Description of problem: Version-Release number of selected component (if applicable): bind-utils-9.10.1-2.P1.fc21.x86_64 How reproducible: 100 % Steps to Reproduce: 1. configure a DNS zone on a server which has proper delegation from its parent E.g.: ipa.test.devconf.cz. 10 IN SOA ns.ipa.test.devconf.cz. pspacek.redhat.com. 7 86400 3600 604800 10800 ipa.test.devconf.cz. 10 IN NS ns.ipa.test.devconf.cz. 2. try to issue an DNS update via nsupdate: $ nsupdate debug update add t1.ipa.test.devconf.cz 10 IN DS 7431 7 1 554C829E0B19AE92A5537769A61C0A7B2EA9D1B2 send Actual results: $ nsupdate /tmp/commands.upd Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5341 ;; flags: qr rd ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;ipa.test.devconf.cz. IN SOA ;; ANSWER SECTION: ipa.test.devconf.cz. 10 IN SOA ns.ipa.test.devconf.cz. pspacek.redhat.com. 7 86400 3600 604800 10800 Found zone name: ipa.test.devconf.cz The master is: ns.ipa.test.devconf.cz Sending update to 10.38.5.26#53 ^^^ It apparently sends the update to the wrong server - ns.ipa.test.devconf.cz is in a public network: $ getent hosts ns.ipa.test.devconf.cz 209.132.179.54 ns.ipa.test.devconf.cz 10.38.5.26 is on the first line of my /etc/resolv.conf. Expected results: nsupdate should send updates to the server identified as 'The master' above. Additional info: [Using Wireshark] I can't see any DNS query for name ns.ipa.test.devconf.cz -> A/AAAA resolution.
I just realized that I use BIND 9.10 from Tomas's repo so I re-rested it on Fedora 21 with bind-utils-9.9.6-4.fc21.x86_64 - the problem is exactly the same. The update is send to first nameserver listed in /etc/resolv.conf.
bind-9.9.6-7.P1.fc21 has been submitted as an update for Fedora 21. https://admin.fedoraproject.org/updates/bind-9.9.6-7.P1.fc21
Package bind-9.9.6-7.P1.fc21: * should fix your issue, * was pushed to the Fedora 21 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing bind-9.9.6-7.P1.fc21' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2015-1597/bind-9.9.6-7.P1.fc21 then log in and leave karma (feedback).
bind-9.9.6-7.P1.fc21 has been pushed to the Fedora 21 stable repository. If problems still persist, please make note of it in this bug report.