Description of problem: If using GSSAPI, then queries for TKEY are always sent to the servers specified in the /etc/resolv.conf instead to the master server for the zone. If the server is specified explicitly as 'server' option, Queries are sent to the correct server. The problem is that the code in GSSAPI specific paths was not modified to cope with changes done in upstream ticket RT#37925. Version-Release number of selected component (if applicable): version 9.10.2b1 and later so versions in F22+ How reproducible: always
Created attachment 1043570 [details] Patch sent to upstream [ISC-Bugs #39893] nsupdate: Queries for TKEY are sent to wrong server when using GSSAPI
This bug was accidentally moved from POST to MODIFIED via an error in automation, please see mmccune with any questions
This bug appears to have been reported against 'rawhide' during the Fedora 25 development cycle. Changing version to '25'.
This bug causes issues with ipa-client-install if authoritative server is not directly in resolv.conf Is there any guess when this can be fixed upstream? Thanks
(In reply to Martin Bašti from comment #4) > This bug causes issues with ipa-client-install if authoritative server is > not directly in resolv.conf > > > Is there any guess when this can be fixed upstream? > > Thanks I will ping upstream, but no guess from me when this will be merged.
This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component.
Any updates from upstream? People using ipa-client are hitting this
(In reply to Martin Bašti from comment #7) > Any updates from upstream? People using ipa-client are hitting this No, upstream didn't respond so far. I pinged upstream again...
Good news everyone :) Upstream has merged the change. 4588. [bug] nsupdate could send queries for TKEY to the wrong server when using GSSAPI. Thanks to Tomas Hozza. [RT #39893] 9.12, 9.11.2, 9.10.6, 9.9.10 Upstream commit 66b71679b78ad6cf2c4e5c8c1216b602e0fe1e9b
\o/ Thank you!
bind-9.10.4-5.P8.fc25 has been submitted as an update to Fedora 25. https://bodhi.fedoraproject.org/updates/FEDORA-2017-2da01a45cb
bind-9.11.0-8.P5.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-a506cdecfc
bind-9.10.4-4.P8.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2017-a9d40af69f
bind-9.10.4-5.P8.fc25 has been pushed to the Fedora 25 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-2da01a45cb
bind-9.10.4-4.P8.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-a9d40af69f
bind-9.11.0-8.P5.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-a506cdecfc
bind-9.10.4-5.P8.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report.
bind-9.11.0-8.P5.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.
bind-9.10.4-4.P8.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report.