Looks like CentOS 7 bind is ok with --disable-isc-spnego and it should work. https://lists.centos.org/pipermail/centos/2015-April/151606.html So I am little bit confused.... Jiri