From: Kees Monshouwer Date: Fri, 16 Aug 2013 22:44:56 +0000 (+0200) Subject: filling 'ordename' and 'auth' X-Git-Tag: rec-3.6.0-rc1~500^2 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=5c6158cc5d644de1fef202078723178afdd571bd;p=pdns filling 'ordename' and 'auth' --- diff --git a/pdns/docs/pdns.xml b/pdns/docs/pdns.xml index 10b02b8a9..f081b237c 100755 --- a/pdns/docs/pdns.xml +++ b/pdns/docs/pdns.xml @@ -12979,10 +12979,10 @@ $ pdnssec rectify-zone powerdnssec.org present for this purpose. Do note that the DS record for a secure delegation should be authoritative! - The 'ordername' field needs to be filled out depending on the NSEC/NSEC3 mode. When running in NSEC3 'Narrow' mode, - the ordername field is ignored and best left empty. In NSEC mode, the ordername field should be NULL for any glue but filled in - for delegation NS records and all authoritative records. In NSEC3 opt-out mode (the only NSEC3 mode PowerDNS currently - supports), any non-authoritative records (as described for the 'auth' field) should have ordername set to NULL. + The 'ordername' field needs to be filled out depending on the NSEC/NSEC3 mode. When running in NSEC3 'Narrow' mode, the + ordername field is ignored and best left empty. In NSEC/NSEC3 mode, the ordername field should be NULL for any glue but filled in + for all delegation NS records and all authoritative records. In NSEC3 opt-out mode, ordername is NULL for any glue and insecure + delegation NS records, but filled in for secure delegation NS records and all authoritative records. In 'NSEC' mode, it should contain the relative part of a domain name, in reverse order, with dots replaced