Krb5-1.3.2 and HPUX 11i

Luke Howard lukeh at PADL.COM
Fri Mar 5 08:58:49 EST 2004


On the subject of ISC, we have some patches for BIND 9.2.3 to make
GSS-TSIG work. The need some more testing, but essentially you can
put:

zone "isc.org" IN {
	type master;
	file "isc.org.zone";
	update-policy {
		grant * sam * ANY;
	};
};

and principals of HOST$@ISC.ORG can update host.isc.org. Please
contact me privately if you would like to test and/or know how
we would go about submitting them for inclusion in BIND.

cheers,

-- Luke



More information about the Kerberos mailing list