2019-10-18 Revision: 3.4
- Introduction
- The .dk Registry in Brief
- EPP in Brief
- EPP Service
- Implementation Requirements
- Implementation Extensions
- Implementation Limitations
- Supported Object Transform and Query Commands
- hello and greeting
- login
- logout
- poll and message queue
- create domain
- check domain
- info domain
- renew domain
- update domain
- check host
- info host
- create host
- create host request
- create host response
- create host request with request to new administrator
- create host response from request to new administrator
- Delayed create host response, from request to new administrator
- create host request, with request to registrant of host domain name
- create host response, from request to registrant of domain name
- Delayed create host response, from request to registrant of domain name
- update host
- delete host
- create contact
- check contact
- info contact
- update contact
- delete contact
- Data Collection Policy
- References
- Resources
- Appendices
This document describes and specifies the implementation offered by DK Hostmaster for interaction with the central registry for the ccTLD dk using the Extensible Provisioning Protocol (EPP). It is primarily aimed at a technical audience, and the reader is required to have prior knowledge of DNS registration and EPP.
This specification describes version 3.X.X of the DK Hostmaster EPP Implementation. Future releases will be reflected in updates to this specification, please see the document history section below.
The document describes the current DK Hostmaster EPP implementation, for more general documentation on the EPP protocol, EPP client development or configuration, please refer to the RFCs and additional resources in the References and Resources chapters below.
Do note that the specification describes the latest released service. Service version is listed in the Document History, so given changes implemented in the service are reflected in the specification. Do note that a service might be released to the sandbox environment prior to being released to production after a grace period.
The current actively used XSD file is indicated in the EPP service specification, the XSD file repository might contain changes not actively used by the service. Please see the EPP Service Specification Wiki for exact details.
The current service version can be obtained from the Greeting message, from the service.
Any future extensions and possible additions and changes to the implementation are not within the scope of this document and will not be discussed or mentioned throughout this document.
This document is owned and maintained by DK Hostmaster A/S and must not be distributed without this information.
All examples provided in the document are fabricated or changed from real data to demonstrate commands etc. any resemblance to actual data are coincidental.
This document is copyright by DK Hostmaster A/S and is licensed under the MIT License, please see the separate LICENSE file for details.
-
3.4 2019-10-18
- Clarified renew domain
- Correction/clarification on ownership of DSRECORDS for create domain and update domain, in the general section on DNSSEC
- Clarification on status of DNSSEC for create domain and update domain, in the general section on DNSSEC
-
3.3 2019-09-09
- Update to info domain, example response updated, it now contains DNSSEC data
- Added clarifications on DNSSEC data availability, even though it is limited currently
- Added information on the EPP Service Specification Wiki for operation reference information
- Corrected spelling errors and other minor issues
-
3.2 2019-07-29
- Clarification to create contact, removed obsolete description of attention field rule for registrants
-
3.1 2019-05-07
- Minor update documenting changes introduced in release 3.2.X of the EPP service
- Update to info domain extended with registrant validation status
- Update to info contact extended with e-mail address for the contact object, where applicable
- Update to info domain extended with DNSSEC information
- Update to create contact more strict handling of VAT numbers, see table specifying the use of the field in: CVR / Vat Number Indication
- Update to update domain documentation on deletion and addition of DNSSEC records
-
3.0 2019-04-30
- Major update based on the changes with major release 3.X.X of the EPP service
- Documenting removal of public access to information on non-registrant users for contact objects (users)
- Documenting removal of public access to information on name server contacts for host objects (name servers)
-
2.16 2019-01-11
- Updated info domain to capability to provide information on the billing contact, when applicable
-
2.15 2018-12-03
- Added information on the new consolidated sandbox environment
- Corrected some spelling and grammatical errors
-
2.14 2018-11-21
- Updated information on sandbox environment, latest changes to domain creation emulation had not been added
-
2.13 2018-11-08
- Updated description of risk assessment under create domain
-
2.12 2018-10-29
- Updated process diagram for update domain
- Added missing process diagram for command evaluation for update domain
-
2.11 2018-10-23
- Added more information on the rules and errors codes related to renew domain
-
2.10 2018-10-08
- Added more information on create host command and the use of extension versus authentication for specification of name server administrator.
-
2.9 2018-10-03
- Added diagram for contact creation revision 1.0, please see the create contact command section
-
2.8 2018-09-18
- Removed pointers to the decommissioned pre-activation service and pre-activation service specification
-
2.7 2018-09-11
- Minor correction, to the
reason(status) for domains offered from waiting list, since thereasondid not comply with the XSD definition. Thereasonis corrected in EPP service version: EPP 2.4.2
- Minor correction, to the
-
2.6 2018-08-22
- Describes EPP service 2.4.X
- Added information on
reason(status)enqueuedfor check domain command - Added information on silenced out of band communication for change of billing contact for a domain
-
2.5 2018-06-22
- Updated XSD history and information on XSD version 2.4
- Added information on service and specification versions and retrieving of version information from the service
- Added examples of poll messages related to domain creation
-
2.4 2018-05-25
- Added information on format of the
orderconfirmationToken, this is implemented with EPP release 2.3.0 currently only available in sandbox and introduces the new extension:dkhm:url - Addition of risk assessment for create domain command poll response. The XSD files revision 2.2 describes the changes to the XSD and supports the new extension:
dkhm:risk_assessment
- Added information on format of the
-
2.3 2018-05-01
- Updated XSD history
- Added diagram for create domain
-
2.2 2017-12-19
- Removed information on status blocked, which has been deprecated
-
2.1 2017-06-08
- Removed information on waiting list handling, since this is being revisited
-
2.0 2016-10-24
- Describes EPP service 2.X.X
- Added renew domain description
- Added update domain description
- Added create/update/delete host descriptions
- Added update contact description
- Added XSD 2.0 description
-
1.10 2016-06-08
- Added information on IP whitelisting
-
1.9 2016-01-30
- Information on new waiting list handling
- Information on new DNSSEC key handling
-
1.8 2015-09-03
-
1.7 2015-05-12
- This revision of the specification is describing EPP service release 1.3.X
- This release also updates the XSD specification to revision 1.4, introducing the extension
pnumberfor transport of production unit numbers for validation of Danish companies as part of the create contact command
-
1.6 2015-01-06
- This revision of the specification is describing EPP service release 1.2.X
- This release also updates the XSD specification to revision 1.3
- The document has with this revision been ported from a proprietary format to markdown and is being hosted on GitHub for easier maintenance and distribution, this has resulted in a lot of minor corrections and clarifications.
- Extended the section about this document, due to the migration to GitHub, so copyright is now explicitly mentioned
- info contact command extended with validation information
- create domain command extended with validation information for registrant
- create domain command extended with information on confirmation status for domain
-
1.5 2014-06-18
- This revision of the specification is describing EPP service release 1.1.X
- The test environment is no longer active
- Examples updated to latest XSD revision (1.2)
- Pre-activation token (
orderconfirmationToken) can be transported via extension for create domain command
-
1.4 2013-11-19
- Corrected links in resources
- Emphasized the use of the
autokeyword for contact creation, this has also been listed in the implementation limitations section - Added information on the restrictive use of
clTRIDin new section entitled: Implementation Requirements
-
1.3 2013-10-29
- This revision of the specification is describing EPP service release 1.0.9
- Added information on use of
clTRIDin context of create domain command - Added more information on the domain check command, which has been extended with EPP service release 1.0.9.
- This release also updates the XSD specification to revision 1.1
-
1.2 2013-08-07
- This revision of the specification is describing EPP service release 1.0.8
- Added note on domain check
-
1.1 2013-05-31
- Added paragraph on passwords in section on the login command
- Added mention of standard port 700
- Corrected some of the XML examples, which had not been updated to reflect the correct use of XSDs
- Added important note on contact creation
-
1.0 2013-02-25
- Initial revision
- Describes EPP service 1.X.X
- Introduces XSD specification revision 1.0
DK Hostmaster is the registry for the ccTLD for Denmark (dk). The current model used in Denmark is based on a sole registry, with DK Hostmaster maintaining the central DNS registry.
The legislation and registry model utilized in Denmark imposes some limitations compared to the EPP protocol in general, since the primary intent of the EPP protocol is focused on a model based on shared-registry rather than a sole-registry model like the one used in Denmark.
These limitations are described in detail below in the chapter entitled Implementation Limitations, and these are explained further in the command descriptions where the single commands deviate from the EPP standard specification. In addition to limitations and deviations found in the above, a few others have been implemented to support DNS registration under Danish legislation, these are described in detail under the individual commands, where relevant.
Our EPP extensions are registered with the IANA EPP Extension Repository.
EPP is an XML-based protocol aimed at provisioning data between registries. The protocol is intended for machine-to-machine communication in a client-server setup. Please see the References chapter for more information on specifications and references for EPP.
Please note that the service does not support XML entity expansion on the server side, due to security implications related to this feature.
The DK Hostmaster’s EPP Service is based on an SOA architecture. EPP implementation is regarded as a service offered to external parties requiring provisioning actions towards DK Hostmaster.
The EPP service requires the use of and possible development of EPP client software. This is beyond the scope of this specification as the API and other assets for assisting in this are the primary object of this document.
