sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
Code
09c787c34a
samba-mirror/docs-xml/smbdotconf/domain/dnszonetransferclientsallow.xml

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

27 lines
981 B
XML
Raw Normal View History

Fix for https://bugzilla.samba.org/show_bug.cgi?id=9634 Add an option to smb.conf to list authorized zone transfer clients. Implement restriction in dlz_bind9 module to allow transfers only to selected IPs. Deny zone transfer by default in dlz_bind9. Adds test for the restriction in DNZ zone transfer clients. BUG: https://bugzilla.samba.org/show_bug.cgi?id=9634 Signed-off-by: Julien ROPÉ <jrope@linagora.com> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Jun 11 19:28:10 UTC 2021 on sn-devel-184
2018-11-23 17:56:59 +03:00
<samba:parameter name="dns zone transfer clients allow"
context="G"
type="cmdlist"
xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>
docs: Improve wording, fix a typo Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Jun 15 19:02:18 UTC 2021 on sn-devel-184
2021-06-12 09:33:42 +03:00
<para>This option specifies the list of IPs authorized to ask for dns zone
Fix for https://bugzilla.samba.org/show_bug.cgi?id=9634 Add an option to smb.conf to list authorized zone transfer clients. Implement restriction in dlz_bind9 module to allow transfers only to selected IPs. Deny zone transfer by default in dlz_bind9. Adds test for the restriction in DNZ zone transfer clients. BUG: https://bugzilla.samba.org/show_bug.cgi?id=9634 Signed-off-by: Julien ROPÉ <jrope@linagora.com> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Jun 11 19:28:10 UTC 2021 on sn-devel-184
2018-11-23 17:56:59 +03:00
transfer from bind DLZ module.
</para>
<para>The IP list is comma and space separated and specified in the same
syntax as used in <smbconfoption name="hosts allow"/>, specifically
including IP address, IP prefixes and IP address masks.
</para>
<para>As this is a DNS server option, hostnames are naturally not permitted.
</para>
<para>The default behaviour is to deny any request.
A request will be authorized only if the emitting client is identified
in this list, and not in <smbconfoption name="dns zone transfer clients deny"/>
</para>
</description>
<value type="default"></value>
<value type="example">192.168.0.1</value>
</samba:parameter>
Copy Permalink