patches to make bind9 with TKEY/GSS updates easier to configure

tridge at tridge at
Sun Dec 5 01:12:07 UTC 2010

Hi Love,

 > What type of service name do you use  for for gss_import_name()

	gret = gss_import_name(&minor, &gnamebuf, GSS_C_NO_OID, &gname);

where the name is DNS/host.realm, which comes from a SOA lookup.

 > It sounds like your Kerberos library doesn't fall back to referrals when it should.

It's failing with both Heimdal on NetBSD and MIT on Ubuntu.

Maybe there is some option we should be setting?

Cheers, Tridge

More information about the bind-workers mailing list