In addition to the assets, DK Hostmaster aims to assist users and developers of EPP client software with integration towards DK Hostmaster and therefore provide facilities to ease this integration. This is primarily centered around a sandbox environment and related documentation.
The service is implemented under the following principles:
1 Adhere to the standard to the extent possible or use non-intrusive extensions to support the requirements or finally use mandatory extensions to adhere to service requirements 1 Use in-band communication, meaning requests made via EPP will be responded to via EPP unless the end-user have specified differently 1 Use standard error code to the extent possible, communicating state more clearly and unambiguously
The EPP service supports the following protocols for transport security:
- TLSv1.2
DK Hostmaster offers the following environments:
-
Please see EPP service specification Wiki for up to date information for the production environment accessible at:
epp.dk-hostmaster.dkon port:700 -
This environment is the production environment
-
info and check requests made to this environment will reflect live production data
-
create requests made to this environment will be carried out provided that they comply with business rules and general terms
-
Approved domains will be processed for possible activation and propagation into the zone
-
Contacts (users) will be created and will be available in other systems like the self-service system etc.
-
Hosts (name servers) will be processed for possible activation
-
The Change Password operation is available in this environment
-
Please note that this operation will change the password and this change will be reflected in other systems
-
This is environment is using IP Whitelisting
-
This environment is only available to registrars
-
Please see EPP service specification Wiki for up to date information for the production environment accessible at :
epp-sandbox.dk-hostmaster.dkon port:700 -
This environment is intended for client development towards the DK Hostmaster EPP service
-
info and check requests made to this environment will reflect sandbox data. For host objects, some static content synched in by DK Hostmaster, in addition to sandbox data
-
create requests made to this environment will be serialized in the sandbox environment, provided that syntax and data are valid
-
Domains will be enqueued and are processed for possible activation, responses are reflected in messages available for polling, propagation into a zone file is not supported
-
Contacts (users) can be created and will be available in the sandbox system
-
The Change Password operation will only change the password in the sandbox environment
-
This environment is available to both registrars and name server administrators
Please note that when you first start to use the EPP sandbox environment, the access credentials are matching your production credentials. If these do not work as expected (e.g. error 2200). please contact: [email protected] to get the credentials synchronized.
For more information on the consolidated sandbox environment please see the specification.
This section outlines the overall requirements in regard to implementing an EPP client to work with the DK Hostmaster EPP service.
In order to ensure transactional integrity and due to the asynchronous nature of some of the EPP commands, we rely on the client transaction id to be unique. This is unique as per client id. The assists in ensuring that a delayed response can be easily identified by simple means.
The clTRID is recommended to be unique for all transactions and is required to be unique for the create domain command. This might change in the future.
Since 2016-02-29 DK Hostmaster has enforced IP whitelisting of IPs for access to the EPP service. Additions and removals of IP addresses is currently a manual process handled by DK Hostmaster.
Please submit change requests including registrar handle information to:
The EPP service implemented by DK Hostmaster holds several extensions, these are documented where appropriate for the specific commands etc. This section serves to give an overview of the extensions as a whole.
Please refer to the dkhm-2.0 for implementation details.
Here follows a listed, the extensions are described separately and in detail below.
dkhm:userTypedkhm:EANdkhm:CVRdkhm:pnumberdkhm:mobilephonedkhm:secondaryEmaildkhm:trackingNodkhm:domainAdvisorydkhm:orderconfirmationTokendkhm:domain_confirmeddkhm:contact_validateddkhm:registrant_validateddkhm:requestedNsAdmindkhm:urldkhm:risk_assessment
The userType extension is used to categorize a contact type, since the requirements for data differs between the different user types, we need to be able to differentiate between: company, individual, public organization and association. More information is available under the create contact command.
Related extensions are dkhm:EAN, dkhm:CVR and dkhm:pnumber.
The EAN extension, holds the EAN number associated with public organizations in Denmark. The field is mandatory for this type of contact objects and is required for electronic invoicing, more information is available under the create contact command.
The CVR extension is for holding VAT registration numbers. The number is used for validation and VAT accounting. More information is available under the create contact command.
The p-number extension is for holding production-unit numbers, used for validation for Danish companies, with more physical addressed related to one VAT number. More information is available under the create contact command.
A unique tracking number for a domain registration for uniformity with the mail form. EPP it not the only channel of domain registration and in order to handle registrations via multiple channel, a unique tracking-id is assigned to every request. More information is available under the create domain command.
Any special circumstances in relation to a domain name, can be communicated using this special field. Please see the specific commands for examples.
This is a special field for supporting the business flow where the agreement for a domain name is accepted by the registrant with the registrar. More information is available under the create domain command.
Domain names registered with DK Hostmaster, has to be confirmed by the registrant, this is can either be done using pre-application agreement to terms, see the orderconfirmationToken above or other systems with DK Hostmaster, the domain confirmation state is available via the create domain command using this extension.
See also orderconfirmationToken.
Contact objects related to the role of registrant has to be validated, this field is used to indicate the status of a validation object via the info contact command.
As described above, contact objects related to the role of registrant has to be validated, this field is used to indicate the status of a validation object via the create domain command.
See also contact_validated.
Contact objects can have a mobile phone number in addition to voice and fax. The extension was introduced in the DK Hostmaster XSD file set 1.6.
Contact objects can have a secondary email address in addition to email. The extension was introduced in the DK Hostmaster XSD file set 1.6.
The extension is used for update and create host, where it is possible to request another name server administrator than the authenticated user. The extension was introduced in the DK Hostmaster XSD file set 1.5.
This extension can be used to redirect an end-user to the next step. For now it is used in relation to domain creation, where the user can be directed to the next step if this is handled by DK Hostmaster. More information is available under the create domain command.
This extension is used in the poll response in relation to domain creation. The extension provides information on the risk assessment made by DK Hostmaster A/S. Please see the create domain command.
As mentioned previously the EPP service comes with some limitations. Please see the Compatibility Matrix in the appendices.
The current implementation implements the following list of commands:
- hello
- login, including change password
- logout
- poll, including acknowledgement of messages
- info (contact/domain/host)
- check (contact/domain/host)
- create (contact/domain/host)
- renew (domain)
- update (contact/domain/host)
- delete (host)
All commands are described in detail below.
The following commands have not been implemented in the service described in this specification:
- delete (contact/domain)
- transfer (contact/domain)
In general the service is not localized and all EPP related errors and messages are provided in English.
The service does not support the following features of the EPP protocol:
- Authorization, meaning the use of
authInfofor commands extended the authorization for the command in question. General authorization based on the client authentication works as described in RFC5730. - Transport of
authInfo, the section is ignored is not recommended for transport of end-user passwords
Comparing the EPP implementation to the existing channel for domain registration using the form via SMTP, the following fields are not supported.
- VID (VIP domain name)
- Billing contact's purchase order (PO) number
I accordance with RFC 5910. We support DS only and not DNSKEY. In addition the maximum signature lifetime (secDNS:maxSigLife) is disregarded. See section 3.3 in the referenced RFC.
DK Hostmaster specifies rules ownership of DNSSEC keys. If you provide DNSSEC keys a part of registration (create domain) or using update domain, the keys are associated with the NSA as owner.
Not all algorithms are supported, please refer to the DK Hostmaster Name Service specification for a complete list of supported algorithms.
When adding DSRECORDS for a domain name using create domain or update domain, the status is by default active and the DSRECORDS will be published. The DNSSEC status feature for the domain name can prohibit the publication, this feature is available only to the registrant for the specific domain and act as a kill switch for use by the registrant in case of issues with DNSSEC.
Availability of DNSSEC information and status is currently limited to public available data.
This command does not support the feature of providing a predefined contact-id. The contact-id has to be specified as auto and the contact-id is assigned by DK Hostmaster. See also information on the create contact command.
Due to a limitation in the AAA system implemented by DK Hostmaster, it is currently not possible to see contact objects using info contact, if these are not registrants. This is regarded as a temporarily limitation, which will be fixed at some point in the future. The recommendation is to use check contact for now.
This command does not support the setting and removal of status using the XML element: host:status. The status is assigned by DK Hostmaster. See also information on the update host command.
This command does not support the change of the registrant and the setting and removal of status using the XML element: domain:status. The status is assigned by DK Hostmaster. See also information on the update domain command.
Host info will only supply the name server administrator/zone contact information if the requesting user has a relationship to the user, either via a domain role or registrar group.
Contact info will only supply the registrant information. For other contact objects, if the requesting user has to have a relationship to the contact object, either via a host or domain role or registrar group.
Domain info will only supply the registrant information for relevant contact objects. For other contact objects assigned to the domain name, the requesting user has to have a relationship to the domain or contact object, either via a host or domain role or registrar group.
Availability of DNSSEC information and status is currently limited to public available data.
Please note that some information is not disclosed when using Object Query Commands. See the specific commands for more information.
The Danish registry supports IDN domain names and the EPP commands support Punycode notation for this in requests. We do however not support Punycode notation in responses at this time.
The following describes the currently supported EPP commands. As mentioned previously, some of the commands have been extended beyond the basic capabilities of EPP. These minor extensions are described separately under each command and are included in the XSD files listed in the Resources chapter.
Commands that have not been extended are not described in much detail, please refer to the general EPP documentation from IETF (see: the RFCs listed in References).
