On the subject of ISC, we have some patches for BIND 9.2.3 to make
GSS-TSIG work. The need some more testing, but essentially you can
put:
zone "isc.org" IN {
type master;
file "isc.org.zone";
update-policy {
grant * sam * ANY;
};
};
and principals of [EMAIL PROTECTED] can update host.isc.org. Please
contact me privately if you would like to test and/or know how
we would go about submitting them for inclusion in BIND.
cheers,
-- Luke
________________________________________________
Kerberos mailing list [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos
