Bind9 with tkey-gssapi-* support

[Angelos Oikonomopoulos]

On 11/03/2010 09:54 PM, Adam Tauno Williams wrote:
[...]
> cd /etc
> cat named.conf
> include "/opt/ad/samba4/private/named.conf";
> tkey-gssapi-credential "DNS/ad.wmmi.net";
> tkey-domain "AD.WMMI.NET";

I think your problem is right here. The tkey-* directives should be part 
of the options {} section in the bind configuration.

> Nov  3 12:44:40 localhost named[3428]: using up to 4096 sockets
> Nov  3 12:44:40 localhost named[3428]: loading configuration from
> '/etc/named.conf'
> Nov  3 12:44:40 localhost named[3428]: /etc/named.conf:2: unknown option
> 'tkey-gssapi-credential'
> Nov  3 12:44:40 localhost named[3428]: /etc/named.conf:3: unknown option
> 'tkey-domain'
> Nov  3 12:44:40 localhost named[3428]: loading configuration: failure
> Nov  3 12:44:40 localhost named[3428]: exiting (due to fatal error)
>

HTH,
Aggelos