.\" Title: ddns\-confgen
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: September 18, 2009
+.\" Date: March 6, 2014
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "DDNS\-CONFGEN" "8" "September 18, 2009" "BIND9" "BIND9"
+.TH "DDNS\-CONFGEN" "8" "March 6, 2014" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.SH "NAME"
ddns\-confgen \- ddns key generation tool
.SH "SYNOPSIS"
+.HP 12
+\fBtsig\-keygen\fR [\fB\-a\ \fR\fB\fIalgorithm\fR\fR] [\fB\-h\fR] [\fB\-r\ \fR\fB\fIrandomfile\fR\fR] [name]
.HP 13
-\fBddns\-confgen\fR [\fB\-a\ \fR\fB\fIalgorithm\fR\fR] [\fB\-h\fR] [\fB\-k\ \fR\fB\fIkeyname\fR\fR] [\fB\-r\ \fR\fB\fIrandomfile\fR\fR] [\-s\ \fIname\fR | \-z\ \fIzone\fR] [\fB\-q\fR] [name]
+\fBddns\-confgen\fR [\fB\-a\ \fR\fB\fIalgorithm\fR\fR] [\fB\-h\fR] [\fB\-k\ \fR\fB\fIkeyname\fR\fR] [\fB\-q\fR] [\fB\-r\ \fR\fB\fIrandomfile\fR\fR] [\-s\ \fIname\fR | \-z\ \fIzone\fR]
.SH "DESCRIPTION"
.PP
-\fBddns\-confgen\fR
-generates a key for use by
-\fBnsupdate\fR
+\fBtsig\-keygen\fR
and
-\fBnamed\fR. It simplifies configuration of dynamic zones by generating a key and providing the
+\fBddns\-confgen\fR
+are invokation methods for a utility that generates keys for use in TSIG signing. The resulting keys can be used, for example, to secure dynamic DNS updates to a zone or for the
+\fBrndc\fR
+command channel.
+.PP
+When run as
+\fBtsig\-keygen\fR, a domain name can be specified on the command line which will be used as the name of the generated key. If no name is specified, the default is
+\fBtsig\-key\fR.
+.PP
+When run as
+\fBddns\-confgen\fR, the generated key is accompanied by configuration text and instructions that can be used with
\fBnsupdate\fR
and
-\fBnamed.conf\fR
-syntax that will be needed to use it, including an example
+\fBnamed\fR
+when setting up dynamic DNS, including an example
\fBupdate\-policy\fR
-statement.
-.PP
-If a domain name is specified on the command line, it will be used in the name of the generated key and in the sample
-\fBnamed.conf\fR
-syntax. For example,
-\fBddns\-confgen example.com\fR
-would generate a key called "ddns\-key.example.com", and sample
-\fBnamed.conf\fR
-command that could be used in the zone definition for "example.com".
+statement. (This usage similar to the
+\fBrndc\-confgen\fR
+command for setting up command channel security.)
.PP
Note that
\fBnamed\fR
itself can configure a local DDNS key for use with
-\fBnsupdate \-l\fR.
+\fBnsupdate \-l\fR: it does this when a zone is configured with
+\fBupdate\-policy local;\fR.
\fBddns\-confgen\fR
is only needed when a more elaborate configuration is required: for instance, if
\fBnsupdate\fR
.PP
\-a \fIalgorithm\fR
.RS 4
-Specifies the algorithm to use for the TSIG key. Available choices are: hmac\-md5, hmac\-sha1, hmac\-sha224, hmac\-sha256, hmac\-sha384 and hmac\-sha512. The default is hmac\-sha256.
+Specifies the algorithm to use for the TSIG key. Available choices are: hmac\-md5, hmac\-sha1, hmac\-sha224, hmac\-sha256, hmac\-sha384 and hmac\-sha512. The default is hmac\-sha256. Options are case\-insensitive, and the "hmac\-" prefix may be omitted.
.RE
.PP
\-h
.RS 4
-Prints a short summary of the options and arguments to
-\fBddns\-confgen\fR.
+Prints a short summary of options and arguments.
.RE
.PP
\-k \fIkeyname\fR
.PP
\-q
.RS 4
-Quiet mode: Print only the key, with no explanatory text or usage examples.
