From 7e7c085aa60d27d4fb6df15e9136a492dd0e176a Mon Sep 17 00:00:00 2001 From: JP Mens Date: Thu, 26 Oct 2017 07:42:38 +0200 Subject: [PATCH] Show use of pdnsutil generate-tsig-key --- docs/dnsupdate.rst | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/dnsupdate.rst b/docs/dnsupdate.rst index 6cbc953767..36f760472b 100644 --- a/docs/dnsupdate.rst +++ b/docs/dnsupdate.rst @@ -113,10 +113,13 @@ TSIG-ALLOW-DNSUPDATE This setting allows you to set the TSIG key required to do an DNS update. If you have GSS-TSIG enabled, you can use Kerberos principals -here. An example: +here. An example, using :program:`pdnsutil` to create the key: :: + pdnsutil generate-tsig-key test hmac-md5 + Create new TSIG key test hmac-md5 kp4/24gyYsEzbuTVJRUMoqGFmN3LYgVDzJ/3oRSP7ys= + sql> insert into tsigkeys (name, algorithm, secret) values ('test', 'hmac-md5', 'kp4/24gyYsEzbuTVJRUMoqGFmN3LYgVDzJ/3oRSP7ys='); sql> select id from domains where name='example.org'; 5 -- 2.47.2