patches to make bind9 with TKEY/GSS updates easier to configure

Love Hörnquist Åstrand lha at
Fri Dec 3 22:47:35 UTC 2010

Hello tridge,

>> An alternative is to use the GSS_C_DELEG_POLICY_FLAG which only
>> delegates if the admin of the domain have said its ok to delegate
>> to that host.
> Would you recommend that we add it?
> With my current patches the flags we're passing are:

I would recommend what Microsoft sends + GSS_S_DELEG_POLICY_FLAG.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <>

More information about the bind-workers mailing list