ISC Open Source Projects issueshttps://gitlab.isc.org/groups/isc-projects/-/issues2019-05-06T07:35:18Zhttps://gitlab.isc.org/isc-projects/bind9/-/issues/1000ARM doc RPZ NODATA policy says ANCOUNT=12019-05-06T07:35:18ZreedjcARM doc RPZ NODATA policy says ANCOUNT=1<!--
If the bug you are reporting is potentially security-related - for example,
if it involves an assertion failure or other crash in `named` that can be
triggered repeatedly - then please do *NOT* report it here, but send an
email to [...<!--
If the bug you are reporting is potentially security-related - for example,
if it involves an assertion failure or other crash in `named` that can be
triggered repeatedly - then please do *NOT* report it here, but send an
email to [security-officer@isc.org](security-officer@isc.org).
-->
### Summary
See ARM.
" It rewrites the response to NODATA or ANCOUNT=1."
How can NODATA be ANCOUNT=1?
### BIND version used
(Paste the output of `named -V`.)
### Steps to reproduce
(How one can reproduce the issue - this is very important.)
### What is the current *bug* behavior?
(What actually happens.)
### What is the expected *correct* behavior?
(What you should see instead.)
See Paul and Vernon's draft.
https://tools.ietf.org/id/draft-vixie-dns-rpz-04.html
### Relevant configuration files
(Paste any relevant configuration files - please use code blocks (```)
to format console output. If submitting the contents of your
configuration file in a non-confidential Issue, it is advisable to
obscure key secrets: this can be done automatically by using
`named-checkconf -px`.)
### Relevant logs and/or screenshots
(Paste any relevant logs - please use code blocks (```) to format console
output, logs, and code, as it's very hard to read otherwise.)
### Possible fixes
(If you can, link to the line of code that might be responsible for the
problem.)https://gitlab.isc.org/isc-projects/bind9/-/issues/1001Add bind9 as alias to named.service2019-11-01T13:12:58ZGhost UserAdd bind9 as alias to named.servicei am get install BIND 9.14 from https://launchpad.net/~isc/+archive/ubuntu/bind
i am using ubuntu 19.0.4 system, why it has no auto install bind9 services?
How i do fix it?
```
service bind9 status
Unit bind9.service could not be found...i am get install BIND 9.14 from https://launchpad.net/~isc/+archive/ubuntu/bind
i am using ubuntu 19.0.4 system, why it has no auto install bind9 services?
How i do fix it?
```
service bind9 status
Unit bind9.service could not be found.
root@vps3630:~# service bind9 start
Failed to start bind9.service: Unit bind9.service not found.
root@vps3630:~# /etc/init.d/rsyslog restart; /etc/init.d/bind9 start
[ ok ] Restarting rsyslog (via systemctl): rsyslog.service.
-bash: /etc/init.d/bind9: No such file or directory
root@vps3630:~# systemctl enable bind9
Failed to enable unit: Unit file bind9.service does not exist.
```Ondřej SurýOndřej Surýhttps://gitlab.isc.org/isc-projects/bind9/-/issues/1002Use clock_gettime instead of gettimeofday2023-10-31T12:57:07ZWitold KrecickiUse clock_gettime instead of gettimeofdayNot plannedhttps://gitlab.isc.org/isc-projects/bind9/-/issues/1003socket.c error 'SO_REUSEPORT' undeclared2019-05-17T05:45:36ZGhost Usersocket.c error 'SO_REUSEPORT' undeclaredHello developer of bind.
Sorry about poor my english.
I have a issue about building bind-9.14.1 with linux-2.6.34.13.
```
$ ./configure --with-openssl=/usr/local/ssl --disable-linux-caps && make
... snip ...
socket.c: In functi...Hello developer of bind.
Sorry about poor my english.
I have a issue about building bind-9.14.1 with linux-2.6.34.13.
