auth_messages.mes 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375
  1. # Copyright (C) 2011 Internet Systems Consortium, Inc. ("ISC")
  2. #
  3. # Permission to use, copy, modify, and/or distribute this software for any
  4. # purpose with or without fee is hereby granted, provided that the above
  5. # copyright notice and this permission notice appear in all copies.
  6. #
  7. # THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
  8. # REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
  9. # AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
  10. # INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
  11. # LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
  12. # OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
  13. # PERFORMANCE OF THIS SOFTWARE.
  14. $NAMESPACE isc::auth
  15. % AUTH_AXFR_ERROR error handling AXFR request: %1
  16. This is a debug message produced by the authoritative server when it
  17. has encountered an error processing an AXFR request. The message gives
  18. the reason for the error, and the server will return a SERVFAIL code to
  19. the sender.
  20. % AUTH_AXFR_UDP AXFR query received over UDP
  21. This is a debug message output when the authoritative server has received
  22. an AXFR query over UDP. Use of UDP for AXFRs is not permitted by the
  23. protocol, so the server will return a FORMERR error to the sender.
  24. % AUTH_COMMAND_FAILED execution of command channel instruction '%1' failed: %2
  25. Execution of the specified command by the authoritative server failed. The
  26. message contains the reason for the failure.
  27. % AUTH_CONFIG_CHANNEL_CREATED configuration session channel created
  28. This is a debug message indicating that authoritative server has created
  29. the channel to the configuration manager. It is issued during server
  30. startup is an indication that the initialization is proceeding normally.
  31. % AUTH_CONFIG_CHANNEL_ESTABLISHED configuration session channel established
  32. This is a debug message indicating that authoritative server
  33. has established communication the configuration manager over the
  34. previously-created channel. It is issued during server startup is an
  35. indication that the initialization is proceeding normally.
  36. % AUTH_CONFIG_CHANNEL_STARTED configuration session channel started
  37. This is a debug message, issued when the authoritative server has
  38. posted a request to be notified when new configuration information is
  39. available. It is issued during server startup is an indication that
  40. the initialization is proceeding normally.
  41. % AUTH_CONFIG_LOAD_FAIL load of configuration failed: %1
  42. An attempt to configure the server with information from the
  43. configuration database during the startup sequence has failed. The
  44. server will continue its initialization although it may not be
  45. configured in the desired way. The reason for the failure is given in
  46. the message. One common reason is that the server failed to acquire a
  47. socket bound to a privileged port (53 for DNS). In that case the
  48. reason in the log message should show something like "permission
  49. denied", and the solution would be to restart BIND 10 as a super
  50. (root) user.
  51. % AUTH_CONFIG_UPDATE_FAIL update of configuration failed: %1
  52. At attempt to update the configuration the server with information
  53. from the configuration database has failed, the reason being given in
  54. the message.
  55. % AUTH_DATASRC_CLIENTS_BUILDER_COMMAND data source builder received command: %1
  56. A debug message, showing when the separate thread for maintaining data
  57. source clients receives a command from the manager.
  58. % AUTH_DATASRC_CLIENTS_BUILDER_COMMAND_ERROR command execution failure: %1
  59. The separate thread for maintaining data source clients failed to complete a
  60. command given by the main thread. In most cases this is some kind of
  61. configuration or temporary error such as an attempt to load a non-existent
  62. zone or a temporary DB connection failure. So the event is just logged and
  63. the thread keeps running. In some rare cases, however, this may indicate an
  64. internal bug and it may be better to restart the entire program, so the log
  65. message should be carefully examined.
  66. % AUTH_DATASRC_CLIENTS_BUILDER_FAILED data source builder thread stopped due to an exception: %1
  67. The separate thread for maintaining data source clients has been
  68. terminated due to some uncaught exception. When this happens, the
  69. thread immediately terminates the entire process because the manager
  70. cannot always catch this condition in a timely fashion and it would be
  71. worse to keep running with such a half-broken state. This is really
  72. an unexpected event and should generally indicate an internal bug.
  73. It's advisable to file a bug report when this message is logged (and
  74. b10-auth subsequently stops).
  75. % AUTH_DATASRC_CLIENTS_BUILDER_FAILED_UNEXPECTED data source builder thread stopped due to an unexpected exception
  76. This is similar to AUTH_DATASRC_CLIENTS_BUILDER_FAILED, but the
  77. exception type indicates it's not thrown either within the BIND 10
  78. implementation or other standard-compliant libraries. This may rather
  79. indicate some run time failure than program errors. As in the other
  80. failure case, the thread terminates the entire process immediately
  81. after logging this message.
  82. % AUTH_DATASRC_CLIENTS_BUILDER_LOAD_ZONE loaded zone %1/%2
  83. This debug message is issued when the separate thread for maintaining data
  84. source clients successfully loaded the named zone of the named class as a
  85. result of the 'loadzone' command.
