man.nsupdate.html revision b68a2d272b958eb2c40cce59ee33e71c5f5f521b
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync - Copyright (C) 2000-2003 Internet Software Consortium.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync - Permission to use, copy, modify, and/or distribute this software for any
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync - purpose with or without fee is hereby granted, provided that the above
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync - copyright notice and this permission notice appear in all copies.
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync - PERFORMANCE OF THIS SOFTWARE.
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync<!-- $Id$ -->
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync<link rel="prev" href="man.named-rrchecker.html" title="named-rrchecker">
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync<tr><th colspan="3" align="center"><span class="application">nsupdate</span></th></tr>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync<a accesskey="p" href="man.named-rrchecker.html">Prev</a>�</td>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync<td width="20%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a>
4ce88e224dfcf94a91abfb31626bce1448a5477cvboxsync<a name="man.nsupdate"></a><div class="titlepage"></div>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync<p><span class="application">nsupdate</span> — Dynamic DNS update utility</p>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync<div class="cmdsynopsis"><p><code class="command">nsupdate</code> [<code class="option">-d</code>] [<code class="option">-D</code>] [[<code class="option">-g</code>] | [<code class="option">-o</code>] | [<code class="option">-l</code>] | [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></code>] | [<code class="option">-k <em class="replaceable"><code>keyfile</code></em></code>]] [<code class="option">-t <em class="replaceable"><code>timeout</code></em></code>] [<code class="option">-u <em class="replaceable"><code>udptimeout</code></em></code>] [<code class="option">-r <em class="replaceable"><code>udpretries</code></em></code>] [<code class="option">-R <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-v</code>] [<code class="option">-T</code>] [<code class="option">-P</code>] [<code class="option">-V</code>] [filename]</p></div>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync<p><span><strong class="command">nsupdate</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync is used to submit Dynamic DNS Update requests as defined in RFC 2136
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync to a name server.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync This allows resource records to be added or removed from a zone
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync without manually editing the zone file.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync A single update request can contain requests to add or remove more than
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync resource record.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync Zones that are under dynamic control via
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">nsupdate</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync or a DHCP server should not be edited by hand.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync Manual edits could
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync conflict with dynamic updates and cause data to be lost.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync The resource records that are dynamically added or removed with
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">nsupdate</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync have to be in the same zone.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync Requests are sent to the zone's master server.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync This is identified by the MNAME field of the zone's SOA record.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync option makes
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">nsupdate</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync operate in debug mode.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync This provides tracing information about the update requests that are
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync made and the replies received from the name server.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync The <code class="option">-D</code> option makes <span><strong class="command">nsupdate</strong></span>
90f401144791e2c9b588ae2705a1d5fcd0a8003evboxsync report additional debugging information to <code class="option">-d</code>.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync The <code class="option">-L</code> option with an integer argument of zero or
90f401144791e2c9b588ae2705a1d5fcd0a8003evboxsync higher sets the logging debug level. If zero, logging is disabled.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync Transaction signatures can be used to authenticate the Dynamic
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync DNS updates. These use the TSIG resource record type described
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync in RFC 2845 or the SIG(0) record described in RFC 2535 and
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync RFC 2931 or GSS-TSIG as described in RFC 3645. TSIG relies on
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync a shared secret that should only be known to
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">nsupdate</strong></span> and the name server. Currently,
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync the only supported encryption algorithm for TSIG is HMAC-MD5,
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync which is defined in RFC 2104. Once other algorithms are
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync defined for TSIG, applications will need to ensure they select
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync the appropriate algorithm as well as the key when authenticating
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync each other. For instance, suitable <span class="type">key</span> and
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span class="type">server</span> statements would be added to
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <code class="filename">/etc/named.conf</code> so that the name server
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync can associate the appropriate secret key and algorithm with
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync the IP address of the client application that will be using
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync TSIG authentication. SIG(0) uses public key cryptography.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync To use a SIG(0) key, the public key must be stored in a KEY
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync record in a zone served by the name server.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">nsupdate</strong></span> does not read
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync GSS-TSIG uses Kerberos credentials. Standard GSS-TSIG mode
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync is switched on with the <code class="option">-g</code> flag. A
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync non-standards-compliant variant of GSS-TSIG used by Windows
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync 2000 can be switched on with the <code class="option">-o</code> flag.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync<p><span><strong class="command">nsupdate</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync uses the <code class="option">-y</code> or <code class="option">-k</code> option
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync to provide the shared secret needed to generate a TSIG record
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync for authenticating Dynamic DNS update requests, default type
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync HMAC-MD5. These options are mutually exclusive.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync When the <code class="option">-y</code> option is used, a signature is
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync generated from
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync [<span class="optional"><em class="parameter"><code>hmac:</code></em></span>]<em class="parameter"><code>keyname:secret.</code></em>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <em class="parameter"><code>keyname</code></em> is the name of the key, and
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <em class="parameter"><code>secret</code></em> is the base64 encoded shared secret.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <em class="parameter"><code>hmac</code></em> is the name of the key algorithm;