```
$ ./configure --with-openssl=/usr/local/ssl --disable-linux-caps && make
... snip ...
socket.c: In function 'isc_socket_bind':
socket.c:4480:40: error: 'SO_REUSEPORT' undeclared (first use in this function)
socket.c:4480:40: note: each undeclared identifier is reported only once for each function it appears in
make[3]: *** [socket.o] Error 1
make[3]: Leaving directory `/home/m-ito/tmp/bind-9.14.1/lib/isc/unix'
make[2]: *** [subdirs] Error 1
make[2]: Leaving directory `/home/m-ito/tmp/bind-9.14.1/lib/isc'
make[1]: *** [subdirs] Error 1
make[1]: Leaving directory `/home/m-ito/tmp/bind-9.14.1/lib'
make: *** [subdirs] Error 1
```
I searched `SO_REUSEPORT' in my system, but it has been comment-outed.
```
$ egrep -r SO_REUSEPORT /usr/include/
/usr/include/asm/socket.h:/* To add :#define SO_REUSEPORT 15 */
/usr/include/asm-i386/socket.h:/* To add :#define SO_REUSEPORT 15 */
```
I understand SO_REUSEPORT is implemented in linux-3.9 or later.
In bind-9.14.1/lib/isc/unix/socket.c, next code is controled to ignore in environment SO_REUSEPORT is not defined.
```
5335 #if defined(SO_REUSEPORT) && defined(__linux__)
5336 int sock, yes = 1;
5337 sock = socket(AF_INET, SOCK_DGRAM, 0);
5338 if (sock < 0) {
5339 sock = socket(AF_INET6, SOCK_DGRAM, 0);
5340 if (sock < 0) {
5341 return;
5342 }
5343 }
5344 if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR,
5345 (void *)&yes, sizeof(yes)) < 0)
5346 {
5347 close(sock);
5348 return;
5349 } else if (setsockopt(sock, SOL_SOCKET, SO_REUSEPORT,
5350 (void *)&yes, sizeof(yes)) < 0)
5351 {
5352 close(sock);
5353 return;
5354 }
5355 hasreuseport = true;
5356 close(sock);
5357 #endif
```
But next code is not controled at all.
I guess next code should be ignore too in environment SO_REUSEPORT is not defined.
```
4480 if (setsockopt(sock->fd, SOL_SOCKET, SO_REUSEPORT,
4481 (void *)&on, sizeof(on)) < 0)
4482 {
4483 UNEXPECTED_ERROR(__FILE__, __LINE__,
4484 "setsockopt(%d) failed", sock->fd);
4485 }
```
I tried to edit simply like below and built it.
```
#if defined(SO_REUSEPORT) && defined(__linux__)
4480 if (setsockopt(sock->fd, SOL_SOCKET, SO_REUSEPORT,
4481 (void *)&on, sizeof(on)) < 0)
4482 {
4483 UNEXPECTED_ERROR(__FILE__, __LINE__,
4484 "setsockopt(%d) failed", sock->fd);
4485 }
#endif
```
But it become not to responce after about few hours from invoke it.
I strongly hope to fix this issue in next version of bind.
