Bug 679838

Summary:	=sys-auth/sssd-2.1.0 FEATURES=network-sandbox - configure: error: nsupdate does not support 'realm'
Product:	Gentoo Linux	Reporter:	Jeroen Roovers (RETIRED) <jer>
Component:	Current packages	Assignee:	Gentoo's Team for Core System packages <base-system>
Status:	CONFIRMED ---
Severity:	normal	CC:	alexxy, gentoo, razamatan
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=675154
Whiteboard:
Package list:		Runtime testing required:	---

Description Jeroen Roovers (RETIRED) gentoo-dev

2019-03-09 11:36:58 UTC

configure:20735: checking for nsupdate
configure:20753: found /usr/bin/nsupdate
configure:20765: result: /usr/bin/nsupdate
configure:20773: checking for executable nsupdate
configure:20781: result: yes
configure:20784: checking for nsupdate 'realm' support'
configure:20786: echo realm |$NSUPDATE >&2
parse of /etc/resolv.conf failed
configure:20789: $? = 1
configure:20794: result: no
configure:20796: error: nsupdate does not support 'realm'

With FEATURES=-network-sandbox, this test succeeds:

configure:20735: checking for nsupdate
configure:20753: found /usr/bin/nsupdate
configure:20765: result: /usr/bin/nsupdate
configure:20773: checking for executable nsupdate
configure:20781: result: yes
configure:20784: checking for nsupdate 'realm' support'
configure:20786: echo realm |$NSUPDATE >&2
configure:20789: $? = 0
configure:20791: result: yes

This is related to bug #675154 which happens to trigger the failure to parse resolv.conf: otherwise the forbidden network access would probably not be triggered by nsupdate.

Comment 1 Lars 2020-06-15 07:54:27 UTC

I have net-dns/bind-tools-9.14.8 installed and still sys-auth/sssd-2.2.3-r1 fails to configure with:

configure: error: nsupdate does not support 'realm'

Comment 2 razamatan 2021-11-21 05:43:28 UTC

still happening.  workaround w/ -network-sandbox works, too.

Comment 3 Mike Gilbert gentoo-dev

2021-11-21 20:00:45 UTC

What does /etc/resolv.conf contain on your system?

Comment 4 razamatan 2021-11-22 10:32:22 UTC

(In reply to Mike Gilbert from comment #3)
> What does /etc/resolv.conf contain on your system?

$ cat /etc/resolv.conf
# Generated by dhcpcd from br0.dhcp, br0.ra
# /etc/resolv.conf.head can replace this line
domain example.com
nameserver 10.1.0.1
nameserver fe80::12fe:edff:fe89:3db0%br0
# /etc/resolv.conf.tail can replace this line