+(\fBddns\-confgen\fR
+only.) Quiet mode: Print only the key, with no explanatory text or usage examples; This is essentially identical to
+\fBtsig\-keygen\fR.
.RE
.PP
\-r \fIrandomfile\fR
.PP
\-s \fIname\fR
.RS 4
-Single host mode: The example
+(\fBddns\-confgen\fR
+only.) Generate configuration example to allow dynamic updates of a single hostname. The example
\fBnamed.conf\fR
text shows how to set an update policy for the specified
\fIname\fR
.PP
\-z \fIzone\fR
.RS 4
-zone mode: The example
+(\fBddns\-confgen\fR
+only.) Generate configuration example to allow dynamic updates of a zone: The example
\fBnamed.conf\fR
text shows how to set an update policy for the specified
\fIzone\fR
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">ddns-confgen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [ -s <em class="replaceable"><code>name</code></em> | -z <em class="replaceable"><code>zone</code></em> ] [<code class="option">-q</code>] [name]</p></div>
+<div class="cmdsynopsis"><p><code class="command">tsig-keygen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [name]</p></div>
+<div class="cmdsynopsis"><p><code class="command">ddns-confgen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-q</code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [ -s <em class="replaceable"><code>name</code></em> | -z <em class="replaceable"><code>zone</code></em> ]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543398"></a><h2>DESCRIPTION</h2>
-<p><span><strong class="command">ddns-confgen</strong></span>
- generates a key for use by <span><strong class="command">nsupdate</strong></span>
- and <span><strong class="command">named</strong></span>. It simplifies configuration
- of dynamic zones by generating a key and providing the
- <span><strong class="command">nsupdate</strong></span> and <span><strong class="command">named.conf</strong></span>
- syntax that will be needed to use it, including an example
- <span><strong class="command">update-policy</strong></span> statement.
+<a name="id2543426"></a><h2>DESCRIPTION</h2>
+<p>
+ <span><strong class="command">tsig-keygen</strong></span> and <span><strong class="command">ddns-confgen</strong></span>
+ are invokation methods for a utility that generates keys for use
+ in TSIG signing. The resulting keys can be used, for example,
+ to secure dynamic DNS updates to a zone or for the
+ <span><strong class="command">rndc</strong></span> command channel.
+ </p>
+<p>
+ When run as <span><strong class="command">tsig-keygen</strong></span>, a domain name
+ can be specified on the command line which will be used as
+ the name of the generated key. If no name is specified,
+ the default is <code class="constant">tsig-key</code>.
</p>
<p>
- If a domain name is specified on the command line, it will
- be used in the name of the generated key and in the sample
- <span><strong class="command">named.conf</strong></span> syntax. For example,
- <span><strong class="command">ddns-confgen example.com</strong></span> would
- generate a key called "ddns-key.example.com", and sample
- <span><strong class="command">named.conf</strong></span> command that could be used
- in the zone definition for "example.com".
+ When run as <span><strong class="command">ddns-confgen</strong></span>, the generated
+ key is accompanied by configuration text and instructions
+ that can be used with <span><strong class="command">nsupdate</strong></span> and
+ <span><strong class="command">named</strong></span> when setting up dynamic DNS,
+ including an example <span><strong class="command">update-policy</strong></span>
+ statement. (This usage similar to the
+ <span><strong class="command">rndc-confgen</strong></span> command for setting
+ up command channel security.)
</p>
<p>
Note that <span><strong class="command">named</strong></span> itself can configure a
- local DDNS key for use with <span><strong class="command">nsupdate -l</strong></span>.
+ local DDNS key for use with <span><strong class="command">nsupdate -l</strong></span>:
+ it does this when a zone is configured with
+ <span><strong class="command">update-policy local;</strong></span>.
<span><strong class="command">ddns-confgen</strong></span> is only needed when a
- more elaborate configuration is required: for instance, if
- <span><strong class="command">nsupdate</strong></span> is to be used from a remote system.
+ more elaborate configuration is required: for instance,
+ if <span><strong class="command">nsupdate</strong></span> is to be used from a remote
+ system.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543458"></a><h2>OPTIONS</h2>
+<a name="id2543499"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
<dd><p>
Specifies the algorithm to use for the TSIG key. Available
choices are: hmac-md5, hmac-sha1, hmac-sha224, hmac-sha256,
hmac-sha384 and hmac-sha512. The default is hmac-sha256.
