Fwd: Problems with Bind-Kerberos-Windows-Linux

[Jürgen Dietl]

Hello Nevarez,
grats for sending it from your iPhone :-) But is there any message missing?
thanx a lot and have a nice day
cheers,
Juergen


---------- Forwarded message ----------
From: Nevarez, Noe (DNSLB-NETWORKS) <noe.nevarez at hp.com>
Date: 2010/12/6
Subject: Re: Problems with Bind-Kerberos-Windows-Linux
To: Jürgen Dietl <juergen.dietl at googlemail.com>




Regards,

Noe N.
HP Hostmaster

Sent from my iPhone.

On Dec 6, 2010, at 10:02 AM, "Jürgen Dietl" <juergen.dietl at googlemail.com
<mailto:juergen.dietl at googlemail.com>> wrote:

Hello Phil
thanx again for your answer. So I read between the lines that even if there
were bugfixes for GSSTSIG in Bind V. 9.7.2 - it dont work. So we have to
wait until MS follow the standards? :-)

Forgive me but what is a disjoint domain environment?

thanx a lot,
cheers,
Juergen


2010/12/6 Phil Mayers <<mailto:p.mayers at imperial.ac.uk>
p.mayers at imperial.ac.uk<mailto:p.mayers at imperial.ac.uk>>
On 12/06/2010 03:18 PM, Jürgen Dietl wrote:

The Log-File from the DNS-SUSE-Server tells me "wrong principal". Is
there a way to find out what principal it expects?

You can configure it:

      tkey-domain "YOUR.DOMAIN";
      tkey-gssapi-credential "DNS/hostname.your.domain";

(I've never managed to make this work under bind, FWIW. Even when I did get
the kerberos working, the ms-self ACL turns out to be useless in a disjoint
domain environment)

_______________________________________________
bind-users mailing list
<mailto:bind-users at lists.isc.org>bind-users at lists.isc.org<mailto:
bind-users at lists.isc.org>
<https://lists.isc.org/mailman/listinfo/bind-users>
https://lists.isc.org/mailman/listinfo/bind-users

<ATT00001..txt>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20101206/090bfc56/attachment.html>