man.nsupdate.html revision b287974d182a164b84eaeaead39fcbe225e2a7f9
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen - Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC")
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen - Copyright (C) 2000-2003 Internet Software Consortium.
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen - Permission to use, copy, modify, and/or distribute this software for any
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen - purpose with or without fee is hereby granted, provided that the above
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen - copyright notice and this permission notice appear in all copies.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
43d32cbe60fdaef2699d99f1ca259053e9350411Timo Sirainen - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen - PERFORMANCE OF THIS SOFTWARE.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen<!-- $Id: man.nsupdate.html,v 1.118 2011/04/07 01:14:31 tbox Exp $ -->
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen<link rel="prev" href="man.named-journalprint.html" title="named-journalprint">
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen<link rel="next" href="man.rndc.html" title="rndc">
eb9f7005390bf7d5771d2faedb771ce41103b93aTimo Sirainen<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen<table width="100%" summary="Navigation header">
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen<tr><th colspan="3" align="center"><span class="application">nsupdate</span></th></tr>
e3689d0f073341e844638f34e1e4d0b7bb053cc8Timo Sirainen<a accesskey="p" href="man.named-journalprint.html">Prev</a>�</td>
eb9f7005390bf7d5771d2faedb771ce41103b93aTimo Sirainen<th width="60%" align="center">Manual pages</th>
eb9f7005390bf7d5771d2faedb771ce41103b93aTimo Sirainen<td width="20%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a>
b00eab39755656ee5bac297f5f6ae959da5acef1Timo Sirainen<a name="man.nsupdate"></a><div class="titlepage"></div>
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen<p><span class="application">nsupdate</span> — Dynamic DNS update utility</p>
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen<div class="cmdsynopsis"><p><code class="command">nsupdate</code> [<code class="option">-d</code>] [<code class="option">-D</code>] [[<code class="option">-g</code>] | [<code class="option">-o</code>] | [<code class="option">-l</code>] | [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></code>] | [<code class="option">-k <em class="replaceable"><code>keyfile</code></em></code>]] [<code class="option">-t <em class="replaceable"><code>timeout</code></em></code>] [<code class="option">-u <em class="replaceable"><code>udptimeout</code></em></code>] [<code class="option">-r <em class="replaceable"><code>udpretries</code></em></code>] [<code class="option">-R <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-v</code>] [filename]</p></div>
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen<p><span><strong class="command">nsupdate</strong></span>
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen is used to submit Dynamic DNS Update requests as defined in RFC 2136
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen to a name server.
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen This allows resource records to be added or removed from a zone
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen without manually editing the zone file.
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen A single update request can contain requests to add or remove more than
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen resource record.
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen Zones that are under dynamic control via
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen <span><strong class="command">nsupdate</strong></span>
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen or a DHCP server should not be edited by hand.
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen Manual edits could
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen conflict with dynamic updates and cause data to be lost.
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen The resource records that are dynamically added or removed with
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen <span><strong class="command">nsupdate</strong></span>
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen have to be in the same zone.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen Requests are sent to the zone's master server.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen This is identified by the MNAME field of the zone's SOA record.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <span><strong class="command">nsupdate</strong></span>
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen operate in debug mode.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen This provides tracing information about the update requests that are
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen made and the replies received from the name server.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen The <code class="option">-D</code> option makes <span><strong class="command">nsupdate</strong></span>
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen report additional debugging information to <code class="option">-d</code>.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen The <code class="option">-L</code> option with an integer argument of zero or
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen higher sets the logging debug level. If zero, logging is disabled.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen Transaction signatures can be used to authenticate the Dynamic
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen DNS updates. These use the TSIG resource record type described
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen in RFC 2845 or the SIG(0) record described in RFC 2535 and
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen RFC 2931 or GSS-TSIG as described in RFC 3645. TSIG relies on
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen a shared secret that should only be known to
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <span><strong class="command">nsupdate</strong></span> and the name server. Currently,
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen the only supported encryption algorithm for TSIG is HMAC-MD5,
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen which is defined in RFC 2104. Once other algorithms are
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen defined for TSIG, applications will need to ensure they select
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen the appropriate algorithm as well as the key when authenticating
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen each other. For instance, suitable <span class="type">key</span> and
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <span class="type">server</span> statements would be added to
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <code class="filename">/etc/named.conf</code> so that the name server
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen can associate the appropriate secret key and algorithm with
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen the IP address of the client application that will be using
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen TSIG authentication. SIG(0) uses public key cryptography.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen To use a SIG(0) key, the public key must be stored in a KEY
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen record in a zone served by the name server.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <span><strong class="command">nsupdate</strong></span> does not read
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <code class="filename">/etc/named.conf</code>.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen GSS-TSIG uses Kerberos credentials. Standard GSS-TSIG mode
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen is switched on with the <code class="option">-g</code> flag. A
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen non-standards-compliant variant of GSS-TSIG used by Windows
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen 2000 can be switched on with the <code class="option">-o</code> flag.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen<p><span><strong class="command">nsupdate</strong></span>
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen uses the <code class="option">-y</code> or <code class="option">-k</code> option
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen to provide the shared secret needed to generate a TSIG record
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen for authenticating Dynamic DNS update requests, default type
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen HMAC-MD5. These options are mutually exclusive.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen When the <code class="option">-y</code> option is used, a signature is
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen generated from
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen [<span class="optional"><em class="parameter"><code>hmac:</code></em></span>]<em class="parameter"><code>keyname:secret.</code></em>
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <em class="parameter"><code>keyname</code></em> is the name of the key, and
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <em class="parameter"><code>secret</code></em> is the base64 encoded shared secret.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen Use of the <code class="option">-y</code> option is discouraged because the
