GSS-TSIG and BIND9

Mark_Andrews at isc.org Mark_Andrews at isc.org
Thu May 30 00:06:03 UTC 2002


> I have heard rumor that BIND9 might include MS compatible GSS-TSIG in some
> future release of BIND9.
 
	It's a matter of finding resources to do it.  Note the draft
	is written in terms of a blocking API.  A namserver needs
	to use a non-blocking API which makes the process not
	straight forward.

> I have noticed that the directory ./bind-9.2.1/lib/dns/sec/dst has many
> files that begin with gssapi.  Is this a sign of the future?

	They are there from the first attempt at doing GSS-TSIG.

> Can anyone
> estimate when BIND might implement a Win2000/XP compatible GSS-TSIG secure
> update functionality?
>
> Mike
> 
>       UNIX Systems Administrator at Wake Forest University.
> ======================================================================
>           J. Mike Rollins              rollins at wfu.edu
>      Wake Forest University     http://www.wfu.edu/~rollins
>         Winston-Salem, NC            work: (336) 758-1938
> ======================================================================
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org


More information about the bind-users mailing list