[v9_8] clarify managed-keys syntax

(cherry picked from commit 54ca2413348024c6d03904c01486c952c3d4a3bc)

diff --git a/CHANGES b/CHANGES
index e82c18a4102556c9dfe98879981fd47aad672108..fe4b5695c67310d3800869227b541a4906f7a718 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+3463.  [doc]           Clarify managed-keys syntax in ARM. [RT 32232]
+
+3462.  [doc]           Clarify server selection behavior of dig when using
+                       -4 or -6 options. [RT #32181]
+
 3461.  [bug]           Negative responses could incorrectly have AD=1
                        set. [RT #32237]
 

diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
index 4f4f78d97827ed0aa6f06721d59e188707ec0ace..adb15f511f76070e220a4230940c48871b0c8a10 100644 (file)
--- a/doc/arm/Bv9ARM-book.xml
+++ b/doc/arm/Bv9ARM-book.xml
@@ -9957,8 +9957,8 @@ ns.domain.com.rpz-nsdname   CNAME   .
           <title><command>managed-keys</command> Statement Grammar</title>
 
 <programlisting><command>managed-keys</command> {
-    <replaceable>string</replaceable> initial-key <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>string</replaceable> ;
-    <optional> <replaceable>string</replaceable> initial-key <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>string</replaceable> ; <optional>...</optional></optional>
+    <replaceable>name</replaceable> <literal>initial-key</literal> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key-data</replaceable> ;
+    <optional> <replaceable>name</replaceable> <literal>initial-key</literal> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key-data</replaceable> ; <optional>...</optional></optional>
 };
 </programlisting>
 
@@ -10066,13 +10066,16 @@ ns.domain.com.rpz-nsdname   CNAME   .
             <command>named</command>.)
          </para>
          <para>
-           If the <command>dnssec-lookaside</command> option is
+           If the <command>dnssec-validation</command> option is
            set to <userinput>auto</userinput>, <command>named</command>
            will automatically initialize a managed key for the
-           zone <literal>dlv.isc.org</literal>.  The key that is
-           used to initialize the key maintenance process is built
-           into <command>named</command>, and can be overridden
-           from <command>bindkeys-file</command>.
+            root zone.  Similarly, if the <command>dnssec-lookaside</command>
+            option is set to <userinput>auto</userinput>,
+            <command>named</command> will automatically initialize
+            a managed key for the zone <literal>dlv.isc.org</literal>.
+            In both cases, the key that is used to initialize the key
+            maintenance process is built into <command>named</command>,
+            and can be overridden from <command>bindkeys-file</command>.
          </para>
        </sect2>