Re: nsupdate -g always uses master from SOA to form SPN

2021-08-26 Thread Chris Buxton
Use of a hidden primary makes some sense for external (public) DNS, but IMO not for situations where you would want to use GSS-TSIG. So while I would consider this a bug, I don’t think it will be tripped often. BIND does support multiple SPNs on a single server, but you have to change how you c

nsupdate -g always uses master from SOA to form SPN

2021-08-26 Thread Magnus Holmgren
When using GSS-TSIG, nsupdate (with the -g flag) always forms the SPN from the master server specified in the SOA record, rather than the server specified with the server command. Is that really correct behaviour, or should I report this as a bug? I've been scouring the Internet, but couldn't fi