Re: gss-tsig

On Apr 9, 2005 12:31 AM, Ivan R. Sy Jr. <isy@infoweapons.com> wrote:
> hi all,
>
> I've been looking around for information if BIND9+ can support GSS-TSIG.
> And what tool that can create the keys? is it still dnssec-keygen?
>
> Thank you.
>
>

Two days ago the following was posted to this list:

On Apr 7, 2005 1:57 PM, Kevin Darcy wrote:
Windows Server 2003 does not understand the DNSSEC stuff, nor vanilla
TSIG. Standard BIND does not understand the Microsoft way of
authenticating Dynamic Updates (GSS-TSIG), although the modified BIND
supplied by Lucent in their QIP product supposedly does. So, unless you
happen to be running QIP, you're probably out of luck for now. Maybe the
future will see some convergence in this area.