summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--WHATSNEW.txt1
-rw-r--r--lib/param/loadparm.c2
-rw-r--r--selftest/target/Samba4.pm5
3 files changed, 4 insertions, 4 deletions
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index f571f55741..e8e2613f0f 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -140,6 +140,7 @@ We changed the default dns implementation to the internal dns server
(SAMBA_INTERNAL). BIND9_FLATFILE and BIND9_DLZ are still available,
but you'll have to add '-dns' to the 'server services' option
to disable the internal dns server.
+The default for 'allow dns updates' has changed to 'secure only'.
CHANGES SINCE beta7
=====================
diff --git a/lib/param/loadparm.c b/lib/param/loadparm.c
index 76f87bf528..277a92124b 100644
--- a/lib/param/loadparm.c
+++ b/lib/param/loadparm.c
@@ -2214,7 +2214,7 @@ struct loadparm_context *loadparm_init(TALLOC_CTX *mem_ctx)
lpcfg_do_global_parameter(lp_ctx, "rndc command", "/usr/sbin/rndc");
lpcfg_do_global_parameter(lp_ctx, "nsupdate command", "/usr/bin/nsupdate -g");
- lpcfg_do_global_parameter(lp_ctx, "allow dns updates", "False");
+ lpcfg_do_global_parameter(lp_ctx, "allow dns updates", "secure only");
lpcfg_do_global_parameter(lp_ctx, "dns recursive queries", "False");
lpcfg_do_global_parameter(lp_ctx, "dns forwarder", "");
diff --git a/selftest/target/Samba4.pm b/selftest/target/Samba4.pm
index b1f6118746..ce005d4874 100644
--- a/selftest/target/Samba4.pm
+++ b/selftest/target/Samba4.pm
@@ -1191,8 +1191,7 @@ sub provision_dc($$)
my ($self, $prefix) = @_;
print "PROVISIONING DC...";
- my $extra_conf_options = "netbios aliases = localDC1-a
-allow dns updates = signed";
+ my $extra_conf_options = "netbios aliases = localDC1-a";
my $ret = $self->provision($prefix,
"domain controller",
"localdc",
@@ -1251,7 +1250,7 @@ sub provision_fl2003dc($$)
"samba2003.example.com",
"2003",
"locDCpass6",
- undef, "allow dns updates = True", "", undef);
+ undef, "allow dns updates = nonsecure and secure", "", undef);
unless($self->add_wins_config("$prefix/private")) {
warn("Unable to add wins configuration");