From: JP Mens <jp@mens.de>
Date: Thu, 26 Oct 2017 05:42:38 +0000 (+0200)
Subject: Show use of pdnsutil generate-tsig-key
X-Git-Tag: rec-4.1.0-rc2~19^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=7e7c085aa60d27d4fb6df15e9136a492dd0e176a;p=thirdparty%2Fpdns.git

Show use of pdnsutil generate-tsig-key
---

diff --git a/docs/dnsupdate.rst b/docs/dnsupdate.rst
index 6cbc953767..36f760472b 100644
--- a/docs/dnsupdate.rst
+++ b/docs/dnsupdate.rst
@@ -113,10 +113,13 @@ TSIG-ALLOW-DNSUPDATE
 
 This setting allows you to set the TSIG key required to do an DNS
 update. If you have GSS-TSIG enabled, you can use Kerberos principals
-here. An example:
+here. An example, using :program:`pdnsutil` to create the key:
 
 ::
 
+    pdnsutil generate-tsig-key test hmac-md5
+    Create new TSIG key test hmac-md5 kp4/24gyYsEzbuTVJRUMoqGFmN3LYgVDzJ/3oRSP7ys=
+    
     sql> insert into tsigkeys (name, algorithm, secret) values ('test', 'hmac-md5', 'kp4/24gyYsEzbuTVJRUMoqGFmN3LYgVDzJ/3oRSP7ys=');
     sql> select id from domains where name='example.org';
     5