[Pkg-samba-maint] Bug#920755: Bug#920755: samba DC, internal dns backend, return NXDOMAIN for empty nonterminals

[Mathieu Parent]

Control: forwarded -1 https://bugzilla.samba.org/show_bug.cgi?id=13781


Le lun. 28 janv. 2019 à 20:03, Martin Kraus <debian-bugs at wujiman.net> a écrit :
[...]
> Dear Maintainer,

Hi,

> samba domain controller with internal dns backend returns NXDOMAIN for empty nonterminals.
> This breaks resolvers with qname minimisation (RFC 7816) enabled (such as unbound) because
> they will not attempt to resolve label below such domain name.
>
> Example:
>
> _kerberos._tcp.realm.name SRV
>
> The resolver will send _tcp.realm.name, get back NXDOMAIN, and will not attempt to resolve the
> _kerberos._tcp.realm.name domain name. Turning off qname minimisation will resolve this issue
> but is only a workaround.
>
> RFC 2136 seems to specify that empty nonterminals should return NOERROR and that's what the
> resolvers expect.

Thanks for your report. I've reported this upstream as
https://bugzilla.samba.org/show_bug.cgi?id=13781.

Please register and follow the bug there.

Please also test my tentative patch
(https://bugzilla.samba.org/show_bug.cgi?id=13781#c1), if possible.

Regards

-- 
Mathieu Parent