3112. [doc] Add missing descriptions of the update policy name

                        types "ms-self", "ms-subdomain", "krb5-self" and
                        "krb5-subdomain", which allow machines to update
                        their own records, to the BIND 9 ARM.

diff --git a/CHANGES b/CHANGES
index 94390ddc4b8704042c3b69faa40cf6a6dda45017..d4895707fc6d6c7ab9fb2d8b768ca23b74d21f30 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+3112.  [doc]           Add missing descriptions of the update policy name
+                       types "ms-self", "ms-subdomain", "krb5-self" and
+                       "krb5-subdomain", which allow machines to update
+                       their own records, to the BIND 9 ARM.
+
 3111.   [bug]           Improved consistency checks for dnssec-enable and
                         dnssec-validation, added test cases to the
                         checkconf system test. [RT #24398]

diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
index 4f0e490c148ef723664e29eed53ad940fd6f9069..b660a71e3f02642e71649a926c39b378604ec601 100644 (file)
--- a/doc/arm/Bv9ARM-book.xml
+++ b/doc/arm/Bv9ARM-book.xml
@@ -18,7 +18,7 @@
  - PERFORMANCE OF THIS SOFTWARE.
 -->
 
-<!-- File: $Id: Bv9ARM-book.xml,v 1.478.8.5 2011/04/29 21:41:59 each Exp $ -->
+<!-- File: $Id: Bv9ARM-book.xml,v 1.478.8.6 2011/05/16 04:19:47 marka Exp $ -->
 <book xmlns:xi="http://www.w3.org/2001/XInclude">
   <title>BIND 9 Administrator Reference Manual</title>
 
@@ -11240,7 +11240,13 @@ example.com. NS ns2.example.net.
              The <replaceable>identity</replaceable> field must
              contain a fully-qualified domain name.
            </para>
-
+           <para>
+             For nametypes <varname>krb5-self</varname>,
+             <varname>ms-self</varname>, <varname>krb5-subdomain</varname>,
+              and <varname>ms-subdomain</varname> the
+             <replaceable>identity</replaceable> field specifies
+             the Windows or Kerberos realm of the machine belongs to.
+           </para>
             <para>
               The <replaceable>nametype</replaceable> field has 13
               values:
@@ -11372,6 +11378,70 @@ example.com. NS ns2.example.net.
                      </para>
                    </entry>
                  </row>
+                 <row rowsep="0">
+                   <entry colname="1">
+                     <para>
+                       <varname>ms-self</varname>
+                     </para>
+                   </entry> <entry colname="2">
+                     <para>
+                       This rule takes a Windows machine principal
+                       (machine$@REALM) for machine in REALM and
+                       and converts it machine.realm allowing the machine 
+                        to update machine.realm.  The REALM to be matched
+                       is specified in the <replacable>identity</replacable>
+                       field.
+                     </para>
+                   </entry>
+                 </row>
+                 <row rowsep="0">
+                   <entry colname="1">
+                     <para>
+                       <varname>ms-subdomain</varname>
+                     </para>
+                   </entry> <entry colname="2">
+                     <para>
+                       This rule takes a Windows machine principal 
+                       (machine$@REALM) for machine in REALM and
+                       converts it to machine.realm allowing the machine
+                       to update subdomains of machine.realm.  The REALM
+                       to be matched is specified in the
+                       <replacable>identity</replacable> field.
+                     </para>
+                   </entry>
+                 </row>
+                 <row rowsep="0">
+                   <entry colname="1">
+                     <para>
+                       <varname>krb5-self</varname>
+                     </para>
+                   </entry> <entry colname="2">
+                     <para>
+                       This rule takes a Kerberos machine principal
+                       (host/machine@REALM) for machine in REALM and
+                       and converts it machine.realm allowing the machine 
+                        to update machine.realm.  The REALM to be matched
+                       is specified in the <replacable>identity</replacable>
+                       field.
+                     </para>
+                   </entry>
+                 </row>
+                 <row rowsep="0">
+                   <entry colname="1">
+                     <para>
+                       <varname>krb5-subdomain</varname>
+                     </para>
+                   </entry> <entry colname="2">
+                     <para>
+                       This rule takes a Kerberos machine principal 
+                       (host/machine@REALM) for machine in REALM and
+                       converts it to machine.realm allowing the machine
+                       to update subdomains of machine.realm.  The REALM
+                       to be matched is specified in the
+                       <replacable>identity</replacable> field.
+                     </para>
+                   </entry>
+                 </row>
                  <row rowsep="0">
                    <entry colname="1">
                      <para>