  86. % AUTH_DATASRC_CLIENTS_BUILDER_LOAD_ZONE_NOCACHE skipped loading zone %1/%2 due to no in-memory cache
  87. This debug message is issued when the separate thread for maintaining data
  88. source clients received a command to reload a zone but skipped it because
  89. the specified zone is not loaded in-memory (but served from an underlying
  90. data source). This could happen if the loadzone command is manually issued
  91. by a user but the zone name is misspelled, but a more likely cause is
  92. that the command is sent from another BIND 10 module (such as xfrin or DDNS).
  93. In the latter case it can be simply ignored because there is no need
  94. for explicit reloading.
  95. % AUTH_DATASRC_CLIENTS_BUILDER_RECONFIGURE_CONFIG_ERROR Error in data source configuration: %1
  96. The thread for maintaining data source clients has received a command to
  97. reconfigure, but the parameter data (the new configuration) contains an
  98. error. The most likely cause is that the datasource-specific configuration
  99. data is not what the data source expects. The system is still running with
  100. the data sources that were previously configured (i.e. as if the
  101. configuration has not changed), and the configuration data needs to be
  102. checked.
  103. The specific problem is printed in the log message.
  104. % AUTH_DATASRC_CLIENTS_BUILDER_RECONFIGURE_DATASRC_ERROR Error setting up data source: %1
  105. The thread for maintaining data source clients has received a command to
  106. reconfigure, but a data source failed to set up. This may be a problem with
  107. the data that is configured (e.g. unreadable files, inconsistent data,
  108. parser problems, database connection problems, etc.), but it could be a bug
  109. in the data source implementation as well. The system is still running with
  110. the data sources that were previously configured (i.e. as if the
  111. configuration has not changed).
  112. The specific problem is printed in the log message.
  113. % AUTH_DATASRC_CLIENTS_BUILDER_RECONFIGURE_ERROR Internal error setting up data source: %1
  114. The thread for maintaining data source clients has received a command to
  115. reconfigure, but raised an exception while setting up data sources. This is
  116. most likely an internal error in a data source, or a bug in the data source
  117. or the system itself, but it is probably a good idea to verify the
  118. configuration first. The system is still running with the data sources that
  119. were previously configured (i.e. as if the configuration has not changed).
  120. The specific problem is printed in the log message.
  121. % AUTH_DATASRC_CLIENTS_BUILDER_RECONFIGURE_STARTED data source reconfiguration started
  122. The thread for maintaining data source clients has received a command to
  123. reconfigure, and has now started this process.
  124. % AUTH_DATASRC_CLIENTS_BUILDER_RECONFIGURE_SUCCESS data source reconfiguration completed successfully
  125. The thread for maintaining data source clients has finished reconfiguring
  126. the data source clients, and is now running with the new configuration.
  127. % AUTH_DATASRC_CLIENTS_BUILDER_STARTED data source builder thread started
  128. A separate thread for maintaining data source clients has been started.
  129. % AUTH_DATASRC_CLIENTS_BUILDER_STOPPED data source builder thread stopped
  130. The separate thread for maintaining data source clients has been stopped.
  131. % AUTH_DATASRC_CLIENTS_SHUTDOWN_ERROR error on waiting for data source builder thread: %1
  132. This indicates that the separate thread for maintaining data source
  133. clients had been terminated due to an uncaught exception, and the
  134. manager notices that at its own termination. This is not an expected
  135. event, because the thread is implemented so it catches all exceptions
  136. internally. So, if this message is logged it's most likely some internal
  137. bug, and it would be nice to file a bug report.
  138. % AUTH_DATASRC_CLIENTS_SHUTDOWN_UNEXPECTED_ERROR Unexpected error on waiting for data source builder thread
  139. Some exception happens while waiting for the termination of the
  140. separate thread for maintaining data source clients. This shouldn't
  141. happen in normal conditions; it should be either fatal system level
  142. errors such as severe memory shortage or some internal bug. If that
  143. happens, and if it's not in the middle of terminating b10-auth, it's
  144. probably better to stop and restart it.
  145. % AUTH_DATA_SOURCE data source database file: %1
  146. This is a debug message produced by the authoritative server when it accesses a
  147. database data source, listing the file that is being accessed.
  148. % AUTH_DNS_SERVICES_CREATED DNS services created
  149. This is a debug message indicating that the component that will handling
  150. incoming queries for the authoritative server (DNSServices) has been
  151. successfully created. It is issued during server startup is an indication
  152. that the initialization is proceeding normally.
  153. % AUTH_HEADER_PARSE_FAIL unable to parse header in received DNS packet: %1
  154. This is a debug message, generated by the authoritative server when an
  155. attempt to parse the header of a received DNS packet has failed. (The
  156. reason for the failure is given in the message.) The server will drop the
  157. packet.
