Control: forwarded -1 https://bugzilla.samba.org/show_bug.cgi?id=13781
Le lun. 28 janv. 2019 à 20:03, Martin Kraus <[email protected]> a écrit : [...] > Dear Maintainer, Hi, > samba domain controller with internal dns backend returns NXDOMAIN for empty > nonterminals. > This breaks resolvers with qname minimisation (RFC 7816) enabled (such as > unbound) because > they will not attempt to resolve label below such domain name. > > Example: > > _kerberos._tcp.realm.name SRV > > The resolver will send _tcp.realm.name, get back NXDOMAIN, and will not > attempt to resolve the > _kerberos._tcp.realm.name domain name. Turning off qname minimisation will > resolve this issue > but is only a workaround. > > RFC 2136 seems to specify that empty nonterminals should return NOERROR and > that's what the > resolvers expect. Thanks for your report. I've reported this upstream as https://bugzilla.samba.org/show_bug.cgi?id=13781. Please register and follow the bug there. Please also test my tentative patch (https://bugzilla.samba.org/show_bug.cgi?id=13781#c1), if possible. Regards -- Mathieu Parent

