review fixups.

git-svn-id: file:///svn/unbound/trunk@748 be551aaa-1e26-0410-a405-d3ace91eadb9

configure.ac

@@ -2,7 +2,7 @@
 # Process this file with autoconf to produce a configure script.
 AC_PREREQ(2.57)
 
-AC_INIT(unbound, 0.6, unbound-bugs@nlnetlabs.nl, unbound)
+AC_INIT(unbound, 0.7, unbound-bugs@nlnetlabs.nl, unbound)
 
 CFLAGS=
 AC_AIX

daemon/unbound.c

@@ -67,7 +67,7 @@ static void usage()
 	printf("-c file	config file to read instead of %s\n", CONFIGFILE);
 	printf("	file format is described in unbound.conf(5).\n");
 	printf("-d	do not fork into the background.\n");
-	printf("-v	verbose (multiple times increase verbosity)\n");
+	printf("-v	verbose (more times to increase verbosity)\n");
 	printf("Version %s\n", PACKAGE_VERSION);
 	printf("BSD licensed, see LICENSE in source package for details.\n");
 	printf("Report bugs to %s\n", PACKAGE_BUGREPORT);
@@ -292,9 +292,11 @@ do_chroot(struct daemon* daemon, struct config_file* cfg, int debug_mode)
 	}
 	if(cfg->username && cfg->username[0]) {
 		if(setgid(gid) != 0)
-			fatal_exit("unable to set group id: %s", strerror(errno));
+			fatal_exit("unable to set group id of %s: %s", 
+				cfg->username, strerror(errno));
 		if(setuid(uid) != 0)
-			fatal_exit("unable to set user id: %s", strerror(errno));
+			fatal_exit("unable to set user id of %s: %s", 
+				cfg->username, strerror(errno));
 		verbose(VERB_DETAIL, "drop user privileges, run as %s", 
 			cfg->username);
 	}

doc/Changelog

@@ -1,7 +1,11 @@
+15 November 2007: Wouter
+	- review fixups from Jelte.
+
 14 November 2007: Wouter
 	- testbed script does not recreate configure, since its in svn now.
 	- fixup checkconf test so that it does not test 
 	  /etc/unbound/unbound.conf.
+	- tag 0.6.
 
 13 November 2007: Wouter
 	- remove debug print.

doc/README

@@ -19,7 +19,7 @@ This software is under BSD license, see LICENSE for details.
 
 * Make and install: ./configure; make; make install
   * --with-ldns=/path/to/ldns
-  	If ldns is not detected on the system, a prepackaged incuded tarball
+  	If ldns is not detected on the system, a prepackaged tarball
 	of the ldns library is used to compile and statically link against.
 	If detected on the system, it will dynamically link against it.
   * --with-libevent=/path/to/libevent

doc/TODO

@@ -53,3 +53,5 @@ o inspect date on executable, then warn user in log if its more than 1 year.
 o proactively prime root, stubs and trust anchors, feature.
   early failure, faster on first query, but more traffic.
 o use privilege separation, to change privilege options during reload securely
+o check if for PowerDNS(2.9.21) CNAME in Answer section & rcode=NXDOMAIN needs
+  to be fixed up to be rcode=NOERROR?

doc/requirements.txt

@@ -159,3 +159,19 @@ o The method by which dnssec-lameness is detected is not secure. DNSSEC lame
   on a server, dnssec-lameness detection does not work - no dnssec-lameness 
   is detected. Instead the zone that is dnssec-lame becomes bogus.
 
+o authority features.
+  This is a recursive server, and authority features are out of scope.
+  However, some authority features are expected in a recursor. Things like
+  localhost, reverse lookup for 127.0.0.1, or blocking AS112 traffic.
+  Also redirection of domain names with fixed data is needed by service
+  providers. Limited support is added specifically to address this.
+
+  Adding full authority support, requires much more code, and more complex
+  maintenance.
+
+  The limited support allows adding some static data (for localhost and so),
+  and to respond with a fixed rcode (NXDOMAIN) for domains (such as AS112).
+
+  You can put authority data on a separate server, and set the server in 
+  unbound.conf as stub for those zones, this allows clients to access data 
+  from the server without making unbound authoritative for the zones.