10139N/A - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC") 10139N/A - Copyright (C) 2000-2003 Internet Software Consortium. 10139N/A - Permission to use, copy, modify, and/or distribute this software for any 10139N/A - purpose with or without fee is hereby granted, provided that the above 10139N/A - copyright notice and this permission notice appear in all copies. 10139N/A - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 10139N/A - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 10139N/A - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 10139N/A - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 10139N/A - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 10139N/A - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 10139N/A - PERFORMANCE OF THIS SOFTWARE. 10139N/A<
meta http-
equiv="Content-Type" content="text/html; charset=ISO-8859-1">
10139N/A<
meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
10139N/A<
body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
10139N/A<
table width="100%" summary="Navigation header">
10139N/A<
tr><
th colspan="3" align="center"><
span class="application">ddns-confgen</
span></
th></
tr>
10139N/A<
th width="60%" align="center">Manual pages</
th>
10139N/A<
div class="refentry" lang="en">
10139N/A<
p><
span class="application">ddns-confgen</
span> — ddns key generation tool</
p>
10139N/A<
div class="cmdsynopsis"><
p><
code class="command">tsig-keygen</
code> [<
code class="option">-a <
em class="replaceable"><
code>algorithm</
code></
em></
code>] [<
code class="option">-h</
code>] [<
code class="option">-r <
em class="replaceable"><
code>randomfile</
code></
em></
code>] [name]</
p></
div>
10139N/A<
div class="cmdsynopsis"><
p><
code class="command">ddns-confgen</
code> [<
code class="option">-a <
em class="replaceable"><
code>algorithm</
code></
em></
code>] [<
code class="option">-h</
code>] [<
code class="option">-k <
em class="replaceable"><
code>keyname</
code></
em></
code>] [<
code class="option">-q</
code>] [<
code class="option">-r <
em class="replaceable"><
code>randomfile</
code></
em></
code>] [ -s <
em class="replaceable"><
code>name</
code></
em> | -z <
em class="replaceable"><
code>zone</
code></
em> ]</
p></
div>
10139N/A<
div class="refsect1" lang="en">
10139N/A<
a name="id2663646"></
a><
h2>DESCRIPTION</
h2>
10139N/A <
span><
strong class="command">tsig-keygen</
strong></
span> and <
span><
strong class="command">ddns-confgen</
strong></
span>
10139N/A are invokation methods for a utility that generates keys for use
10139N/A in TSIG signing. The resulting keys can be used, for example,
10139N/A to secure dynamic DNS updates to a zone or for the
10139N/A <
span><
strong class="command">rndc</
strong></
span> command channel.
10139N/A When run as <
span><
strong class="command">tsig-keygen</
strong></
span>, a domain name
10139N/A can be specified on the command line which will be used as
10139N/A the name of the generated key. If no name is specified,
10139N/A the default is <
code class="constant">tsig-key</
code>.
13570N/A When run as <
span><
strong class="command">ddns-confgen</
strong></
span>, the generated
10139N/A key is accompanied by configuration text and instructions
10139N/A that can be used with <
span><
strong class="command">nsupdate</
strong></
span> and
10139N/A <
span><
strong class="command">named</
strong></
span> when setting up dynamic DNS,
11965N/A including an example <
span><
strong class="command">update-policy</
strong></
span>
11965N/A statement. (This usage similar to the
10139N/A <
span><
strong class="command">rndc-confgen</
strong></
span> command for setting
11933N/A Note that <
span><
strong class="command">named</
strong></
span> itself can configure a
10139N/A local DDNS key for use with <
span><
strong class="command">nsupdate -l</
strong></
span>:
10139N/A it does this when a zone is configured with
10139N/A <
span><
strong class="command">update-policy local;</
strong></
span>.
10139N/A <
span><
strong class="command">ddns-confgen</
strong></
span> is only needed when a
10139N/A more elaborate configuration is required: for instance,
10139N/A if <
span><
strong class="command">nsupdate</
strong></
span> is to be used from a remote
10139N/A<
div class="refsect1" lang="en">
10139N/A<
a name="id2663750"></
a><
h2>OPTIONS</
h2>
10139N/A<
dt><
span class="term">-a <
em class="replaceable"><
code>algorithm</
code></
em></
span></
dt>
10139N/A Specifies the algorithm to use for the TSIG key. Available
10139N/A choices are: hmac-md5, hmac-sha1, hmac-sha224, hmac-sha256,
10139N/A hmac-sha384 and hmac-sha512. The default is hmac-sha256.
