[Pkg-samba-maint] Bug#920755: Bug#920755: samba DC, internal dns backend, return NXDOMAIN for empty nonterminals

Mathieu Parent math.parent at gmail.com
Fri Feb 8 20:51:00 GMT 2019

Control: forwarded -1 https://bugzilla.samba.org/show_bug.cgi?id=13781

Le lun. 28 janv. 2019 à 20:03, Martin Kraus <debian-bugs at wujiman.net> a écrit :
> Dear Maintainer,


> samba domain controller with internal dns backend returns NXDOMAIN for empty nonterminals.
> This breaks resolvers with qname minimisation (RFC 7816) enabled (such as unbound) because
> they will not attempt to resolve label below such domain name.
> Example:
> _kerberos._tcp.realm.name SRV
> The resolver will send _tcp.realm.name, get back NXDOMAIN, and will not attempt to resolve the
> _kerberos._tcp.realm.name domain name. Turning off qname minimisation will resolve this issue
> but is only a workaround.
> RFC 2136 seems to specify that empty nonterminals should return NOERROR and that's what the
> resolvers expect.

Thanks for your report. I've reported this upstream as

Please register and follow the bug there.

Please also test my tentative patch
(https://bugzilla.samba.org/show_bug.cgi?id=13781#c1), if possible.


Mathieu Parent

More information about the Pkg-samba-maint mailing list