man.ddns-confgen.html revision 0f863f054cd14a83f8b8464d5976a97df39ee899
6ee667aeeb284b652e256ad1d792b0fb6c28fabaLennart Poettering<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering - Copyright (C) 2000-2016 Internet Systems Consortium, Inc. ("ISC")
3e2147858f21943d5f4a781c60f33ac22c6096edKay Sievers - This Source Code Form is subject to the terms of the Mozilla Public
3e2147858f21943d5f4a781c60f33ac22c6096edKay Sievers - License, v. 2.0. If a copy of the MPL was not distributed with this
91e8651b6e3acf77c0fc51febe70b94afcd81b7dZbigniew Jędrzejewski-Szmek - file, You can obtain one at http://mozilla.org/MPL/2.0/.
5430f7f2bc7330f3088b894166bf3524a067e3d8Lennart Poettering<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering<link rel="prev" href="man.rndc-confgen.html" title="rndc-confgen">
47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering<link rel="next" href="man.arpaname.html" title="arpaname">
47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering<table width="100%" summary="Navigation header">
47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering<tr><th colspan="3" align="center"><span class="application">ddns-confgen</span></th></tr>
b5a223bfcf2ebcf374973b29870a5e80fb42b8beZbigniew Jędrzejewski-Szmek<a accesskey="p" href="man.rndc-confgen.html">Prev</a>�</td>
47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering<th width="60%" align="center">Manual pages</th>
3e2147858f21943d5f4a781c60f33ac22c6096edKay Sievers<td width="20%" align="right">�<a accesskey="n" href="man.arpaname.html">Next</a>
652e737517bbbae692923246aeb687e2d1f314efZbigniew Jędrzejewski-Szmek<a name="man.ddns-confgen"></a><div class="titlepage"></div>
62ca29b81b5f19007889439b744a16776607a55eLennart Poettering <span class="application">ddns-confgen</span>
62ca29b81b5f19007889439b744a16776607a55eLennart Poettering — ddns key generation tool
4b2d99d9f4258a29f0bf8b1a78d17836e75bc378Lennart Poettering [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>]
4b2d99d9f4258a29f0bf8b1a78d17836e75bc378Lennart Poettering [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>]
c01995635d14840074c2ff17a153b76edd0bf1b9Lennart Poettering <code class="command">ddns-confgen</code>
4b2d99d9f4258a29f0bf8b1a78d17836e75bc378Lennart Poettering [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>]
62ca29b81b5f19007889439b744a16776607a55eLennart Poettering [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>]
d9f644e2cdc81089f76314ee1a264895ca391371Zbigniew Jędrzejewski-Szmek [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>]
d122948d6fbaac4505cf14a08f1237daa89efdd0Lennart Poettering -s <em class="replaceable"><code>name</code></em>
d122948d6fbaac4505cf14a08f1237daa89efdd0Lennart Poettering | -z <em class="replaceable"><code>zone</code></em>
490aed584944b684026a3fd01f8d81f2881e38d6Lennart Poettering<a name="id-1.14.30.7"></a><h2>DESCRIPTION</h2>
460c589a92ae58c5cfb4d36dba073220ccdc565fFedora systemd team <span class="command"><strong>tsig-keygen</strong></span> and <span class="command"><strong>ddns-confgen</strong></span>
0ce8860a15fb08ac358fb9c5347bd20c0bcdebcdLennart Poettering are invocation methods for a utility that generates keys for use
dee4c244254bb49d1ffa8bd7171ae9cce596d2d0Lennart Poettering in TSIG signing. The resulting keys can be used, for example,
0ce8860a15fb08ac358fb9c5347bd20c0bcdebcdLennart Poettering to secure dynamic DNS updates to a zone or for the
4ec24515daa780118709e04cd78dae93f25a8428Zbigniew Jędrzejewski-Szmek <span class="command"><strong>rndc</strong></span> command channel.
d1ab0ca07372649dad70a0348d75e394f254e1b6Lennart Poettering When run as <span class="command"><strong>tsig-keygen</strong></span>, a domain name
32d0463d5c9982cc0c98a6e2867f94c764a496c2Lennart Poettering can be specified on the command line which will be used as
a1d41e17a5c3861becd66f1c9dba7eb39ae4c478Lennart Poettering the name of the generated key. If no name is specified,
772f83719e3c2262d948a4c4e70fe9babc4c4610Kay Sievers the default is <code class="constant">tsig-key</code>.