10139N/A Options are case-insensitive, and the "hmac-" prefix
10139N/A<
dt><
span class="term">-h</
span></
dt>
12787N/A Prints a short summary of options and arguments.
10139N/A<
dt><
span class="term">-k <
em class="replaceable"><
code>keyname</
code></
em></
span></
dt>
11232N/A Specifies the key name of the DDNS authentication key.
10139N/A The default is <
code class="constant">ddns-key</
code> when neither
10139N/A the <
code class="option">-s</
code> nor <
code class="option">-z</
code> option is
10139N/A specified; otherwise, the default
10139N/A is <
code class="constant">ddns-key</
code> as a separate label
10139N/A The key name must have the format of a valid domain name,
11925N/A consisting of letters, digits, hyphens and periods.
10139N/A<
dt><
span class="term">-q</
span></
dt>
10139N/A (<
span><
strong class="command">ddns-confgen</
strong></
span> only.) Quiet mode: Print
10139N/A only the key, with no explanatory text or usage examples;
10139N/A This is essentially identical to <
span><
strong class="command">tsig-keygen</
strong></
span>.
10139N/A<
dt><
span class="term">-r <
em class="replaceable"><
code>randomfile</
code></
em></
span></
dt>
10139N/A Specifies a source of random data for generating the
10139N/A authorization. If the operating system does not provide a
10139N/A default source of randomness is keyboard input.
10139N/A <
code class="filename">randomdev</
code> specifies the name of a
10139N/A character device or file containing random data to be used
10139N/A instead of the default. The special value
10139N/A <
code class="filename">keyboard</
code> indicates that keyboard input
10139N/A<
dt><
span class="term">-s <
em class="replaceable"><
code>name</
code></
em></
span></
dt>
10697N/A (<
span><
strong class="command">ddns-confgen</
strong></
span> only.)
12374N/A Generate configuration example to allow dynamic updates
10915N/A of a single hostname. The example <
span><
strong class="command">
named.conf</
strong></
span>
11161N/A text shows how to set an update policy for the specified
12385N/A <
em class="replaceable"><
code>name</
code></
em>
12780N/A using the "name" nametype. The default key name is
12780N/A ddns-key.<
em class="replaceable"><
code>name</
code></
em>.
13092N/A Note that the "self" nametype cannot be used, since
13360N/A the name to be updated may differ from the key name.
13409N/A This option cannot be used with the <
code class="option">-z</
code> option.
10139N/A<
dt><
span class="term">-z <
em class="replaceable"><
code>zone</
code></
em></
span></
dt>
10139N/A (<
span><
strong class="command">ddns-confgen</
strong></
span> only.)
10139N/A Generate configuration example to allow dynamic updates
10139N/A of a zone: The example <
span><
strong class="command">
named.conf</
strong></
span> text
10139N/A shows how to set an update policy for the specified
10139N/A <
em class="replaceable"><
code>zone</
code></
em>
10139N/A using the "zonesub" nametype, allowing updates to
10139N/A all subdomain names within that
10139N/A <
em class="replaceable"><
code>zone</
code></
em>.
10139N/A This option cannot be used with the <
code class="option">-s</
code> option.
10139N/A<
div class="refsect1" lang="en">
10139N/A<
a name="id2664035"></
a><
h2>SEE ALSO</
h2>
10139N/A<
p><
span class="citerefentry"><
span class="refentrytitle">nsupdate</
span>(1)</
span>,
10139N/A <
span class="citerefentry"><
span class="refentrytitle">
named.conf</
span>(5)</
span>,
10139N/A <
span class="citerefentry"><
span class="refentrytitle">named</
span>(8)</
span>,
10139N/A <
em class="citetitle">BIND 9 Administrator Reference Manual</
em>.
10139N/A<
div class="refsect1" lang="en">
10139N/A<
a name="id2664073"></
a><
h2>AUTHOR</
h2>
10139N/A<
p><
span class="corpauthor">Internet Systems Consortium</
span>
10139N/A<
table width="100%" summary="Navigation footer">
10139N/A<
td width="40%" align="left" valign="top">
10139N/A<
span class="application">rndc-confgen</
span>�</
td>
10139N/A<
td width="40%" align="right" valign="top">�<
span class="application">arpaname</
span>