If you're trying to grant update rights to a specific machine (rather than every machine in the realm), something like:
grant d...@realm. subdomain dnsname.; might work better, where "d...@realm" is (eg) the Kerberos principle corresponding to your DC and "dnsname" is the tree to which you want to grant rights. The "$" is a Microsoft-ism. _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users