This part of the EPP protocol is described in RFC 5730. This command adheres to the standard. For a more detailed explanation of the data collection policy announced via the greeting, please see the Data Collection Policy chapter.
As announced in the greeting, the following objects are available:
- Host
- Domain
- Contact
With regard to extensions, the following are available:
Please see the greeting response included in the appendices for illustration of the actual announcement.
This part of the EPP protocol is described in RFC 5730. This command adheres to the standard.
The login uses the general AAA functionality in DK Hostmaster. This mean that in addition to the validation of username and password specified as part of the login request, an attempt is made to authorize the authenticated user for access to the actual EPP service and subsequent operations.
Authorization is currently only available to specified user roles, therefore the username provided must point to an entity with the role of registrar or name server administrator with the DK Hostmaster registry. See also Available Environments above.
DK Hostmaster supports the change of passwords via EPP. Please refer to the chapter Available Environments for any special circumstances.
Password should adhere to the following requirements:
EPP supports a password with at least 6 and max 16, where DK Hostmaster supports 8 - 64 characters. The password must include at least three of these four character types:
- Lower-case letters
- Upper-case letters
- Numbers
- Special Characters
The following characters are legal special characters in passwords:
% ` ' ( ) * + - , . / : ; < > = ! _ & ~ { } | ^ ? $ # @ " [ ]
Currently, the only language supported is English. So the language parameter is ignored and all responses are provided in English.
<?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<command>
<login>
<clID>REG-999999</clID>
<pw>*********</pw>
<options>
<version>1.0</version>
<lang>en</lang>
</options>
<svcs>
<objURI>domainurn:ietf:params:xml:ns:domain-1.0urn:ietf:params:xml:ns:domain-1.0 domain-1.0.xsd</objURI>
<objURI>hosturn:ietf:params:xml:ns:host-1.0urn:ietf:params:xml:ns:host-1.0 host-1.0.xsd</objURI>
<objURI>contacturn:ietf:params:xml:ns:contact-1.0urn:ietf:params:xml:ns:contact-1.0 contact-1.0.xsd</objURI>
</svcs>
</login>
<clTRID>d52eaf8995d2b679fe9dc53ee5bc3ad9</clTRID>
</command>
</epp><?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1000">
<msg>User REG-999999 logged in.</msg>
</result>
<trID>
<clTRID>d52eaf8995d2b679fe9dc53ee5bc3ad9</clTRID>
<svTRID>63BE4FAE-F6F9-11E3-867F-A6B052036DCB</svTRID>
</trID>
</response>
</epp>This part of the EPP protocol is described in RFC 5730. This command adheres to the standard.
There are no special additions or alterations to the specification or use of this command.
<?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<command>
<logout />
<clTRID>9450488c8280671c051f273285d7bec7</clTRID>
</command>
</epp><?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1500">
<msg>User logged out. Closing Connection.</msg>
</result>
<trID>
<clTRID>9450488c8280671c051f273285d7bec7</clTRID>
<svTRID>370F8F46-F6F3-11E3-867F-A6B052036DCB</svTRID>
</trID>
</response>
</epp>This part of the EPP protocol is described in RFC 5730. This command adheres to the standard.
There are no special additions or alterations to the specification or use of this command.
For clarification 2303 is returned in case a provided message-id (msgID) point to a non-existing message.
<?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<poll op="req"/>
<clTRID>09ed6c730e5c4c671c69ea8a4325ac06</clTRID>
</command>
</epp><?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1301">
<msg>Command completed successfully; ack to dequeue</msg>
</result>
<msgQ count="10" id="1">
<msg>Create domain pending for eksempel.dk</msg> </msgQ>
<resData>
<domain:creData xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name>eksempel.dk</domain:name>
<domain:crDate>2013-02-13T13:43:24.0Z</domain:crDate>
</domain:creData>
</resData>
<trID>
<clTRID>bb96ddfcbe2becbe1e7d974a5b22e29a</clTRID>
<svTRID>EFE89190-CC4B-11E6-B51D-4F7D3A107CA1</svTRID>
</trID>
</response>
</epp><?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<poll msgID="1" op="ack"/>
<clTRID>a05bd42e77b26fe18801cbf5216ee199</clTRID>
</command>
</epp><?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1000">
<msg>Command completed successfully</msg>
</result>
<msgQ count="9" id="2">
</msgQ>
<trID>
<clTRID>770e65ed92827c810421faf709b5523c</clTRID>
<svTRID>4ECFA0E0-CC4C-11E6-A3CB-78843A107CA1</svTRID>
</trID></response>
</epp><?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="2303">
<msg>Object does not exist</msg>
</result>
<msgQ count="8" id="5">
</msgQ>
<trID>
<clTRID>9bee91be9f7d15808ce3425af406ddc4</clTRID>
<svTRID>A615AEDA-CC4C-11E6-9191-4F7D3A107CA1</svTRID>
</trID>
</response>
</epp>This part of the EPP protocol is described in RFC 5730. This command adheres to the standard. DK Hostmaster, however, is based on an asynchronous domain creation workflow. All domain requests are enqueued for further processing and their creation will be in a state of pending.
Please note:
authInfosection is ignored is not recommended for transport of end-user passwords
A well-formed request for domain creation will then always result in:
1001, “Commmand completed successfully; action pending”
The extension in response will provide a unique tracking number, which can be used to identify the creation request across provisioning channels offered by DK Hostmaster. The result of the further processing will be relayed back via EPP, see Poll and Messages below.
So the customized response for a domain creation request looks as below.
The create domain command has been extended with a field (orderconfirmationToken) making it possible to assign a token indicating that the registrant has agreed to the terms and conditions for DK Hostmaster with the registrar.
<dkhm:orderconfirmationToken xmlns:dkhm=“urn:dkhm:params:xml:ns:dkhm-2.1”>
1522744544
</dkhm:orderconfirmationToken>The token is a timestamp in EPOCH format, indicating when the agreement was accepted.
The token is handled the following way:
-
If absent DK Hostmaster will require the agreement for the terms and conditions be accepted with DK Hostmaster, this process is handled by DK Hostmaster
-
If present. The token will be validated by DK Hostmaster
-
if not valid the request with result in an error and the request will be dismissed
-
if valid the request will be accepted and processed
The requirement for the registrant to be valid is communicated via the response, using the extension:
dkhm:registrant_validated. Please see the command info contact for more information. The state is communicated in this response in order to provide information on the further flow and process of the create domain request.
An additional URL is specified in the response via the extension dkhm:url, this URL can be presented to the end-user for further processing and for the following scenarios in particular:
- End-user has not agreed to the terms and conditions
- End-user has agreed to the terms and conditions, but ID-control is required
- End-user has agreed to the terms and conditions and ID-control has been completed - no further actions are necessary, self-service access is available and active
As part of the process the final response to a create domain is communicated via the message queue. In this response the DK Hostmaster A/S risk assessment is included, it can hold one of the following values:
RED- the registrant is requested to complete successful ID-control before the domain name can become activeYELLOW- the registrant is requested to complete successful ID-control, the domain name becomes active immediately. If ID-control is not completed within the communicated timeframe the domain is made inactiveBLUE- the registrant is requested to complete successful ID-control before the domain name can become activeGREEN- the domain name becomes active immediatelyN/A- the risk assessment could not be performed, the registrant is requested to complete successful ID-control before the domain name can become active
The procedures for ID-control are described on the DK Hostmaster DK website.
The status codes applying to domain are described in the addendum: Status Codes: Domain.
<?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<command>
<create>
<domain:create xmlns:domain="urn:ietf:params:xml:ns:domain-1.0" xsi:schemaLocation="urn:ietf:params:xml:ns:domain-1.0 domain-1.0.xsd">
<domain:name>dk-hostmaster-test-906.dk</domain:name>
<domain:period unit="y">1</domain:period>
<domain:ns>
<domain:hostObj>ns1.dk-hostmaster.dk</domain:hostObj>
<domain:hostObj>ns2.dk-hostmaster.dk</domain:hostObj>
</domain:ns>
<domain:registrant>DKHM1-DK</domain:registrant>
<domain:authInfo>
<domain:pw />
</domain:authInfo>
</domain:create>
</create>
<extension>
<dkhm:orderconfirmationToken xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-1.2">testtoken</dkhm:orderconfirmationToken>
</extension>
<clTRID>92724843f12a3e958588679551aa988d</clTRID>
</command>
</epp><?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1001">
<msg>Create domain pending for domain1.dk</msg>
</result>
<msgQ count="1" id="1"/>
<extension>
<dkhm:trackingNo xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-1.3">2013010100030</dkhm:trackingNo>
<dkhm:domain_confirmed xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-1.3">1</dkhm:domain_confirmed>
<dkhm:registrant_validated xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-1.3">1</dkhm:registrant_validated>
<dkhm:url xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-2.2">https://selfservice-dk-hostmaster.dk/6102505a2e8d0cfbe8c3c99ea49977f36e2d4ee3</dkhm:url>
</extension>
<trID>
<clTRID>47a4178679f26909ebcfcfd8572f315c</clTRID>
<svTRID>EDF4F436-9CC9-11E4-AC57-51CB2AC2711D-2013010100030</svTRID>
</trID>
</response>
</epp>This tracking number (trackingNo), listed as an extension and does not replace or interfere with the normal use of EPP’s transaction keys, clTRID and svTRID, but are EPP specific, whereas the tracking number is considered global in DK Hostmaster. The tracking number is also appended to the svTRID in addition to the listing in the extension part. Please see the last digits following the last dash.
