KEY.DNS\_RESOLVER(8) Linux Key Management Utilities KEY.DNS\_RESOLVER(8)

# [NAME](#NAME)

key.dns\_resolver - upcall for request-key to handle dns\_resolver keys

# [SYNOPSIS](#SYNOPSIS)

**/sbin/key.dns\_resolver** <key>  
**/sbin/key.dns\_resolver** --dump-config \[-c <configfile>]  
**/sbin/key.dns\_resolver** -D \[-v] \[-v] \[-c <configfile>] <desc>  
<calloutinfo>

# [DESCRIPTION](#DESCRIPTION)

This program is invoked by request-key on behalf of the kernel when kernel services (such as NFS, CIFS and AFS) want to perform a hostname lookup and the kernel does not have the key cached. It is not ordinarily intended to be called directly.

There program has internal parameters that can be changed with a configuration file (see [key.dns\_resolver.conf(5)](/man/os/keyutils/key.dns_resolver.conf.5) for more information). The default configuration file is in /etc, but this can be overridden with the **-c** flag.

The program can be called in debugging mode to test its functionality by passing a **-D** or **--debug** flag on the command line. For this to work, the key description and the callout information must be supplied. Verbosity can be increased by supplying one or more **-v** flags.

The program may also be called with **--dump-config** to show the values that configurable parameters will have after parsing the config file.

# [ERRORS](#ERRORS)

All errors will be logged to the syslog.

# [SEE ALSO](#SEE_ALSO)

[**key.dns\_resolver.conf**(5)](/man/os/keyutils/key.dns_resolver.conf.5), [**request-key.conf**(5)](/man/os/keyutils/request-key.conf.5), [**keyrings**(7)](/man/os/keyutils/keyrings.7), [**request-key**(8)](/man/os/keyutils/request-key.8)

18 May 2020 Linux

---

Document: key.dns_resolver(8) from keyutils 1.6.3-r41 (Chainguard OS)
Source: https://kernel.googlesource.com/pub/scm/linux/kernel/git/dhowells/keyutils.git