Bug 1184151

Summary:	nsupdate server auto-detection is broken
Product:	[Fedora] Fedora	Reporter:	Petr Spacek <pspacek>
Component:	bind	Assignee:	Tomáš Hozza <thozza>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	21	CC:	psimerda, thozza, vonsch
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	bind-9.9.6-7.P1.fc21	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-02-19 02:58:00 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Petr Spacek 2015-01-20 16:48:08 UTC

Description of problem:


Version-Release number of selected component (if applicable):
bind-utils-9.10.1-2.P1.fc21.x86_64

How reproducible:
100 %

Steps to Reproduce:
1. configure a DNS zone on a server which has proper delegation from its parent
E.g.:
ipa.test.devconf.cz.	10	IN	SOA	ns.ipa.test.devconf.cz. pspacek.redhat.com. 7 86400 3600 604800 10800
ipa.test.devconf.cz.	10	IN	NS	ns.ipa.test.devconf.cz.


2. try to issue an DNS update via nsupdate:
$ nsupdate
debug
update add t1.ipa.test.devconf.cz 10 IN DS 7431 7 1 554C829E0B19AE92A5537769A61C0A7B2EA9D1B2
send

Actual results:
$ nsupdate /tmp/commands.upd
Reply from SOA query:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:   5341
;; flags: qr rd ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;ipa.test.devconf.cz.		IN	SOA

;; ANSWER SECTION:
ipa.test.devconf.cz.	10	IN	SOA	ns.ipa.test.devconf.cz. pspacek.redhat.com. 7 86400 3600 604800 10800

Found zone name: ipa.test.devconf.cz
The master is: ns.ipa.test.devconf.cz
Sending update to 10.38.5.26#53

^^^ It apparently sends the update to the wrong server - ns.ipa.test.devconf.cz is in a public network:
$ getent hosts ns.ipa.test.devconf.cz
209.132.179.54  ns.ipa.test.devconf.cz

10.38.5.26 is on the first line of my /etc/resolv.conf.


Expected results:
nsupdate should send updates to the server identified as 'The master' above.


Additional info:
[Using Wireshark] I can't see any DNS query for name ns.ipa.test.devconf.cz -> A/AAAA resolution.

Comment 1 Petr Spacek 2015-01-20 16:58:59 UTC

I just realized that I use BIND 9.10 from Tomas's repo so I re-rested it on Fedora 21 with bind-utils-9.9.6-4.fc21.x86_64 - the problem is exactly the same. The update is send to first nameserver listed in /etc/resolv.conf.

Comment 2 Fedora Update System 2015-02-02 15:43:31 UTC

bind-9.9.6-7.P1.fc21 has been submitted as an update for Fedora 21.
https://admin.fedoraproject.org/updates/bind-9.9.6-7.P1.fc21

Comment 3 Fedora Update System 2015-02-03 12:04:41 UTC

Package bind-9.9.6-7.P1.fc21:
* should fix your issue,
* was pushed to the Fedora 21 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing bind-9.9.6-7.P1.fc21'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2015-1597/bind-9.9.6-7.P1.fc21
then log in and leave karma (feedback).

Comment 4 Fedora Update System 2015-02-19 02:58:00 UTC

bind-9.9.6-7.P1.fc21 has been pushed to the Fedora 21 stable repository.  If problems still persist, please make note of it in this bug report.