[Freeipa-users] FreeIPA DNSSEC NSEC3PARAM record

Günther J. Niederwimmer gjn at gjn.priv.at
Thu Dec 10 15:05:00 UTC 2015


Am Thursday 10 December 2015, 12:51:19 schrieb Petr Spacek:
> On 9.12.2015 14:40, Günther J. Niederwimmer wrote:
> > Hello,
> > 
> > I like to create a NSEC3PARAM Record but my tests are not working :-(.
> > 
> > Is there a documentation for this Problem I can't found a DOCU
> > 
> > My test is
> > 
> > I make a "Salt" with this
> > 
> > head -c 512 /dev/random | sha1sum | cut -b 1-16
> > xxxxxxxxxxxxx...
> > 
> > afterward i make with
> > ldns-nsec3-hash -t 10 -s xxxxxxxxxxxxxxxxxx xxxxx.com
> > xxxxx.....
> > 
> > the result i like to insert in the WebUI but this is wrong ?
> > 
> > What is the correct syntax to create a NSEC3PARAM record?
> > 
> > Thanks for a answer,
> 
> Hello,
> 
> FreeIPA just passes the value to BIND, so standard syntax per
> http://tools.ietf.org/html/rfc5155#section-4.3
> should work.
> 
> I hope this helps.
;-)

I am not a Mathematic Professor to understand this ;-)

OK, I have to search again in World Wide Web to find a answer. 

-- 
mit freundlichen Grüßen / best regards,

  Günther J. Niederwimmer




More information about the Freeipa-users mailing list