Bug 1470637 - nslookup and dig return SERVFAIL error for FQDN after multiple queries
nslookup and dig return SERVFAIL error for FQDN after multiple queries
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: bind (Show other bugs)
x86_64 Linux
high Severity high
: rc
: ---
Assigned To: Petr Menšík
Petr Sklenar
: Patch
Depends On: 1449814
Blocks: 1420851 1465928
  Show dependency treegraph
Reported: 2017-07-13 07:02 EDT by Tomáš Hozza
Modified: 2018-04-10 07:57 EDT (History)
5 users (show)

See Also:
Fixed In Version: bind-9.9.4-54.el7
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1449814
Last Closed: 2018-04-10 07:56:55 EDT
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Keep origin on new TCP connection patch (936 bytes, patch)
2017-08-22 11:08 EDT, Petr Menšík
no flags Details | Diff
tests for dig (15.77 KB, patch)
2017-10-11 15:34 EDT, Petr Menšík
no flags Details | Diff
Retry again with origin after TCP timeout. (7.20 KB, patch)
2017-10-11 15:37 EDT, Petr Menšík
no flags Details | Diff

External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2018:0742 None None None 2018-04-10 07:57 EDT

  None (edit)
Comment 2 Petr Menšík 2017-08-22 10:34:19 EDT
Fix acknowledged but modified.

Comment 3 Petr Menšík 2017-08-22 11:08 EDT
Created attachment 1316676 [details]
Keep origin on new TCP connection patch
Comment 7 Petr Menšík 2017-10-11 15:32:57 EDT
Found out part of this problem is made by RHEL specific path, created by commit http://pkgs.devel.redhat.com/cgit/rpms/bind/commit/?id=61b073aa6a5fcf448ffd3a18970c38e4eaef1284

I could not find a bug that it solved. It will try next search domain or root if no reply arrives. Because stock dig does not have such feature and it would receive SERVFAILs again, removing this feature. Only then it will pass upstream tests.

Correct lookup for any name can be done by appending dot after relative name, making it absolute.
Comment 8 Petr Menšík 2017-10-11 15:34 EDT
Created attachment 1337400 [details]
tests for dig
Comment 9 Petr Menšík 2017-10-11 15:37 EDT
Created attachment 1337404 [details]
Retry again with origin after TCP timeout.

Do not change origin without reply from a server.
Comment 13 Petr Menšík 2017-10-12 09:48:10 EDT
Mentioned patch nslookup-norec.patch were dropped also from Fedora 2 years ago by commit https://src.fedoraproject.org/rpms/bind/c/e001c1a0663326dffac1ee7d65598550e4b2f70a?branch=master

Part of patch were already reverted, the rest will be dropped as well.
Comment 16 Petr Menšík 2017-12-06 04:52:30 EST
Remaining part from comment #13 returned back, because it caused regression - bug #1520958. Remaining patch renamed to reflect it fixed bug #726120. In next major release support for this bug would be discontinued.
Comment 21 errata-xmlrpc 2018-04-10 07:56:55 EDT
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.