  158. % AUTH_INVALID_STATISTICS_DATA invalid specification of statistics data specified
  159. An error was encountered when the authoritative server specified
  160. statistics data which is invalid for the auth specification file.
  161. % AUTH_LOAD_TSIG loading TSIG keys
  162. This is a debug message indicating that the authoritative server
  163. has requested the keyring holding TSIG keys from the configuration
  164. database. It is issued during server startup is an indication that the
  165. initialization is proceeding normally.
  166. % AUTH_MEM_DATASRC_DISABLED memory data source is disabled for class %1
  167. This is a debug message reporting that the authoritative server has
  168. discovered that the memory data source is disabled for the given class.
  169. % AUTH_MEM_DATASRC_ENABLED memory data source is enabled for class %1
  170. This is a debug message reporting that the authoritative server has
  171. discovered that the memory data source is enabled for the given class.
  172. % AUTH_MESSAGE_FORWARD_ERROR failed to forward %1 request from %2: %3
  173. The authoritative server tried to forward some type DNS request
  174. message to a separate process (e.g., forwarding dynamic update
  175. requests to b10-ddns) to handle it, but it failed. The authoritative
  176. server returns SERVFAIL to the client on behalf of the separate
  177. process. The error could be configuration mismatch between b10-auth
  178. and the recipient component, or it may be because the requests are
  179. coming too fast and the recipient process cannot keep up with the
  180. rate, or some system level failure. In either case this means the
  181. BIND 10 system is not working as expected, so the administrator should
  182. look into the cause and address the issue. The log message includes
  183. the client's address (and port), and the error message sent from the
  184. lower layer that detects the failure.
  185. % AUTH_NOTIFY_QUESTIONS invalid number of questions (%1) in incoming NOTIFY
  186. This debug message is logged by the authoritative server when it receives
  187. a NOTIFY packet that contains zero or more than one question. (A valid
  188. NOTIFY packet contains one question.) The server will return a FORMERR
  189. error to the sender.
  190. % AUTH_NOTIFY_RRTYPE invalid question RR type (%1) in incoming NOTIFY
  191. This debug message is logged by the authoritative server when it receives
  192. a NOTIFY packet that an RR type of something other than SOA in the
  193. question section. (The RR type received is included in the message.) The
  194. server will return a FORMERR error to the sender.
  195. % AUTH_NO_XFRIN received NOTIFY but XFRIN session is not running
  196. This is a debug message produced by the authoritative server when it receives
  197. a NOTIFY packet but the XFRIN process is not running. The packet will be
  198. dropped and nothing returned to the sender.
  199. % AUTH_PACKET_PARSE_ERROR unable to parse received DNS packet: %1
  200. This is a debug message, generated by the authoritative server when an
  201. attempt to parse a received DNS packet has failed due to something other
  202. than a protocol error. The reason for the failure is given in the message;
  203. the server will return a SERVFAIL error code to the sender.
  204. % AUTH_PACKET_PROTOCOL_ERROR DNS packet protocol error: %1. Returning %2
  205. This is a debug message, generated by the authoritative server when an
  206. attempt to parse a received DNS packet has failed due to a protocol error.
  207. The reason for the failure is given in the message, as is the error code
  208. that will be returned to the sender.
  209. % AUTH_PACKET_RECEIVED message received:\n%1
  210. This is a debug message output by the authoritative server when it
  211. receives a valid DNS packet.
  212. Note: This message includes the packet received, rendered in the form of
  213. multiple lines of text. For this reason, it is suggested that this log message
  214. not be routed to the syslog file, where the multiple lines could confuse
  215. programs that expect a format of one message per line.
  216. % AUTH_PROCESS_FAIL message processing failure: %1
  217. This message is generated by the authoritative server when it has
  218. encountered an internal error whilst processing a received packet:
  219. the cause of the error is included in the message.
  220. The server will return a SERVFAIL error code to the sender of the packet.
  221. This message indicates a potential error in the server. Please open a
  222. bug ticket for this issue.
  223. % AUTH_RECEIVED_COMMAND command '%1' received
  224. This is a debug message issued when the authoritative server has received
  225. a command on the command channel.
  226. % AUTH_RECEIVED_NOTIFY received incoming NOTIFY for zone name %1, zone class %2
  227. This is a debug message reporting that an incoming NOTIFY was received.
  228. % AUTH_RESPONSE_FAILURE exception while building response to query: %1
  229. This is a debug message, generated by the authoritative server when an
  230. attempt to create a response to a received DNS packet has failed. The
  231. reason for the failure is given in the log message. A SERVFAIL response
  232. is sent back. The most likely cause of this is an error in the data
  233. source implementation; it is either creating bad responses or raising
  234. exceptions itself.
