mirror of
https://github.com/samba-team/samba.git
synced 2025-01-26 10:04:02 +03:00
28 lines
878 B
Plaintext
28 lines
878 B
Plaintext
#
|
|
# Insert these snippets into your named.conf or bind.conf to configure
|
|
# the BIND nameserver.
|
|
#
|
|
|
|
#insert this into options {}
|
|
tkey-gssapi-credential "DNS/${DNSDOMAIN}"
|
|
tkey-domain "${REALM}";
|
|
|
|
#the zone file
|
|
zone "${DNSDOMAIN}." IN {
|
|
type master;
|
|
file "${DNSDOMAIN}.zone";
|
|
update-policy {
|
|
/* use ANY only for Domain controllers for now */
|
|
/* for normal machines A AAAA PTR is probbaly all is needed */
|
|
grant ${HOSTNAME}.${DNSDOMAIN}@${REALM} name ${HOSTNAME}.${DNSDOMAIN} ANY;
|
|
};
|
|
};
|
|
|
|
# Also, you need to change your init scripts to set this environment variable
|
|
# for named: KRB_KTNAME so that it points to the keytab generated.
|
|
# In RedHat derived systems such RHEL/CentOS/Fedora you can add the following
|
|
# line to the /etc/sysconfig/named file
|
|
# export KRB_KTNAME=/etc/named.keytab
|
|
|
|
# *TODO*: generate and install a keytab file in /etc/named.keytab
|