Hide Forgot
Public notes. Search in nslookup is limited to 8 domains. When search in /etc/resolv.conf includes more than 8 domains, only first 8 are tried. Limit was increased in glibc by bug #677316.
This number of searches is defined in lib/lwres/include/lwres/lwres.h #define LWRES_CONFMAXSEARCH 8 /*%< max 8 domains in "search" entry */ No support for dynamic unlimited list is present.
Steps to Reproduce: 1. sed -i 's/^search .*/search non-existent1.very-long-domain.fedoraproject.org non-existent2.very-long-domain.fedoraproject.org non-existent3.very-long-domain.fedoraproject.org non-existent4.very-long-domain.fedoraproject.org non-existent5.very-long-domain.fedoraproject.org non-existent6.very-long-domain.fedoraproject.org openstacklocal redhat.com/' /etc/resolv.conf 2. [ "$(host access)" == "$(getent host access.redhat.com.)" ] && echo matches 3. sed -i 's/^search .*/search non-existent1.very-long-domain.fedoraproject.org non-existent2.very-long-domain.fedoraproject.org non-existent3.very-long-domain.fedoraproject.org non-existent4.very-long-domain.fedoraproject.org non-existent5.very-long-domain.fedoraproject.org non-existent6.very-long-domain.fedoraproject.org non-existent7.very-long-domain.fedoraproject.org non-existent8.very-long-domain.fedoraproject.org openstacklocal redhat.com/' /etc/resolv.conf 4. [ "$(host access)" == "$(getent host access.redhat.com.)" ] && echo still matches
Not even the most recent development version handles this different way. Reported upstream [1]. 1. https://gitlab.isc.org/isc-projects/bind9/issues/1259
Patch submitted to upstream in https://gitlab.isc.org/isc-projects/bind9/merge_requests/2446
Development Management has reviewed and declined this request. You may appeal this decision by using your Red Hat support channels, who will make certain the issue receives the proper prioritization with product and development management. https://www.redhat.com/support/process/production/#howto