Changeset 1865 for trunk/pdns/pdns/docs/pdns.xml

Timestamp:

01/11/11 14:44:43 (2 years ago)

Author:

ahu

Message:

fix typo in bindbackend, add pdnssec hash-zone-record convenience function for manual hashing, plus document it

Files:

• trunk/pdns/pdns/docs/pdns.xml (modified) (5 diffs)

trunk/pdns/pdns/docs/pdns.xml

@@ -9325 +9325 @@
         </varlistentry>
         <varlistentry>
+            <term>hash-zone-record ZONE RECORDNAME</term>
+            <listitem>
+              <para>
+                This convenience command hashes the name 'recordname' according to the NSEC3 settings of ZONE.
+                Refuses to hash for zones with no NSEC3 settings.
+              </para>
+            </listitem>
+        </varlistentry>
+        <varlistentry>
             <term>import-zone-dnskey ZONE filename [ksk|zsk]</term>
             <listitem>
@@ -9480 +9489 @@
     <para>
       For now, it is necessary to execute a manual SQL 'insert' into the domains table of the backend hosting
-      the keying material. This is needed to generate a zone-id for the relevant domain.
+      the keying material. This is needed to generate a zone-id for the relevant domain. Sample SQL statement:
+      <command>insert into domains (name, type) values ('powerdnssec.org', 'NATIVE');</command>.
     </para>
     </warning>
@@ -9497 +9507 @@
   </para>
   <para>
-    The 'auth' field should be 0 however for NS records which are used for delegation, and also for any glue records
-    present for this purpose.
+    The 'auth' field should be 0 however for NS records which are used for delegation, and also for any glue (A, AAAA) records
+    present for this purpose. Do note that the DS record for a secure delegation should be authoritative!
   </para>
   <para>
@@ -9510 +9520 @@
   <para>
     In 'NSEC3' non-narrow mode, the ordername should contain a lowercase base32hex encoded representation of the salted &amp; iterated hash
-    of the full record name.
+    of the full record name. <command>pdnssec hash-zone-record zone record</command> can be used to calculate this hash.
   </para>
   </section>
@@ -9545 +9555 @@
     <listitem><para>Miek Gieben</para></listitem>
     <listitem><para>Stephane Bortzmeyer (AFNIC)</para></listitem>
-    <listitem><para>Michael Braunoede (nic.at)</para></listitem>
+    <listitem><para>Michael Braunoeder (nic.at)</para></listitem>
     <listitem><para>Peter van Dijk</para></listitem>
     <listitem><para>Maik Zumstrull</para></listitem>