Browse Source

[2005] clarify "config add" for adding a new ACL rule with a value

JINMEI Tatuya 13 years ago
parent
commit
1f195b1c22
1 changed files with 9 additions and 2 deletions
  1. 9 2
      doc/guide/bind10-guide.xml

+ 9 - 2
doc/guide/bind10-guide.xml

@@ -2109,8 +2109,9 @@ what is XfroutClient xfr_client??
         Multiple rules can be specified in the ACL, and an ACL rule
         Multiple rules can be specified in the ACL, and an ACL rule
         can consist of multiple constraints, such as a combination of
         can consist of multiple constraints, such as a combination of
         IP address and TSIG.
         IP address and TSIG.
-        The following configuration sequence will add to the previous
+        The following configuration sequence will add a new rule to
-        ACL a rule that allows update requests sent from a client
+        ACL created in the above example.  This additional rule
+	allows update requests sent from a client
         using TSIG key name of "key.example" and has an IPv6 address of ::1.
         using TSIG key name of "key.example" and has an IPv6 address of ::1.
       <screen>
       <screen>
 &gt; <userinput>config add DDNS/zones[0]/update_acl {"action": "ACCEPT", "from": "::1", "key": "key.example"}</userinput>
 &gt; <userinput>config add DDNS/zones[0]/update_acl {"action": "ACCEPT", "from": "::1", "key": "key.example"}</userinput>
@@ -2119,6 +2120,12 @@ DDNS/zones[0]/update_acl[0]     {"action": "ACCEPT", "key": "key.example.org"} a
 DDNS/zones[0]/update_acl[1]     {"action": "ACCEPT", "from": "::1", "key": "key.example"} any (modified)
 DDNS/zones[0]/update_acl[1]     {"action": "ACCEPT", "from": "::1", "key": "key.example"} any (modified)
 &gt; <userinput>config commit</userinput>
 &gt; <userinput>config commit</userinput>
 </screen>
 </screen>
+      (Note the "add" in the first line.  Before this sequence, we
+      have had only entry in zones[0]/update_acl.  The "add" command
+      with a value (rule) adds a new entry and sets it to the given rule.
+      Due to a limitation of the current implementation, it doesn't
+      work if you first try to just add a new entry and then set it to
+      a given rule).
       </para>
       </para>
 
 
       <note><simpara>
       <note><simpara>