<svTRID>9917BE58-3D53-11E2-A5BD-C532BF0DC46A-1234</svTRID>An important note is that the clTRID is mandatory for this command. Since we use the clTRID to report back via the message polling functionality, when the domain creation request changes state.
The default value for domain value, if not specified, is one year.
As described above the creation of domain names is not synchronous, after the creation of a domain request, resulting in a pending state, will have to be probed using the poll command.
The outcome can be one of two, please see the examples below:
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1301">
<msg>Command completed successfully; ack to dequeue</msg>
</result>
<msgQ count="1" id="2">
<msg>Created domain for eksempel.dk has been approved</msg>
</msgQ>
<resData>
<domain:panData xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name paResult="1">eksempel.dk</domain:name>
<domain:paTRID>
<clTRID>916e2f64ca0956a1bfc24140b23b8fb3</clTRID>
<svTRID>001C6E66-761D-11E8-8775-F5EABB5937F7-2018062200008</svTRID>
</domain:paTRID>
<domain:paDate>2018-06-22T15:07:00.0Z</domain:paDate></domain:panData>
</resData>
<extension>
<dkhm:risk_assessment xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-2.2">N/A</dkhm:risk_assessment> </extension>
<trID>
<clTRID>4fc3af83a40f85dd01bf5110727ee943</clTRID>
<svTRID>7F3D4CD8-761D-11E8-8775-F5EABB5937F7</svTRID> </trID></response>
</epp><epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1301">
<msg>Command completed successfully; ack to dequeue</msg>
</result>
<msgQ count="1" id="1">
<msg>Object exists</msg>
</msgQ>
<resData>
<domain:creData xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name>dk-hostmaster.dk</domain:name>
<domain:crDate>2018-06-22T14:08:08.0Z</domain:crDate>
<domain:exDate>2022-03-31T00:00:00.0Z</domain:exDate>
</domain:creData>
</resData>
<extension>
<dkhm:risk_assessment xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-2.2">N/A</dkhm:risk_assessment>
</extension>
<trID>
<clTRID>71a61d8181fce08fc1c087f409a6168b</clTRID>
<svTRID>DD118802-761C-11E8-8775-F5EABB5937F7</svTRID>
</trID>
</response>
</epp>As for the user entities some mappings are made so all relevant roles are specified.
| EPP | DKHM | Fallback | Note |
|---|---|---|---|
| admin | administrator (fuldmægtig) | registrant | optional, will use fallback |
| billing | billing (betaler) | registrant | optional, will use fallback |
| tech | keyholder (nøgleansvarlig) | optional, will be ignored if keyholder is specified | |
| registrant | registrant | mandatory | |
| registrar | registrar | mandatory |
Please note that the command supports Punycode notation for specifying IDN domain names, but responses are in the specified UTF-8 character set.
<?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<command>
<check>
<domain:check xmlns:domain="urn:ietf:params:xml:ns:domain-1.0" xsi:schemaLocation="urn:ietf:params:xml:ns:domain-1.0 domain-1.0.xsd">
<domain:name>dk-hostmaster.dk</domain:name>
</domain:check>
</check>
<clTRID>82d73f4f441bcc5fa50952196bb19de5</clTRID>
</command>
</epp><?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1000">
<msg>Check result</msg>
</result>
<resData>
<domain:chkData xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:cd>
<domain:name avail="0">dk-hostmaster.dk</domain:name>
<domain:reason>In use</domain:reason>
</domain:cd>
</domain:chkData>
</resData>
<trID>
<clTRID>82d73f4f441bcc5fa50952196bb19de5</clTRID>
<svTRID>36FB99DC-F6F3-11E3-867F-A6B052036DCB</svTRID>
</trID>
</response>
</epp>In general this part of the EPP protocol is described in RFC 5731 and this command adheres to the standard.
The available values for the reason field are:
- "In use" for domain names registered with the DK Hostmaster registry
- "Enqueued" for domain names awaiting domain name application processing, This can last a few seconds to a few days if the application require accept of terms and conditions from the designated registrant
- "Offered for pos. on waiting list", for when the domain name has been offered to a designated registrant from a waiting list position
This part of the EPP protocol is described in RFC 5731. This command adheres to the standard.
Do note that the response only contains the registrant contact object, unless the authenticated user has a relationship via the domain name, which provides access to more information.
The below example could shows the public available information. It could be extended with the following data:
<domain:contact type="admin">DKHM1-DK</domain:contact>and additionally:
<domain:contact type="billing">DKHM1-DK</domain:contact>Do note that the billing contact and admin/proxy is displayed if the authenticated user has user has authorization to see this information. The registrant role information for the domain is public available. The authorization requires a relationship via a role on the domain name or a registrar group association
For DNSSEC data the availability is limited to only displaying if the information is public available.
Please see the addendum on domain status codes.
<?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<info>
<domain:info xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name>dk-hostmaster.dk</domain:name>
</domain:info>
</info>
<clTRID>e007d4d21ec089623bd71b65f33f2865</clTRID>
</command>
</epp><?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1000">
<msg>Info result</msg>
</result>
<resData>
<domain:infData xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name>dk-hostmaster.dk</domain:name>
<domain:roid>DK_HOSTMASTER_DK-DK</domain:roid>
<domain:status s="serverUpdateProhibited"/>
<domain:status s="serverTransferProhibited"/>
<domain:status s="serverDeleteProhibited"/>
<domain:registrant>DKHM1-DK</domain:registrant>
<domain:ns>
<domain:hostObj>auth01.ns.dk-hostmaster.dk</domain:hostObj>
<domain:hostObj>auth02.ns.dk-hostmaster.dk</domain:hostObj>
<domain:hostObj>p.nic.dk</domain:hostObj>
</domain:ns>
<domain:host>auth01.ns.dk-hostmaster.dk</domain:host>
<domain:host>auth02.ns.dk-hostmaster.dk</domain:host>
<domain:host>venteliste1.dk-hostmaster.dk</domain:host>
<domain:host>venteliste2.dk-hostmaster.dk</domain:host>
<domain:host>blocked1.ns.dk-hostmaster.dk</domain:host>
<domain:host>blocked2.ns.dk-hostmaster.dk</domain:host>
<domain:clID>DKHM1-DK</domain:clID>
<domain:crID>DKHM1-DK</domain:crID>
<domain:crDate>1998-01-19T00:00:00.0Z</domain:crDate>
<domain:exDate>2022-03-31T00:00:00.0Z</domain:exDate>
</domain:infData>
</resData>
<extension>
<dkhm:registrant_validated xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-2.4">1</dkhm:registrant_validated>
<secDNS:infData xmlns:secDNS="urn:ietf:params:xml:ns:secDNS-1.1">
<secDNS:dsData>
<secDNS:keyTag>25591</secDNS:keyTag>
<secDNS:alg>8</secDNS:alg>
<secDNS:digestType>2</secDNS:digestType>
<secDNS:digest>d4323bf6717060bda3a537d6c43ed2719d2656f21ae53f85028ed78ae18afcf6</secDNS:digest>
</secDNS:dsData>
<secDNS:dsData>
<secDNS:keyTag>25591</secDNS:keyTag>
<secDNS:alg>8</secDNS:alg>
<secDNS:digestType>4</secDNS:digestType>
<secDNS:digest>c72da309c49d2e468298cb04498bce9879eb40e1a486c16cbe73f6c95a1f9ff31ff35efb7d8d74625935a18b4e64fb15</secDNS:digest>
</secDNS:dsData>
<secDNS:dsData>
<secDNS:keyTag>30491</secDNS:keyTag>
<secDNS:alg>8</secDNS:alg>
<secDNS:digestType>2</secDNS:digestType>
<secDNS:digest>6159b7ab1d087360fffb8d75ea394a6533012562291b94a03bd813c7cd2bf68c</secDNS:digest>
</secDNS:dsData>
<secDNS:dsData>
<secDNS:keyTag>30491</secDNS:keyTag>
<secDNS:alg>8</secDNS:alg>
<secDNS:digestType>4</secDNS:digestType>
<secDNS:digest>434f4f1b37cb408ee9337acd36d26871066e17177d38b2f7070fd0088ce8df289641ac2a2e62e860fa91f210d39c883a</secDNS:digest>
</secDNS:dsData>
</secDNS:infData>
</extension>
<trID>
<clTRID>fee9352765ab62fefc69558d3f4e0eed</clTRID>
<svTRID>CF056EB6-D2CA-11E9-8DAB-C853983F0358</svTRID>
</trID>
</response>
</epp>This part of the EPP protocol is described in RFC 5731. This command adheres to the standard.
Do note that for period specification, only the unit y for year is accepted.
The following values for the period specification are accepted:
1235
Not specifying acceptable parameters will result in error code 2005 with a message indicating the error.