8ece4cab426cce6759ff240504dc876502f4c483Kay Sievers When run as <span class="command"><strong>ddns-confgen</strong></span>, the generated
d267e69da42f51ed0b34b59c0e3bc988127b95a5Zbigniew Jędrzejewski-Szmek key is accompanied by configuration text and instructions
8ece4cab426cce6759ff240504dc876502f4c483Kay Sievers that can be used with <span class="command"><strong>nsupdate</strong></span> and
6edd7d0a09171ea5ae8e01b7b1cbcb0bdfbfeb16Lennart Poettering <span class="command"><strong>named</strong></span> when setting up dynamic DNS,
8ece4cab426cce6759ff240504dc876502f4c483Kay Sievers including an example <span class="command"><strong>update-policy</strong></span>
a1d41e17a5c3861becd66f1c9dba7eb39ae4c478Lennart Poettering statement. (This usage similar to the
3e2147858f21943d5f4a781c60f33ac22c6096edKay Sievers <span class="command"><strong>rndc-confgen</strong></span> command for setting
d4205751d4643c272059a3728045929dd0e5e800Lennart Poettering up command channel security.)
8f51399e75e5d0d0741ecb18c549a57840bd1cc3Harald Hoyer Note that <span class="command"><strong>named</strong></span> itself can configure a
8c4a3079a7f358c179430d1aec59de8b670b5f6eLennart Poettering local DDNS key for use with <span class="command"><strong>nsupdate -l</strong></span>:
8c4a3079a7f358c179430d1aec59de8b670b5f6eLennart Poettering it does this when a zone is configured with
b8079ae19b41c9b61850c796dddc601b826850e0Kay Sievers <span class="command"><strong>update-policy local;</strong></span>.
b8079ae19b41c9b61850c796dddc601b826850e0Kay Sievers <span class="command"><strong>ddns-confgen</strong></span> is only needed when a
b8079ae19b41c9b61850c796dddc601b826850e0Kay Sievers more elaborate configuration is required: for instance,
70fcff314feff469a8e61dbe5017ed74f5e0a09dLennart Poettering if <span class="command"><strong>nsupdate</strong></span> is to be used from a remote
3e2147858f21943d5f4a781c60f33ac22c6096edKay Sievers <div class="variablelist"><dl class="variablelist">
9b2810721d63c6c5daedd4f86c963eb69f7ab120Zbigniew Jędrzejewski-Szmek<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
0237edf7d24a53792122ec1c8225babf2ad3e227Kay Sievers Specifies the algorithm to use for the TSIG key. Available
3e2147858f21943d5f4a781c60f33ac22c6096edKay Sievers choices are: hmac-md5, hmac-sha1, hmac-sha224, hmac-sha256,
87cfe600c7a5c0632f8dcc7713b0b1e3825b75ccZbigniew Jędrzejewski-Szmek hmac-sha384 and hmac-sha512. The default is hmac-sha256.
0237edf7d24a53792122ec1c8225babf2ad3e227Kay Sievers Options are case-insensitive, and the "hmac-" prefix
46ba8aae2b82bc5c87ba347e6bf914ecd5e9d51eLennart Poettering may be omitted.
ac7019f33f1618f5b69ed44a8623e2596f1e3856Lennart Poettering Prints a short summary of options and arguments.