Thank you.https://gitlab.isc.org/isc-projects/bind9/-/issues/1004[ISC-support #14369] Investigate alleged differences between intended ECS beh...2020-05-27T16:16:54ZBrian Conry[ISC-support #14369] Investigate alleged differences between intended ECS behavior, documented behavior, and actual behaviorAs discussed in https://support.isc.org/Ticket/Display.html?id=14369 and in a customer conference call.As discussed in https://support.isc.org/Ticket/Display.html?id=14369 and in a customer conference call.June 2020 (9.11.20, 9.11.20-S1, 9.16.4, 9.17.2)Evan HuntEvan Hunthttps://gitlab.isc.org/isc-projects/bind9/-/issues/1005filter-aaaa crash in 9.14.12019-05-07T00:57:53ZCarl Byingtonfilter-aaaa crash in 9.14.1still happends on 9.14.1 with the patch from issue 982
(gdb) bt
#0 0x00000033772324f5 in raise () from /lib64/libc.so.6
#1 0x0000003377233cd5 in abort () from /lib64/libc.so.6
#2 0x000000000041e3d3 in assertion_failed (file=<value...still happends on 9.14.1 with the patch from issue 982
(gdb) bt
#0 0x00000033772324f5 in raise () from /lib64/libc.so.6
#1 0x0000003377233cd5 in abort () from /lib64/libc.so.6
#2 0x000000000041e3d3 in assertion_failed (file=<value optimized out>,
line=<value optimized out>, type=<value optimized out>,
cond=<value optimized out>) at ./main.c:253
#3 0x0000003fb421323a in isc_assertion_failed (file=<value optimized out>,
line=<value optimized out>, type=<value optimized out>,
cond=<value optimized out>) at assertions.c:50
#4 0x0000003fb42184b0 in isc_ht_destroy (htp=0x7f548e8db628) at ht.c:114
#5 0x00007f547ad1fa8c in plugin_destroy (instp=0x7f5483118698)
at filter-aaaa.c:450
#6 0x0000003fb4616462 in unload_plugin (pluginp=<value optimized out>)
at hooks.c:238
#7 0x0000003fb461657a in ns_plugins_free (mctx=0x1e24210,
listp=<value optimized out>) at hooks.c:553
#8 0x0000003fb3d51945 in destroy (view=0x7f547c2bcf50) at view.c:557
#9 0x0000003fb3d5222c in adb_shutdown (task=<value optimized out>, event=0x0)
at view.c:762
#10 0x0000003fb4233b17 in dispatch (queuep=<value optimized out>)
at task.c:1130
#11 run (queuep=<value optimized out>) at task.c:1297
#12 0x0000003377e07aa1 in start_thread () from /lib64/libpthread.so.0
#13 0x00000033772e8c4d in clone () from /lib64/libc.so.6https://gitlab.isc.org/isc-projects/kea/-/issues/589Ubuntu 19.04 warnings2019-05-22T07:52:46ZFrancis DupontUbuntu 19.04 warningsTrying to compile Kea on Ubuntu 19.04 with g++ 8.3 with MySQL support it fails with 2 warnings:
- a static cast with a const type (illegal because type qualifiers are not allowed): fix is to remove the const which BTW is useless
- an u...Trying to compile Kea on Ubuntu 19.04 with g++ 8.3 with MySQL support it fails with 2 warnings:
- a static cast with a const type (illegal because type qualifiers are not allowed): fix is to remove the const which BTW is useless
- an unused parameter in a lambda: fix is to remove the parameter name.Kea1.6Francis DupontFrancis Duponthttps://gitlab.isc.org/isc-projects/kea/-/issues/590Error in documentation examples2019-07-22T10:52:12ZStephen MorrisError in documentation examplesIn section 9.2.9 of the Kea Administration Reference Manual (DHCPv6 guide - "Prefix Exclude Option"), the example given for the prefix exclude option is:
```
"subnet": "2001:db8:1::/48",
"pd-pools": [
...In section 9.2.9 of the Kea Administration Reference Manual (DHCPv6 guide - "Prefix Exclude Option"), the example given for the prefix exclude option is:
```
"subnet": "2001:db8:1::/48",
"pd-pools": [
{
"prefix": "2001:db8:1:8000::",
"prefix-len": 48,
"delegated-len": 64,
"excluded-prefix": "2001:db8:1:babe:cafe:80::",
"excluded-prefix-len": 72
}
]
```
This is incorrect and leads to the parser error message:
```
DHCP6_PARSER_FAIL failed to create or run parser for configuration element subnet6: excluded prefix
2001:db8:1:babe:cafe:80::/72 must have the same common prefix part of 64 as the delegated prefix
2001:db8:1:8000::/64 (seeds/kea6-2.conf:24:21)
```
Replacing ":babe:" in the excluded prefix with ":8000:" solves the problem.Kea1.6-beta2Razvan BecheriuRazvan Becheriuhttps://gitlab.isc.org/isc-projects/bind9/-/issues/10069.14.1 qname-minimization vs 142.136.234.1342019-05-07T02:49:24ZCarl Byington9.14.1 qname-minimization vs 142.136.234.134The default for the qname-minimization option is relaxed, but with that, we cannot resolve the PTR for 142.136.234.134.
dig -x 142.136.234.134 @localhost
fails, but dig +trace works.