  235. % AUTH_RESPONSE_FAILURE_UNKNOWN unknown exception while building response to query
  236. This debug message is similar to AUTH_RESPONSE_FAILURE, but further
  237. details about the error are unknown, because it was signaled by something
  238. which is not an exception. This is definitely a bug.
  239. % AUTH_RESPONSE_RECEIVED received response message, ignoring
  240. This is a debug message, this is output if the authoritative server
  241. receives a DNS packet with the QR bit set, i.e. a DNS response. The
  242. server ignores the packet as it only responds to question packets.
  243. % AUTH_SEND_ERROR_RESPONSE sending an error response (%1 bytes):\n%2
  244. This is a debug message recording that the authoritative server is sending
  245. an error response to the originator of the query. A previous message will
  246. have recorded details of the failure.
  247. Note: This message includes the packet sent, rendered in the form of
  248. multiple lines of text. For this reason, it is suggested that this log message
  249. not be routed to the syslog file, where the multiple lines could confuse
  250. programs that expect a format of one message per line.
  251. % AUTH_SEND_NORMAL_RESPONSE sending a normal response (%1 bytes):\n%2
  252. This is a debug message recording that the authoritative server is sending
  253. a response to the originator of a query.
  254. Note: This message includes the packet sent, rendered in the form of
  255. multiple lines of text. For this reason, it is suggested that this log message
  256. not be routed to the syslog file, where the multiple lines could confuse
  257. programs that expect a format of one message per line.
  258. % AUTH_SERVER_CREATED server created
  259. An informational message indicating that the authoritative server process has
  260. been created and is initializing. The AUTH_SERVER_STARTED message will be
  261. output when initialization has successfully completed and the server starts
  262. accepting queries.
  263. % AUTH_SERVER_FAILED server failed: %1
  264. The authoritative server has encountered a fatal error and is terminating. The
  265. reason for the failure is included in the message.
  266. % AUTH_SERVER_STARTED server started
  267. Initialization of the authoritative server has completed successfully
  268. and it is entering the main loop, waiting for queries to arrive.
  269. % AUTH_SHUTDOWN asked to stop, doing so
  270. This is a debug message indicating the server was asked to shut down and it is
  271. complying to the request.
  272. % AUTH_SQLITE3 nothing to do for loading sqlite3
  273. This is a debug message indicating that the authoritative server has
  274. found that the data source it is loading is an SQLite3 data source,
  275. so no further validation is needed.
  276. % AUTH_START_DDNS_FORWARDER DDNS UPDATE handling started
  277. This is a debug message indicating that b10-auth has received a message
  278. that it should internally forward UPDATE message to b10-ddns. When b10-ddns
  279. is not running, b10-auth will respond to UPDATE requests with rcode NOTIMP.
  280. When b10-ddns is running, b10-ddns will handle and respond to the UPDATE
  281. message.
  282. % AUTH_STOP_DDNS_FORWARDER DDNS UPDATE handling stopped
  283. This is a debug message indicating that b10-auth has received a message
  284. that it should stop internally forwarding UPDATE message to b10-ddns.
  285. b10-auth will no longer forward UPDATE messages to b10-ddns, but will
  286. respond itself with error code NOTIMP.
  287. This message is also logged when the forwarding is restarted (for instance
  288. if b10-ddns is restarted and the internal connection needs to be created
  289. again), in which case it should be followed by AUTH_START_DDNS_FORWARDER.
  290. % AUTH_UNSUPPORTED_OPCODE unsupported opcode: %1
  291. This is a debug message, produced when a received DNS packet being
  292. processed by the authoritative server has been found to contain an
  293. unsupported opcode. (The opcode is included in the message.) The server
  294. will return an error code of NOTIMPL to the sender.
  295. % AUTH_XFRIN_CHANNEL_CREATED XFRIN session channel created
  296. This is a debug message indicating that the authoritative server has
  297. created a channel to the XFRIN (Transfer-in) process. It is issued
  298. during server startup is an indication that the initialization is
  299. proceeding normally.
  300. % AUTH_XFRIN_CHANNEL_ESTABLISHED XFRIN session channel established
  301. This is a debug message indicating that the authoritative server has
  302. established communication over the previously-created channel to the
  303. XFRIN (Transfer-in) process. It is issued during server startup is an
  304. indication that the initialization is proceeding normally.
  305. % AUTH_ZONEMGR_COMMS error communicating with zone manager: %1
  306. This is a debug message output during the processing of a NOTIFY request.
  307. An error (listed in the message) has been encountered whilst communicating
  308. with the zone manager. The NOTIFY request will not be honored.
  309. % AUTH_ZONEMGR_ERROR received error response from zone manager: %1
  310. This is a debug message output during the processing of a NOTIFY
  311. request. The zone manager component has been informed of the request,
  312. but has returned an error response (which is included in the message). The
  313. NOTIFY request will not be honored.