Re: Problems with Bind-Kerberos-Windows-Linux

2010-12-08 Thread Sergiu Bivol
> I do this now the 3rd week. I was reading a lot of books and manuals, doing > a lot of configuration and sniffering etc. I looked in google for hours but > I could not find anyone that says - yes it works. It does work, but setting it up is very-very painful. Even if you do get it working, and

Re: Problems with Bind-Kerberos-Windows-Linux

2010-12-06 Thread Sergiu Bivol
> The client has an entry in the AD with DNS/test@test.loc. The Client, > DNS-Server, Kerberos-Server all have a copy of the krb5.keytab. If I do a > kinit -k -t c:\krb5.keytab DNS/test@test.loc then all seem to be ok. I > get this message from the DNSserver: 03-Dec-2010 10:42:00.451 gener

Re: Dnssec zone signing problem

2010-05-21 Thread Sergiu Bivol
>Hmm... dnssec-signzone (version 9.7.0-P1) seems to work perfectly well: > >dnssec-signzone -k Kexample.com.+008+53749.key -N INCREMENT -g -o example.com example.com Kexample.com.+008+41979 Verifying the zone using the following algorithms: RSASHA256. >Zone signing complete: >Algorithm: RSASHA256:

Re: Dnssec zone signing problem

2010-05-21 Thread Sergiu Bivol
We have a similar issue. And this is my understanding of it: >From briefly looking at the source, it seems that as of 9.6.2-P1 the dnssec-signzone tool performs some additional validation after the signing is complete. Previously, it could only verify the signatures it generated, if "-a" is used

rndc usage question

2010-04-12 Thread Sergiu Bivol
Hi, We need to use rndc commands on a zone in a view with a name containing spaces. For example: rndc freeze test.zone.com My Default View So far we were unable to execute a command with such a view name. We tried single/double quotes, backslashes, etc. What the syntax to supply such a view n