Not specifying the period parameters will result in the unit: y and the value: 1.
| Return Code | Description |
|---|---|
| 2005 | Syntax of the command is not correct |
| 2303 | If the specified domain object does not exist |
| 2201 | If the authenticated user does not hold the privilege to renew the specified domain object. This privilege is given to the billing contact for the domain name (see also the login command) |
| 2306 | If the specified expiry date is not valid. The provided expiration date has to be equal to the current expiration date or we return 2306 |
| 2306 | If the calculated expiry date is not allowed. The new expiration date has to be lower than the current expiration date + 5 years. The maximum period to which the expiration date can be extended is 5 years and 3 months. The current expiration date is available via the info domain command as domain:exDate |
| 2105 | If the domain object is not eligible for renewal. The domain name has to be in the state ‘Active’ and the expiration date has to be a at least month into the future from the current date. This will also be reflected in status value serverRenewProhibited. See also ICANN description of status |
| 2400 | In case of an exception |
| 1000 | If the renew domain command is successful |
This complete process is atomic and might throw an unrecoverable exception: 2400 either due to unforeseen circumstances or a change in the state of the domain name.
On success we emit the return code 1000. No further communication is made via the EPP service. An invoice is generated and is distributed out of band for EPP as shown in the sub-process and an additional message is sent out of band for EPP to the billing contact and the registrant
The sub-process called, can be depicted as follows:
<?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<renew>
<domain:renew xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name>dk-hostmaster.dk</domain:name>
<domain:curExpDate>2017-03-31</domain:curExpDate>
<domain:period unit="y">1</domain:period>
</domain:renew>
</renew>
<clTRID>541b6801ab3cecdda7da5f735e4f1473</clTRID>
</command>
</epp><?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1000">
<msg>OK</msg>
</result>
<msgQ count="10" id="1">
</msgQ>
<trID>
<clTRID>be781a6d19d320867d06e6e80a84a614</clTRID>
<svTRID>64278BDE-CC4B-11E6-8068-487D3A107CA1</svTRID>
</trID>
</response>
</epp>This part of the EPP protocol is described in RFC 5731. This command does not adhere to the standard
authInfosection is ignored is not recommended for transport of end-user passwordscontactobject in thenssection is ignored
This command covers a lot of functionality, it can complete operations such as:
- change registrant for domain
- add name server to domain
- remove name server from domain
- add admin contact
- remove admin contact
- add billing contact
- remove billing contact
- remove DSRECORDS
- add DSRECORDS
In addition it supports DNSSEC management capabilities as specified in RFC 5910
The command will be evaluated as an atomic command, even though it is dispatched to several sub-commands.
The requirements for the command to commence with processing it that the following data are available:
- a valid domain name
- a sub-command, consisting of either
- add (
add) - change (
chg) - remove (
rem)
- add (
If the request is not valid the service responds with a 2005.
If the command is valid, the command is separated into one of more of the following sub-commands (by order of precedence):
-
change registrant
-
remove name server
-
remove admin contact
-
remove billing contact
-
add name server
-
add admin contact
-
add billing contact
-
remove DSRECORDS
-
add DSRECORDS
The commands are then executed sequentially (order is dictates the precedence) as a single transaction. If a single sub-command fails, the transaction is rolled-back and the relevant error code is returned (2XXX).
The command might be stopped if the sub-commands cannot be executed. For example if one of the sub-commands is a: change registrant, none of the other commands can be executed, since role changes will be implicit.
Do note that the change of billing contact, if inserting a registrar-user, will be silent, meaning no e-mails will be sent to the registrant or existing billing contact or other contacts.
When the command succeeds either 1000 or 1001 is returned the latter if one of the operations initiated by the sub-command require additional actions to be taken, 1001 will have precedence over 1000. If a 1001 is returned the status code pendingUpdate might be set if an additional update domain command is issued.
| Return Code | Description |
|---|---|
| 1000 | If the update domain command is successful |
| 1001 | If the update domain command awaits acknowledgement by 3rd. party |
| 2005 | Syntax of the command is not correct |
| 2102 | Change of status for host object is not supported |
| 2201 | If the authenticated user does not hold the privilege to update the specified domain object |
| 2303 | If the specified domain name does not exist |
| 2303 | If the specified host name does not exist, for when adding a new name server |
| 2303 | If the specified host name does not exist, for when removing a name server |
| 2303 | If the specified contact-id does not exist, for when adding a new billing contact |
| 2304 | If the specified host name does not link with the specified domain name, for when removing a name server |
| 2307 | Unimplemented object service, the service does not support change of registrant on a domain |
| 2308 | The number of name servers are below the required limit |
Please see the below sections for details on the different sub-commands.
The command might be blocked and the status code: serverUpdateProhibited is returned indicating that an update is not possible. The status code clientUpdateProhibited will be returned if the issued update request cannot be fulfilled due to a domain lock with the registry. See also ICANN description of status codes.
<?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<update>
<domain:update xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name>eksempel.dk</domain:name>
<domain:add/>
<domain:rem/>
<domain:chg/>
</domain:update>
</update>
<clTRID>c6a678333c526109dea562b42a678398</clTRID>
</command>
</epp>TODO: The above example is error prone, it will be replaced with a correct example. REF: issue #9
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1000">
<msg>Command completed successfully</msg>
</result>
<msgQ count="10" id="1">
</msgQ>
<trID>
<clTRID>16465c9766e24e1d1d92d5254a3f3717</clTRID>
<svTRID>B9B4777A-CC4A-11E6-84D4-467D3A107CA1</svTRID>
</trID>
</response>
</epp>The change of registrant is a special operation, it results in all privileges and rights being transferred to another entity. A registrar does not hold the privileges to complete such a request, so the object service is unimplemented at this time.
| Return Code | Description |
|---|---|
| 2307 | Unimplemented object service, the service does not support change of registrant on a domain |
The addition of a new name server to a domain name or a re-delegation requires that the new name server must offer resolution for the domain name in question.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<update>
<domain:update
xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name>eksempel.dk</domain:name>
<domain:add>
<domain:ns>
<domain:hostObj>ns2.example.com</domain:hostObj>
</domain:ns>
</domain:add>
</domain:update>
</update>
<clTRID>ABC-12345</clTRID>
</command>
</epp>
| Return Code | Description |
|---|---|
| 1000 | If the update domain command is successful |
| 2005 | Syntax of the command is not correct |
| 2201 | If the authenticated user does not hold the privilege to update the specified domain object |
| 2303 | If the specified domain name does not exist |
| 2303 | If the specified host name does not exist, for when adding a new name server |
The removal of a existing name server from a domain name requires that at least two other name servers are offering resolution for the domain in question, else the command will fail.
Since the update domain command can contain several sub-commands, this could be accompanied by an add name server (see above), so the policy requirement is met and resolution is kept.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<update>
<domain:update
xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name>eksempel.dk</domain:name>
<domain:rem>
<domain:ns>
<domain:hostObj>ns1.example.com</domain:hostObj>
</domain:ns>
<domain:contact type="tech">sh8013</domain:contact>
</domain:rem>
</domain:update>
</update>
<clTRID>ABC-12345</clTRID>
</command>
</epp>
| Return Code | Description |
|---|---|
| 1000 | If the update domain command is successful |
| 2005 | Syntax of the command is not correct |
| 2201 | If the authenticated user does not hold the privilege to update the specified domain object |
| 2303 | If the specified domain name does not exist |
| 2303 | If the specified host name does not exist, for when removing a name server |
| 2304 | If the specified host name does not link with the specified domain name, for when removing a name server |
| 2308 | The number of name servers are below the required limit |
The addition of a new contact has to adhere to some policies.
- If the contact is the admin, only the billing role can be added
- If the authenticated user is a registrar only billing can be added
- The new contact is requested to accept the role, so the operation is asynchronous
Adding new users require special privileges, currently only with the registrant, apart from the policy listed above.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<update>
<domain:update
xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name>eksempel.dk</domain:name>
<domain:add>
<domain:contact type="tech">mak21</domain:contact>
</domain:add>
</domain:update>
</update>
<clTRID>ABC-12345</clTRID>
</command>
</epp>
The removal of a existing contact is possible for both billing and admin contacts.
- If the contact is the admin, both billing and admin roles can be removed
- The admin can add a new billing role (see above)
- If no addition the role defaults to the registrant becoming the inhabitant of the role, no request is made, the registrant is only informed of the change out of band
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<update>
<domain:update
xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name>eksempel.dk</domain:name>
<domain:rem>
<domain:contact type="tech">sh8013</domain:contact>
</domain:rem>
</domain:update>
</update>
<clTRID>ABC-12345</clTRID>
</command>
</epp>
Example with removal of existing DSRECORDS and adding a new DSRECORD.
<?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<update>
<domain:update xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name>eksempel.dk</domain:name>
<domain:add/>
<domain:rem/>
<domain:chg/>
</domain:update>
</update>
<extension>
<secDNS:update xmlns:secDNS="urn:ietf:params:xml:ns:secDNS-1.1">
<secDNS:rem>
<secDNS:all>true</secDNS:all>
</secDNS:rem>
<secDNS:add>
<secDNS:dsData>
<secDNS:keyTag>52378</secDNS:keyTag>
<secDNS:alg>13</secDNS:alg>
<secDNS:digestType>4</secDNS:digestType>
<secDNS:digest>ed3ef3e1787f797a538abf130fd90d7499713976f7da7c05e51826554560fd42bba5e66dbd2f573a75d77eb0b05124c4</secDNS:digest>
</secDNS:dsData>
</secDNS:add>
</secDNS:update>
</extension>
<clTRID>a84e346d7b5b1242f8e0d28fa8fde565</clTRID>
</command>
</epp>| Return Code | Description |
|---|---|
| 1000 | If the update domain command is successful |
| 2005 | Syntax of the command is not correct |
| 2201 | If the authenticated user does not hold the privilege to update the specified domain object |
| 2303 | If the specified domain name does not exist |
| 2303 | If DSRECORDS do not exist, when removing DSRECORDS |
Example with removal of existing DSRECORDS and adding a new DSRECORD.
