View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0006526 | CentOS-6 | bind | public | 2013-06-28 23:54 | 2014-12-28 02:50 |
Reporter | vasek125 | Assigned To | |||
Priority | urgent | Severity | major | Reproducibility | always |
Status | resolved | Resolution | fixed | ||
Platform | i386 | OS | CentOS | OS Version | 6.4 |
Product Version | 6.4 | ||||
Fixed in Version | 6.6 | ||||
Summary | 0006526: GSS api not working with MS Active Directory | ||||
Description | GSS-TSIG stopped working (it worked in the past) with MS Active Directory so Windows can not register/update DNS records. This bug is very sneaky - no log in the logfile, after debugging enabled: "failed gss_inquire_cred: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = Success." | ||||
Steps To Reproduce | Every Windows secure DNS update. | ||||
Additional Information | This bug can be fixed by removing "--disable-isc-spnego" from the SPEC file of bind RPM. I rebuilt it without this line and now everything works. | ||||
Tags | No tags attached. | ||||
This could be GSSAPI library bug, not bind bug, because it works with ISC SPNEGO (compiling without "--disable-isc-spnego") but not with GSSAPI SPNEGO. | |
Downgrading of kerberos packages works too so workaround can be to download krb5-devel-1.9-33.el6_3.3.i686.rpm krb5-libs-1.9-33.el6_3.3.i686.rpm krb5-workstation-1.9-33.el6_3.3.i686.rpm from Centos vault 6.3/updates and do yum downgrade krb5-*. So please fix kerberos libraries or compile the bind package without "--disable-isc-spnego" option so bind embedded spnego will be used. | |
This has been fixed upstream and will be arriving in the 6.6 update. https://bugzilla.redhat.com/show_bug.cgi?id=1087068 |
|
Solves with the release of 6.6 | |
Date Modified | Username | Field | Change |
---|---|---|---|
2013-06-28 23:54 | vasek125 | New Issue | |
2013-06-29 12:59 | vasek125 | Note Added: 0017605 | |
2013-06-29 16:30 | vasek125 | Note Added: 0017606 | |
2014-09-15 08:58 | JHogarth | Note Added: 0020911 | |
2014-10-28 21:10 | tigalch | Note Added: 0021434 | |
2014-10-28 21:10 | tigalch | Status | new => resolved |
2014-10-28 21:10 | tigalch | Fixed in Version | => 6.6 |
2014-10-28 21:10 | tigalch | Resolution | open => fixed |