mir/kea
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/kea synced 2025-08-31 05:55:28 +00:00
Code Issues Releases Wiki Activity

[#2125] Updated examples and doc

Browse Source
This commit is contained in:
Francis Dupont
2021-10-08 18:48:41 +02:00
parent 45c01d92af
commit 8da22b535a
2 changed files with 22 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
doc/examples/ddns/gss-tsig.json
View File

@@ -72,6 +72,7 @@
"credentials-cache": "FILE:/etc/ccache", // toplevel only
"tkey-lifetime": 3600,
"tkey-protocol": "TCP",
"fallback": false,
// The list of GSS-TSIG capable servers
"servers": [
@@ -86,7 +87,9 @@
"server-principal": "DNS/server1.example.org@EXAMPLE.ORG",
"client-principal": "DHCP/admin1.example.org@EXAMPLE.ORG",
"tkey-lifetime": 86400, // 24h
"tkey-protocol": "TCP"
"tkey-protocol": "TCP",
"fallback": true // if no key is available fallback to the
// standard behavior (vs skip this server)
},
{
// The second server (it has most of the parameters missing

20
doc/sphinx/arm/ext-gss-tsig.rst
View File

@@ -464,7 +464,8 @@ An excerpt from D2 server is provided below. More examples are available in the
.. code-block:: javascript
:linenos:
:emphasize-lines: 57-99
:emphasize-lines: 57-100
{
"DhcpDdns": {
@@ -538,6 +539,7 @@ An excerpt from D2 server is provided below. More examples are available in the
"credentials-cache": "FILE:/etc/ccache", // toplevel only
"tkey-lifetime": 3600,
"tkey-protocol": "TCP",
"fallback": false,
// The list of GSS-TSIG capable servers
"servers": [
@@ -552,7 +554,9 @@ An excerpt from D2 server is provided below. More examples are available in the
"server-principal": "DNS/server1.example.org@EXAMPLE.ORG",
"client-principal": "DHCP/admin1.example.org@EXAMPLE.ORG",
"tkey-lifetime": 86400, // 24h
"tkey-protocol": "TCP"
"tkey-protocol": "TCP",
"fallback": true // if no key is available fallback to the
// standard behavior (vs skip this server)
},
{
// The second server (it has most of the parameters missing
@@ -623,6 +627,13 @@ The parameters have the following meaning:
- ``tkey-lifetime`` determines the lifetime of GSS-TSIG keys in the
TKEY protocol, expressed in seconds. Default value is 3600 (one hour).
- ``fallback`` governs the behavior when GSS-TSIG should be used (a
matching DNS server is configured) but a GSS-TSIG key is available.
If configured to false (the default) this server is skipped, if
configured to true the DNS server is ignored and the DNS update
is sent with the configured DHCP-DDNS protection e.g. TSIG key or
unsecure.
- ``user-context`` is an optional parameter (see :ref:`user-context`
for a general description of user contexts in Kea).
@@ -667,6 +678,11 @@ The server map parameters are:
takes precedence. Default and supported values are the same as for
the global level parameter.
- ``fallback`` governs the behavior when GSS-TSIG should be used (a
matching DNS server is configured) but a GSS-TSIG key is available.
The fallback parameter per server takes precedence. Default and
supported values are the same as for the global level parameter.
- ``user-context`` is an optional parameter (see :ref:`user-context`
for a general description of user contexts in Kea).