<?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<update>
<domain:update xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name>eksempel.dk</domain:name>
<domain:add/>
<domain:rem/>
<domain:chg/>
</domain:update>
</update>
<extension>
<secDNS:update xmlns:secDNS="urn:ietf:params:xml:ns:secDNS-1.1">
<secDNS:rem>
<secDNS:all>true</secDNS:all>
</secDNS:rem>
<secDNS:add>
<secDNS:dsData>
<secDNS:keyTag>52378</secDNS:keyTag>
<secDNS:alg>13</secDNS:alg>
<secDNS:digestType>4</secDNS:digestType>
<secDNS:digest>ed3ef3e1787f797a538abf130fd90d7499713976f7da7c05e51826554560fd42bba5e66dbd2f573a75d77eb0b05124c4</secDNS:digest>
</secDNS:dsData>
</secDNS:add>
</secDNS:update>
</extension>
<clTRID>a84e346d7b5b1242f8e0d28fa8fde565</clTRID>
</command>
</epp>This part of the EPP protocol is described in RFC 5732. This command adheres to the standard.
<?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<command>
<check>
<host:check xmlns:host="urn:ietf:params:xml:ns:host-1.0" xsi:schemaLocation="urn:ietf:params:xml:ns:host-1.0 host-1.0.xsd">
<host:name>ns1.dk-hostmaster.dk</host:name>
</host:check>
</check>
<clTRID>7ede02eed2113c5fe82b404876f2c35f</clTRID>
</command>
</epp><?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1000">
<msg>Check result</msg>
</result>
<resData>
<host:chkData xmlns:host="urn:ietf:params:xml:ns:host-1.0">
<host:cd>
<host:name avail="0">ns1.dk-hostmaster.dk</host:name>
<host:reason>In use</host:reason>
</host:cd>
</host:chkData>
</resData>
<trID>
<clTRID>7ede02eed2113c5fe82b404876f2c35f</clTRID>
<svTRID>5FD9F3BE-F6F6-11E3-867F-A6B052036DCB</svTRID>
</trID>
</response>
</epp>This part of the EPP protocol is described in RFC 5732. This command adheres to the standard.
Please note that according to the RFC section 3.1.2, the CLID points to the sponsoring client. DK Hostmaster interprets this as the technical contact for the name server pointing to the host object in question.
<?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<command>
<info>
<host:info xmlns:host="urn:ietf:params:xml:ns:host-1.0" xsi:schemaLocation="urn:ietf:params:xml:ns:host-1.0 host-1.0.xsd">
<host:name>ns1.dk-hostmaster.dk</host:name>
</host:info>
</info>
<clTRID>c109ef580c81dfca17b4680ddcde72c9</clTRID>
</command>
</epp><?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1000">
<msg>Info result</msg>
</result>
<resData>
<host:infData xmlns:host="urn:ietf:params:xml:ns:host-1.0">
<host:name>ns1.dk-hostmaster.dk</host:name>
<host:roid>NS1_DK-HOSTMASTER_DK-DK</host:roid>
<host:status s="linked" />
<host:status s="serverDeleteProhibited" />
<host:addr ip=“v4”>4.3.2.1</host:addr>
<host:clID>DKHM1-DK</host:clID>
<host:crID>n/a</host:crID>
<host:crDate>2003-07-07T13:47:47.0Z</host:crDate>
</host:infData>
</resData>
<trID>
<clTRID>c109ef580c81dfca17b4680ddcde72c9</clTRID>
<svTRID>0C96C812-F6F6-11E3-867F-A6B052036DCB</svTRID>
</trID>
</response>
</epp>This part of the EPP protocol is described in RFC 5732. This command adheres to the standard. The command can be extended to specify another name server administrator than the authenticated user.
👉 Please note that IP addresses are required for domain names ending in '.dk', please refer to the glue record policy.
dkhm:requestedNsAdmin, alternatively you can authenticate using a WHOIS handle and the use of the extension can be avoided.
The command can be used in two scenarios:
- The command is used as described in the RFC and the authenticated user is appointed as administrator for the name server created
- The command is extended with a contact object pointing to an existing user, which is requested to take the role as name server administrator for the host object requested created
| Return Code | Description |
|---|---|
| 1000 | If the create host command is successful |
| 1001 | If the create host command awaits acknowledgement by the contact-id specified in dkhm:requestedNsAdmin |
| 2003 | If required IP address is not specified |
| 2004 | If the specified IP addresses are non-public addresses |
| 2005 | Syntax of the command is not correct |
| 2201 | If the authenticated user does not hold the privilege to update the specified host object |
| 2302 | If the specified host object already exist |
| 2303 | If the contact-id pointed to in dkhm:requestedNsAdmin points to a non-existing contact object |
| 2303 | If the domain name for the host is not registered |
| 2306 | If the specified name server administrator is a registrar account |
As for update domain 1001 holds higher precedence than 1000, so if any of the sub-commands require additional review and are pending, the return code will be 1001.
Request to create a host object, using both IPv4 and IPv6 addresses and the authenticated user is the registrant of the specified domain name and requested administrator of the host object.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<create>
<host:create
xmlns:host="urn:ietf:params:xml:ns:host-1.0">
<host:name>ns1.eksempel.dk</host:name>
<host:addr ip="v4">192.0.2.2</host:addr>
<host:addr ip="v4">192.0.2.29</host:addr>
<host:addr ip="v6">1080:0:0:0:8:800:200417A</host:addr>
</host:create>
</create>
<clTRID>ABC-12345</clTRID>
</command>
</epp>Response to the above request. The response indicates a successful creation, since the operation could be completed successfully without requiring offline evaluation.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<response>
<result code="1000">
<msg>Command completed successfully</msg>
</result>
<resData>
<host:creData
xmlnhost="urn:ietf:paramxml:nhost-1.0">
<host:name>ns1.eksempel.dk</host:name>
<host:crDate>1999-04-03T22:00:00.0Z</host:crDate>
</host:creData>
</resData>
<trID>
<clTRID>ABC-12345</clTRID>
<svTRID>54322-XYZ</svTRID>
</trID>
</response>
</epp>Request to create a host object, requesting a different administrator of the host object, hence requiring offline evaluation.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<create>
<host:create
xmlns:host="urn:ietf:params:xml:ns:host-1.0">
<host:name>ns1.eksempel.dk</host:name>
<host:addr ip="v4">192.0.2.2</host:addr>
<host:addr ip="v4">192.0.2.29</host:addr>
<host:addr ip="v6">1080:0:0:0:8:800:200417A</host:addr>
</host:create>
</create>
<extension>
<dkhm:requestedNsAdmin xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-2.0">ADMIN2-DK</dkhm:requestedNsAdmin>
</extension>
<clTRID>ABC-12345</clTRID>
</command>
</epp>Response to the above request. The response indicates a successful accept of the request, but requires offline evaluation by the designated administrator of the host object, so the response indicates that the operation is pending.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<response>
<result code="1001">
<msg>Command completed successfully; action pending</msg>
</result>
<resData>
<host:creData
xmlnhost="urn:ietf:params:xml:ns:host-1.0">
<host:name>ns1.eksempel.dk</host:name>
<host:crDate>1999-04-03T22:00:00.0Z</host:crDate>
</host:creData>
</resData>
<trID>
<clTRID>ABC-12345</clTRID>
<svTRID>54322-XYZ</svTRID>
</trID>
</response>
</epp>If the creation of the host has resulting in a delayed operation, pending the designated name server administrator, the below example shows what a poll message for the final state of the operation would look like.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<response>
<result code="1301">
<msg>Command completed successfully; ack to dequeue</msg>
</result>
<msgQ count="5" id="12345">
<qDate>1999-04-04T22:01:00.0Z</qDate>
<msg>Pending action completed successfully.</msg>
</msgQ>
<resData>
<host:panData
xmlns:host="urn:ietf:params:xml:ns:host-1.0">
<host:name paResult="1">ns1.eksempel.dk</host:name>
<host:paTRID>
<clTRID>ABC-12345</clTRID>
<svTRID>54322-XYZ</svTRID>
</host:paTRID>
<host:paDate>1999-04-04T22:00:00.0Z</host:paDate>
</host:panData>
</resData>
<trID>
<clTRID>BCD-23456</clTRID>
<svTRID>65432-WXY</svTRID>
</trID>
</response>
</epp>Please note the paResult, where 1 indicates an accept and 0 would indicate a decline.
