Bug 9902 - Internal DNS should not do a cross-NC search for dnsZone objects
Internal DNS should not do a cross-NC search for dnsZone objects
Status: NEW
Product: Samba 4.0
Classification: Unclassified
Component: DNS server
unspecified
All All
: P5 normal
: ---
Assigned To: Kai Blin
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-05-25 10:29 UTC by Kai Blin
Modified: 2014-07-29 11:01 UTC (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Kai Blin 2013-05-25 10:29:20 UTC
Internal dns_server does a cross-ncs search for all dnsZone object.

This wrong as if there is more than 1 domain and the DC is a GC then it will
have (partial)replica of DomainDNS zone for other domain. Also tests against
windows have shown that cross-ncs search didn't search into application
partitions:

./bin/ldbsearch -H ldap://172.16.100.244 -Uadministrator%totoTATA123
--cross-ncs '(objectclass=dnszone)' dn 
# record 1
dn: DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=w2k3,DC=home,DC=matws,DC=net

# returned 1 records
# 1 entries
# 0 referrals