{"id":3859,"date":"2022-12-20T17:28:16","date_gmt":"2022-12-20T20:28:16","guid":{"rendered":"http:\/\/lode.uno\/linux-man\/index.php\/2022\/12\/20\/ddnsconfgen-man8-2\/"},"modified":"2022-12-20T17:28:16","modified_gmt":"2022-12-20T20:28:16","slug":"ddnsconfgen-man8-2","status":"publish","type":"post","link":"https:\/\/lode.uno\/linux-man\/2022\/12\/20\/ddnsconfgen-man8-2\/","title":{"rendered":"DDNS&minus;CONFGEN (man8)"},"content":{"rendered":"<h1 align=\"center\">DDNS\u2212CONFGEN<\/h1>\n<p> <a href=\"#NAME\">NAME<\/a><br \/> <a href=\"#SYNOPSIS\">SYNOPSIS<\/a><br \/> <a href=\"#DESCRIPTION\">DESCRIPTION<\/a><br \/> <a href=\"#OPTIONS\">OPTIONS<\/a><br \/> <a href=\"#SEE ALSO\">SEE ALSO<\/a><br \/> <a href=\"#AUTHOR\">AUTHOR<\/a><br \/> <a href=\"#COPYRIGHT\">COPYRIGHT<\/a> <\/p>\n<hr>\n<h2>NAME <a name=\"NAME\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\">ddns-confgen \u2212 ddns key generation tool<\/p>\n<h2>SYNOPSIS <a name=\"SYNOPSIS\"><\/a> <\/h2>\n<table width=\"100%\" border=\"0\" rules=\"none\" frame=\"void\" cellspacing=\"0\" cellpadding=\"0\">\n<tr valign=\"top\" align=\"left\">\n<td width=\"11%\"><\/td>\n<td width=\"89%\">\n<p style=\"margin-top: 1em\"><b>tsig\u2212keygen<\/b> [<b>\u2212a\u00a0<\/b><i>algorithm<\/i>] [<b>\u2212h<\/b>] [<b>\u2212r\u00a0<\/b><i>randomfile<\/i>] [name]<\/p>\n<\/td>\n<\/tr>\n<tr valign=\"top\" align=\"left\">\n<td width=\"11%\"><\/td>\n<td width=\"89%\">\n<p style=\"margin-top: 1em\"><b>ddns\u2212confgen<\/b> [<b>\u2212a\u00a0<\/b><i>algorithm<\/i>] [<b>\u2212h<\/b>] [<b>\u2212k\u00a0<\/b><i>keyname<\/i>] [<b>\u2212q<\/b>] [<b>\u2212r\u00a0<\/b><i>randomfile<\/i>] [\u2212s\u00a0<i>name<\/i> | \u2212z\u00a0<i>zone<\/i>]<\/p>\n<\/td>\n<\/tr>\n<\/table>\n<h2>DESCRIPTION <a name=\"DESCRIPTION\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\"><b>tsig\u2212keygen<\/b> and <b>ddns\u2212confgen<\/b> are invocation methods for a utility that generates keys for use in TSIG signing. The resulting keys can be used, for example, to secure dynamic DNS updates to a zone or for the <b>rndc<\/b> command channel.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">When run as <b>tsig\u2212keygen<\/b>, a domain name can be specified on the command line which will be used as the name of the generated key. If no name is specified, the default is <b>tsig\u2212key<\/b>.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">When run as <b>ddns\u2212confgen<\/b>, the generated key is accompanied by configuration text and instructions that can be used with <b>nsupdate<\/b> and <b>named<\/b> when setting up dynamic DNS, including an example <b>update\u2212policy<\/b> statement. (This usage similar to the <b>rndc\u2212confgen<\/b> command for setting up command channel security.)<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">Note that <b>named<\/b> itself can configure a local DDNS key for use with <b>nsupdate \u2212l<\/b>: it does this when a zone is configured with <b>update\u2212policy local;<\/b>. <b>ddns\u2212confgen<\/b> is only needed when a more elaborate configuration is required: for instance, if <b>nsupdate<\/b> is to be used from a remote system.<\/p>\n<h2>OPTIONS <a name=\"OPTIONS\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\">\u2212a <i>algorithm<\/i><\/p>\n<p style=\"margin-left:17%;\">Specifies the algorithm to use for the TSIG key. Available choices are: hmac\u2212md5, hmac\u2212sha1, hmac\u2212sha224, hmac\u2212sha256, hmac\u2212sha384 and hmac\u2212sha512. The default is hmac\u2212sha256. Options are case\u2212insensitive, and the &#8220;hmac\u2212&#8221; prefix may be omitted.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">\u2212h<\/p>\n<p style=\"margin-left:17%;\">Prints a short summary of options and arguments.