On 21/09/2026 5:06 pm, Marco Moock wrote:
It still does not do any DNS lookups, it uses the libraries in listed in
nsswitch.conf.
If they handle SERVFAIL improperly, it is not nscd's fault.
Marco, are you familiar with related API? Is it possible to mark result
as partially failed?
Consider the following case:
- libnss_dns sends A and AAAA queries due to AF_UNSPEC argument.
- The result for AAAA is success with some addresses.
- "A" fails with some error.
When cache is not involved, trying IPv6 is the best that the calling
application can do. So the result is not simple failure. It is rather
success.
However this partial result should be cached as negative to retry soon.
I am curious if the resolver plugin may do its job better or it is
limitation of the plugin protocol that results are either failures and
no addresses are returned or they are pure successes.
