[Bug 998712] Re: domain name completion broken when dnsmasq is used
** Changed in: dnsmasq (Ubuntu) Status: Expired = Confirmed ** Description changed: - dnsmasq does not resolve DNS names correcty. + Dnsmasq sometimes does not resolve DNS names correcty. - Applications like Thunderbird or tools like ssh rely on working name - resolution. However, if there never was a working name resolution, + Sometimes it seems that if there never was a working name resolution, dnsmasq never gets to know about the DNS names. Setup: private network: 192.168.0.x/24 domain mydomain.intern server: 192.168.0.1 hostname s1 dhcp (.100 - .200) and bind running, postfix and dovecot running client: 192.168.0.100 (dhclient) /etc/resolv.conf ... nameserver 127.0.0.1 search mydomain.intern /var/run/nm-dns-dnsmasq.conf server=192.168.0.1 Open Thunderbird - Thunderbird fails to open s1 ssh admin@s1 - ssh: Could not resolve hostname s1: Name or service not known Adding nameserver 192.168.0.1 to /etc/resolv.conf resolves the issue immediately calling sudo resolvconf -u creates the lookup problem immediately again This is a critical error ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: dnsmasq-base 2.59-4 ProcVersionSignature: Ubuntu 3.2.0-24.37-generic 3.2.14 Uname: Linux 3.2.0-24-generic x86_64 NonfreeKernelModules: nvidia wl ApportVersion: 2.0.1-0ubuntu7 Architecture: amd64 Date: Sun May 13 11:43:02 2012 InstallationMedia: Ubuntu 11.10 Oneiric Ocelot - Release amd64+mac (20111012) SourcePackage: dnsmasq UpgradeStatus: Upgraded to precise on 2012-04-29 (13 days ago) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Arno, Does disabling NetworkManager-controlled dnsmasq fix the problem? (To disable NetworkManager-controlled dnsmasq, comment out dns=dnsmasq in /etc/NetworkManager/NetworkManager.conf and then restart network- manager.) Hypothesis: dnsmasq is given two nameserver addresses. The first nameserver listed, which is the one always consulted first if dnsmasq is not used, functions correctly. The second one malfunctions. Dnsmasq sometimes consults the second one and therefore sometimes returns incorrect results. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
I was experiencing a similar problem as described by submitter. The name resolution of the short name failed, subsequently the name resolution of the fqdn also failed. After 10-15 seconds, the fqdn resolved again, only to fail again after trying the short name. The solution described by Thomas Hood: sudo kill -HUP $(pidof dnsmasq) resolved this issue for me. It is unknown to me how dnsmasq got itself into trouble. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
[Expired for dnsmasq (Ubuntu) because there has been no activity for 60 days.] ** Changed in: dnsmasq (Ubuntu) Status: Incomplete = Expired -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Lots of speculations here. My internal DNS server is 10.1.0.4. My fallback is the secondary 10.1.0.254 which acts as DNS forwarder and proxy to the third and others. The resolver works its way down: All things well = 10.1.0.4 Main server down: 10.1.0.254 will serve rudimentary internal services and redirects all requests to external DNSs The third server is there as we need two DNS servers for official domain name registrations. I have another issue: If dnsmasq is on via Network Manager opening a VPN connection to a remote site violates all name resolution to internal addresses (10.x.x.x). Here is the catch: If I turn off dnsmasq, all things work as expected. Names get resolved correctyl in all networks (internal, remote and external). I travel a lot and have my notebook set to attach in all these networks automatically. It worked fine until dnsmasq was introduced. I doubt that dnsmasq queries D-Bus for name resolution. And even if so, I question if there is an order that says D-bus, then resolv.conf or vice versa. To verify this, I will download the source and look into how dnsmasq works internally. I even question if my current understanding how DNS works is even accurate. There are so many RFCs that cover DNS mDNS and others that I need to update my knowledge first. I would not want you to search for something that actually does not exist. All I can confirm at the moment is that disabling dnsmasq (even if that implies doing this on a multitude of machines) leads to a constantly working infrastructure with far better performance. