mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-08-31 06:25:31 +00:00
3112. [doc] Add missing descriptions of the update policy name
types "ms-self", "ms-subdomain", "krb5-self" and "krb5-subdomain", which allow machines to update their own records, to the BIND 9 ARM.
This commit is contained in:
5
CHANGES
5
CHANGES
@@ -1,3 +1,8 @@
|
||||
3112. [doc] Add missing descriptions of the update policy name
|
||||
types "ms-self", "ms-subdomain", "krb5-self" and
|
||||
"krb5-subdomain", which allow machines to update
|
||||
their own records, to the BIND 9 ARM.
|
||||
|
||||
3111. [bug] Improved consistency checks for dnssec-enable and
|
||||
dnssec-validation, added test cases to the
|
||||
checkconf system test. [RT #24398]
|
||||
|
@@ -18,7 +18,7 @@
|
||||
- PERFORMANCE OF THIS SOFTWARE.
|
||||
-->
|
||||
|
||||
<!-- File: $Id: Bv9ARM-book.xml,v 1.489 2011/05/08 06:49:18 marka Exp $ -->
|
||||
<!-- File: $Id: Bv9ARM-book.xml,v 1.490 2011/05/16 04:09:34 marka Exp $ -->
|
||||
<book xmlns:xi="http://www.w3.org/2001/XInclude">
|
||||
<title>BIND 9 Administrator Reference Manual</title>
|
||||
|
||||
@@ -11314,7 +11314,13 @@ example.com. NS ns2.example.net.
|
||||
The <replaceable>identity</replaceable> field must
|
||||
contain a fully-qualified domain name.
|
||||
</para>
|
||||
|
||||
<para>
|
||||
For nametypes <varname>krb5-self</varname>,
|
||||
<varname>ms-self</varname>, <varname>krb5-subdomain</varname>,
|
||||
and <varname>ms-subdomain</varname> the
|
||||
<replaceable>identity</replaceable> field specifies
|
||||
the Windows or Kerberos realm of the machine belongs to.
|
||||
</para>
|
||||
<para>
|
||||
The <replaceable>nametype</replaceable> field has 13
|
||||
values:
|
||||
@@ -11446,6 +11452,70 @@ example.com. NS ns2.example.net.
|
||||
</para>
|
||||
</entry>
|
||||
</row>
|
||||
<row rowsep="0">
|
||||
<entry colname="1">
|
||||
<para>
|
||||
<varname>ms-self</varname>
|
||||
</para>
|
||||
</entry> <entry colname="2">
|
||||
<para>
|
||||
This rule takes a Windows machine principal
|
||||
(machine$@REALM) for machine in REALM and
|
||||
and converts it machine.realm allowing the machine
|
||||
to update machine.realm. The REALM to be matched
|
||||
is specified in the <replacable>identity</replacable>
|
||||
field.
|
||||
</para>
|
||||
</entry>
|
||||
</row>
|
||||
<row rowsep="0">
|
||||
<entry colname="1">
|
||||
<para>
|
||||
<varname>ms-subdomain</varname>
|
||||
</para>
|
||||
</entry> <entry colname="2">
|
||||
<para>
|
||||
This rule takes a Windows machine principal
|
||||
(machine$@REALM) for machine in REALM and
|
||||
converts it to machine.realm allowing the machine
|
||||
to update subdomains of machine.realm. The REALM
|
||||
to be matched is specified in the
|
||||
<replacable>identity</replacable> field.
|
||||
</para>
|
||||
</entry>
|
||||
</row>
|
||||
<row rowsep="0">
|
||||
<entry colname="1">
|
||||
<para>
|
||||
<varname>krb5-self</varname>
|
||||
</para>
|
||||
</entry> <entry colname="2">
|
||||
<para>
|
||||
This rule takes a Kerberos machine principal
|
||||
(host/machine@REALM) for machine in REALM and
|
||||
and converts it machine.realm allowing the machine
|
||||
to update machine.realm. The REALM to be matched
|
||||
is specified in the <replacable>identity</replacable>
|
||||
field.
|
||||
</para>
|
||||
</entry>
|
||||
</row>
|
||||
<row rowsep="0">
|
||||
<entry colname="1">
|
||||
<para>
|
||||
<varname>krb5-subdomain</varname>
|
||||
</para>
|
||||
</entry> <entry colname="2">
|
||||
<para>
|
||||
This rule takes a Kerberos machine principal
|
||||
(host/machine@REALM) for machine in REALM and
|
||||
converts it to machine.realm allowing the machine
|
||||
to update subdomains of machine.realm. The REALM
|
||||
to be matched is specified in the
|
||||
<replacable>identity</replacable> field.
|
||||
</para>
|
||||
</entry>
|
||||
</row>
|
||||
<row rowsep="0">
|
||||
<entry colname="1">
|
||||
<para>
|
||||
|
Reference in New Issue
Block a user