Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1236087 - nsupdate: Queries for TKEY are sent to wrong server when using GSSAPI
Summary: nsupdate: Queries for TKEY are sent to wrong server when using GSSAPI
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: bind
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
Assignee: Petr Menšík
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1444354
TreeView+ depends on / blocked
 
Reported: 2015-06-26 13:51 UTC by Tomáš Hozza
Modified: 2017-05-18 20:58 UTC (History)
5 users (show)

Fixed In Version: bind-9.10.4-5.P8.fc25 bind-9.11.0-8.P5.fc26 bind-9.10.4-4.P8.fc24
Doc Type: Bug Fix
Doc Text:
Clone Of:
: 1444354 (view as bug list)
Environment:
Last Closed: 2017-05-12 12:05:08 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
Patch sent to upstream (deleted)
2015-06-26 14:52 UTC, Tomáš Hozza
no flags Details | Diff

Description Tomáš Hozza 2015-06-26 13:51:12 UTC
Description of problem:
If using GSSAPI, then queries for TKEY are always sent to the servers specified in the /etc/resolv.conf instead to the master server for the zone. If the server is specified explicitly as 'server' option, Queries are sent to the correct server.

The problem is that the code in GSSAPI specific paths was not modified to cope with changes done in upstream ticket RT#37925.

Version-Release number of selected component (if applicable):
version 9.10.2b1 and later so versions in F22+

How reproducible:
always

Comment 1 Tomáš Hozza 2015-06-26 14:52:23 UTC
Created attachment 1043570 [details]
Patch sent to upstream

[ISC-Bugs #39893] nsupdate: Queries for TKEY are sent to wrong server when using GSSAPI

Comment 2 Mike McCune 2016-03-28 23:40:50 UTC
This bug was accidentally moved from POST to MODIFIED via an error in automation, please see mmccune with any questions

Comment 3 Jan Kurik 2016-07-26 05:08:39 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 25 development cycle.
Changing version to '25'.

Comment 4 Martin Bašti 2016-11-04 13:19:42 UTC
This bug causes issues with ipa-client-install if authoritative server is not directly in resolv.conf


Is there any guess when this can be fixed upstream?

Thanks

Comment 5 Tomáš Hozza 2016-11-04 13:23:56 UTC
(In reply to Martin Bašti from comment #4)
> This bug causes issues with ipa-client-install if authoritative server is
> not directly in resolv.conf
> 
> 
> Is there any guess when this can be fixed upstream?
> 
> Thanks

I will ping upstream, but no guess from me when this will be merged.

Comment 6 Fedora Admin XMLRPC Client 2016-12-01 14:21:18 UTC
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.

Comment 7 Martin Bašti 2017-03-01 09:15:20 UTC
Any updates from upstream? People using ipa-client are hitting this

Comment 8 Tomáš Hozza 2017-03-01 12:25:47 UTC
(In reply to Martin Bašti from comment #7)
> Any updates from upstream? People using ipa-client are hitting this

No, upstream didn't respond so far. I pinged upstream again...

Comment 9 Tomáš Hozza 2017-04-21 08:25:38 UTC
Good news everyone :)

Upstream has merged the change.

4588.	[bug]		nsupdate could send queries for TKEY to the wrong
			server when using GSSAPI. Thanks to Tomas Hozza.
			[RT #39893]


9.12, 9.11.2, 9.10.6, 9.9.10

Upstream commit 66b71679b78ad6cf2c4e5c8c1216b602e0fe1e9b

Comment 10 Martin Bašti 2017-04-21 08:31:50 UTC
\o/

Thank you!

Comment 11 Fedora Update System 2017-05-09 14:04:16 UTC
bind-9.10.4-5.P8.fc25 has been submitted as an update to Fedora 25. https://bodhi.fedoraproject.org/updates/FEDORA-2017-2da01a45cb

Comment 12 Fedora Update System 2017-05-09 14:34:08 UTC
bind-9.11.0-8.P5.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-a506cdecfc

Comment 13 Fedora Update System 2017-05-09 14:34:32 UTC
bind-9.10.4-4.P8.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2017-a9d40af69f

Comment 14 Fedora Update System 2017-05-10 07:04:43 UTC
bind-9.10.4-5.P8.fc25 has been pushed to the Fedora 25 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-2da01a45cb

Comment 15 Fedora Update System 2017-05-10 10:44:08 UTC
bind-9.10.4-4.P8.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-a9d40af69f

Comment 16 Fedora Update System 2017-05-12 02:11:45 UTC
bind-9.11.0-8.P5.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-a506cdecfc

Comment 17 Fedora Update System 2017-05-12 12:05:08 UTC
bind-9.10.4-5.P8.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report.

Comment 18 Fedora Update System 2017-05-14 20:18:04 UTC
bind-9.11.0-8.P5.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.

Comment 19 Fedora Update System 2017-05-18 20:58:47 UTC
bind-9.10.4-4.P8.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.