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Well, we are lucky that you do have a good workaround for the problem, even if we don't yet fully understand it. Do I understand correctly that your two internal nameservers can resolve exactly the same domain names, neither one more names than the other? If that is not the case then bug #1003842 could still be part of the problem if both nameservers are online at the same time. If dnsmasq is on via Network Manager opening a VPN connection to a remote site violates all name resolution to internal addresses (10.x.x.x). I am not sure I know what you mean by violates. If you mean something like causes to break then I would guess that what happens is that the remote LAN's nameserver is used for all name resolution, and the remote LAN's nameserver doesn't know any of your internal names. If you configure search domain names for that VPN in NetworkManager's Connection Editor then NetworkManager will so configure nm-dnsmasq that the remote LAN's nameserver is used only to resolve names in those domains; non-VPN nameservers will be used to resolve other names. That's the advantage of dnsmasq: it can route DNS requests in that way. I doubt that dnsmasq queries D-Bus for name resolution D-Bus is only used to send nameserver addresses to dnsmasq. This method replaces /run/nm-dns-dnsmasq.conf which was used for that purpose in Precise. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
seems that strict-order is the way to go [...] Can that be automated [...]? There has been a discussion about the problem and possible solutions in bug #1003842. I most recently expressed my opinion in comment #41 of that ticket. It takes a long time to resolve the name Why do you think that is there a long delay in resolving the name? Does the first nameserver not respond right away? Is the delay resolving internal names different from the delay resolving external names? Is there also a delay when you disable nm-dnsmasq (comment out dns=dnsmasq, etc.) so that resolv.conf lists multiple nameservers? Is this delay just as long as the delay when you are using nm-dnsmasq? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
First the bad news. Name resolution drops after a few minutes of inactivity (approx. 30mins). Same phenomenon as before. Second: The name server answers as soon as the request arrives. dnsmasq obviously takes some time to determine if it can serve the name itself. So back to square one: disabling dnsmasq: immediate and correct name resolution (I am talking about not recognisable delays). enabling dnsmasq the problems begin (with a difference if set to strict-order). Name resolution takes Name resolution after reboot and resume now work fine. Unfortunately after some time it does not any more. Same symptoms as without strict- order. Just read the man-pages: -o serves in the order resolv.conf offers! but here is what my resolv.conf looks like # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8) # DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN nameserver 127.0.1.1 search rsb.intern rsb.at So it refers to itself. There is no dnsmasq.conf file where the dns servers are defined (not installed by default). Network manager just starts dnsmasq but hat no information about the network either. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
The -o option is the same as the strict-order option. The dnsmasq man page says that in strict-order mode dnsmasq uses the order from /etc/resolv.conf but we shouldn't take that too literally since dnsmasq obtains nameserver addresses from sources other than /etc/resolv.conf. The dnsmasq process controlled by NetworkManager obtains its nameserver addresses from NetworkManager over D-Bus. I *presume* that nameserver addresses obtained by dnsmasq over D-Bus are checked in the order received in strict-order mode, but I haven't confirmed this. To see what nameserver addresses NM has sent to nm-dnsmasq, run the nm- tool command and look for the DNS: line. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
When dnsmasq is malfunctioning, does sending the dnsmasq process a SIGHUP fix it? sudo kill -HUP $(pidof dnsmasq) This signal causes dnsmasq to clear its cache, but I imagine it might also kick dnsmasq out of whatever faulty state it has got into. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
By the way, is it still the case that only domain name completion is malfunctioning, not DNS lookups in general and lookups of fully qualified domain names in particular? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Wolf, you wrote: nm-tool | grep DNS gives DNS: 10.1.0.4 DNS: 10.1.0.254 DNS: 195.202.128.3 You later wrote: I can confirm that my DNS server serves any request from inside the network. Which server serves the requests, 10.1.0.4 or 10.1.0.254? Are these nameservers completely equivalent? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