If we switch to qname-minimization disabled, we ca...The default for the qname-minimization option is relaxed, but with that, we cannot resolve the PTR for 142.136.234.134.
dig -x 142.136.234.134 @localhost
fails, but dig +trace works.
If we switch to qname-minimization disabled, we can resolve that.https://gitlab.isc.org/isc-projects/bind9/-/issues/10089.14.1 will not compile on OpenBSD 6.5 on AMD642019-05-02T14:50:43ZGhost User9.14.1 will not compile on OpenBSD 6.5 on AMD64[named_w_clang.log](/uploads/5f37874242b1d8dfc77485f0108fd3e8/named_w_clang.log)
[named_w_gcc.log](/uploads/80cac50b7aa54ecabc45028444678a06/named_w_gcc.log)I have begun work on upgrading a group of OpenBSD boxes that are used at a bunc...[named_w_clang.log](/uploads/5f37874242b1d8dfc77485f0108fd3e8/named_w_clang.log)
[named_w_gcc.log](/uploads/80cac50b7aa54ecabc45028444678a06/named_w_gcc.log)I have begun work on upgrading a group of OpenBSD boxes that are used at a bunch of small sites as a "network services" processor and gateway.. The existing boxes are mostly running some version of 9.12, though one is running a 9.11. Aside from the usual "version-ites" problems, this has been a largely mechanical "turn the crank and let the scripts run" process.
EXCEPT for Bind. The build process keeps failing when it gets down far enough to trying to compile isc/lib/rwlock.c which fails miserably.. Using the "out of the box" gcc compiler generates the following:
```
--- snip ---
gcc -std=gnu99 -I/opt/src/bind-9.14.1 -I../.. -I./unix/include -I./pthreads/include -I./include -I./include -I/opt/src/bind-9.14.1/lib/dns/include -I../../lib/dns/include -I/usr/include -g -O2 -pthread -I /usr/local/include -I/usr/local/include/libxml2 -I/usr/local/include -I /usr/local/include -W -Wall -Wmissing-prototypes -Wcast-qual -Wwrite-strings -Wformat -Wpointer-arith -fno-strict-aliasing -fno-delete-null-pointer-checks -c rwlock.c
rwlock.c:51:24: error: immintrin.h: No such file or directory
rwlock.c: In function 'isc__rwlock_lock':
rwlock.c:302: warning: cast to pointer from integer of different size
rwlock.c:302: warning: cast to pointer from integer of different size
rwlock.c:302: warning: assignment makes integer from pointer without a cast
rwlock.c: In function 'isc_rwlock_lock':
rwlock.c:342: warning: implicit declaration of function '_mm_pause'
rwlock.c: In function 'isc_rwlock_trylock':
rwlock.c:395: warning: cast to pointer from integer of different size
rwlock.c:395: warning: cast to pointer from integer of different size
rwlock.c:395: warning: assignment makes integer from pointer without a cast
rwlock.c: In function 'isc_rwlock_tryupgrade':
rwlock.c:427: warning: cast to pointer from integer of different size
rwlock.c:427: warning: cast to pointer from integer of different size
rwlock.c:427: warning: assignment makes integer from pointer without a cast
*** Error 1 in lib/isc (Makefile:273 'rwlock.o')
*** Error 1 in lib (Makefile:89 'subdirs')
*** Error 1 in /opt/src/bind-9.14.1 (Makefile:96 'subdirs')
--- snip ---
```
After looking, I found that the ./configure had selected the default gcc ( 4.2.1 ) which is old. I have since retried this with both clang (7.0.1) and egcc (8.3.0) with similar, but slightly more illuminating results.
