https://bugzilla.novell.com/show_bug.cgi?id=758769 https://bugzilla.novell.com/show_bug.cgi?id=758769#c1 kk zhang changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO CC| |kkzhang@suse.com InfoProvider| |gjn@gjn.priv.at --- Comment #1 from kk zhang 2012-04-26 02:21:33 UTC --- Thank you for your report.Could you please help to provide y2logs according to the following URL?Thank you. http://en.opensuse.org/openSUSE:Bugreport_YaST.;) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=758769 https://bugzilla.novell.com/show_bug.cgi?id=758769#c kk zhang changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.pr |yast2-maintainers@suse.de |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=758769 https://bugzilla.novell.com/show_bug.cgi?id=758769#c3 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low Status|NEW |ASSIGNED Severity|Normal |Enhancement --- Comment #3 from Lukas Ocilka 2012-05-02 09:26:01 UTC --- That's true, SPF record is not supported. There are several other unsupported resource records: http://en.wikipedia.org/wiki/List_of_DNS_record_types Please, use TXT record instead. See more details here: http://www.zytrax.com/books/dns/ch9/spf.html Example: example.com. IN TXT "v=spf1 include:example.net -all" Switching this bug to enhancement. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=758769 https://bugzilla.novell.com/show_bug.cgi?id=758769#c5 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |locilka@suse.com Component|YaST2 |YaST2 Version|Final |Factory AssignedTo|locilka@suse.com |ug@suse.com Product|openSUSE 12.1 |openSUSE 12.2 --- Comment #5 from Lukas Ocilka 2012-06-05 14:19:53 UTC --- I've tried to add SPF record support but it seems that SPF record is not supported by the LDAP schema included in bind-utils package. Uwe, can you add it, please? SPF record should have the same syntax as TXT record. IMO useful for both openSUSE 12.2 and SLE 11 SP3 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=758769 https://bugzilla.novell.com/show_bug.cgi?id=758769#c7 --- Comment #7 from Lukas Ocilka 2012-06-06 14:33:13 UTC --- Definitely, I'm all for that. Dropping ldapdump should be easy. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=758769 https://bugzilla.novell.com/show_bug.cgi?id=758769#c9 Reinhard Max changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |locilka@suse.com --- Comment #9 from Reinhard Max 2013-08-07 17:39:11 CEST --- I don't get the relation between the YaST module for bind and ldap schemas. Please explain what I am supposed to change in the bind package. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=758769 https://bugzilla.novell.com/show_bug.cgi?id=758769#c11 Reinhard Max changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |locilka@suse.com --- Comment #11 from Reinhard Max 2013-08-07 18:47:38 CEST --- OK, but we're talking about the YaST DNS module here, so why is LDAP involved at all? Does the YaST module create an LDAP configuration, which is then translated into a bind configuration? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=758769 https://bugzilla.novell.com/show_bug.cgi?id=758769#c13 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED InfoProvider|locilka@suse.com | --- Comment #13 from Lukas Ocilka 2013-08-08 07:59:37 UTC --- (In reply to comment #11)

OK, but we're talking about the YaST DNS module here, so why is LDAP involved at all? Does the YaST module create an LDAP configuration, which is then translated into a bind configuration?

YaST DNS Module was only part of the problem. YaST either writes the configuration to zone files directly or to LDAP. This LDAP belongs to bind, it's neither defined nor owned by YaST. Bind itself supports SPF records in zone files but ignores them if they are placed in LDAP. Easy fix (adding 'SPF' string into list of supported records) would make ldapdump script (owned by bind) to write also SPF records to zone files while dumping LDAP to these zone files. So, there are two ways of storing records: 1.) YaST / anything else --directly to--> zone file 2.) YaST / anything else --to LDAP--> bind --using ldapdump--> to zone file -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=758769 https://bugzilla.novell.com/show_bug.cgi?id=758769#c15 --- Comment #15 from Lukas Ocilka 2013-08-08 08:41:01 UTC --- I've just found out that even the YaST part never made it to SP3 or Factory probably due to the fact that the bug was reassigned to Uwe to do his changes first and he could not finish them. That's why it also went off of my radar. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=758769 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |maint:running:58631:low -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=758769 --- Comment #17 from Swamp Workflow Management --- SUSE-RU-2014:1269-1: An update that has two recommended fixes can now be installed. Category: recommended (low) Bug References: 758769,867596 CVE References: Sources used: SUSE Linux Enterprise Software Development Kit 11 SP3 (src): yast2-dns-server-2.17.23-0.5.1 SUSE Linux Enterprise Server 11 SP3 for VMware (src): yast2-dns-server-2.17.23-0.5.1 SUSE Linux Enterprise Server 11 SP3 (src): yast2-dns-server-2.17.23-0.5.1 -- You are receiving this mail because: You are on the CC list for the bug.