patches to make bind9 with TKEY/GSS updates easier to configure

Evan Hunt each at
Thu Dec 2 15:15:15 UTC 2010

> I should also mention that I only test the new tkey-gssapi-keytab
> option, not the old tkey-gssapi-credential and tkey-domain options.
> The reason for that is that the bind9 test suite system doesn't seem
> to be setup to add environment variables to named, and we would need
> to add 3 environment variables to allow the use of the old tkey gssapi
> options (that is one of the painful things about the old way of
> configuring tsig-gss - you need to setup various kerberos env vars to
> make it work).

Can we just deprecate the old method, then?  9.8.0 would be a good
opportunity to do so.

Evan Hunt -- each at
Internet Systems Consortium, Inc.

More information about the bind-workers mailing list