Issue: Name huawei.com (SOA) not subdomain of zone cloud.huawei.com -- invalid response

[Ondřej Surý]

From top of my head - try disabling QNAME minimization.

Ondrej
--
Ondřej Surý (He/Him)
ondrej at isc.org

My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.



> On 1. 6. 2023, at 16:58, Jesus Cea <jcea at jcea.es> wrote:
> 
> I am getting errors "Name huawei.com (SOA) not subdomain of zone cloud.huawei.com". The problem raises when requesting AAAA on oauth-login.cloud.huawei.com . The problem was described in the mailing list:
> 
> https://lists.isc.org/pipermail/bind-users/2021-January/104064.html
> 
> BIND is replying with a SERVFAIL. This is correct and appropriate. Nevertheless resolvers like 8.8.8.8, 1.1.1.1, 9.9.9.9 and many (most) other are not doing that SOA verification, so for users we are the guilty, not Huawey, because "using Google it works!". In fact, we have a big customer phone app failing because of this (yes, this seems to be a bug with that app but, again, "with google it works!").
> 
> What can we do? Is possible to disable that check in bind?
> 
> We are using 9.16. We could upgrade to 9.18, if needed.
> 
> Thanks.
> 
> -- 
> Jesús Cea Avión                         _/_/      _/_/_/        _/_/_/
> jcea at jcea.es - https://www.jcea.es/    _/_/    _/_/  _/_/    _/_/  _/_/
> Twitter: @jcea                        _/_/    _/_/          _/_/_/_/_/
> jabber / xmpp:jcea at jabber.org  _/_/  _/_/    _/_/          _/_/  _/_/
> "Things are not so easy"      _/_/  _/_/    _/_/  _/_/    _/_/  _/_/
> "My name is Dump, Core Dump"   _/_/_/        _/_/_/      _/_/  _/_/
> "El amor es poner tu felicidad en la felicidad de otro" - Leibniz
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users