IDN, dig and underscore

Mark Andrews Mark_Andrews at isc.org
Sun Jan 14 23:35:18 UTC 2007


> > > If I do:
> > > $ dig _ldap._tcp.example.com
> > > dig: convert UTF-8 textname to IDN encoding: prohibited character found

	The call to idn_encodename has the IDN_ASCCHECK flag set.
	This checks labels to ensure that they comform to hostnames
	(RFC952).  Remove the flag.

> > The underscore here is only allowed for SRV records.
> 
> Uhh, okay. Even if that is the case, it's a problem. Kerberos exects records
>  
> like:
> _kerberos.asdf.com. IN TXT "ASDF.COM"
> which is in draft-ietf-cat-krb-dns-locate-02.txt
> 
> > Try dig _ldap._tcp.example.com SRV
> 
> $  dig _ldap._tcp.example.com SRV
> dig: convert UTF-8 textname to IDN encoding: prohibited character found
> $  dig -t srv _ldap._tcp.example.com
> dig: convert UTF-8 textname to IDN encoding: prohibited character found
> 
> > and you shouldn't have a problem. If you do it's a bug in dig. I'm not
> > sure whether or not IDN is involved here.
> 
> I guess it's a bug. Should I send this along to bind9-bugs at isc.org? Thanks.
> -- 
> --Andre Masella (andre at masella.no-ip.org)
> 
> 
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the bind-users mailing list