[Bug 618023] New: nsupdate cannot update Windows DNS using secure method
http://bugzilla.novell.com/show_bug.cgi?id=618023 http://bugzilla.novell.com/show_bug.cgi?id=618023#c0 Summary: nsupdate cannot update Windows DNS using secure method Classification: openSUSE Product: openSUSE 11.3 Version: RC 1 Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: luizluca@tre-sc.gov.br QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.70 Safari/533.4 Hello, nsupdate is not compiled with gssapi support: $ nsupdate -g nsupdate: cannot specify -g or -o, program not linked with GSS API Library This way, the only way to update DNS in Windows using nsupdate is to allow unsecure dns update in Windows (that means no authentication at all) I think that this is a small dependency to add. With this, nsupdate can use kerberos and modify DNS in a secure way. Reproducible: Always Steps to Reproduce: zypper install bind-utils nsupdate -g Actual Results: nsupdate informs that it does not support GSSAPI Expected Results: nsupdate should support the use of kerberos ticket -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=618023 http://bugzilla.novell.com/show_bug.cgi?id=618023#c yang xiaoyu <xyyang@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |xyyang@novell.com AssignedTo|bnc-team-screening@forge.pr |ug@novell.com |ovo.novell.com | -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=618023 https://bugzilla.novell.com/show_bug.cgi?id=618023#c1 Frank Gruman <fgatwork@verizon.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fgatwork@verizon.net Version|RC 1 |Final --- Comment #1 from Frank Gruman <fgatwork@verizon.net> 2010-11-05 13:13:24 UTC --- I see this bug has been created but nothing done with it yet. I am trying to test Samba 4 on openSUSE 11.3 and am running into the same error as above. This is the output of the Samba log file: [Fri Nov 5 08:34:06 2010 EDT, 0 ./../lib/util/util_runcmd.c:288:samba_runcmd_io_handler()] /usr/local/samba/sbin/samba_dnsupdate: /usr/bin/nsupdate: cannot specify -g or -o, program not linked with GSS API Library -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=618023 https://bugzilla.novell.com/show_bug.cgi?id=618023#c2 --- Comment #2 from Uwe Gansert <ug@novell.com> 2010-11-18 16:56:47 UTC --- I'm not sure if I'm gonna make it to patch and test (especially test) that for openSUSE 11.4 because my TODO is growing and growing instead of shrinking. But you can help me if you want. Bind is in the openSUSE build service: https://build.opensuse.org/package/show?package=bind&project=network you can create your own account in the build service, fork the project, patch it (and test the result). Then you can send me the patch and I will integrate it into openSUSE 11.4 how does that sound? :) I'd be happy to see a patch from your side. Should be easy to patch but some work to test it. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=618023 https://bugzilla.novell.com/show_bug.cgi?id=618023#c3 --- Comment #3 from Luiz Angelo Daros de Luca <luizluca@tre-sc.gov.br> 2010-11-21 12:34:40 UTC --- I hope that this is what you expected :) https://build.opensuse.org/package/rdiff?commit=2&linkrev=base&package=bind&project=home:luizluca Using the compiled package, I was able to update DNS entries in a Windows DNS server with krb auth. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=618023 https://bugzilla.novell.com/show_bug.cgi?id=618023#c4 Uwe Gansert <ug@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #4 from Uwe Gansert <ug@novell.com> 2010-11-23 12:22:26 UTC --- thanks for testing Luiz. I have submitted a patched version for openSUSE 11.4 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=618023 http://bugzilla.novell.com/show_bug.cgi?id=618023#c5 --- Comment #5 from Bernhard Wiedemann <bwiedemann@suse.com> --- This is an autogenerated message for OBS integration: This bug (618023) was mentioned in https://build.opensuse.org/request/show/53765 Factory / bind -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com