```
--- snip ---
/usr/bin/cc -I/opt/src/bind-9.14.1 -I../.. -I./unix/include -I./pthreads/include -I./include -I./include -I/opt/src/bind-9.14.1/lib/dns/include -I../../lib/dns/include -I/usr/include -g -O2 -pthread -I /usr/local/include -I/usr/local/include/libxml2 -I/usr/local/include -I /usr/local/include -W -Wall -Wmissing-prototypes -Wcast-qual -Wwrite-strings -Wformat -Wpointer-arith -fno-strict-aliasing -fno-delete-null-pointer-checks -c rwlock.c
In file included from rwlock.c:51:
In file included from /usr/lib/clang/7.0.1/include/immintrin.h:28:
/usr/include/mmintrin.h:312:40: error: passing 'long long' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_paddq ((long long)__m1, (long long)__m2);
^~~~~~~~~~~~~~~
/usr/include/mmintrin.h:416:40: error: passing 'long long' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psubq ((long long)__m1, (long long)__m2);
^~~~~~~~~~~~~~~
/usr/include/mmintrin.h:523:53: error: passing 'long long' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psllw ((__v4hi)__m, (long long)__count);
^~~~~~~~~~~~~~~~~~
/usr/include/mmintrin.h:535:53: error: passing 'int' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psllw ((__v4hi)__m, __count);
^~~~~~~
/usr/include/mmintrin.h:548:53: error: passing 'long long' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_pslld ((__v2si)__m, (long long)__count);
^~~~~~~~~~~~~~~~~~
/usr/include/mmintrin.h:560:53: error: passing 'int' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_pslld ((__v2si)__m, __count);
^~~~~~~
/usr/include/mmintrin.h:573:40: error: passing 'long long' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psllq ((long long)__m, (long long)__count);
^~~~~~~~~~~~~~
/usr/include/mmintrin.h:585:40: error: passing 'long long' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psllq ((long long)__m, (long long)__count);
^~~~~~~~~~~~~~
/usr/include/mmintrin.h:598:53: error: passing 'long long' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psraw ((__v4hi)__m, (long long)__count);
^~~~~~~~~~~~~~~~~~
/usr/include/mmintrin.h:610:53: error: passing 'int' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psraw ((__v4hi)__m, __count);
^~~~~~~
/usr/include/mmintrin.h:623:53: error: passing 'long long' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psrad ((__v2si)__m, (long long)__count);
^~~~~~~~~~~~~~~~~~
/usr/include/mmintrin.h:635:53: error: passing 'int' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psrad ((__v2si)__m, __count);
^~~~~~~
/usr/include/mmintrin.h:648:53: error: passing 'long long' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psrlw ((__v4hi)__m, (long long)__count);
^~~~~~~~~~~~~~~~~~
/usr/include/mmintrin.h:660:53: error: passing 'int' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psrlw ((__v4hi)__m, __count);
^~~~~~~
/usr/include/mmintrin.h:673:53: error: passing 'long long' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psrld ((__v2si)__m, (long long)__count);
^~~~~~~~~~~~~~~~~~
/usr/include/mmintrin.h:685:53: error: passing 'int' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psrld ((__v2si)__m, __count);
^~~~~~~
/usr/include/mmintrin.h:698:40: error: passing 'long long' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psrlq ((long long)__m, (long long)__count);
^~~~~~~~~~~~~~
/usr/include/mmintrin.h:710:40: error: passing 'long long' to parameter of incompatible type '__attribute__((__vector_size__(1 * sizeof(long long)))) long long' (vector of 1 'long long' value)
return (__m64) __builtin_ia32_psrlq ((long long)__m, (long long)__count);
^~~~~~~~~~~~~~
In file included from rwlock.c:51:
In file included from /usr/lib/clang/7.0.1/include/immintrin.h:32:
/usr/include/xmmintrin.h:105:10: error: invalid conversion between vector type '__m128' (vector of 4 'float' values) and integer type 'int' of different size
return (__m128) __builtin_ia32_addss ((__v4sf)__A, (__v4sf)__B);
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
fatal error: too many errors emitted, stopping now [-ferror-limit=]
20 errors generated.
