From: Peter van Dijk Date: Wed, 2 May 2012 16:29:17 +0000 (+0000) Subject: update documentation of gsql queries to cover dnssec; other minor doc tweaks X-Git-Tag: auth-3.1~5 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=2e986348176716caad3ba847e68ffd15b03c2c11;p=thirdparty%2Fpdns.git update documentation of gsql queries to cover dnssec; other minor doc tweaks git-svn-id: svn://svn.powerdns.com/pdns/trunk/pdns@2601 d19b8d6e-7fed-0310-83ef-9ca221ded41b --- diff --git a/pdns/docs/pdns.xml b/pdns/docs/pdns.xml index 63db706dc3..3d8e8a2587 100644 --- a/pdns/docs/pdns.xml +++ b/pdns/docs/pdns.xml @@ -15281,6 +15281,39 @@ insert into domains (id,name,type) values (domains_id_sequence.nextval,'netherla + DNSSEC queries + + If DNSSEC is enabled (through the -dnssec flag on a gsql backend), many queries are replaced by slightly + extended variants that also query the auth column. The auth column is always added as the rightmost column. These are the -auth defaults: + + basic-query-authBasic query. Default: select content,ttl,prio,type,domain_id,name, auth from records where type='%s' and name='%s' + id-query-authBasic with ID query. Default: select content,ttl,prio,type,domain_id,name, auth from records where type='%s' and name='%s' and domain_id=%d + wildcard-query-authWildcard query. Default: select content,ttl,prio,type,domain_id,name, auth from records where type='%s' and name like '%s' + wildcard-id-query-authWildcard with ID query. Default: select content,ttl,prio,type,domain_id,name, auth from records where type='%s' and name like '%s' and domain_id='%d' + any-query-authAny query. Default: select content,ttl,prio,type,domain_id,name, auth from records where name='%s' + any-id-query-authAny with ID query. Default: select content,ttl,prio,type,domain_id,name, auth from records where name='%s' and domain_id=%d + wildcard-any-query-authWildcard ANY query. Default: select content,ttl,prio,type,domain_id,name, auth from records where name like '%s' + wildcard-any-id-query-authWildcard ANY with ID query. Default: select content,ttl,prio,type,domain_id,name, auth from records where name like '%s' and domain_id='%d' + list-query-authAXFR query. Default: select content,ttl,prio,type,domain_id,name, auth from records where domain_id='%d' order by name, type + + Additionally, there are some new queries to determine NSEC(3) order: + + get-order-first-queryDNSSEC Ordering Query, first. Default: select ordername, name from records where domain_id=%d and ordername is not null order by 1 asc limit 1 + get-order-before-queryDNSSEC Ordering Query, before. Default: select ordername, name from records where ordername <= '%s' and domain_id=%d and ordername is not null order by 1 desc limit 1 + get-order-after-queryDNSSEC Ordering Query, after. Default: select min(ordername) from records where ordername > '%s' and domain_id=%d and ordername is not null + get-order-last-queryDNSSEC Ordering Query, last. Default: select ordername, name from records where ordername != '' and domain_id=%d and ordername is not null order by 1 desc limit 1 + + + Finally, these two queries are used to set ordername and auth correctly in a database: + + set-order-and-auth-queryDNSSEC set ordering query. Default: update records set ordername='%s',auth=%d where name='%s' and domain_id='%d' + nullify-ordername-and-auth-queryDNSSEC nullify ordername query. Default: update records set ordername=NULL,auth=0 where name='%s' and type='%s' and domain_id='%d' + + + Make sure to read if you wish to calculate ordername and auth without + using pdns-rectify. + + Master/slave queries Most installations will have zero need to change the following settings, but should the need arise, here they are: @@ -15393,6 +15426,7 @@ insert into domains (id,name,type) values (domains_id_sequence.nextval,'netherla Fancy records + Fancy records are unsupported as of version 3.0 If PDNS is used with so called 'Fancy Records', the 'MBOXFW' record exists which specifies an email address forwarding instruction, wildcard queries are sometimes needed. This is not enabled by default. A wildcard query is @@ -17109,7 +17143,7 @@ VALUES (:zoneid, :ip) - The MongoDB Backend is available since PowerDNS Authoritative Server 3.0. In 3.0, this backend is marked as + The MongoDB Backend is available since PowerDNS Authoritative Server 3.0. In 3.0 and 3.1, this backend is marked as Experimental! @@ -17148,11 +17182,11 @@ VALUES (:zoneid, :ip) - The Lua Backend is available since PowerDNS Authoritative Server 3.0. In 3.0, this backend is marked as + The Lua Backend is available since PowerDNS Authoritative Server 3.0. In 3.0 and 3.1, this backend is marked as Experimental! - The MongoDB backend is a full service that can allows a Lua script to provide answers to DNS queries. + The Lua backend is a full service that can allows a Lua script to provide answers to DNS queries. More details can be found here, or in