| Date: | Fri, 2 Feb 2018 11:56:11 -0600 |
| To: | bind-bugs@isc.org |
| From: | "Nathan Neulinger" <nneul@mst.edu> |
| Subject: | Changes in 9.12 (related to additional-from changes?) break functionality of a recursive resolver that has cnames crossing zones |
Scenario:
Recursive resolver host that is either
A) Authoritative master for zones srv.example.com and example.com
B) Authoritative ixfr slave for zones srv.example.com and example.com
With 9.11, a lookup of 'service.example.com' that is a cname to 'server.srv.example.com' will return the cname and the A
record.
With 9.12, it returns only the cname, expecting the client system to do the recursion to the second zone.
I can understand this new behavior on a normal master server for multiple zones - since that should not be getting
queried by clients that don't do their own recursive lookups. However, for a server that has recursion enabled - it
shouldn't be sending back a partial response like this and expecting the client system to do the recursion since that
will break any normal desktop client system.
Another way of looking at it would be if I had a recursive-only (no slave zones) server - it would work fine. The moment
I enhance that recursive server by giving it a full authoritative copy of the zones - it breaks.
If the expectation/statement going forward is that a bind 9.12 recursive server cannot also be authoritative slave, then
that should be called out much more blatantly in release notes.
-- Nathan
------------------------------------------------------------
Nathan Neulinger nneul@mst.edu
Missouri S&T Information Technology (573) 612-1412
System Administrator - Architect