*** Error 1 in lib/isc (Makefile:273 'rwlock.o')
*** Error 1 in lib (Makefile:89 'subdirs')
*** Error 1 in /opt/src/bind-9.14.1 (Makefile:96 'subdirs')
--- snip ---
```
While I'm not much of a C programmer, the problem appears to be in the "new code" that was added between 9.12.4-P1 (which builds fine on this same platform) and the 9.14 version.
```
--- snip from rwlock.c ---
#if defined(_MSC_VER)
# include <intrin.h>
# define isc_rwlock_pause() YieldProcessor()
#elif defined(__x86_64__)
# include <immintrin.h>
# define isc_rwlock_pause() _mm_pause()
#elif defined(__i386__)
--- snip ---
```
Since I know you are going to ask, I'm trying to use the following configure:
```
CC=/usr/bin/cc ./configure --prefix=/usr/local \
--sbindir=/usr/local/sbin \
--bindir=/usr/local/sbin \
--libdir=/usr/local/lib \
--includedir=/usr/local/include \
--mandir=/usr/local/share/man \
--sysconfdir=/etc \
--enable-shared \
--enable-static \
--with-openssl=/usr \
--with-python=/usr/local/bin/python \
--with-libxml2 \
--with-libjson \
--without-readline \
--without-protobuf-c \
--without-libfstrm \
--with-lmdb \
--disable-dnstap \
--with-dlopen=no
```
I have tried this with variations on this theme ( with libtool, etc.).
Recreating:
```
untar
./configure
make depend
make
```https://gitlab.isc.org/isc-projects/kea/-/issues/591kea-dhcpv6 lease sanity-checking is flagging PD leases2019-05-10T09:48:34ZThomas Markwalderkea-dhcpv6 lease sanity-checking is flagging PD leasesReported via support issue https://support.isc.org/Ticket/Display.html?id=14522.
Analysis showed that kea-dhcpv6 sanity checking is attempting to map PD leases to subnets by address which a: is not supported b: the admin guide says is...Reported via support issue https://support.isc.org/Ticket/Display.html?id=14522.
Analysis showed that kea-dhcpv6 sanity checking is attempting to map PD leases to subnets by address which a: is not supported b: the admin guide says is not done for PD leases. Testing confirms this as does visual code inspection. The code should either not check PD leases or check them properly. In either case, there are no unit tests to verify PD leases are treated correctly.Kea1.6Thomas MarkwalderThomas Markwalderhttps://gitlab.isc.org/isc-projects/dhcp/-/issues/10Make ping-check timeout configurable in ms, thus allowing timeouts < 1s2022-03-31T19:49:23ZCathy AlmondMake ping-check timeout configurable in ms, thus allowing timeouts < 1s---
name: Make ping-check timeout configurable in ms
about: Currently ping-check can be specified only in seconds, with a minimum value of 1s. For some situations it might be desirable to make this even shorter.
---
As reported in Sup...---
name: Make ping-check timeout configurable in ms
about: Currently ping-check can be specified only in seconds, with a minimum value of 1s. For some situations it might be desirable to make this even shorter.
---
As reported in Support ticket [#14375](https://support.isc.org/Ticket/Display.html?id=14375).
The scenario is a problem with a UEFI DHCP process which appears to timeout around 600ms, due to a Bitlocker Network Unlock process. When the ping before allocate check is enabled on the DHCP server, the minimum timeout being 1 second, this results on the DHCP process on the client failing before the ping timeout is reached.
This makes using Bitlocker Network Unlock impossible to deploy on a network that is using ISC DHCP with ping-check enabled.
