Creating a DNS entry on a W2k3 AD Server fails with heimdal. The reason is, that gss_import_name() from heimdal will always fail. The gss_OID provided by "dnsgss.c - dns_negotiate_sec_ctx()" is not known by heimdal. 2ndly "krb5_parse_name( krb_ctx, targetname, &host_principal );" does quite the same as "gss_import_name( &minor, &input_name, &nt_host_oid_desc, &targ_name );" shall do.
Created attachment 2921 [details] Makes DNS update work with heimdal 0.7.2
Created attachment 2922 [details] Alternative approach for MIT and Heimdal Martin, can you please test if this patch works for you?
Martin, I talked with jerry and added my fix (see -r25134). Please reopen if that does not solve the issue for you. Thanks for the report!