6cbf079f10ba998e4d8debb7f5b7dab4efaae3d0Kay Sievers<dt><span class="term">-k <em class="replaceable"><code>keyname</code></em></span></dt>
cee22bd3cb253734a8a0183751d786128e2ea5e4Henrik Grindal Bakken Specifies the key name of the DDNS authentication key.
cee22bd3cb253734a8a0183751d786128e2ea5e4Henrik Grindal Bakken The default is <code class="constant">ddns-key</code> when neither
cee22bd3cb253734a8a0183751d786128e2ea5e4Henrik Grindal Bakken the <code class="option">-s</code> nor <code class="option">-z</code> option is
cee22bd3cb253734a8a0183751d786128e2ea5e4Henrik Grindal Bakken specified; otherwise, the default
cee22bd3cb253734a8a0183751d786128e2ea5e4Henrik Grindal Bakken is <code class="constant">ddns-key</code> as a separate label
cee22bd3cb253734a8a0183751d786128e2ea5e4Henrik Grindal Bakken followed by the argument of the option, e.g.,
cee22bd3cb253734a8a0183751d786128e2ea5e4Henrik Grindal Bakken <code class="constant">ddns-key.example.com.</code>
cee22bd3cb253734a8a0183751d786128e2ea5e4Henrik Grindal Bakken The key name must have the format of a valid domain name,
f13b388f97bc3ba8db844bd3413d510e2466a0b6Kay Sievers consisting of letters, digits, hyphens and periods.
9f70075586839e8f1c097874fea2223a3d76230cZbigniew Jędrzejewski-Szmek<dt><span class="term">-q</span></dt>
47be870bd83fb3719dffc3ee9348a409ab762a14Lennart Poettering (<span class="command"><strong>ddns-confgen</strong></span> only.) Quiet mode: Print
d3f09cf39637de2441288b5e4c93eecbd1fb872dKay Sievers only the key, with no explanatory text or usage examples;
19adb8a3204fefd91411b5f0f350c8bc6bcf75feZbigniew Jędrzejewski-Szmek This is essentially identical to <span class="command"><strong>tsig-keygen</strong></span>.
0571e0111d76cf96aa4069d9c7a6e24d97aa7e48Lennart Poettering<dt><span class="term">-r <em class="replaceable"><code>randomfile</code></em></span></dt>
af2d49f70bcff20efaf2d69aecaf4b3e898ff1faLennart Poettering Specifies a source of random data for generating the
844ec79b3c2f246114ea316ebe1f36044bdb688eZbigniew Jędrzejewski-Szmek authorization. If the operating system does not provide a
91901329245f070b621a24577393fb8f4ce9bffcLennart Poettering <code class="filename">/dev/random</code> or equivalent device, the
05d02d8db0b3a7fd7634f7a0bd35ad96da469fb4Lennart Poettering default source of randomness is keyboard input.
b1b2a107d15a370d40b200172837bdd82ff3c3b2Fabiano Fidêncio <code class="filename">randomdev</code> specifies the name of a
6edd7d0a09171ea5ae8e01b7b1cbcb0bdfbfeb16Lennart Poettering character device or file containing random data to be used
2cb1a60d14f869023652482a380ca7b659dcf78fLennart Poettering instead of the default. The special value
501fc174c22aebd3181af08a4cfa65cc92bbe233Lennart Poettering <code class="filename">keyboard</code> indicates that keyboard input
5b754353282e3ba3cf9c4ffc50579aff4b7d72dbKay Sievers should be used.
ef5bfcf668e6029faa78534dfeb2591df854cdefLennart Poettering<dt><span class="term">-s <em class="replaceable"><code>name</code></em></span></dt>
af2d49f70bcff20efaf2d69aecaf4b3e898ff1faLennart Poettering (<span class="command"><strong>ddns-confgen</strong></span> only.)
83cc030fadf71d63d488cf9015275f9e5a02e2ccLennart Poettering Generate configuration example to allow dynamic updates
ddcbc8737873ca1904562d7d3ca3de9946e2f889Matthias Clasen of a single hostname. The example <span class="command"><strong>named.conf</strong></span>
baa5ad26fd5da7bc3d7253904ac30112c94a64c2Kay Sievers text shows how to set an update policy for the specified
8e8eb8fbafcaa841fa5393e396acde27b26edf2fKay Sievers using the "name" nametype. The default key name is
f33d3ec1d7521c91da8b30ad5cb345d6416bb07dKay Sievers ddns-key.<em class="replaceable"><code>name</code></em>.
