Re: BIND 9.11.x build failing on Mac OS X - gssapi errors

2017-06-16 Thread Mark Andrews
BIND uses the deprecated Kerberos framework for GSSAPI by default on Darwin though I should move it to use the GSS framework though I need to workout how to obtain the Kerberos realm once I do that and lookup when Apple added the GSS framework so it will build on older versions. Note we use Apple

Re: Automatic RRSIG Refresh in BIND 9.8.2

2017-06-16 Thread Petr Mensik
Hi, I think you should use file "dynamic/db..signed"; instead. On Red Hat /var/named is by default read only to named. It is enforced both by unix permissions and SELinux policy. I think you are being blocked by selinux. Try sudo ausearch -i -ts recent -m avc -m user_avc -m selinux_err It may s

Re: BIND 9.11.x build failing on Mac OS X - gssapi errors

2017-06-16 Thread Larry Stone
I’m also running OS X 10.12.5 so decided to see if I can replicate this. I normally use the 9.10 version (9.10.5-P1 builds fine (./configure and make) but I have not done make install yet) but decided to try to build 9.11.1-P1 to see what happens. In short, cannot replicate. I did both ./config