diff options
Diffstat (limited to 'contrib/bind/bin/named/named.conf')
| -rw-r--r-- | contrib/bind/bin/named/named.conf | 24 |
1 files changed, 12 insertions, 12 deletions
diff --git a/contrib/bind/bin/named/named.conf b/contrib/bind/bin/named/named.conf index d423b34..08ef27d 100644 --- a/contrib/bind/bin/named/named.conf +++ b/contrib/bind/bin/named/named.conf @@ -14,6 +14,16 @@ // watch out for ";" -- it's important! +key sample_key { // for TSIG + algorithm hmac-md5; // hmac-md5 is the supported algorithm + secret "abcdefgh"; // base 64 encoded secret +}; + +key key2 { + algorithm hmac-md5; + secret "87654321"; +}; + options { directory "."; // use current directory named-xfer "/usr/libexec/named-xfer"; // _PATH_XFER @@ -42,7 +52,7 @@ options { // notify on a zone-by-zone // basis in the "zone" statement // see (below) - max-serial-queries 4; // number of parallel SOA queries + serial-queries 4; // number of parallel SOA queries // we can have outstanding for master // zone change testing purposes auth-nxdomain yes; // always set AA on NXDOMAIN. @@ -194,7 +204,7 @@ zone "slave.demo.zone" { ixfr-base "slave.demo.zone.ixfr"; // File name for IXFR transaction log file masters { 1.2.3.4; // where to zone transfer from - 5.6.7.8; + 5.6.7.8 key key2; }; transfer-source 10.0.0.53; // fixes multihoming problems check-names warn; @@ -250,16 +260,6 @@ zone "non-default-acl.demo.zone" { }; }; -key sample_key { // for TSIG - algorithm hmac-md5; // hmac-md5 is the supported algorithm - secret "abcdefgh"; // base 64 encoded secret -}; - -key key2 { - algorithm hmac-md5; - secret "87654321"; -}; - acl key_acl { key sample_key; }; // a request signed with sample_key server 1.2.3.4 { |