Request to create a host object, where the authenticated use is not the registrant of the domain name naming the host object, hence requiring offline evaluation.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<create>
<host:create
xmlns:host="urn:ietf:params:xml:ns:host-1.0">
<host:name>ns1.eksempel.dk</host:name>
<host:addr ip="v4">192.0.2.2</host:addr>
<host:addr ip="v4">192.0.2.29</host:addr>
<host:addr ip="v6">1080:0:0:0:8:800:200417A</host:addr>
</host:create>
</create>
<clTRID>ABC-12345</clTRID>
</command>
</epp>Response to the above request. The response indicates a successful accept of the request, but requires offline evaluation by the registrant of the specified domain name, so the response indicates that the operation is pending.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<response>
<result code="1001">
<msg>Command completed successfully; action pending</msg>
</result>
<resData>
<host:creData
xmlnhost="urn:ietf:params:xml:ns:host-1.0">
<host:name>ns1.eksempel.dk</host:name>
<host:crDate>1999-04-03T22:00:00.0Z</host:crDate>
</host:creData>
</resData>
<trID>
<clTRID>ABC-12345</clTRID>
<svTRID>54322-XYZ</svTRID>
</trID>
</response>
</epp>If the creation of the host has resulting in a delayed operation, pending the designated name server administrator, the below example shows what a poll message for the final state of the operation would look like.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<response>
<result code="1301">
<msg>Command completed successfully; ack to dequeue</msg>
</result>
<msgQ count="5" id="12345">
<qDate>1999-04-04T22:01:00.0Z</qDate>
<msg>Pending action completed successfully.</msg>
</msgQ>
<resData>
<host:panData
xmlns:host="urn:ietf:params:xml:ns:host-1.0">
<host:name paResult="1">ns1.eksempel.dk</host:name>
<host:paTRID>
<clTRID>ABC-12345</clTRID>
<svTRID>54322-XYZ</svTRID>
</host:paTRID>
<host:paDate>1999-04-04T22:00:00.0Z</host:paDate>
</host:panData>
</resData>
<trID>
<clTRID>BCD-23456</clTRID>
<svTRID>65432-WXY</svTRID>
</trID>
</response>
</epp>Please note the paResult, where 1 indicates an accept and 0 would indicate a decline.
This part of the EPP protocol is described in RFC 5732. This command adheres to the standard, but is extended to service one special usage scenario.
This is the overall process, the process is divided into sub-processes, please see the processes below for details.
The process of changing a host name us unsupported by DK Hostmaster and will always result in an error code: 2102.
| Return Code | Description |
|---|---|
| 2102 | Change of hostname is not supported |
Addition of IP addressed supports the additional of IPv4 and IPv6 addresses. These are required as part of our glue record policy. If additional status elements are added to this command it will fail.
| Return Code | Description |
|---|---|
| 1000 | If the update host command is successful |
| 2004 | If the specified IP addresses are non-public addresses |
| 2005 | Syntax of the command is not correct |
| 2102 | Change of status for host object is not supported |
Addition of IP addressed supports the additional of IPv4 and IPv6 addresses. These are required as part of our glue record policy. If additional status elements are added to this command it will fail.
| Return Code | Description |
|---|---|
| 1000 | If the update host command is successful |
| 2005 | Syntax of the command is not correct |
| 2102 | The command contains status elements |
| 2304 | The number of IP addresses are below the required limit |
The command can be used in two scenarios:
- The command is used as described in the RFC and IP addresses can be administered
- The command is extended with a contact object pointing to an existing user, which is requested to takeover the role as name server administrator for the host object requested updated
The update of a host object can only be requested by the administrator of the given host.
| Return Code | Description |
|---|---|
| 1000 | If the update host command is successful |
| 1001 | If the update host command awaits acknowledgement by the contact-id specified in dkhm:requestedNsAdmin |
| 2004 | If the specified IP addresses are non-public addresses |
| 2005 | Syntax of the command is not correct |
| 2102 | The command contains status elements |
| 2201 | If the authenticated user does not hold the privilege to update the specified host object |
| 2303 | If the specified host object does not exist |
| 2303 | If the contact-id pointed to in dkhm:requestedNsAdmin points to a non-existing contact object |
| 2304 | The number of IP addresses are below the required limit |
As for update host 1001 holds higher precedence than 1000, so if any of the sub-commands require additional review and are pending, the return code will be 1001.
As described in Implementation Limitations, the service does not support setting of status via update host.
Request to update a host object, requesting a different administrator of the host object, hence requiring offline evaluation.
<?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<update>
<host:update xmlns:host="urn:ietf:params:xml:ns:host-1.0">
<host:name>ns1.eksempel.dk</host:name>
</host:update>
</update>
<extension>
<dkhm:requestedNsAdmin xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-2.0">DKHM1-DK</dkhm:requestedNsAdmin>
</extension>
<clTRID>7a4ac69d335ae661e29fc2c262c5800e</clTRID>
</command>
</epp>Response to the above request. The response indicates a successful accept of the request, but requires offline evaluation by the designated administrator of the host object, so the response indicates that the operation is pending.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1001">
<msg>Command completed successfully; action pending</msg>
</result>
<trID>
<clTRID>6e95dc191e922be727fd5af4c2d20bc5</clTRID>
<svTRID>631DABC6-CC49-11E6-A165-4F7D3A107CA1</svTRID>
</trID>
</response>
</epp>If the creation of the host has resulting in a delayed operation, pending the designated name server administrator, the below example shows what a poll message for the final state of the operation looks like.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<response>
<result code="1301">
<msg>Command completed successfully; ack to dequeue</msg>
</result>
<msgQ count="5" id="12345">
<qDate>1999-04-04T22:01:00.0Z</qDate>
<msg>Pending action completed successfully.</msg>
</msgQ>
<resData>
<host:panData
xmlns:host="urn:ietf:params:xml:ns:host-1.0">
<host:name paResult="1">ns1.example.com</host:name>
<host:paTRID>
<clTRID>ABC-12345</clTRID>
<svTRID>54322-XYZ</svTRID>
</host:paTRID>
<host:paDate>1999-04-04T22:00:00.0Z</host:paDate>
</host:panData>
</resData>
<trID>
<clTRID>BCD-23456</clTRID>
<svTRID>65432-WXY</svTRID>
</trID>
</response>
</epp>Please note the paResult, where 1 indicates an accept and 0 would indicate a decline.
This part of the EPP protocol is described in RFC 5732. This command adheres to the standard.
The deletion of a host object can only be requested by the administrator.
| Return Code | Description |
|---|---|
| 1000 | If the delete host command is successful |
| 2201 | If the authenticated user does not hold the privilege to delete the specified host object |
| 2303 | If the specified host object does not exist |
| 2305 | If the specified host object links to domain name objects |
Request to delete a host object, the authenticated user is the current administrator of the specified host object.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<delete>
<host:delete
xmlns:host="urn:ietf:params:xml:ns:host-1.0">
<host:name>ns1.eksempel.dk</host:name>
</host:delete>
</delete>
<clTRID>ABC-12345</clTRID>
</command>
</epp>Response to the above request. Since the authenticated user is the current administrator and all requirements are met the command completes successfully.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<response>
<result code="1000">
<msg>Command completed successfully</msg>
</result>
<trID>
<clTRID>ABC-12345</clTRID>
<svTRID>54321-XYZ</svTRID>
</trID>
</response>
</epp>This part of the EPP protocol is described in RFC 5733.
This command has been extended with the following fields:
dkhm:usertype, which has to be one of:company, indicating a companypublic_organization, indicating a public organizationassociation, indicating an associationindividual, indicating an individual
The user type will result in context-specific interpretation of the following fields:
- EAN - this number is only supported for user types:
company,public_organizationandassociation. It is only mandatory forpublic_organizationand optional forcompanyandassociation. EAN is used by the public sector in Denmark for electronic invoicing, private companies can also be assigned EAN, but this it not so widespread at this time. EAN is required by law for public sector organizations, so this field has to be completed and it has to validate for this type. - CVR - (VAT number) this is only supported for user types:
company,public_organizationandassociation. The number is required for handling VAT correctly, The rules for indication of the field is specified in the table below. - p-number - (production unit number) this is only supported for user types:
company,public_organizationandassociation. The number is used for handling validation correctly and it relates to the CVR (Vat number field) the field is optional.
This field is validated on the server side, it is however recommended to perform a check contact on the requested contact-id prior to the create domain request if a contact-id is already known from a contact create or previous domain creation.
The contact-id field is auto-generated and assigned by DK Hostmaster. EPP do however open for providing a contact-id in the context of the create contact command, this is not supported by DK Hostmaster at this point.
| Mandatory | Note | |
|---|---|---|
company/public_organization/association with address in Denmark and EU/EØS |
Yes | Has to be specified |
company/public_organization/association with address EU/EØS |
No | Can be specified if VAT handling is required |
company/public_organization/association with address outside Denmark and EU/EØS |
No | Can be specified |
individual with address in Denmark and EU/EØS |
No | Not supported |
individual with address outside Denmark and EU/EØS |
No | Not supported |
For contact creation DK Hostmaster supports two ways:
- Smart creation, where the data provided is used to inquire if an existing user with the same data is present. If no user is found a new contact is created. This is accomplished using the keyword:
auto - Forced creation, where a new contact is created. This is accomplished using the keyword:
force
Specification of a user-id / handle for the contact creation is not supported. The user-id / handle is auto-generated and assigned by DK Hostmaster.
For smart creation:
<contact:id>auto</contact:id>For forced creation:
<contact:id>force</contact:id>Please note that the auto and force keywords are in lower-case.
