nsupdate.html revision 803b50652fd6ad81d04d18fc04332c8a94f8fe9a
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson - Copyright (C) 2000, 2001 Internet Software Consortium.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson - Permission to use, copy, modify, and distribute this software for any
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson - purpose with or without fee is hereby granted, provided that the above
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson - copyright notice and this permission notice appear in all copies.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson - THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson - DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson - IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson - INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT,
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson - FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson - NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson - WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>nsupdate</TITLE
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonNAME="GENERATOR"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCONTENT="Modular DocBook HTML Stylesheet Version 1.61
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFENTRY"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonBGCOLOR="#FFFFFF"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonVLINK="#840084"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonALINK="#0000FF"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFNAMEDIV"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>nsupdate -- Dynamic DNS update utility</DIV
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFSYNOPSISDIV"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REPLACEABLE"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>keyname:secret</I
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REPLACEABLE"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>] [filename]</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFSECT1"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>DESCRIPTION</H2
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonis used to submit Dynamic DNS Update requests as defined in RFC2136
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonto a name server.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThis allows resource records to be added or removed from a zone
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonwithout manually editing the zone file.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonA single update request can contain requests to add or remove more than one
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonresource record.</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>Zones that are under dynamic control via
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonor a DHCP server should not be edited by hand.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonManual edits could
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonconflict with dynamic updates and cause data to be lost.</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>The resource records that are dynamically added or removed with
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonhave to be in the same zone.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonRequests are sent to the zone's master server.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThis is identified by the MNAME field of the zone's SOA record.</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonoperate in debug mode.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThis provides tracing information about the update requests that are
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonmade and the replies received from the name server.</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>Transaction signatures can be used to authenticate the Dynamic DNS
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThese use the TSIG resource record type described in RFC2845.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThe signatures rely on a shared secret that should only be known to
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonand the name server.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCurrently, the only supported encryption algorithm for TSIG is
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonHMAC-MD5, which is defined in RFC 2104.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonOnce other algorithms are defined for TSIG, applications will need to
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonensure they select the appropriate algorithm as well as the key when
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonauthenticating each other.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonFor instance suitable
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonstatements would be added to
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="FILENAME"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonso that the name server can associate the appropriate secret key
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonand algorithm with the IP address of the
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonclient application that will be using TSIG authentication.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="FILENAME"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonoption to provide the shared secret needed to generate a TSIG record
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonfor authenticating Dynamic DNS update requests.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThese options are mutually exclusive.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonreads the shared secret from the file
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonwhose name is of the form
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="FILENAME"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>K{name}.+157.+{random}.private</TT
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonreasons, the file
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="FILENAME"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>K{name}.+157.+{random}.key</TT
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonmust also be present. When the
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonoption is used, a signature is generated from
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>keyname:secret.</I
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonis the name of the key,
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonis the base64 encoded shared secret.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonoption is discouraged because the shared secret is supplied as a command
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonline argument in clear text.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThis may be visible in the output from
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CITEREFENTRY"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFENTRYTITLE"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonor in a history file maintained by the user's shell.</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonuses UDP to send update requests to the name server.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonuse a TCP connection.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThis may be preferable when a batch of update requests is made.</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFSECT1"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>INPUT FORMAT</H2
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonreads input from
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonor standard input.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonEach command is supplied on exactly one line of input.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonSome commands are for administrative purposes.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThe others are either update instructions or prerequisite checks on the
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssoncontents of the zone.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThese checks set conditions that some name or set of
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonresource records (RRset) either exists or is absent from the zone.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThese conditions must be met if the entire update request is to succeed.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonUpdates will be rejected if the tests for the prerequisite conditions fail.</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>Every update request consists of zero or more prerequisites
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonand zero or more updates.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThis allows a suitably authenticated update request to proceed if some
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonspecified resource records are present or missing from the zone.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonA blank input line causes the accumulated commands to be sent as one Dynamic
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonDNS update request to the name server.</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>The command formats and their meaning are as follows:
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="VARIABLELIST"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> {servername} [port]</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>Sends all dynamic update requests to the name server
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonWhen no server statement is provided,
