Univention Bugzilla – Bug 35254
UDM Module allows leading dot for dns alias
Last modified: 2017-04-18 13:15:41 CEST
I had no passion to grab the rfc in order to determine if this behaviour is correct but practically a leading dot in an alias record seems to be corrupt: root@master:~# udm dns/alias create --set cname=foo.domain.bar --set name=.corrupt --set zonettl=3 --superordinate zoneName=domain.tim,cn=dns,dc=domain,dc=tim Object created: relativeDomainName=.corrupt,zoneName=domain.tim,cn=dns,dc=domain,dc=tim root@master:~# dig @127.0.0.1 -p 7777 $(ucr get domainname) -t AXFR ; <<>> DiG 9.8.0-P4 <<>> @127.0.0.1 -p 7777 domain.tim -t AXFR ; (1 server found) ;; global options: +cmd ; Transfer failed. root@master:~# grep sdb_put /var/log/syslog master named[30436]: LDAP sdb zone 'domain.tim': dns_sdb_put... failed for foo.domain.bar.
<http://tools.ietf.org/html/rfc2181#section-11> > The length of any one label is limited to between 1 and 63 octets.
The dns/alias name is now limited to valid DNS label characters: ^[0-9A-Za-z]([0-9A-Za-z-]{0,61}[0-9A-Za-z])?$ univention-directory-manager-modules (9.0.76-16.1215.201407171853) Advisory 2014-06-11-univention-directory-manager-modules.yaml updated.
The Samba 4 jenkins tests failed: E: failed Alias: Invalid valueAdding CNAME record "ff22c05b-00fe-4614-8c2b-78ce64bff69f._msdcs master093.autotest093.local." to zone autotest093.local... Traceback (most recent call last): File "/usr/share/univention-directory-manager-tools/univention-dnsedit", line 400, in <module> main() File "/usr/share/univention-directory-manager-tools/univention-dnsedit", line 371, in main add_cname_record(*args) File "/usr/share/univention-directory-manager-tools/univention-dnsedit", line 282, in add_cname_record record['name'] = name File "/usr/lib/pymodules/python2.6/univention/admin/handlers/__init__.py", line 282, in __setitem__ raise univention.admin.uexceptions.valueInvalidSyntax, "%s: %s"%(self.descriptions[key].short_description,err) univention.admin.uexceptions.valueInvalidSyntax: Alias: Invalid value
(In reply to Stefan Gohmann from comment #3) > The Samba 4 jenkins tests failed: I've set the syntax back to string again because I need the jenkins results: r52069
*** Bug 34679 has been marked as a duplicate of this bug. ***
*** Bug 35438 has been marked as a duplicate of this bug. ***
Changes reverted (9.0.76-18)
I don't think that the fix is currently so important.
# udm dns/alias create --set cname="foo.$(ucr get domainname)" --set name=.corrupt --set zonettl=3 --superordinate "$(udm dns/forward_zone list |sed -ne 's/^DN: //p;T;q')" E: Invalid Syntax: Alias: Labels must be between 1 and 63 characters long!
*** Bug 35256 has been marked as a duplicate of this bug. ***