+ Options are case-insensitive, and the "hmac-" prefix
+ may be omitted.
</p></dd>
<dt><span class="term">-h</span></dt>
<dd><p>
- Prints a short summary of the options and arguments to
- <span><strong class="command">ddns-confgen</strong></span>.
+ Prints a short summary of options and arguments.
</p></dd>
<dt><span class="term">-k <em class="replaceable"><code>keyname</code></em></span></dt>
<dd><p>
</p></dd>
<dt><span class="term">-q</span></dt>
<dd><p>
- Quiet mode: Print only the key, with no explanatory text or
- usage examples.
+ (<span><strong class="command">ddns-confgen</strong></span> only.) Quiet mode: Print
+ only the key, with no explanatory text or usage examples;
+ This is essentially identical to <span><strong class="command">tsig-keygen</strong></span>.
</p></dd>
<dt><span class="term">-r <em class="replaceable"><code>randomfile</code></em></span></dt>
<dd><p>
</p></dd>
<dt><span class="term">-s <em class="replaceable"><code>name</code></em></span></dt>
<dd><p>
- Single host mode: The example <span><strong class="command">named.conf</strong></span> text
- shows how to set an update policy for the specified
- <em class="replaceable"><code>name</code></em>
- using the "name" nametype.
- The default key name is
+ (<span><strong class="command">ddns-confgen</strong></span> only.)
+ Generate configuration example to allow dynamic updates
+ of a single hostname. The example <span><strong class="command">named.conf</strong></span>
+ text shows how to set an update policy for the specified
+ <em class="replaceable"><code>name</code></em>
+ using the "name" nametype. The default key name is
ddns-key.<em class="replaceable"><code>name</code></em>.
Note that the "self" nametype cannot be used, since
the name to be updated may differ from the key name.
</p></dd>
<dt><span class="term">-z <em class="replaceable"><code>zone</code></em></span></dt>
<dd><p>
- zone mode: The example <span><strong class="command">named.conf</strong></span> text
+ (<span><strong class="command">ddns-confgen</strong></span> only.)
+ Generate configuration example to allow dynamic updates
+ of a zone: The example <span><strong class="command">named.conf</strong></span> text
shows how to set an update policy for the specified
<em class="replaceable"><code>zone</code></em>
- using the "zonesub" nametype, allowing updates to all subdomain
- names within
- that <em class="replaceable"><code>zone</code></em>.
+ using the "zonesub" nametype, allowing updates to
+ all subdomain names within that
+ <em class="replaceable"><code>zone</code></em>.
This option cannot be used with the <code class="option">-s</code> option.
</p></dd>
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543645"></a><h2>SEE ALSO</h2>
+<a name="id2543697"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">nsupdate</span>(1)</span>,
<span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543684"></a><h2>AUTHOR</h2>
+<a name="id2543735"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
<div class="cmdsynopsis"><p><code class="command">arpaname</code> {<em class="replaceable"><code>ipaddress </code></em>...}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2621449"></a><h2>DESCRIPTION</h2>
+<a name="id2621458"></a><h2>DESCRIPTION</h2>
<p>
<span><strong class="command">arpaname</strong></span> translates IP addresses (IPv4 and
IPv6) to the corresponding IN-ADDR.ARPA or IP6.ARPA names.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2621464"></a><h2>SEE ALSO</h2>
+<a name="id2621473"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">BIND 9 Administrator Reference Manual</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2621478"></a><h2>AUTHOR</h2>
+<a name="id2621486"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">ddns-confgen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [ -s <em class="replaceable"><code>name</code></em> | -z <em class="replaceable"><code>zone</code></em> ] [<code class="option">-q</code>] [name]</p></div>
+<div class="cmdsynopsis"><p><code class="command">tsig-keygen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [name]</p></div>
+<div class="cmdsynopsis"><p><code class="command">ddns-confgen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-q</code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [ -s <em class="replaceable"><code>name</code></em> | -z <em class="replaceable"><code>zone</code></em> ]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2663250"></a><h2>DESCRIPTION</h2>
-<p><span><strong class="command">ddns-confgen</strong></span>
- generates a key for use by <span><strong class="command">nsupdate</strong></span>
- and <span><strong class="command">named</strong></span>. It simplifies configuration
- of dynamic zones by generating a key and providing the
- <span><strong class="command">nsupdate</strong></span> and <span><strong class="command">named.conf</strong></span>
- syntax that will be needed to use it, including an example
- <span><strong class="command">update-policy</strong></span> statement.