Is it possible to permit more granularity within the ping timeout value?
This might also benefit other environments using devices with embedded DHCP clients that don't perform their own client-based local checks for duplication before accepting a lease offer.4.4.2Thomas MarkwalderThomas Markwalderhttps://gitlab.isc.org/isc-projects/bind9/-/issues/1009[ISC-support #13911] IXFR requests sometimes have ending logged but not start2019-11-18T15:54:51ZBrian Conry[ISC-support #13911] IXFR requests sometimes have ending logged but not start### Summary
When looking at the transfer logs there are sometimes 'IXFR ended' messages without a matching 'IXFR started' message.
### BIND version used
Customer has not said.
### Steps to reproduce
dig @$server zone IXFR=$serial
#...### Summary
When looking at the transfer logs there are sometimes 'IXFR ended' messages without a matching 'IXFR started' message.
### BIND version used
Customer has not said.
### Steps to reproduce
dig @$server zone IXFR=$serial
### What is the current *bug* behavior?
an 'IXFR ended' message is logged without a corresponding 'IXFR started' message
### What is the expected *correct* behavior?
either:
+ no 'IXFR ended' message is produced
+ an 'IXFR started' message is produced
+ some other message is produced indicating the empty transferhttps://gitlab.isc.org/isc-projects/bind9/-/issues/1010Failed to compile bind-9.14.x with kernel that don't support so_reuseport2019-05-03T11:50:47ZGhost UserFailed to compile bind-9.14.x with kernel that don't support so_reuseport[no-reuseport.diff](/uploads/3e191daeb25f4ee91ca7801d15c52a9f/no-reuseport.diff)
failed to compile bind-9.14.1 (also 9.14.0) on ubuntu 11.10 with linux 3.x.x kernel
(ie failed to compile with old kernel which don't support so_reuseport)
...[no-reuseport.diff](/uploads/3e191daeb25f4ee91ca7801d15c52a9f/no-reuseport.diff)
failed to compile bind-9.14.1 (also 9.14.0) on ubuntu 11.10 with linux 3.x.x kernel
(ie failed to compile with old kernel which don't support so_reuseport)
attached diff should fix the issue.
thxhttps://gitlab.isc.org/isc-projects/dhcp/-/issues/12No pid file create2019-07-04T10:03:19ZGhost UserNo pid file createHello and sorry for my bad English,
On ubuntu 18.04 with ISC DHCP 4.3.5, i have some troubles.
At every startup, the server is running but the dhcpd.pid is not create in /var/run/dhcp-server/
If i stop the service and restart, the dhcp...Hello and sorry for my bad English,
On ubuntu 18.04 with ISC DHCP 4.3.5, i have some troubles.
At every startup, the server is running but the dhcpd.pid is not create in /var/run/dhcp-server/
If i stop the service and restart, the dhcpd.pid is create !
So the problem is really at startup. service can't create the file
thanks for helphttps://gitlab.isc.org/isc-projects/kea/-/issues/594New host cache commands.2019-05-22T08:04:14ZFrancis DupontNew host cache commands.At least add a new command to return the number of entries.At least add a new command to return the number of entries.Kea1.6Francis DupontFrancis Duponthttps://gitlab.isc.org/isc-projects/dhcp/-/issues/13DHCP server segfaults when exceeding lease limit2019-07-17T14:25:54ZGhost UserDHCP server segfaults when exceeding lease limit---
name: DHCP Server segfaults when exceeding lease limit
about: debugging DHCP server
---
The dhcpd server dies with segmentation fault when exceeds the lease
limit in a class.
See the relevant information [in this ticket](https://...---
name: DHCP Server segfaults when exceeding lease limit
about: debugging DHCP server
---
The dhcpd server dies with segmentation fault when exceeds the lease
limit in a class.
See the relevant information [in this ticket](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=782434) :
The bug is still exists in 4.4.1.
I've patched 4.4.1 with the old code and it is working now as expected on
production environments (~15k endpoints/server).