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">\u2212k <i>keyname<\/i><\/p>\n<p style=\"margin-left:17%;\">Specifies the key name of the DDNS authentication key. The default is <b>ddns\u2212key<\/b> when neither the <b>\u2212s<\/b> nor <b>\u2212z<\/b> option is specified; otherwise, the default is <b>ddns\u2212key<\/b> as a separate label followed by the argument of the option, e.g., <b>ddns\u2212key.example.com.<\/b> The key name must have the format of a valid domain name, consisting of letters, digits, hyphens and periods.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">\u2212q<\/p>\n<p style=\"margin-left:17%;\">(<b>ddns\u2212confgen<\/b> only.) Quiet mode: Print only the key, with no explanatory text or usage examples; This is essentially identical to <b>tsig\u2212keygen<\/b>.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">\u2212r <i>randomfile<\/i><\/p>\n<p style=\"margin-left:17%;\">Specifies a source of random data for generating the authorization. If the operating system does not provide a \/dev\/random or equivalent device, the default source of randomness is keyboard input. randomdev specifies the name of a character device or file containing random data to be used instead of the default. The special value keyboard indicates that keyboard input should be used.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">\u2212s <i>name<\/i><\/p>\n<p style=\"margin-left:17%;\">(<b>ddns\u2212confgen<\/b> only.) Generate configuration example to allow dynamic updates of a single hostname. The example <b>named.conf<\/b> text shows how to set an update policy for the specified <i>name<\/i> using the &#8220;name&#8221; nametype. The default key name is ddns\u2212key.<i>name<\/i>. Note that the &#8220;self&#8221; nametype cannot be used, since the name to be updated may differ from the key name. This option cannot be used with the <b>\u2212z<\/b> option.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">\u2212z <i>zone<\/i><\/p>\n<p style=\"margin-left:17%;\">(<b>ddns\u2212confgen<\/b> only.) Generate configuration example to allow dynamic updates of a zone: The example <b>named.conf<\/b> text shows how to set an update policy for the specified <i>zone<\/i> using the &#8220;zonesub&#8221; nametype, allowing updates to all subdomain names within that <i>zone<\/i>. This option cannot be used with the <b>\u2212s<\/b> option.<\/p>\n<h2>SEE ALSO <a name=\"SEE ALSO\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\"><b>nsupdate<\/b>(1), <b>named.conf<\/b>(5), <b>named<\/b>(8), BIND 9 Administrator Reference Manual.<\/p>\n<h2>AUTHOR <a name=\"AUTHOR\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\"><b>Internet Systems Consortium, Inc.<\/b><\/p>\n<h2>COPYRIGHT <a name=\"COPYRIGHT\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\">Copyright \u00a9 2009, 2014-2016, 2018-2021 Internet Systems Consortium, Inc. (&#8220;ISC&#8221;)<\/p>\n<hr>\n","protected":false},"excerpt":{"rendered":"<p>  ddns-confgen \u2212 ddns key generation tool <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[5,52,4,952],"class_list":["post-3859","post","type-post","status-publish","format-standard","hentry","category-8-administracion-del-sistema","tag-5","tag-administracion","tag-man8","tag-tsig-keygen"],"gutentor_comment":0,"_links":{"self":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3859","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/comments?post=3859"}],"version-history":[{"count":0,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3859\/revisions"}],"wp:attachment":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/media?parent=3859"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/categories?post=3859"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/tags?post=3859"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}