"
KEA's documentation on integration with AD DNS, found here GSS-TSIG Integration with External Systems states the following:
However, searching my OPNsense filesystem I cannot find Kea's hook file "libddns_gss_tsig.so"
What I want to know is there a way to install the necessary Kea GSS-TSIG file on OPNsense?.
I use my OPNsense device as the front door for my homelab, and as I work with AD my homelab has AD installed, so integrating Kea DDNS with AD DNS would be great.
I know Windows DHCP supports DDNS, but I wanted a rock-solid solution that keeps my household happy, and running Windows DHCP doesn't fit that desired outcome after a power cut.
Any help or advice on this is greatly appreciated.
QuoteKea provides support for DNS updates, which can be protected using Transaction Signatures (or TSIG). This protection is often adequate. However, some systems, in particular Active Directory (AD) on Microsoft Windows servers, have chosen to adopt a more complex GSS-TSIG approach that offers additional capabilities, such as using negotiated dynamic keys.
Kea supports GSS-TSIG to protect DNS updates sent by the Kea DHCP-DDNS (D2) server in a hook, called libddns_gss_tsig.so.
However, searching my OPNsense filesystem I cannot find Kea's hook file "libddns_gss_tsig.so"
What I want to know is there a way to install the necessary Kea GSS-TSIG file on OPNsense?.
I use my OPNsense device as the front door for my homelab, and as I work with AD my homelab has AD installed, so integrating Kea DDNS with AD DNS would be great.
I know Windows DHCP supports DDNS, but I wanted a rock-solid solution that keeps my household happy, and running Windows DHCP doesn't fit that desired outcome after a power cut.
Any help or advice on this is greatly appreciated.