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonwill send updates to the master server of the correct zone.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThe MNAME field of that zone's SOA record will identify the master
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonserver for that zone.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonis the port number on
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonwhere the dynamic update requests get sent.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonIf no port number is specified, the default DNS port number of 53 is
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> {address} [port]</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>Sends all dynamic update requests using the local
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonWhen no local statement is provided,
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonwill send updates using an address and port choosen by the system.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssoncan additionally be used to make requests come from a specific port.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonIf no port number is specified, the system will assign one. </P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> {zonename}</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>Specifies that all updates are to be made to the zone
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonstatement is provided,
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonwill attempt determine the correct zone to update based on the rest of the input.</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>prereq nxdomain</B
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> {domain-name}</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>Requires that no resource record of any type exists with name
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>domain-name</I
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>prereq yxdomain</B
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> {domain-name}</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>domain-name</I
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonexists (has as at least one resource record, of any type).</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>prereq nxrrset</B
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> {domain-name} [class] {type}</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>Requires that no resource record exists of the specified
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>domain-name</I
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonis omitted, IN (internet) is assumed.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>prereq yxrrset</B
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> {domain-name} [class] {type}</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>This requires that a resource record of the specified
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>domain-name</I
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonis omitted, IN (internet) is assumed.</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>prereq yxrrset</B
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> {domain-name} [class] {type} {data...}</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonfrom each set of prerequisites of this form
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonsharing a common
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>domain-name</I
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonare combined to form a set of RRs. This set of RRs must
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonexactly match the set of RRs existing in the zone at the
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>domain-name</I
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonare written in the standard text representation of the resource record's
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>update delete</B
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> {domain-name} [class] [type [data...]]</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>Deletes any resource records named
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>domain-name</I
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonis provided, only matching resource records will be removed.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThe internet class is assumed if
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonis not supplied.</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> {domain-name} {ttl} [class] {type} {data...}</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>Adds a new resource record with the specified
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PARAMETER"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFSECT1"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>The examples below show how
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="COMMAND"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssoncould be used to insert and delete resource records from the
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonNotice that the input in each example contains a trailing blank line so that
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssona group of commands are sent as one dynamic update request to the
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonmaster name server for
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PROGRAMLISTING"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> update delete oldhost.example.com A
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> update add newhost.example.com 86400 A 172.16.1.1
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>Any A records for
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonand an A record for
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonit IP address 172.16.1.1 is added.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThe newly-added record has a 1 day TTL (86400 seconds)
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="PROGRAMLISTING"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> prereq nxdomain nickname.example.com
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson> update add nickname.example.com CNAME somehost.example.com
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>The prerequisite condition gets the name server to check that there
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonare no resource records of any type for
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonIf there are, the update request fails.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonIf this name does not exist, a CNAME for it is added.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThis ensures that when the CNAME is added, it cannot conflict with the
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonlong-standing rule in RFC1034 that a name must not exist as any other
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonrecord type if it exists as a CNAME.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson(The rule has been updated for DNSSEC in RFC2535 to allow CNAMEs to have
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonSIG, KEY and NXT records.)</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFSECT1"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="VARIABLELIST"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CONSTANT"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>used to identify default name server</P
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CONSTANT"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>K{name}.+157.+{random}.key</TT
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>base-64 encoding of HMAC-MD5 key created by
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CITEREFENTRY"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFENTRYTITLE"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>dnssec-keygen</SPAN
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CONSTANT"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>K{name}.+157.+{random}.private</TT
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>base-64 encoding of HMAC-MD5 key created by
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CITEREFENTRY"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFENTRYTITLE"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>dnssec-keygen</SPAN
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFSECT1"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CITEREFENTRY"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFENTRYTITLE"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CITEREFENTRY"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFENTRYTITLE"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CITEREFENTRY"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFENTRYTITLE"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CITEREFENTRY"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFENTRYTITLE"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CITEREFENTRY"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFENTRYTITLE"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CITEREFENTRY"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFENTRYTITLE"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CITEREFENTRY"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFENTRYTITLE"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="CITEREFENTRY"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFENTRYTITLE"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>dnssec-keygen</SPAN
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonCLASS="REFSECT1"
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson>The TSIG key is redundantly stored in two separate files.
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas GustafssonThis is a consequence of nsupdate using the DST library
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafssonfor its cryptographic operations, and may change in future