+<a name="id2663371"></a><h2>DESCRIPTION</h2>
+<p>
+ <span><strong class="command">tsig-keygen</strong></span> and <span><strong class="command">ddns-confgen</strong></span>
+ are invokation methods for a utility that generates keys for use
+ in TSIG signing. The resulting keys can be used, for example,
+ to secure dynamic DNS updates to a zone or for the
+ <span><strong class="command">rndc</strong></span> command channel.
+ </p>
+<p>
+ When run as <span><strong class="command">tsig-keygen</strong></span>, a domain name
+ can be specified on the command line which will be used as
+ the name of the generated key. If no name is specified,
+ the default is <code class="constant">tsig-key</code>.
</p>
<p>
- If a domain name is specified on the command line, it will
- be used in the name of the generated key and in the sample
- <span><strong class="command">named.conf</strong></span> syntax. For example,
- <span><strong class="command">ddns-confgen example.com</strong></span> would
- generate a key called "ddns-key.example.com", and sample
- <span><strong class="command">named.conf</strong></span> command that could be used
- in the zone definition for "example.com".
+ When run as <span><strong class="command">ddns-confgen</strong></span>, the generated
+ key is accompanied by configuration text and instructions
+ that can be used with <span><strong class="command">nsupdate</strong></span> and
+ <span><strong class="command">named</strong></span> when setting up dynamic DNS,
+ including an example <span><strong class="command">update-policy</strong></span>
+ statement. (This usage similar to the
+ <span><strong class="command">rndc-confgen</strong></span> command for setting
+ up command channel security.)
</p>
<p>
Note that <span><strong class="command">named</strong></span> itself can configure a
- local DDNS key for use with <span><strong class="command">nsupdate -l</strong></span>.
+ local DDNS key for use with <span><strong class="command">nsupdate -l</strong></span>:
+ it does this when a zone is configured with
+ <span><strong class="command">update-policy local;</strong></span>.
<span><strong class="command">ddns-confgen</strong></span> is only needed when a
- more elaborate configuration is required: for instance, if
- <span><strong class="command">nsupdate</strong></span> is to be used from a remote system.
+ more elaborate configuration is required: for instance,
+ if <span><strong class="command">nsupdate</strong></span> is to be used from a remote
+ system.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2663405"></a><h2>OPTIONS</h2>
+<a name="id2663475"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
<dd><p>
Specifies the algorithm to use for the TSIG key. Available
choices are: hmac-md5, hmac-sha1, hmac-sha224, hmac-sha256,
hmac-sha384 and hmac-sha512. The default is hmac-sha256.
+ Options are case-insensitive, and the "hmac-" prefix
+ may be omitted.
</p></dd>
<dt><span class="term">-h</span></dt>
<dd><p>
- Prints a short summary of the options and arguments to
- <span><strong class="command">ddns-confgen</strong></span>.
+ Prints a short summary of options and arguments.
</p></dd>
<dt><span class="term">-k <em class="replaceable"><code>keyname</code></em></span></dt>
<dd><p>
</p></dd>
<dt><span class="term">-q</span></dt>
<dd><p>
- Quiet mode: Print only the key, with no explanatory text or
- usage examples.
+ (<span><strong class="command">ddns-confgen</strong></span> only.) Quiet mode: Print
+ only the key, with no explanatory text or usage examples;
+ This is essentially identical to <span><strong class="command">tsig-keygen</strong></span>.
</p></dd>
<dt><span class="term">-r <em class="replaceable"><code>randomfile</code></em></span></dt>
<dd><p>
</p></dd>
<dt><span class="term">-s <em class="replaceable"><code>name</code></em></span></dt>
<dd><p>
- Single host mode: The example <span><strong class="command">named.conf</strong></span> text
- shows how to set an update policy for the specified
- <em class="replaceable"><code>name</code></em>
- using the "name" nametype.
- The default key name is
+ (<span><strong class="command">ddns-confgen</strong></span> only.)
