128.213]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l5IGu8qf014611 for ; Mon, 18 Jun 2007 09:56:08 -0700 (PDT) Received: from localhost.Central.Sun.COM (localhost [127.0.0.1]) by localhost.Central.Sun.COM (8.14.1+Sun/8.14.1) with ESMTP id l5IGragJ024429; Mon, 18 Jun 2007 11:53:36 -0500 (CDT) Received: (from nw141292@localhost) by localhost.Central.Sun.COM (8.14.1+Sun/8.14.1/Submit) id l5IGraxw024428; Mon, 18 Jun 2007 11:53:36 -0500 (CDT) X-Authentication-Warning: localhost.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f Date: Mon, 18 Jun 2007 11:53:35 -0500 From: Nicolas Williams To: Darren.Reed@sun.com Cc: Stacey Marshall , Darren J Moffat , PSARC@sac.sfbay.sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] Message-ID: <20070618165335.GC24098@Sun.COM> References: <46724D3E.4000700@sun.com> <467369D1.5040903@Sun.COM> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <467369D1.5040903@Sun.COM> User-Agent: Mutt/1.5.7i Status: RO Content-Length: 582 On Fri, Jun 15, 2007 at 09:40:49PM -0700, Darren.Reed@Sun.COM wrote: > Stacey Marshall wrote: > > >... > > The above SMF interface are: > >... > These are presumably mapped onto arguments for the server binary. But this presumes a high degree of stability in the server CLI. I'm not sure that ISC provides for such stability, but if they don't then that's an additional argument to require that each BIND version have its own instance of the service, with its own start method (possibly shared where similarity of server CLIs allows it). From sacadmin Thu Jun 21 02:44:58 2007 Received: from dm-uk-02.uk.sun.com (dm-uk-02.UK.Sun.COM [129.156.101.196]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l5L9ivAR025102 for ; Thu, 21 Jun 2007 02:44:57 -0700 (PDT) Received: from serinus.UK.Sun.COM (serinus.UK.Sun.COM [129.156.173.208]) by dm-uk-02.uk.sun.com (8.13.7+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id l5L9hFAI008659; Thu, 21 Jun 2007 10:43:16 +0100 (BST) Received: from [129.156.173.199] (estale [129.156.173.199]) by serinus.UK.Sun.COM (8.13.7+Sun/8.13.7/CTE 3.0) with ESMTP id l5L9hFQr014495; Thu, 21 Jun 2007 10:43:15 +0100 (BST) Message-ID: <467A4833.3010704@sun.com> Date: Thu, 21 Jun 2007 10:43:15 +0100 From: Stacey Marshall User-Agent: Thunderbird 2.0.0.0 (X11/20070508) MIME-Version: 1.0 To: Torrey McMahon CC: PSARC@sac.sfbay.sun.com Subject: Re: BIND 9.3.3 server and utilities [PSARC/2006/553 Timeout: 10/02/2006] References: <46724D3E.4000700@sun.com> <18034.30108.806955.668140@gargle.gargle.HOWL> <467294D3.4030707@sun.com> <4672ACA8.50303@sun.com> <4672B00A.2040000@sun.com> <4672E9FE.5010807@sun.com> In-Reply-To: <4672E9FE.5010807@sun.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Status: RO Content-Length: 1113 Torrey McMahon wrote: > Stacey Marshall wrote: >> Torrey McMahon wrote: >>> Stacey Marshall wrote: >>>> The ISC currently provide BIND 9.2.8, BIND 9.3.4, BIND 9.4.1 and, >>>> to Forum members such as our selves, BIND 9.5 alpha. There are >>>> several reasons why we and our customers may want to run these >>>> versions before Sun officially support them, and we of course >>>> prefer them to run these versions on Solaris. >>>> >>>> >>> >>> Then wouldn't they just remove the Sun provided BIND packages and >>> install their own? >> The non-sun versions don't provide a mechanism to start the service >> at boot. Where as we do, so it makes sense not to remove our version >> completely. That and our version also provide a host of other >> commands which we support. > > Then shouldn't the non-Sun provided versions figure this out? I can > imagine we'll get some interesting support calls like, "We're using > the Sun service manifest with this version of BIND I found on a > website. Please make it work..." > > Or am I missing something? > Only that We got those calls before these changes.