83374163014eb50ed0ecd4f18ab45e5280ce7081Lennart Poettering Note that the "self" nametype cannot be used, since
7801356442578ff6e1c65844eb9e65c819af4660Zbigniew Jędrzejewski-Szmek the name to be updated may differ from the key name.
e5e83e8362e946890ac991fc86a2c5869f9befdfLennart Poettering This option cannot be used with the <code class="option">-z</code> option.
f579559b3a14c1f1ef96c372e7626c4733e6ef7dTom Gundersen<dt><span class="term">-z <em class="replaceable"><code>zone</code></em></span></dt>
3e2147858f21943d5f4a781c60f33ac22c6096edKay Sievers (<span class="command"><strong>ddns-confgen</strong></span> only.)
95769b329eb15ac5495fe98000a583e4614a6109Kay Sievers Generate configuration example to allow dynamic updates
b30e2f4c18ad81b04e4314fd191a5d458553773cKay Sievers of a zone: The example <span class="command"><strong>named.conf</strong></span> text
0b87a07761dcad31583142a3a454c42833e65a09Kay Sievers shows how to set an update policy for the specified
5a45a93627609451784a04366cfa1150d32611d1Lennart Poettering <em class="replaceable"><code>zone</code></em>
af6f0d422c521374ee6a2dd92df5935a5a476ae5Tom Gundersen using the "zonesub" nametype, allowing updates to
9d7d42bc406a2ac04639674281ce3ff6beeda790Kay Sievers all subdomain names within that
607553f9306286fdccf0b356bc3d1087adfe21c4Tom Gundersen <em class="replaceable"><code>zone</code></em>.
607553f9306286fdccf0b356bc3d1087adfe21c4Tom Gundersen This option cannot be used with the <code class="option">-s</code> option.
24fdc2300451372bd098a7cab39f3a417d46605bZbigniew Jędrzejewski-Szmek <span class="refentrytitle">nsupdate</span>(1)
24fdc2300451372bd098a7cab39f3a417d46605bZbigniew Jędrzejewski-Szmek <span class="refentrytitle">named.conf</span>(5)
24fdc2300451372bd098a7cab39f3a417d46605bZbigniew Jędrzejewski-Szmek <span class="refentrytitle">named</span>(8)
24fdc2300451372bd098a7cab39f3a417d46605bZbigniew Jędrzejewski-Szmek <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
6ff392416e6a6403e0183ca9c3e158f7aa6bc7eaZbigniew Jędrzejewski-Szmek<table width="100%" summary="Navigation footer">
6ff392416e6a6403e0183ca9c3e158f7aa6bc7eaZbigniew Jędrzejewski-Szmek<a accesskey="p" href="man.rndc-confgen.html">Prev</a>�</td>
6ff392416e6a6403e0183ca9c3e158f7aa6bc7eaZbigniew Jędrzejewski-Szmek<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
6ff392416e6a6403e0183ca9c3e158f7aa6bc7eaZbigniew Jędrzejewski-Szmek<td width="40%" align="right">�<a accesskey="n" href="man.arpaname.html">Next</a>
6ff392416e6a6403e0183ca9c3e158f7aa6bc7eaZbigniew Jędrzejewski-Szmek<span class="application">rndc-confgen</span>�</td>
91e8651b6e3acf77c0fc51febe70b94afcd81b7dZbigniew Jędrzejewski-Szmek<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
91e8651b6e3acf77c0fc51febe70b94afcd81b7dZbigniew Jędrzejewski-Szmek<td width="40%" align="right" valign="top">�<span class="application">arpaname</span>
54142c6af15c24a72a1b8dcf278dbe97b95e541aKay Sievers<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.1</p>