Show use of pdnsutil generate-tsig-key

diff --git a/docs/dnsupdate.rst b/docs/dnsupdate.rst
index 6cbc953767a5228b2b1c14f19fb07c71d20fd633..36f760472bad66df1ca42491e8cdcf789402ede1 100644 (file)
--- a/docs/dnsupdate.rst
+++ b/docs/dnsupdate.rst
@@ -113,10 +113,13 @@ TSIG-ALLOW-DNSUPDATE
 
 This setting allows you to set the TSIG key required to do an DNS
 update. If you have GSS-TSIG enabled, you can use Kerberos principals
-here. An example:
+here. An example, using :program:`pdnsutil` to create the key:
 
 ::
 
+    pdnsutil generate-tsig-key test hmac-md5
+    Create new TSIG key test hmac-md5 kp4/24gyYsEzbuTVJRUMoqGFmN3LYgVDzJ/3oRSP7ys=
+    
     sql> insert into tsigkeys (name, algorithm, secret) values ('test', 'hmac-md5', 'kp4/24gyYsEzbuTVJRUMoqGFmN3LYgVDzJ/3oRSP7ys=');
     sql> select id from domains where name='example.org';
     5