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen shared secret is supplied as a command line argument in clear text.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen This may be visible in the output from
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen or in a history file maintained by the user's shell.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <code class="option">-k</code> option, <span><strong class="command">nsupdate</strong></span> reads
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen the shared secret from the file <em class="parameter"><code>keyfile</code></em>.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen Keyfiles may be in two formats: a single file containing
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen a <code class="filename">named.conf</code>-format <span><strong class="command">key</strong></span>
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen statement, which may be generated automatically by
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <span><strong class="command">ddns-confgen</strong></span>, or a pair of files whose names are
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen of the format <code class="filename">K{name}.+157.+{random}.key</code> and
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <code class="filename">K{name}.+157.+{random}.private</code>, which can be
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen generated by <span><strong class="command">dnssec-keygen</strong></span>.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen The <code class="option">-k</code> may also be used to specify a SIG(0) key used
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen to authenticate Dynamic DNS update requests. In this case, the key
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen specified is not an HMAC-MD5 key.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <span><strong class="command">nsupdate</strong></span> can be run in a local-host only mode
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen using the <code class="option">-l</code> flag. This sets the server address to
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen localhost (disabling the <span><strong class="command">server</strong></span> so that the server
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen address cannot be overridden). Connections to the local server will
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen use a TSIG key found in <code class="filename">/var/run/named/session.key</code>,
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen which is automatically generated by <span><strong class="command">named</strong></span> if any
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen local master zone has set <span><strong class="command">update-policy</strong></span> to
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <span><strong class="command">local</strong></span>. The location of this key file can be
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen overridden with the <code class="option">-k</code> option.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen By default, <span><strong class="command">nsupdate</strong></span>
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen uses UDP to send update requests to the name server unless they are too
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen large to fit in a UDP request in which case TCP will be used.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <span><strong class="command">nsupdate</strong></span>
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen use a TCP connection.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen This may be preferable when a batch of update requests is made.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen The <code class="option">-p</code> sets the default port number to use for
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen connections to a name server. The default is 53.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen The <code class="option">-t</code> option sets the maximum time an update request
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen take before it is aborted. The default is 300 seconds. Zero can be
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen to disable the timeout.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen The <code class="option">-u</code> option sets the UDP retry interval. The default
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen 3 seconds. If zero, the interval will be computed from the timeout
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen and number of UDP retries.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen The <code class="option">-r</code> option sets the number of UDP retries. The
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen 3. If zero, only one update request will be made.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen The <code class="option">-R <em class="replaceable"><code>randomdev</code></em></code> option
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen specifies a source of randomness. If the operating system
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen does not provide a <code class="filename">/dev/random</code> or
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen equivalent device, the default source of randomness is keyboard
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen input. <code class="filename">randomdev</code> specifies the name of
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen a character device or file containing random data to be used
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen instead of the default. The special value
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <code class="filename">keyboard</code> indicates that keyboard input
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen should be used. This option may be specified multiple times.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen<p><span><strong class="command">nsupdate</strong></span>
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen reads input from
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <em class="parameter"><code>filename</code></em>
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen or standard input.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen Each command is supplied on exactly one line of input.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen Some commands are for administrative purposes.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen The others are either update instructions or prerequisite checks on the
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen contents of the zone.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen These checks set conditions that some name or set of
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen resource records (RRset) either exists or is absent from the zone.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen These conditions must be met if the entire update request is to succeed.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen Updates will be rejected if the tests for the prerequisite conditions
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen Every update request consists of zero or more prerequisites
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen and zero or more updates.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen This allows a suitably authenticated update request to proceed if some
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen specified resource records are present or missing from the zone.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen A blank input line (or the <span><strong class="command">send</strong></span> command)
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen accumulated commands to be sent as one Dynamic DNS update request to the
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen The command formats and their meaning are as follows:
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <span><strong class="command">server</strong></span>
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen Sends all dynamic update requests to the name server
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen <em class="parameter"><code>servername</code></em>.
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen When no server statement is provided,
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen <span><strong class="command">nsupdate</strong></span>
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen will send updates to the master server of the correct zone.
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen The MNAME field of that zone's SOA record will identify the
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen server for that zone.
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen is the port number on
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen <em class="parameter"><code>servername</code></em>
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen where the dynamic update requests get sent.
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen If no port number is specified, the default DNS port number of
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen <span><strong class="command">local</strong></span>
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen Sends all dynamic update requests using the local
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen <em class="parameter"><code>address</code></em>.