90f401144791e2c9b588ae2705a1d5fcd0a8003evboxsync valid choices are <code class="literal">hmac-md5</code>,
90f401144791e2c9b588ae2705a1d5fcd0a8003evboxsync <code class="literal">hmac-sha1</code>, <code class="literal">hmac-sha224</code>,
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <code class="literal">hmac-sha256</code>, <code class="literal">hmac-sha384</code>, or
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <code class="literal">hmac-sha512</code>. If <em class="parameter"><code>hmac</code></em>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync is not specified, the default is <code class="literal">hmac-md5</code>.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync NOTE: Use of the <code class="option">-y</code> option is discouraged because the
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync shared secret is supplied as a command line argument in clear text.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync This may be visible in the output from
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync or in a history file maintained by the user's shell.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <code class="option">-k</code> option, <span><strong class="command">nsupdate</strong></span> reads
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync the shared secret from the file <em class="parameter"><code>keyfile</code></em>.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync Keyfiles may be in two formats: a single file containing
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync a <code class="filename">named.conf</code>-format <span><strong class="command">key</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync statement, which may be generated automatically by
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">ddns-confgen</strong></span>, or a pair of files whose names are
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync of the format <code class="filename">K{name}.+157.+{random}.key</code> and
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <code class="filename">K{name}.+157.+{random}.private</code>, which can be
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync generated by <span><strong class="command">dnssec-keygen</strong></span>.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync The <code class="option">-k</code> may also be used to specify a SIG(0) key used
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync to authenticate Dynamic DNS update requests. In this case, the key
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync specified is not an HMAC-MD5 key.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">nsupdate</strong></span> can be run in a local-host only mode
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync using the <code class="option">-l</code> flag. This sets the server address to
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync localhost (disabling the <span><strong class="command">server</strong></span> so that the server
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync address cannot be overridden). Connections to the local server will
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync use a TSIG key found in <code class="filename">/var/run/named/session.key</code>,
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync which is automatically generated by <span><strong class="command">named</strong></span> if any
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync local master zone has set <span><strong class="command">update-policy</strong></span> to
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">local</strong></span>. The location of this key file can be
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync overridden with the <code class="option">-k</code> option.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync By default, <span><strong class="command">nsupdate</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync uses UDP to send update requests to the name server unless they are too
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync large to fit in a UDP request in which case TCP will be used.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync option makes
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <span><strong class="command">nsupdate</strong></span>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync use a TCP connection.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync This may be preferable when a batch of update requests is made.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync The <code class="option">-p</code> sets the default port number to use for
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync connections to a name server. The default is 53.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync The <code class="option">-t</code> option sets the maximum time an update request
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync take before it is aborted. The default is 300 seconds. Zero can be
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync to disable the timeout.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync The <code class="option">-u</code> option sets the UDP retry interval. The default
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync 3 seconds. If zero, the interval will be computed from the timeout
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync and number of UDP retries.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync The <code class="option">-r</code> option sets the number of UDP retries. The
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync 3. If zero, only one update request will be made.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync The <code class="option">-R <em class="replaceable"><code>randomdev</code></em></code> option
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync specifies a source of randomness. If the operating system
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync does not provide a <code class="filename">/dev/random</code> or
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync equivalent device, the default source of randomness is keyboard
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync input. <code class="filename">randomdev</code> specifies the name of
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync a character device or file containing random data to be used
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync instead of the default. The special value
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <code class="filename">keyboard</code> indicates that keyboard input
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync should be used. This option may be specified multiple times.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync Other types can be entered using "TYPEXXXXX" where "XXXXX" is the
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync decimal value of the type with no leading zeros. The rdata,
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync if present, will be parsed using the UNKNOWN rdata format,
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync (<backslash> <hash> <space> <length>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <space> <hexstring>).
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync The <code class="option">-T</code> and <code class="option">-P</code> options print out
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync lists of non-meta types for which the type-specific presentation
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync formats are known. <code class="option">-T</code> prints out the list of
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync IANA-assigned types. <code class="option">-P</code> prints out the list of
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync private types specific to <span><strong class="command">named</strong></span>. These options
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync may be combined. <span><strong class="command">nsupdate</strong></span> will exit after the
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync lists are printed.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync The -V option causes <span><strong class="command">nsupdate</strong></span> to print the
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync version number and exit.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync<p><span><strong class="command">nsupdate</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync reads input from
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync or standard input.
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync Each command is supplied on exactly one line of input.
