patches to make bind9 with TKEY/GSS updates easier to configure

Evan Hunt each at isc.org
Thu Dec 2 15:15:15 UTC 2010


> I should also mention that I only test the new tkey-gssapi-keytab
> option, not the old tkey-gssapi-credential and tkey-domain options.
> 
> The reason for that is that the bind9 test suite system doesn't seem
> to be setup to add environment variables to named, and we would need
> to add 3 environment variables to allow the use of the old tkey gssapi
> options (that is one of the painful things about the old way of
> configuring tsig-gss - you need to setup various kerberos env vars to
> make it work).

Can we just deprecate the old method, then?  9.8.0 would be a good
opportunity to do so.

-- 
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.



More information about the bind-workers mailing list