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen When no local statement is provided,
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen <span><strong class="command">nsupdate</strong></span>
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen will send updates using an address and port chosen by the
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen can additionally be used to make requests come from a specific
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen If no port number is specified, the system will assign one.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <span><strong class="command">zone</strong></span>
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen Specifies that all updates are to be made to the zone
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen <em class="parameter"><code>zonename</code></em>.
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen statement is provided,
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen <span><strong class="command">nsupdate</strong></span>
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen will attempt determine the correct zone to update based on the
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen rest of the input.
8ababf3e7b15f793370d1dedf85825d38b42633fTimo Sirainen <span><strong class="command">class</strong></span>
746d35bf3dba3ae5ddbcecb9732f60d5e9de77efTimo Sirainen Specify the default class.
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen If no <em class="parameter"><code>class</code></em> is specified, the
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen default class is
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen <span><strong class="command">ttl</strong></span>
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen Specify the default time to live for records to be added.
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen The value <em class="parameter"><code>none</code></em> will clear the default
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen <span><strong class="command">key</strong></span>
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen Specifies that all updates are to be TSIG-signed using the
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen <em class="parameter"><code>keyname</code></em> <em class="parameter"><code>keysecret</code></em> pair.
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen The <span><strong class="command">key</strong></span> command
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen overrides any key specified on the command line via
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen <code class="option">-y</code> or <code class="option">-k</code>.
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen <span><strong class="command">gsstsig</strong></span>
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen Use GSS-TSIG to sign the updated. This is equivalent to
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen specifying <code class="option">-g</code> on the commandline.
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen <span><strong class="command">oldgsstsig</strong></span>
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen Use the Windows 2000 version of GSS-TSIG to sign the updated.
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen This is equivalent to specifying <code class="option">-o</code> on the
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen <span><strong class="command">realm</strong></span>
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen When using GSS-TSIG use <em class="parameter"><code>realm_name</code></em> rather
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen than the default realm in <code class="filename">krb5.conf</code>. If no
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen realm is specified the saved realm is cleared.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen <span><strong class="command">prereq nxdomain</strong></span>
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen {domain-name}
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen Requires that no resource record of any type exists with name
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen <em class="parameter"><code>domain-name</code></em>.
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen <span><strong class="command">prereq yxdomain</strong></span>
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen {domain-name}
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen Requires that
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen <em class="parameter"><code>domain-name</code></em>
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen exists (has as at least one resource record, of any type).
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen <span><strong class="command">prereq nxrrset</strong></span>
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen {domain-name}
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen Requires that no resource record exists of the specified
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen <em class="parameter"><code>domain-name</code></em>.
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen is omitted, IN (internet) is assumed.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen <span><strong class="command">prereq yxrrset</strong></span>
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen {domain-name}
1d3f7c1278168d5b1cbfa9a2cc9929a0909056b4Timo Sirainen This requires that a resource record of the specified
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen <em class="parameter"><code>domain-name</code></em>
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen is omitted, IN (internet) is assumed.
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen <span><strong class="command">prereq yxrrset</strong></span>
9f57ffa4d421951bbfc7f2de2abcbd8033e6a8c3Timo Sirainen {domain-name}
633e6afa5de9ad8108ff8dbdee889ecf6170026eTimo Sirainen from each set of prerequisites of this form
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen sharing a common
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen <em class="parameter"><code>class</code></em>,
eb9f7005390bf7d5771d2faedb771ce41103b93aTimo Sirainen <em class="parameter"><code>domain-name</code></em>
b00eab39755656ee5bac297f5f6ae959da5acef1Timo Sirainen are combined to form a set of RRs. This set of RRs must
eb9f7005390bf7d5771d2faedb771ce41103b93aTimo Sirainen exactly match the set of RRs existing in the zone at the
77f386273491b3a20b49b2a5a9db4b6e360615f9Timo Sirainen <em class="parameter"><code>class</code></em>,
eb9f7005390bf7d5771d2faedb771ce41103b93aTimo Sirainen <em class="parameter"><code>domain-name</code></em>.
eb9f7005390bf7d5771d2faedb771ce41103b93aTimo Sirainen are written in the standard text representation of the resource
b00eab39755656ee5bac297f5f6ae959da5acef1Timo Sirainen <span><strong class="command">update delete</strong></span>
b00eab39755656ee5bac297f5f6ae959da5acef1Timo Sirainen {domain-name}
19e8adccba16ff419f5675b1575358c2956dce83Timo Sirainen [type [data...]]
eb9f7005390bf7d5771d2faedb771ce41103b93aTimo Sirainen Deletes any resource records named
eb9f7005390bf7d5771d2faedb771ce41103b93aTimo Sirainen <em class="parameter"><code>domain-name</code></em>.
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen is provided, only matching resource records will be removed.
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen The internet class is assumed if
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen is not supplied. The
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen is ignored, and is only allowed for compatibility.
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen <span><strong class="command">update add</strong></span>
3b80595fcf2001cf7b2fcc6290823e38f4a142fcTimo Sirainen {domain-name}
> update delete oldhost.example.com A
> update add newhost.example.com 86400 A 172.16.1.1
> prereq nxdomain nickname.example.com