[Pdns-users] Support for GSS-TSIG (RFC 3645) in PDNS 4.x

[Aki Tuomi]

On Tue, May 10, 2016 at 02:37:42PM +0530, Dharmesh wrote:
> Hi,
> 
> I was going through the documentation of PDNS 3.x and there it was
> mentioned that HSS-TSIG feature is experimental and subjected to change in
> future releases, but in PDNS 4.x i am not able to get the details of this
> feature via documentation. Is this feature supported in PDNS 4.x. If no,
> then is there any road-map for development of this feature.
> 
> Also DDNS and DNSSEC is fully supported in PDNS 4.x but i am not able to
> get the details of Legacy Resolver Compatibility for Delegation Signer (DS)
> support via documentation. Is the same supported by PDNS 4.x
> 
> Regards,
> -- 
> Dharmesh Kumar

Hi!

GSS-TSIG support in PowerDNS is pretty basic still, there has been
no time for me to improve on it.

What currently works is that you can specify principal(s) that are
allowed to AXFR or UPDATE a DNS domain.

4.0.0 introduces so far no changes to the 3.x behaviour.

Aki