Fix nsupdate GSSAPI auth against AD server (#1484451)

This commit is contained in:
Petr Menšík 2017-09-12 17:48:06 +02:00
commit 92edec0e52
2 changed files with 35 additions and 3 deletions

27
bind-9.11-rh1484451.patch Normal file
View file

@ -0,0 +1,27 @@
From a8a20462b516b0cc39e9b1fb1a8dd514eb1aed29 Mon Sep 17 00:00:00 2001
From: Mark Andrews <marka@isc.org>
Date: Fri, 1 Sep 2017 11:17:59 +1000
Subject: [PATCH] 4697. [bug] Restore workaround for Microsoft
Windows TSIG hash computation bug. [RT #45854]
---
lib/dns/rdataset.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/lib/dns/rdataset.c b/lib/dns/rdataset.c
index 1386840..e563963 100644
--- a/lib/dns/rdataset.c
+++ b/lib/dns/rdataset.c
@@ -466,6 +466,9 @@ towiresorted(dns_rdataset_t *rdataset, const dns_name_t *owner_name,
dns_name_copy(owner_name, name, NULL);
dns_rdataset_getownercase(rdataset, name);
+ if ((owner_name->attributes & DNS_NAMEATTR_NOCOMPRESS) != 0)
+ name->attributes |= DNS_NAMEATTR_NOCOMPRESS;
+
do {
/*
* Copy out the name, type, class, ttl.
--
2.9.5

View file

@ -26,7 +26,7 @@ Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
Name: bind
License: MPLv2.0
Version: 9.11.1
Release: 6%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
Release: 7%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
Epoch: 32
Url: http://www.isc.org/products/BIND/
Buildroot:%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@ -81,8 +81,9 @@ Patch136:bind-9.10-dist-native-pkcs11.patch
Patch137:bind-9.10-use-of-strlcat.patch
Patch140:bind-9.11-rh1410433.patch
Patch141:bind-9.11-rh1236087.patch
Patch142: bind-9.11-dlz-mysql.patch
Patch143: bind-9.11-dlz-mysql-modules.patch
Patch142:bind-9.11-dlz-mysql.patch
Patch143:bind-9.11-dlz-mysql-modules.patch
Patch144:bind-9.11-rh1484451.patch
# SDB patches
Patch11: bind-9.3.2b2-sdbsrc.patch
@ -378,6 +379,7 @@ This package provides a module which allows commands to be sent to rndc directly
%patch141 -p1 -b .rh1236087
%patch142 -p1 -b .mysql_config
%patch143 -p1 -b .mysql_modules
%patch144 -p1 -b .rh1484451
%if %{PKCS11}
cp -r bin/named{,-pkcs11}
@ -1135,6 +1137,9 @@ rm -rf ${RPM_BUILD_ROOT}
%{python3_sitelib}/isc/__pycache__/*py*
%changelog
* Wed Sep 13 2017 Petr Menšík <pemensik@redhat.com> - 32:9.11.1-7.P3
- Fix nsupdate GSSAPI auth against AD server (#1484451)
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 32:9.11.1-6.P3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild