On Thu, Sep 03, 2015 at 02:11:55PM -0700, Takae Harrington wrote:
> Hello,
>
> When I compile postfix3.0.2 (the same issue has existed since 2.11.x) on
> aix61 and aix71, I get this error:
>
> [vq2ua613:/staging/Postfix-3.0.2]make
> dns_lookup.c: In function 'dns_query':
> dns_lookup.c:339: error: 'HEADER' has no member named 'ad'
> make: The error code from the last command is 1.
You have an unsupported resolver that is new enough to define
"RES_USE_DNSSEC", but old enough to not have have the "ad" bit
defined in the HEADER structure.
> I am new to postfix and maybe this is some simple fix that I am not aware
> (since i do not see any solution when I google the error....)
> Hope you could give me some guidance on this one.
The solution is a more modern C/resolver library and associated
header files. Postfix support for DNSSEC could be compiled out of
this system by adding override macros that disable attempts to
support DNSSEC even when RES_USE_DNSSEC is present. Apply the
patch below and build with '-DDISABLE_DNSSEC'.
diff --git a/src/dns/dns.h b/src/dns/dns.h
index 2938ac3..dfc5686 100644
--- a/src/dns/dns.h
+++ b/src/dns/dns.h
@@ -54,6 +54,14 @@
#endif
+
+/*
+ * Disable DNSSEC at compile-time even if RES_USE_DNSSEC is available
+ */
+#ifdef DISABLE_DNSSEC
+#undef RES_USE_DNSSEC
+#endif
+
/*
* Compatibility with systems that lack RES_USE_DNSSEC and RES_USE_EDNS0
*/
--
Viktor.