The unusual time-dependent character of the malfunction makes me speculate about more exotic possibilities such as misconfigured firewalls or flaky hardware. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Did some testing I set up the strict-order using the file approach as described above. I see no different behaviour. My bind does not get any queries at all. dnsmasq does not forward requests. Applications like Evolution or Thunderbird break on every reboot or resume. It takes up to 3 minutes for them to get a hold of the right server settings. The only working solution is turing dnsmasq off. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Thanks for testing. My hypothesis from comment #31 is false. Is there anything unusual about your resolver configuration? Do you have a sortlist, options, etc., line in resolv.conf? What is the hosts line in your /etc/nsswitch.conf? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
BTW I just discovered that restart network-manager no longer suffices to reload the configuration of nm-dnsmasq because nm-dnsmasq doesn't get killed on stopping network-manager. So if you edit files in /etc/NetworkManager/dnsmasq.d/ you have to stop network-manager ; killall dnsmasq; start network-manager. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
I restarted my machine in order to test under correct circumstances. I did restart the network manager but did not kill all dnsmasq explicitly. Now after a reboot I can give you better results. Give me until tomorrow for a complete test run So far, Thunderbird did find the server immediately and Evolution could connect to my internal mail server as well. I will do suspend and resume tomorrow. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
carried out some suspend/resume tests worked fine. tried some pings with name resolution: It takes a long time to resolve the name but it works seems that strict-order is the way to go in installations where an internal DNS is supported by external backups / extensions Can that be automated during setup? It should be pretty obvious that if there is a DNS server on the same LAN segment that it is preferable to any DNS on a different LAN. This would actually mirror the behaviour of DNS according to the RFCs Just a thought. Thanks for the help and clarification -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
My guess is that this bug is fundamentally bug #1003842 with the twist that sometimes the lookup succeeds if the fully qualified internal domain name is given on the command line explicitly. (I don't think it's a coincidence that both Wolf and Reggie are on networks with non-equivalent nameservers.) That is, using Wolf's example, ping s4 fails because 's4' can't be resolved (as expected) and then 's4.rsb.intern' also can't be resolved because of bug #1003842. The remaining question is why ping s4.rsb.intern *does* work. And why did dig s4 +search succeed in Wolf's last experiment? It's possible that in these cases dnsmasq happened to talk to the internal nameserver instead of the external one. If this hypothesis is correct then running nm-dnsmasq in strict-order mode should also fix the problem. If you are running Ubuntu 12.10 then please try running nm-dnsmasq in strict-order mode. To put nm-dnsmasq into strict-order mode, create a file /etc/NetworkManager/dnsmasq.d/strictorder with the single line strict- order and then sudo restart network-manager. NM-dnsmasq should now be running in strict-order mode and everything should be working perfectly. :) This method doesn't work in Ubuntu 12.04 which lacks /etc/NetworkManager/dnsmasq.d/. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Now I understand what you are getting at (took me a long time). I can confirm that my DNS server serves any request from inside the network. I have a log on the router monitoring outgoing traffic. Under NO circumstances is a DNS request going out UNLESS the internal server is down but the clients still have their DHCP settings. I verify this regularly as part of my error testing procedures. This is why I even use an external DNS server as my bind forwards DNS requests in case it cannot resolve them itself. Now there could be a client timeout (which occures in very rare cases, say once a year per client). In that case, the browser (which is the only app that might get affected) will simply provide a 404 page and a reload usually works. None of my dnsmasqed clients requests from the external server when our internal bind is up. I will try to put dnsmasq into strict mode for testing. Get back to you with results after some time. Merry Christmas -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