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync Some commands are for administrative purposes.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync The others are either update instructions or prerequisite checks on the
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync contents of the zone.
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync These checks set conditions that some name or set of
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync resource records (RRset) either exists or is absent from the zone.
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync These conditions must be met if the entire update request is to succeed.
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync Updates will be rejected if the tests for the prerequisite conditions
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync Every update request consists of zero or more prerequisites
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync and zero or more updates.
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync This allows a suitably authenticated update request to proceed if some
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync specified resource records are present or missing from the zone.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync A blank input line (or the <span><strong class="command">send</strong></span> command)
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync accumulated commands to be sent as one Dynamic DNS update request to the
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync name server.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync The command formats and their meaning are as follows:
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync <span><strong class="command">server</strong></span>
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync {servername}
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync Sends all dynamic update requests to the name server
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <em class="parameter"><code>servername</code></em>.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync When no server statement is provided,
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <span><strong class="command">nsupdate</strong></span>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync will send updates to the master server of the correct zone.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync The MNAME field of that zone's SOA record will identify the
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync server for that zone.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync is the port number on
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync where the dynamic update requests get sent.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync If no port number is specified, the default DNS port number of
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <span><strong class="command">local</strong></span>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync Sends all dynamic update requests using the local
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync When no local statement is provided,
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <span><strong class="command">nsupdate</strong></span>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync will send updates using an address and port chosen by the
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync can additionally be used to make requests come from a specific
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync If no port number is specified, the system will assign one.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync Specifies that all updates are to be made to the zone
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync statement is provided,
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <span><strong class="command">nsupdate</strong></span>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync will attempt determine the correct zone to update based on the
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync rest of the input.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <span><strong class="command">class</strong></span>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync {classname}
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync Specify the default class.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync If no <em class="parameter"><code>class</code></em> is specified, the
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync default class is
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync Specify the default time to live for records to be added.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync The value <em class="parameter"><code>none</code></em> will clear the default
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync [hmac:] {keyname}
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync Specifies that all updates are to be TSIG-signed using the
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <em class="parameter"><code>keyname</code></em> <em class="parameter"><code>secret</code></em> pair.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync If <em class="parameter"><code>hmac</code></em> is specified, then it sets the
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync signing algorithm in use; the default is
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <code class="literal">hmac-md5</code>. The <span><strong class="command">key</strong></span>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync command overrides any key specified on the command line via
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <code class="option">-y</code> or <code class="option">-k</code>.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">gsstsig</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync Use GSS-TSIG to sign the updated. This is equivalent to
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync specifying <code class="option">-g</code> on the commandline.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">oldgsstsig</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync Use the Windows 2000 version of GSS-TSIG to sign the updated.
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync This is equivalent to specifying <code class="option">-o</code> on the
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync commandline.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">realm</strong></span>
111c5fc39f11d448ea7c37f036c7f65449f6d9a0vboxsync When using GSS-TSIG use <em class="parameter"><code>realm_name</code></em> rather
8bdb8c44962bec0ed79eba247f4b67addf9a0bedvboxsync than the default realm in <code class="filename">krb5.conf</code>. If no
8bdb8c44962bec0ed79eba247f4b67addf9a0bedvboxsync realm is specified the saved realm is cleared.
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync <span><strong class="command">check-names</strong></span>
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync Turn on or off check-names processing on records to
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync be added. Check-names has no effect on prerequisites
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync or records to be deleted. By default check-names
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync processing is on. If check-names processing fails
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync the record will not be added to the UPDATE message.
111c5fc39f11d448ea7c37f036c7f65449f6d9a0vboxsync <span><strong class="command">[<span class="optional">prereq</span>] nxdomain</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync {domain-name}
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync Requires that no resource record of any type exists with name
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <em class="parameter"><code>domain-name</code></em>.
68ae9a09d6bd828abe8ebc06edf14af58d1c40edvboxsync <span><strong class="command">[<span class="optional">prereq</span>] yxdomain</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync {domain-name}
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync Requires that
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <em class="parameter"><code>domain-name</code></em>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync exists (has as at least one resource record, of any type).
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">[<span class="optional">prereq</span>] nxrrset</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync {domain-name}
4ce88e224dfcf94a91abfb31626bce1448a5477cvboxsync Requires that no resource record exists of the specified
4ce88e224dfcf94a91abfb31626bce1448a5477cvboxsync <em class="parameter"><code>domain-name</code></em>.
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync is omitted, IN (internet) is assumed.
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync <span><strong class="command">[<span class="optional">prereq</span>] yxrrset</strong></span>
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync {domain-name}
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync This requires that a resource record of the specified
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <em class="parameter"><code>domain-name</code></em>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync must exist.
