patches to make bind9 with TKEY/GSS updates easier to configure

Mark Andrews marka at
Thu Dec 2 12:25:13 UTC 2010

In message <19703.20374.736526.743803 at>, tridge at writes:
>  > Thanks for all the effort and very quick development.
> no problem!
> I should also mention that I only test the new tkey-gssapi-keytab
> option, not the old tkey-gssapi-credential and tkey-domain options.
> The reason for that is that the bind9 test suite system doesn't seem
> to be setup to add environment variables to named, and we would need
> to add 3 environment variables to allow the use of the old tkey gssapi
> options (that is one of the painful things about the old way of
> configuring tsig-gss - you need to setup various kerberos env vars to
> make it work).
> I think it would need some hacks in bin/tests/system/ to fix
> that. I'm happy to do that if you like, although I think it will be a
> bit messy to make it generic to multiple test subdirectories.

We already set environment variables in
bin/tests/virtual-time/autosign-ksk/ns1/ and

The generic way will be to have look for and exec
that if present.


> Cheers, Tridge
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at

More information about the bind-workers mailing list