Description of problem: systemd-resolved always (reverse)-resolves the host's IP addresses and FQDN. This can be harmful when an application (for instance, a DNS zone manager) is installed on the same server instance. That application would expect NXDOMAIN to be returned if the current server's IP does not belong in an already managed reverse zone. More details: https://lists.freedesktop.org/archives/systemd-devel/2021-September/046856.html How reproducible: Always, see list post. Expected results: Being able to disable the generation of synthetic RRs. Additional info: The workarounds described in the mailing-list all imply changing the application in a more or less intrusive or fragile way. Being able to change resolved's behavior in its configuration file would be much more efficient.
resolvectl query has --synthesize=no that filters out synthesized names. This is implemented via flags in the dbus api, SD_RESOLVED_NO_SYNTHESIZE flag to org.freedesktop.resolve1.Manager.ResolveHostname(), org.freedesktop.resolve1.Manager.ResolveAddress(). I guess we could add flag to disable this in nss-resolve. Will this work for you?
Hi! Thanks for the reply. I guess I'll defer to Antonio, as I am not in FreeIPA anymore.
Hi! I'd say that solution would work fine for this issue. Thanks!
https://github.com/systemd/systemd/pull/21836
FEDORA-2021-08a8cf576c has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2021-08a8cf576c
FEDORA-2021-08a8cf576c has been pushed to the Fedora 36 stable repository. If problem still persists, please make note of it in this bug report.