@Wolf: Is it the case that when using the NM-controlled dnsmasq, fully qualified domain names can always be resolved using the glibc resolver but short domain names cannot be resolved using the resolver, despite the correct search option being present in /etc/resolv.conf; that this anomaly does not always occur, but when it does occur it lasts about five minutes? Please correct me if any of the following is not (no longer) true. Please try to provide as complete information as possible. In the anomalous situation, your /etc/resolv.conf contains the following nameserver 127.0.1.1 search rsb.intern rsb.at and nm-tool|grep DNS shows the following DNS:10.1.0.4 and the following command fails with unknown host s4 ping s4 but the following two commands succeed. ping s4.rsb.intern ping s4.rsb.at When the anomaly occurs, does dig s4.rsb.intern work on the affected system? When the anomaly occurs, does dig s4.rsb.at work on the affected system? When the anomaly occurs, does dig s4 +search work on the affected system? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
nm-tool | grep DNS gives DNS: 10.1.0.4 DNS: 10.1.0.254 DNS: 195.202.128.3 dig s4 gives nothing wolf@mbp:~$ dig s4 ; DiG 9.8.1-P1 s4 ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NXDOMAIN, id: 60009 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;s4.IN A ;; Query time: 1 msec ;; SERVER: 127.0.1.1#53(127.0.1.1) ;; WHEN: Mon Dec 10 21:52:10 2012 ;; MSG SIZE rcvd: 20 but dig s4 + search returns s4.rsb.intern IP and the domain rsb.intern wolf@mbp:~$ dig s4 +search ; DiG 9.8.1-P1 s4 +search ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 28303 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;s4.rsb.intern. IN A ;; ANSWER SECTION: s4.rsb.intern. 34000 IN A 10.1.0.4 ;; AUTHORITY SECTION: rsb.intern. 34000 IN NS s4.rsb.intern. ;; Query time: 1 msec ;; SERVER: 127.0.1.1#53(127.0.1.1) ;; WHEN: Mon Dec 10 21:51:24 2012 ;; MSG SIZE rcvd: 61 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
In Ubuntu 12.10 this issue is as prominent as ever. On resume from RAM or after boot, dnsmasq requires about 5 minutes to resolve names correctly. Workaround: For ssh I use IP addresses Thunderbird requires a 5 Minute waiting period after resume Evolution requires two or three attempts to start, then it works On most of my machines I disabled dnsmasq -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
** Changed in: dnsmasq (Ubuntu) Status: New = Incomplete -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
** Changed in: dnsmasq (Ubuntu) Status: Expired = New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
[Expired for dnsmasq (Ubuntu) because there has been no activity for 60 days.] ** Changed in: dnsmasq (Ubuntu) Status: Incomplete = Expired -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Thanks for the update, Reggie. Wolf, can you please put me in touch with one or more of the dozens of people you mentioned above (#21) who have this (#998712) problem? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
Re: [Bug 998712] Re: domain name completion broken when dnsmasq is used
Thomas, I'm not sure if an update has been pushed that has fixed my problem, but I'm not seeing the issue at the moment, I was going to work on the issue earlier this weekend, but some events come up. I have rebooted several of my systems and I'm just not seeing the issue right now. I'll make sure to follow your directions below if my system gets in this state again and report back. --Reggie On 06/08/2012 04:44 AM, Thomas Hood wrote: Reggie: First of all, thanks for providing information about the malfunction on your system. We will get to the bottom of this! To get very clear on what's happening I will summarize. Let me know if any of the following is wrong. With the following resolv.conf (omitting comments) nameserver 127.0.0.1 search home.lan libc resolution of lenin repeatedly fails but lenin.home.lan repeatedly succeeds, whereas with nameserver 127.0.0.1 nameserver 192.168.99.2 search home.lan both of them repeatedly succeed. Dnsmasq listens at 127.0.0.1, configured with the following. server=192.168.99.2 server=24.177.176.38 server=97.81.22.195 Only 192.168.99.2 can resolve the name lenin.home.lan; the others cannot. Now, what's going on here? First I'd like to rule out the possibility of side-effects of #1003842. Please eliminate the lines server=24.177.176.38 server=97.81.22.195 from /run/nm-dns-dnsmasq.conf and run all your tests again. That is, repeatedly (at least twice) try ping lenin and ping lenin.home.lan both with only nameserver 127.0.0.1 listed in /etc/resolv.conf, and with nameserver 127.0.0.1 and nameserver 192.168.99.2 listed in /etc/resolv.conf. Report the results back here. In the case where you add nameserver 192.168.99.2 to /etc/resolv.conf and name resolution subsequently succeeds, is there a noticeable delay? After you have edited /etc/resolv.conf, is /etc/resolv.conf still a symbolic link to /run/resolvconf/resolv.conf? That is, did you in fact edit /run/resolvconf/resolv.conf as I am assuming you did? According to resolv.conf(5) the following environment variables can affect the behavior of the resolver: LOCALDOMAIN, RES_OPTIONS. Is either of these set in your environment? (Run, e.g., the env |grep '\(DOMAIN\|RES\)' command to check this.) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Reggie: First of all, thanks for providing information about the malfunction on your system. We will get to the bottom of this! To get very clear on what's happening I will summarize. Let me know if any of the following is wrong. With the following resolv.conf (omitting comments) nameserver 127.0.0.1 search home.lan libc resolution of lenin repeatedly fails but lenin.home.lan repeatedly succeeds, whereas with nameserver 127.0.0.1 nameserver 192.168.99.2 search home.lan both of them repeatedly succeed. Dnsmasq listens at 127.0.0.1, configured with the following. server=192.168.99.2 server=24.177.176.38 server=97.81.22.195 Only 192.168.99.2 can resolve the name lenin.home.lan; the others cannot. Now, what's going on here? First I'd like to rule out the possibility of side-effects of #1003842. Please eliminate the lines server=24.177.176.38 server=97.81.22.195 from /run/nm-dns-dnsmasq.conf and run all your tests again. That is, repeatedly (at least twice) try ping lenin and ping lenin.home.lan both with only nameserver 127.0.0.1 listed in /etc/resolv.conf, and with nameserver 127.0.0.1 and nameserver 192.168.99.2 listed in /etc/resolv.conf. Report the results back here. In the case where you add nameserver 192.168.99.2 to /etc/resolv.conf and name resolution subsequently succeeds, is there a noticeable delay? After you have edited /etc/resolv.conf, is /etc/resolv.conf still a symbolic link to /run/resolvconf/resolv.conf? That is, did you in fact edit /run/resolvconf/resolv.conf as I am assuming you did? According to resolv.conf(5) the following environment variables can affect the behavior of the resolver: LOCALDOMAIN, RES_OPTIONS. Is either of these set in your environment? (Run, e.g., the env |grep '\(DOMAIN\|RES\)' command to check this.) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Reggie, I wrote: First I'd like to rule out the possibility of side-effects of #1003842. Please eliminate the lines server=24.177.176.38 server=97.81.22.195 from /run/nm-dns-dnsmasq.conf Just thought of a hitch. After removing these lines dnsmasq has to be restarted or it won't notice the change. But you can't just kill the NM-controlled dnsmasq because NM then gets horribly confused. So you have to eliminate those lines in another way, the safest way probably being: temporarily reconfigure your DHCP server so that it only sends one nameserver address (192.168.99.2) to the client, then restart network-manager on the client. Make sure that /run/nm-dns-dnsmasq.conf contains only the one address. THEN run all your tests again. :) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Thomas, I understand that you have not set up a simulation test bed and that your questions are directed to understand the problem. You have found out that you may have misinterpreted some pieces. Reggie seems to have the same problem as I (and to my knowledge more than a dozen of others) have. I have described the issues dnsmasq has somewhere else. Here is another observation I can offer: eliminating dnsmasq makes machines respond within seconds. Network reconnect after resume from sleep as well as after a reboot works immediately. Thunderbird (another issue I submitted) connects to the mail server without problems. using dnsmasq, network reconnect (over WLAN) takes significantly longer (almost 5 secs). Even though ping and dig resolv host names correctly (in out case s4 or mail.rsb.intern) Thunderbird does not connect. That implies that the connection dnsmasq and resolver libraries is broken as well. It works eventually (say after 1min or 5, not preproducably different). Curiously it stops working again even when the machine continues to operate. Again: This was tested on several machines. And, yes: Disabling dnsmasq in NetworkManager.conf resolves ALL issues at once: Network reconnect in less than a second, name resolution to mail and mail.rsb.intern works fine (what else should the search path hold?). Referring to my reluctance of giving more than the basic information: Everyone can read Launchpad entries. This is a severe security issue. I try to be helpful but if you do not have the means to provide significant testing equipment, maybe taking dnsmasq out of an LTS would be the better solution. