[Pkg-samba-maint] Bug#763044: samba: unable to add and modify AAAA records with bind as dns backend

[Juha]

Package: samba
Version: 2:4.1.11+dfsg-1
Severity: normal

Hello,

there is a bug in samba 4 and how it handles updates to AAAA records using bind as dns backend. Bind package version is 9.9.5.dfsg-4.

Creating an AAAA record with nsupdate works fine:

~$ nsupdate -g
> update add fake.example.org 3600 AAAA fda5:cc2c:bf15:8298::1
> send
> quit

~$ dig +noall +answer aaaa fake.example.org
fake.example.org. 3600  IN      AAAA    fda5:cc2c:bf15:8298::1

But samba-tool doesn't seem to know anything about this record:

~$ samba-tool dns query dnsserver example.org fake AAAA
ERROR(runtime): uncaught exception - (9714, 'WERR_DNS_ERROR_NAME_DOES_NOT_EXIST')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 175, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 988, in run
    None, record_type, select_flags, None, None)


But if I create an AAAA record with samba-tool:

~$ samba-tool dns add dnsserver example.org another_fake AAAA fda5:cc2c:bf15:8298::10
Record added successfully

~$ samba-tool dns query dnsserver example.org another_fake AAAA
  Name=, Records=1, Children=0
    AAAA: fda5:cc2c:bf15:8298:0000:0000:0000:0010 (flags=f0, serial=310, ttl=900)

But now dig doesn't find the record:

~$ dig +noall +answer aaaa another_fake.example.org

(above command prints nothing)

Also if I want to modify an AAAA record with nsupdate it end with SRVFAIL:

~$ nsupdate -g
> update delete fake.example.org
> send
update failed: SERVFAIL
> quit

This happens probably because samba(-tool) doesn't know anything about the record.

The above leads to the situation that I'm unable to modify any added AAAA records.

Please let me know if you need more information.

Regards,
Juha


-- System Information:
Debian Release: 7.6
  APT prefers stable
  APT policy: (700, 'stable'), (500, 'stable-updates'), (200, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages samba depends on:
ii  adduser                              3.113+nmu3
ii  dpkg                                 1.17.13
ii  libasn1-8-heimdal                    1.6~rc2+dfsg-8
ii  libbsd0                              0.7.0-2
ii  libc6                                2.19-11
ii  libcomerr2                           1.42.12-1
ii  libhdb9-heimdal [heimdal-hdb-api-8]  1.6~rc2+dfsg-8
ii  libkdc2-heimdal                      1.6~rc2+dfsg-8
ii  libkrb5-26-heimdal                   1.6~rc2+dfsg-8
ii  libldb1                              1:1.1.17-1
ii  libpam-modules                       1.1.3-7.1
ii  libpam-runtime                       1.1.3-7.1
ii  libpopt0                             1.16-10
ii  libpython2.7                         2.7.8-7
ii  libroken18-heimdal                   1.6~rc2+dfsg-8
ii  libtalloc2                           2.1.1-2
ii  libtdb1                              1.3.0-1.1
ii  libtevent0                           0.9.21-1
ii  lsb-base                             4.1+Debian8+deb7u1
ii  multiarch-support                    2.13-38+deb7u4
ii  procps                               1:3.3.3-3
ii  python                               2.7.8-1
ii  python-dnspython                     1.12.0-1
ii  python-ntdb                          1.0-5
ii  python-samba                         2:4.1.11+dfsg-1
pn  python2.7:any                        <none>
ii  samba-common                         2:4.1.11+dfsg-1
ii  samba-common-bin                     2:4.1.11+dfsg-1
ii  samba-dsdb-modules                   2:4.1.11+dfsg-1
ii  samba-libs                           2:4.1.11+dfsg-1
ii  tdb-tools                            1.3.0-1.1
ii  update-inetd                         4.43

Versions of packages samba recommends:
ii  attr               1:2.4.47-2
ii  logrotate          3.8.1-4
ii  samba-vfs-modules  2:4.1.11+dfsg-1

Versions of packages samba suggests:
ii  bind9          1:9.9.5.dfsg-4
ii  bind9utils     1:9.9.5.dfsg-4
pn  ctdb           <none>
ii  ldb-tools      1:1.1.17-1
ii  ntp            1:4.2.6.p5+dfsg-2
pn  smbldap-tools  <none>
pn  winbind        <none>

-- no debconf information