is there authentication for DDNS

[Kevin Darcy]

Real OS'es can use TSIG to authenticate queries and updates.

Win2K uses GSS-TSIG to authenticate its updates, but currently that only works
between Win2K clients and Win2K DNS servers.

The best form of "authentication" (I hesitate to even use the term) between
Win2K clients and BIND servers, currently, is authentication based on source
IP address.


- Kevin

Cinense, Mark wrote:

> I could not find any documentation, or white paper discussing authentication
> for DDNS.  For example, if a client ie W2K, wants to update zone info, how
> is the client machine authenticated so that the UNIX Bind server allows the
> client to do so?