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Wolf, dnsmasq is not going to be taken out of the distribution. Probably you meant that NM-driven dnsmasq shouldn't be enabled by default. If so then please file another report against network-manager with the title Please don't enable dnsmasq by default so long as it's so buggy. But that measure will do nothing to address the issue in this report (#998712) which is the fact that domain name completion gets broken under certain circumstances when dnsmasq *is* used. To remind you, we are still in the phase where we are trying to figure out exactly what those circumstances are. I believe you when you say that the failure occurs. But usually name service doesn't fail; so what is the trigger? Finding some reproducible circumstances that trigger the malfunction is a precondition for preparing test equipment. Characterizing those circumstances is also useful for isolating the bug. In addressing this issue I know you'd like to be helpful, but for various reasons you can't be helpful. You can't provide the information I asked for in #17, for example, for security reasons, and because you are too busy, and so on. I understand. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Having just re-read the discussion, I realize that I may have misunderstood the problem. I'll try to summarize it. Wolf, are you saying that when using the NM-enslaved dnsmasq, fully qualified domain names can always be resolved using the resolver(3) but short domain names cannot be resolved using the resolver, despite the correct search option being present in /etc/resolv.conf; that this anomaly does not occur at boot time, but does occur later and lasts one to thirty minutes? What triggers the anomaly to occur? I will assume that in the anomalous situation, /etc/resolv.conf contains the following nameserver 127.0.0.1 search rsb.intern rsb.at and /run/nm-dns-dnsmasq.conf contains the following server=10.1.0.4 and the following fails with unknown host s4. ping s4 When the anomaly occurs, does dig s4.rsb.intern work on the affected system? When the anomaly occurs, does dig s4 +search work on the affected system? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
I'm havin a very simular issue with the new DNS setup in 12.04 on my laptop. I run a server at home which runs bind. The server is setup correctly, all my machines with 11.04 installed work as expected, but the machines I have upgraded to 12.04 have issues. My server provides name resolution for machines spread out in my house. A working /etc/resolve.conf for 11.04 machines looks like: # Generated by NetworkManager domain home.lan search home.lan nameserver 192.168.99.2#my bind server (Provide DNS for local IP's 192.168.99.x ) nameserver 24.177.176.38 #dns server provided by ISP (Provide DNS for Internet IP's) nameserver 97.81.22.195#dns server provided by ISP (Provide DNS for Internet IP's) My new machines with 12.04 have a /etc/resolv.conf that looks like: # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8) # DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN nameserver 127.0.0.1 search home.lan /run/nm-dns-dnsmasq.conf looks like: server=192.168.99.2 server=24.177.176.38 server=97.81.22.195 All DNS request for outside IP's (none 192.168.x.x) work. My server has the ip 192.168.99.2 with a FDN of linux.home.lan.If i do ping linux this fails, if i do ping linux.home.lan this works. if I change my /etc/resolv.conf to the following: # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8) # DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN nameserver 127.0.0.1 nameserver 192.168.99.2 search home.lan I'm back in buisness. Let me know what else I can do to help resolv (no pun intended :) this issue -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 998712] Re: domain name completion broken when dnsmasq is used
Wolf: I forgot to mention earlier that the reason I have to keep asking questions is that I am unable to reproduce the problem here. On my system, domain name completion works as expected with NetworkManager+dnsmasq. I just tried installing nscd to see if that made any difference, but it did not seem to do so; so I don't need to ask you if you are using nscd. Also adding entries to /etc/hosts didn't seem to make any difference, so I don't have to ask about /etc/hosts either. Does dig @127.0.0.1 s4.rsb.intern work on the affected system running NM-controlled dnsmasq? If it does work then I think we can conclude that the dnsmasq at 127.0.0.1 behaves the same way as the nameserver at 10.1.0.4 and that your issue is not dnsmasq-related; then we can start looking elsewhere for the cause of the problem. My next guess would be that the resolver library on the affected system can't read /etc/resolv.conf. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/998712 Title: domain name completion broken when dnsmasq is used To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/998712/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
