From 5c6158cc5d644de1fef202078723178afdd571bd Mon Sep 17 00:00:00 2001 From: Kees Monshouwer Date: Sat, 17 Aug 2013 00:44:56 +0200 Subject: [PATCH] filling 'ordename' and 'auth' --- pdns/docs/pdns.xml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pdns/docs/pdns.xml b/pdns/docs/pdns.xml index 10b02b8a9d..f081b237c6 100755 --- a/pdns/docs/pdns.xml +++ b/pdns/docs/pdns.xml @@ -12979,10 +12979,10 @@ $ pdnssec rectify-zone powerdnssec.org present for this purpose. Do note that the DS record for a secure delegation should be authoritative! - The 'ordername' field needs to be filled out depending on the NSEC/NSEC3 mode. When running in NSEC3 'Narrow' mode, - the ordername field is ignored and best left empty. In NSEC mode, the ordername field should be NULL for any glue but filled in - for delegation NS records and all authoritative records. In NSEC3 opt-out mode (the only NSEC3 mode PowerDNS currently - supports), any non-authoritative records (as described for the 'auth' field) should have ordername set to NULL. + The 'ordername' field needs to be filled out depending on the NSEC/NSEC3 mode. When running in NSEC3 'Narrow' mode, the + ordername field is ignored and best left empty. In NSEC/NSEC3 mode, the ordername field should be NULL for any glue but filled in + for all delegation NS records and all authoritative records. In NSEC3 opt-out mode, ordername is NULL for any glue and insecure + delegation NS records, but filled in for secure delegation NS records and all authoritative records. In 'NSEC' mode, it should contain the relative part of a domain name, in reverse order, with dots replaced -- 2.47.2