Bug 56298 – Add named/DNS option enable-empty-zones

Bug 56298 - Add named/DNS option enable-empty-zones


Summary:	Add named/DNS option enable-empty-zones

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	DNS
Version:	UCS 5.2
Hardware:	Other Linux

Importance:	P5 minor (vote)
Target Milestone:	---
Assigned To:	UCS maintainers
QA Contact:	UCS maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2023-07-10 13:46 CEST by Lukas Zumvorde
Modified:	2023-07-10 13:48 CEST (History)
CC List:	0 users

See Also:
What kind of report is it?:	Feature Request
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:	Yes
School Customer affected?:	Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	Usability
Max CVSS v3 score:

Attachments
Patch add UCRV dns/empty/zones for named option empty-zones-enable (1.98 KB, patch) 2023-07-10 13:46 CEST, Lukas Zumvorde	Details \| Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Lukas Zumvorde

2023-07-10 13:46:36 CEST

Created attachment 11086 [details]
Patch add UCRV dns/empty/zones for named option empty-zones-enable

Named offers the option to control the creation of empty zones. Those zones normally get created to deal with recursive servers. 
If a customer wants to disable this option this is currently only possible by editing the UCR controlled file /etc/bind/named.conf.proxy. Using the local.conf.proxy file is not possible because there can be only one options block. 

I have attached a patch that adds a new UCRV to the univention-bind package. With this UCR variable one can activate or deactivate the creation of empty zones. If the variable is unset not entry is made in the options block. It should illustrate how this could work.

An alternative solution to this would be to allow arbitrary entries to be defined via UCR.
A similar but different bug to this is https://forge.univention.org/bugzilla/show_bug.cgi?id=54796