patches to make bind9 with TKEY/GSS updates easier to configure

tridge at samba.org tridge at samba.org
Sun Dec 5 01:12:07 UTC 2010


Hi Love,

 > What type of service name do you use  for for gss_import_name()

	gret = gss_import_name(&minor, &gnamebuf, GSS_C_NO_OID, &gname);

where the name is DNS/host.realm, which comes from a SOA lookup.

 > It sounds like your Kerberos library doesn't fall back to referrals when it should.

It's failing with both Heimdal on NetBSD and MIT on Ubuntu.

Maybe there is some option we should be setting?

Cheers, Tridge



More information about the bind-workers mailing list