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync is omitted, IN (internet) is assumed.
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync <span><strong class="command">[<span class="optional">prereq</span>] yxrrset</strong></span>
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync {domain-name}
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync from each set of prerequisites of this form
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync sharing a common
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync <em class="parameter"><code>domain-name</code></em>
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync are combined to form a set of RRs. This set of RRs must
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync exactly match the set of RRs existing in the zone at the
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync <em class="parameter"><code>domain-name</code></em>.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync are written in the standard text representation of the resource
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <span><strong class="command">[<span class="optional">update</span>] del[<span class="optional">ete</span>]</strong></span>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync {domain-name}
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync [type [data...]]
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync Deletes any resource records named
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync <em class="parameter"><code>domain-name</code></em>.
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync is provided, only matching resource records will be removed.
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync The internet class is assumed if
02a63fc0bac1e0b462a8295391715bfc6fb9ed82vboxsync is not supplied. The
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync is ignored, and is only allowed for compatibility.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <span><strong class="command">[<span class="optional">update</span>] add</strong></span>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync {domain-name}
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync Adds a new resource record with the specified
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync Displays the current message, containing all of the
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync prerequisites and
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync updates specified since the last send.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync Sends the current message. This is equivalent to entering a
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync blank line.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">answer</strong></span>
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync Displays the answer.
4ce88e224dfcf94a91abfb31626bce1448a5477cvboxsync <span><strong class="command">debug</strong></span>
111c5fc39f11d448ea7c37f036c7f65449f6d9a0vboxsync Turn on debugging.
2305bc3992bdea24236ad2d12fed48144eaa6db5vboxsync <span><strong class="command">version</strong></span>
461f4154c063beaa72c1428fd685dc69a14af7efvboxsync Print version number.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync Print a list of commands.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync Lines beginning with a semicolon are comments and are ignored.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync The examples below show how
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync <span><strong class="command">nsupdate</strong></span>
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync could be used to insert and delete resource records from the
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync Notice that the input in each example contains a trailing blank line so
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync a group of commands are sent as one dynamic update request to the
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync master name server for
4ce88e224dfcf94a91abfb31626bce1448a5477cvboxsync> update delete oldhost.example.com A
4ce88e224dfcf94a91abfb31626bce1448a5477cvboxsync> update add newhost.example.com 86400 A 172.16.1.1
4ce88e224dfcf94a91abfb31626bce1448a5477cvboxsync Any A records for
4ce88e224dfcf94a91abfb31626bce1448a5477cvboxsync are deleted.
4ce88e224dfcf94a91abfb31626bce1448a5477cvboxsync And an A record for
4ce88e224dfcf94a91abfb31626bce1448a5477cvboxsync with IP address 172.16.1.1 is added.
5c151cd77f89e923c6f2d3686c53733234d61ef1vboxsync The newly-added record has a 1 day TTL (86400 seconds).
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync> prereq nxdomain nickname.example.com
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync> update add nickname.example.com 86400 CNAME somehost.example.com
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync The prerequisite condition gets the name server to check that there
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync are no resource records of any type for
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync If there are, the update request fails.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync If this name does not exist, a CNAME for it is added.
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync This ensures that when the CNAME is added, it cannot conflict with the
88b7935c7a9d5156b439570abcea19c121ecf60bvboxsync long-standing rule in RFC 1034 that a name must not exist as any other
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync record type if it exists as a CNAME.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync (The rule has been updated for DNSSEC in RFC 2535 to allow CNAMEs to have
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync RRSIG, DNSKEY and NSEC records.)
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync<dt><span class="term"><code class="constant">/etc/resolv.conf</code></span></dt>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync used to identify default name server
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync<dt><span class="term"><code class="constant">/var/run/named/session.key</code></span></dt>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync sets the default TSIG key for use in local-only mode
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync<dt><span class="term"><code class="constant">K{name}.+157.+{random}.key</code></span></dt>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync base-64 encoding of HMAC-MD5 key created by
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync<dt><span class="term"><code class="constant">K{name}.+157.+{random}.private</code></span></dt>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync base-64 encoding of HMAC-MD5 key created by
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <span class="citerefentry"><span class="refentrytitle">ddns-confgen</span>(8)</span>,
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync The TSIG key is redundantly stored in two separate files.
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync This is a consequence of nsupdate using the DST library
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync for its cryptographic operations, and may change in future
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync<a accesskey="p" href="man.named-rrchecker.html">Prev</a>�</td>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync<td width="40%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync<span class="application">named-rrchecker</span>�</td>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync<td width="40%" align="right" valign="top">�<span class="application">rndc</span>
edd8732a02ddd8d3eb1da3f1f8833e4f1c81c7d7vboxsync<p style="text-align: center;">BIND Version 9.11</p>