s4/dns_server: enable sending of TSIG error records
authorRalph Boehme <slow@samba.org>
Mon, 30 May 2016 14:44:00 +0000 (16:44 +0200)
committerGarming Sam <garming@samba.org>
Wed, 15 Jun 2016 22:06:28 +0000 (00:06 +0200)
commit88700e7d890c017e2d360fe4385e196f4016db4a
treeb61ca9901d35f7a7303ffd8d2f552f8738c25e71
parentba683d459e1b1550d0a4de3a0f576c857ee595c8
s4/dns_server: enable sending of TSIG error records

This final patch enables sending TSIG error records by adding
DNS_RCODE_NOTAUTH to the set of error conditions that are allowed to
trigger sending a full generated response.

See RFC 2845 "4.5.1. KEY check and error handling" and "4.5.3. MAC check
and error handling".

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11520

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
source4/dns_server/dns_server.c