Patch:
```
--- isc-dhcp-4.4.1.orig/server/dhcp.c
+++ isc-dhcp-4.4.1/server/dhcp.c
@@ -2554,24 +2554,16 @@ void ack_lease (packet, lease, offer, wh
one, and if we do, try to do so. */
if (lease->billing_class == NULL) {
char *cname = "";
- int bill = 0;
+ int bill = 0;
+ for (i = 0; i < packet->class_count; i++) {
+ if (packet->classes[i]->lease_limit) {
+ bill++;
+ if (bill_class(lease,
+ packet->classes[i]))
+ break;
+ }
+ }
- for (i = 0; i < packet->class_count; i++) {
- struct class *billclass, *subclass;
-
- billclass = packet->classes[i];
- if (billclass->lease_limit) {
- bill++;
- if (bill_class(lease, billclass))
- break;
-
- subclass = billclass->superclass;
- if (subclass == NULL)
```
Please review my code.
I couldn't understand, what was the idea behind the new classes.
Thanks,
Peter4.4.2Thomas MarkwalderThomas Markwalderhttps://gitlab.isc.org/isc-projects/dhcp/-/issues/14Building DHCP 4.4.1 using libbind from BIND 9.14.x2022-03-13T21:09:54ZGhost UserBuilding DHCP 4.4.1 using libbind from BIND 9.14.xI'm trying to build DHCP 4.4.1. There are many build errors because of missing definitions, e.g.:
`../includes/tree.h:307:30: error: unknown type name 'isc_boolean_t'; did you mean 'isc_token_t'?`
When building against BIND 9.12.4, I'm...I'm trying to build DHCP 4.4.1. There are many build errors because of missing definitions, e.g.:
`../includes/tree.h:307:30: error: unknown type name 'isc_boolean_t'; did you mean 'isc_token_t'?`
When building against BIND 9.12.4, I'm able to work around these by adding `#include <isc/boolean.h>` and similarly for int.h to dhcpd.h and omapip.h. However, that is no longer a viable fix when building against BIND 9.14.x, because those header files are no longer part of BIND in that release.
Is there a recommended approach for building DHCP 4.4.1?https://gitlab.isc.org/isc-projects/bind9/-/issues/1011Use proper linker (config) on HP-UX2019-05-30T00:30:01ZMichael OsipovUse proper linker (config) on HP-UXIn `configure.ac` the config is still tuned for HP-UX on PA-RISC which is dead for many many years. Attached you'll find a patch to properly link with HP-UX on IA64:
* Shared libs on IA64 are -- by default -- `.so`
* The default way to ...In `configure.ac` the config is still tuned for HP-UX on PA-RISC which is dead for many many years. Attached you'll find a patch to properly link with HP-UX on IA64:
* Shared libs on IA64 are -- by default -- `.so`
* The default way to link is to use the compiler -- as advised by HPE support
The patch has been produced against 9.11.6.[bind9.patch](/uploads/f70f00ceed7144c57f14653147c3b9b0/bind9.patch)BIND 9.15.1Mark AndrewsMark Andrewshttps://gitlab.isc.org/isc-projects/dhcp/-/issues/15confpars.c has invalid error messages when memory allocation fails2019-11-08T17:40:56ZGhost Userconfpars.c has invalid error messages when memory allocation failsGCC 9 detects two cases where confpars.c includes NULL values in error messages. The error exists in both 4.4.1 and current master; I believe the attached patch is a correct fix for them.
[0001-Emit-correct-error-message-when-malloc-fai...GCC 9 detects two cases where confpars.c includes NULL values in error messages. The error exists in both 4.4.1 and current master; I believe the attached patch is a correct fix for them.
[0001-Emit-correct-error-message-when-malloc-fails.patch](/uploads/2422be5dd4cacd64ace575f694c4fd30/0001-Emit-correct-error-message-when-malloc-fails.patch)4.4.2Thomas MarkwalderThomas Markwalder