+ Generate configuration example to allow dynamic updates
+ of a single hostname. The example <span><strong class="command">named.conf</strong></span>
+ text shows how to set an update policy for the specified
+ <em class="replaceable"><code>name</code></em>
+ using the "name" nametype. The default key name is
ddns-key.<em class="replaceable"><code>name</code></em>.
Note that the "self" nametype cannot be used, since
the name to be updated may differ from the key name.
</p></dd>
<dt><span class="term">-z <em class="replaceable"><code>zone</code></em></span></dt>
<dd><p>
- zone mode: The example <span><strong class="command">named.conf</strong></span> text
+ (<span><strong class="command">ddns-confgen</strong></span> only.)
+ Generate configuration example to allow dynamic updates
+ of a zone: The example <span><strong class="command">named.conf</strong></span> text
shows how to set an update policy for the specified
<em class="replaceable"><code>zone</code></em>
- using the "zonesub" nametype, allowing updates to all subdomain
- names within
- that <em class="replaceable"><code>zone</code></em>.
+ using the "zonesub" nametype, allowing updates to
+ all subdomain names within that
+ <em class="replaceable"><code>zone</code></em>.
This option cannot be used with the <code class="option">-s</code> option.
</p></dd>
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2663606"></a><h2>SEE ALSO</h2>
+<a name="id2663691"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">nsupdate</span>(1)</span>,
<span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2663644"></a><h2>AUTHOR</h2>
+<a name="id2663730"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
<div class="cmdsynopsis"><p><code class="command">genrandom</code> [<code class="option">-n <em class="replaceable"><code>number</code></em></code>] {<em class="replaceable"><code>size</code></em>} {<em class="replaceable"><code>filename</code></em>}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2621848"></a><h2>DESCRIPTION</h2>
+<a name="id2663772"></a><h2>DESCRIPTION</h2>
<p>
<span><strong class="command">genrandom</strong></span>
generates a file or a set of files containing a specified quantity
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2663710"></a><h2>ARGUMENTS</h2>
+<a name="id2663787"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-n <em class="replaceable"><code>number</code></em></span></dt>
<dd><p>
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2663771"></a><h2>SEE ALSO</h2>
+<a name="id2663916"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry"><span class="refentrytitle">rand</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">arc4random</span>(3)</span>
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2663798"></a><h2>AUTHOR</h2>
+<a name="id2663943"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
<div class="cmdsynopsis"><p><code class="command">isc-hmac-fixup</code> {<em class="replaceable"><code>algorithm</code></em>} {<em class="replaceable"><code>secret</code></em>}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2621870"></a><h2>DESCRIPTION</h2>
+<a name="id2621879"></a><h2>DESCRIPTION</h2>
<p>
Versions of BIND 9 up to and including BIND 9.6 had a bug causing
HMAC-SHA* TSIG keys which were longer than the digest length of the
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2621898"></a><h2>SECURITY CONSIDERATIONS</h2>
+<a name="id2621907"></a><h2>SECURITY CONSIDERATIONS</h2>
<p>
Secrets that have been converted by <span><strong class="command">isc-hmac-fixup</strong></span>
are shortened, but as this is how the HMAC protocol works in
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2621914"></a><h2>SEE ALSO</h2>
+<a name="id2665272"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
<em class="citetitle">RFC 2104</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2665281"></a><h2>AUTHOR</h2>
+<a name="id2665289"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
<div class="cmdsynopsis"><p><code class="command">nsec3hash</code> {<em class="replaceable"><code>salt</code></em>} {<em class="replaceable"><code>algorithm</code></em>} {<em class="replaceable"><code>iterations</code></em>} {<em class="replaceable"><code>domain</code></em>}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2622044"></a><h2>DESCRIPTION</h2>
+<a name="id2622053"></a><h2>DESCRIPTION</h2>
<p>
<span><strong class="command">nsec3hash</strong></span> generates an NSEC3 hash based on
a set of NSEC3 parameters. This can be used to check the validity
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2665340"></a><h2>ARGUMENTS</h2>
+<a name="id2665349"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl>
<dt><span class="term">salt</span></dt>
<dd><p>
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2665402"></a><h2>SEE ALSO</h2>
+<a name="id2665411"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
<em class="citetitle">RFC 5155</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2665419"></a><h2>AUTHOR</h2>
+<a name="id2665428"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>