man.ddns-confgen.html revision 9d557856c2a19ec95ee73245f60a92f8675cf5ba
68109fb883d3ca2922efeea62fe746313a634f4eBob Halley - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
1633838b8255282d10af15c5c84cee5a51466712Bob Halley - Copyright (C) 2000-2003 Internet Software Consortium.
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley - Permission to use, copy, modify, and/or distribute this software for any
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley - purpose with or without fee is hereby granted, provided that the above
1633838b8255282d10af15c5c84cee5a51466712Bob Halley - copyright notice and this permission notice appear in all copies.
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley - PERFORMANCE OF THIS SOFTWARE.
68109fb883d3ca2922efeea62fe746313a634f4eBob Halley<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
68109fb883d3ca2922efeea62fe746313a634f4eBob Halley<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
68109fb883d3ca2922efeea62fe746313a634f4eBob Halley<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley<link rel="prev" href="man.rndc-confgen.html" title="rndc-confgen">
68109fb883d3ca2922efeea62fe746313a634f4eBob Halley<link rel="next" href="man.arpaname.html" title="arpaname">
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley<tr><th colspan="3" align="center"><span class="application">ddns-confgen</span></th></tr>
68109fb883d3ca2922efeea62fe746313a634f4eBob Halley<a accesskey="p" href="man.rndc-confgen.html">Prev</a>�</td>
68109fb883d3ca2922efeea62fe746313a634f4eBob Halley<td width="20%" align="right">�<a accesskey="n" href="man.arpaname.html">Next</a>
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley<a name="man.ddns-confgen"></a><div class="titlepage"></div>
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley<p><span class="application">ddns-confgen</span> — ddns key generation tool</p>
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley<div class="cmdsynopsis"><p><code class="command">tsig-keygen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [name]</p></div>
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley<div class="cmdsynopsis"><p><code class="command">ddns-confgen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-q</code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [ -s <em class="replaceable"><code>name</code></em> | -z <em class="replaceable"><code>zone</code></em> ]</p></div>
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley <span class="command"><strong>tsig-keygen</strong></span> and <span class="command"><strong>ddns-confgen</strong></span>
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley are invocation methods for a utility that generates keys for use
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley in TSIG signing. The resulting keys can be used, for example,
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley to secure dynamic DNS updates to a zone or for the
68109fb883d3ca2922efeea62fe746313a634f4eBob Halley <span class="command"><strong>rndc</strong></span> command channel.
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley When run as <span class="command"><strong>tsig-keygen</strong></span>, a domain name
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley can be specified on the command line which will be used as
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley the name of the generated key. If no name is specified,
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley the default is <code class="constant">tsig-key</code>.
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley When run as <span class="command"><strong>ddns-confgen</strong></span>, the generated
cab399250b57177899791dbad53a8f3bc47fc0f2Bob Halley key is accompanied by configuration text and instructions
cab399250b57177899791dbad53a8f3bc47fc0f2Bob Halley that can be used with <span class="command"><strong>nsupdate</strong></span> and
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley <span class="command"><strong>named</strong></span> when setting up dynamic DNS,
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley including an example <span class="command"><strong>update-policy</strong></span>
68109fb883d3ca2922efeea62fe746313a634f4eBob Halley statement. (This usage similar to the
68109fb883d3ca2922efeea62fe746313a634f4eBob Halley <span class="command"><strong>rndc-confgen</strong></span> command for setting
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley up command channel security.)
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley Note that <span class="command"><strong>named</strong></span> itself can configure a
68109fb883d3ca2922efeea62fe746313a634f4eBob Halley local DDNS key for use with <span class="command"><strong>nsupdate -l</strong></span>:
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley it does this when a zone is configured with
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley <span class="command"><strong>update-policy local;</strong></span>.
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley <span class="command"><strong>ddns-confgen</strong></span> is only needed when a
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley more elaborate configuration is required: for instance,
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley if <span class="command"><strong>nsupdate</strong></span> is to be used from a remote
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley<div class="variablelist"><dl class="variablelist">
68109fb883d3ca2922efeea62fe746313a634f4eBob Halley<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley Specifies the algorithm to use for the TSIG key. Available
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley choices are: hmac-md5, hmac-sha1, hmac-sha224, hmac-sha256,
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley hmac-sha384 and hmac-sha512. The default is hmac-sha256.
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley Options are case-insensitive, and the "hmac-" prefix
8b935d4a13cf70dcc3c97649e91ae06d711fd7c2Bob Halley may be omitted.
fa795c6d23bce1b31ba0500dab9e60d95f8c5ea0Bob Halley Prints a short summary of options and arguments.
fa795c6d23bce1b31ba0500dab9e60d95f8c5ea0Bob Halley<dt><span class="term">-k <em class="replaceable"><code>keyname</code></em></span></dt>
fa795c6d23bce1b31ba0500dab9e60d95f8c5ea0Bob Halley Specifies the key name of the DDNS authentication key.
fa795c6d23bce1b31ba0500dab9e60d95f8c5ea0Bob Halley The default is <code class="constant">ddns-key</code> when neither
fa795c6d23bce1b31ba0500dab9e60d95f8c5ea0Bob Halley the <code class="option">-s</code> nor <code class="option">-z</code> option is
fa795c6d23bce1b31ba0500dab9e60d95f8c5ea0Bob Halley specified; otherwise, the default
b1a67f989f703e1b8266b95be194e8a6c058e6ceAndreas Gustafsson is <code class="constant">ddns-key</code> as a separate label
b1a67f989f703e1b8266b95be194e8a6c058e6ceAndreas Gustafsson followed by the argument of the option, e.g.,
fa795c6d23bce1b31ba0500dab9e60d95f8c5ea0Bob Halley <code class="constant">ddns-key.example.com.</code>
fa795c6d23bce1b31ba0500dab9e60d95f8c5ea0Bob Halley The key name must have the format of a valid domain name,
68109fb883d3ca2922efeea62fe746313a634f4eBob Halley consisting of letters, digits, hyphens and periods.