Description

I want to be able to use the local-ddns key (nsupdate -l, etc) but also add additional options to the associated update-policy. For example:

update-policy {grant local-ddns zonesub any; grant bad-key zonesub any; };

If I have an "update-policy local;" in any zone in the configuration, the local-ddns key is generated, but if all update-policy statements are "extended", as above, the key isn't created.

Request

New global option: generate-local-ddns {true|false};

If true, generate a local-ddns key and write it to filesystem as with "update-policy local;".

Defaults to false unless an "update-policy local;" is in the configuration.

If specified "false" in configuration and "update-policy local;" exists, emit warning (?) during BIND startup.

Links / references