Content-Disposition: inline
X-Mailer: MIME-tools 5.508 (Entity 5.508)
X-RT-Original-Encoding: utf-8
Content-Transfer-Encoding: binary
References: <2857256.qKTfev8j8D@oxygen> <RT-Ticket-46840@isc.org>
MIME-Version: 1.0
Message-ID: <rt-4.4.1-58223-1513118434-949.46840-0-0@isc.org>
X-RT-Interface: Web
In-Reply-To: <2857256.qKTfev8j8D@oxygen>
Content-Type: text/plain; charset="utf-8"
RT-Send-CC:
Content-Length: 484

This is fixed in the current maintenance release (BIND 9.10.6. Released 2017-07-28).   Your OS is three maintenance releases behind the current release (BIND 9.10.3  Released 2015-09-16).  I suggest that you open a bug report with them requesting that they integrate the current maintenance release.

4588.   [bug]           nsupdate could send queries for TKEY to the wrong
                        server when using GSSAPI. Thanks to Tomas Hozza.
                        [RT #39893]