Control: forwarded -1 https://bugzilla.samba.org/show_bug.cgi?id=13781


Le lun. 28 janv. 2019 à 20:03, Martin Kraus <[email protected]> a écrit :
[...]
> Dear Maintainer,

Hi,

> samba domain controller with internal dns backend returns NXDOMAIN for empty 
> nonterminals.
> This breaks resolvers with qname minimisation (RFC 7816) enabled (such as 
> unbound) because
> they will not attempt to resolve label below such domain name.
>
> Example:
>
> _kerberos._tcp.realm.name SRV
>
> The resolver will send _tcp.realm.name, get back NXDOMAIN, and will not 
> attempt to resolve the
> _kerberos._tcp.realm.name domain name. Turning off qname minimisation will 
> resolve this issue
> but is only a workaround.
>
> RFC 2136 seems to specify that empty nonterminals should return NOERROR and 
> that's what the
> resolvers expect.

Thanks for your report. I've reported this upstream as
https://bugzilla.samba.org/show_bug.cgi?id=13781.

Please register and follow the bug there.

Please also test my tentative patch
(https://bugzilla.samba.org/show_bug.cgi?id=13781#c1), if possible.

Regards

-- 
Mathieu Parent

Reply via email to