Bug 1821287 - nslookup / host do not honor the new search domain limits of glibc
Summary: nslookup / host do not honor the new search domain limits of glibc
Keywords:
Status: POST
Alias: None
Product: Fedora
Classification: Fedora
Component: bind
Version: rawhide
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
Assignee: Petr Menšík
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On: 1758317 1816141
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-04-06 13:50 UTC by Petr Sklenar
Modified: 2020-11-05 13:06 UTC (History)
12 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of: 1816141
Environment:
Last Closed:
Type: Bug
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Internet Systems Consortium (ISC) isc-projects/bind9/issues/1259 0 None None None 2020-06-22 09:19:11 UTC
Internet Systems Consortium (ISC) isc-projects/bind9/merge_requests/2446 0 None None None 2020-06-22 09:18:52 UTC

Description Petr Sklenar 2020-04-06 13:50:07 UTC
Description of problem:

nslookup only reads up until the 8th search domain in /etc/resolv.conf when searching for an answer for a certain domain.


Version-Release number of selected component (if applicable):

bind-9.11.14-2.fc31.x86_64


How reproducible:
Every time

Steps to Reproduce:
1. Add >=8 invalid search domains to 'search' directive in /etc/resolv.conf.
2. Add 'xxx.com' as the 9th search domain.
3. nslookup access / host access

Actual results:

nslookup returns NXDOMAIN

Expected results:

nslookup should return a correct answer

Additional info:


Steps to Reproduce:
1. sed -i 's/^search .*/search non-existent1.very-long-domain.fedoraproject.org non-existent2.very-long-domain.fedoraproject.org non-existent3.very-long-domain.fedoraproject.org non-existent4.very-long-domain.fedoraproject.org non-existent5.very-long-domain.fedoraproject.org non-existent6.very-long-domain.fedoraproject.org xxx xxx.com/' /etc/resolv.conf
2. [ "$(host access)" == "$(getent host access.redhat.com.)" ] && echo matches
3. sed -i 's/^search .*/search non-existent1.very-long-domain.fedoraproject.org non-existent2.very-long-domain.fedoraproject.org non-existent3.very-long-domain.fedoraproject.org non-existent4.very-long-domain.fedoraproject.org non-existent5.very-long-domain.fedoraproject.org non-existent6.very-long-domain.fedoraproject.org non-existent7.very-long-domain.fedoraproject.org non-existent8.very-long-domain.fedoraproject.org xxxxxxxxxx redhat.com/' /etc/resolv.conf

4. [ "$(host access)" == "$(getent host something.xxx.com.)" ] && echo still matches



--- Additional comment from Petr Menšík on 2019-10-04 15:09:55 CEST ---

Not even the most recent development version handles this different way. Reported upstream [1].

1. https://gitlab.isc.org/isc-projects/bind9/issues/1259

--- Additional comment from Tomáš Hozza on 2019-12-16 12:36:10 CET ---

Patch submitted to upstream in https://gitlab.isc.org/isc-projects/bind9/merge_requests/2446


--- Additional comment from Petr Menšík on 2020-03-27 19:56:55 CET ---

Upstream merge request is already pending at https://gitlab.isc.org/isc-projects/bind9/merge_requests/2446


Note You need to log in before you can comment on or make changes to this bug.