Re: [dns-wg] DNS USer

[Jim Reid <]

On Sep 28, 2005, at 06:38, Chandrashekhar Kulkarni wrote:

>   Any one how know about dns with kerberose
Could you please expand on what you mean by this? Are you asking  
about using Kerberos to authenticate DNS queries or Dynamic Updates?  
Or are you asking about using the DNS to store/distribute Kerberos  
tickets? Or have you something else in mind?

To the best of my knowledge the only documented interaction between  
Kerberos and the DNS is GSS-TISG: Generic Security Service Algorithm  
for Secret Key Transaction Authentication for DNS. This is documented  
in RFC3645. GSS-TSIG provides a mechanism for clients and servers to  
use Kerberos to authenticate DNS transactions.