[Pkg-dns-devel] Bug#874463: dnssec-trigger: cifs mount fails

[Wim Bertels]

Package: dnssec-trigger
Version: 0.13-6
Severity: normal

Hallo,

With dnssec-trigger enabled i can't mount cifs shares.
Without dnssec-trigger i can mount these cifs shares.

Tested and all failed: 
* validate_connection_provided_zones=yes and no
* add_wifi_provided_zones=no and yes
* adding search from standard resolv.conf to conf of dnssec-trigger.conf
** standard=without running dnssec-trigger

Checked in the two setups (with and without dnssec-trigger):
hostname, domainname, dnsdomainname, nisdomainname, ypdomainname are the same

Possibly related:
#871177 and #776778

A workaround could be to have a dnssec exception list, which are no treated by dnssec

It is also possible that this an "unbound" bug (package).

I hope this helps.

mvg,
Wim

-- System Information:
Debian Release: 9.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=nl_BE.utf8, LC_CTYPE=nl_BE.utf8 (charmap=UTF-8), LANGUAGE=nl_BE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages dnssec-trigger depends on:
ii  gir1.2-networkmanager-1.0  1.6.2-3
ii  init-system-helpers        1.48
ii  libc6                      2.24-11+deb9u1
ii  libgdk-pixbuf2.0-0         2.36.5-2
ii  libglib2.0-0               2.50.3-2
ii  libgtk2.0-0                2.24.31-2
ii  libldns2                   1.7.0-1
ii  libssl1.1                  1.1.0f-3
ii  python                     2.7.13-2
ii  python-gi                  3.22.0-2
ii  python-lockfile            1:0.12.2-2
ii  unbound                    1.6.0-3

dnssec-trigger recommends no packages.

dnssec-trigger suggests no packages.

-- Configuration Files:
/etc/dnssec-trigger/dnssec-trigger.conf changed:
domain: ""
search: "intranet.changed.domain changed.domain int.changed.domain"
url: "http://ster.nlnetlabs.nl/hotspot.txt OK"
url: "http://fedoraproject.org/static/hotspot.txt OK"
tcp80: 185.49.140.67
tcp80: 2a04:b900::10:0:0:67
ssl443: 185.49.140.67 7E:CF:B4:BE:B9:9A:56:0D:F7:3B:40:51:A4:78:E6:A6:FD:66:0F:10:58:DC:A8:2E:C0:43:D4:77:5A:71:8A:CF
ssl443: 2a04:b900::10:0:0:67 7E:CF:B4:BE:B9:9A:56:0D:F7:3B:40:51:A4:78:E6:A6:FD:66:0F:10:58:DC:A8:2E:C0:43:D4:77:5A:71:8A:CF


-- no debconf information