The match for the smart creation are applicable for the following data:
<dkhm:userType><dkhm:CVR><contact:name><contact:street><contact:email><contact:pc><contact:cc>
The match has to be exact in order for the command to return an existing user-id / handle.
Contact creation under EPP opens for the ability to represent postal information in both local and international representations. Due to the representation in DK Hostmaster's system for handling contacts the following rules are applied to postal information.
For Denmark the local representation is chosen and the international representation is discarded. For other countries the international representation is chosen and the local representation is discarded. Please see the table below.
| Denmark | Other country |
|---|---|
| Local representation | Local representation |
| International representation | International representation |
This is a diagram depicting the general algorithm used for resolving the address data. The algorithm presupposes that at least one address is present.
It is important to note that if the international representation is specified, but data are provided in local representation or only local representation is provided for an international address, communication to the specified address might prove unreliable.
The handling of name and organization is also a special case. Where the following mapping is made based on the user type.
| Name and Organization Provided | Only name provided | ||
|---|---|---|---|
| User type | Name (mandatory) | organization (optional) | Name (mandatory) |
| C (Company) | attention | name | name |
| P (Public organization) | attention | name | name |
| A (Association) | attention | name | name |
| I (Individual) | name | - | name |
The data is collected as required by Danish legislation. See also the data collection policy section below.
Please note:
authInfosection is ignored is not recommended for transport of end-user passwords- User-creation is silent and the designated user is not notified about the the creation, unless this is a part of the process of associating the user with other objects
<?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<command>
<create>
<contact:create xmlns:contact="urn:ietf:params:xml:ns:contact-1.0" xsi:schemaLocation="urn:ietf:params:xml:ns:contact-1.0 contact-1.0.xsd">
<contact:id>auto</contact:id>
<contact:postalInfo type="loc">
<contact:name>Johnny Login</contact:name>
<contact:org>DK Hostmaster A/S</contact:org>
<contact:addr>
<contact:street>Kalvebod brygge 45, 3. sal</contact:street>
<contact:city>København V</contact:city>
<contact:pc>1560</contact:pc>
<contact:cc>DK</contact:cc>
</contact:addr>
</contact:postalInfo>
<contact:postalInfo type="int">
<contact:name>Johnny Login</contact:name>
<contact:org>DK Hostmaster A/S</contact:org>
<contact:addr>
<contact:street>Kalvebod brygge 45, 3.</contact:street>
<contact:city>Copenhagen V</contact:city>
<contact:pc>1560</contact:pc>
<contact:cc>DK</contact:cc>
</contact:addr>
</contact:postalInfo>
<contact:voice>+45.33646060</contact:voice>
<contact:fax />
<contact:email>[email protected]</contact:email>
<contact:authInfo>
<contact:pw />
</contact:authInfo>
</contact:create>
</create>
<extension>
<dkhm:userType xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-1.2">company</dkhm:userType>
<dkhm:CVR xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-1.2">1234567891231</dkhm:CVR>
</extension>
<clTRID>8cced469f2bfdbb0dcad16b875d87c99</clTRID>
</command>
</epp>Do note that the authInfo part is ignored, but cannot be omitted.
<?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1000">
<msg>Contact created.</msg>
</result>
<msgQ count="1" id="400"> </msgQ>
<resData>
<contact:creData xmlns:contact="urn:ietf:params:xml:ns:contact-1.0">
<contact:id>DHA484-DK</contact:id>
<contact:crDate>2015-03-25T17:08:25.0Z</contact:crDate>
</contact:creData>
</resData>
<trID>
<clTRID>8cced469f2bfdbb0dcad16b875d87c99</clTRID>
<svTRID>8B9461A4-D311-11E4-B79D-DB67C33995C9</svTRID>
</trID>
</response>
</epp>This part of the EPP protocol is described in RFC 5733. This command adheres to the standard.
<?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<command>
<check>
<contact:check xmlns:contact="urn:ietf:params:xml:ns:contact-1.0" xsi:schemaLocation="urn:ietf:params:xml:ns:contact-1.0 contact-1.0.xsd">
<contact:id>DKHM1-DK</contact:id>
</contact:check>
</check>
<clTRID>d4d94d2e1d6f613cb276865c49c3d0b7</clTRID>
</command>
</epp><?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1000">
<msg>Check result</msg>
</result>
<msgQ count="6" id="884">
<msg>Create domain pending for domain2xyz.dk</msg>
</msgQ>
<resData>
<contact:chkData xmlns:contact="urn:ietf:params:xml:ns:contact-1.0">
<contact:cd>
<contact:id avail="0">DKHM1-DK</contact:id>
<contact:reason>In use</contact:reason>
</contact:cd>
</contact:chkData>
</resData>
<trID>
<clTRID>d4d94d2e1d6f613cb276865c49c3d0b7</clTRID>
<svTRID>3268EB00-F6F7-11E3-867F-A6B052036DCB</svTRID>
</trID>
</response>
</epp>This part of the EPP protocol is described in RFC 5733. This command has been extended with information on whether the contact in queried has been validated according to requirements and policies with DK Hostmaster.
See the extension: dkhm:contact_validated in the response.
Please note that the email address (contact:email) is masked and the value: [email protected] is always returned for this field, unless the authenticated user has a relationship via the domain name or a registrar group association, which provides access to more information.
The info contact command response is only available for the registrant contact object, unless the authenticated user has a relationship via the domain name or a registrar group association, which provides access to more information or additional contact objects as
<?xml version="1.0" encoding="utf-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<command>
<info>
<contact:info xmlns:contact="urn:ietf:params:xml:ns:contact-1.0" xsi:schemaLocation="urn:ietf:params:xml:ns:contact-1.0 contact-1.0.xsd">
<contact:id>DKHM1-DK</contact:id>
</contact:info>
</info>
<clTRID>3d65841027692e64c24118ac5988e03c</clTRID>
</command>
</epp><?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<response>
<result code="1000">
<msg>Info result</msg>
</result>
<resData>
<contact:infData xmlns:contact="urn:ietf:params:xml:ns:contact-1.0">
<contact:id>DKHM1-DK</contact:id>
<contact:roid>DKHM1-DK</contact:roid>
<contact:status s="serverUpdateProhibited"/>
<contact:status s="serverTransferProhibited"/>
<contact:status s="linked"/>
<contact:status s="serverDeleteProhibited"/>
<contact:postalInfo type="loc">
<contact:name>DK Hostmaster A/S</contact:name>
<contact:addr>
<contact:street>Kalvebod Brygge 45,3</contact:street>
<contact:city>København V</contact:city>
<contact:pc>1560</contact:pc>
<contact:cc>DK</contact:cc>
</contact:addr>
</contact:postalInfo>
<contact:voice>+45.33646060</contact:voice>
<contact:email>[email protected]</contact:email>
<contact:clID>DKHM1-DK</contact:clID>
<contact:crID>n/a</contact:crID>
<contact:crDate>2013-01-24T15:40:37.0Z</contact:crDate>
</contact:infData>
</resData>
<extension>
<dkhm:contact_validated xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-1.3">1</dkhm:contact_validated>
</extension>
<trID>
<clTRID>76edfef5b78cdaefe8fb426eb8d74b75</clTRID>
<svTRID>C8C5E496-9CC8-11E4-9F91-D0BF2AC2711D</svTRID>
</trID>
</response>
</epp>This part of the EPP protocol is described in RFC 5733. This command adheres to the standard. In addition to the standard the command allows for manipulation of the extensions associated with contact objects, meaning that it is possible to update the following fields:
These of course all controlled by relevant privileges.
- Name / organization
- Address
- Country
- Phone (voice)
- Fax
- Secondary email
- Mobile phone
Please note:
authInfosection is ignored is not recommended for transport of end-user passwords
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<update>
<contact:update
xmlns:contact="urn:ietf:params:xml:ns:contact-1.0">
<contact:id>sh8013</contact:id>
<contact:add>
<contact:status s="clientDeleteProhibited"/>
</contact:add>
<contact:chg>
<contact:postalInfo type="int">
<contact:org/>
<contact:addr>
<contact:street>124 Example Dr.</contact:street>
<contact:street>Suite 200</contact:street>
<contact:city>Dulles</contact:city>
<contact:sp>VA</contact:sp>
<contact:pc>20166-6503</contact:pc>
<contact:cc>US</contact:cc>
</contact:addr>
</contact:postalInfo>
<contact:voice>+1.7034444444</contact:voice>
<contact:fax/>
<contact:authInfo>
<contact:pw>2fooBAR</contact:pw>
</contact:authInfo>
<contact:disclose flag="1">
<contact:voice/>
<contact:email/>
</contact:disclose>
</contact:chg>
</contact:update>
</update>
<extension>
<dkhm:secondaryEmail xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-1.5">[email protected]</dkhm:secondaryEmail>
<dkhm:mobilephone xmlns:dkhm="urn:dkhm:params:xml:ns:dkhm-1.5">+1.7034444445</dkhm:mobilephone>
</extension>
<clTRID>ABC-12345</clTRID>
</command>
</epp><?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<response>
<result code="1000">
<msg>Command completed successfully</msg>
</result>
<trID>
<clTRID>ABC-12345</clTRID>
<svTRID>54321-XYZ</svTRID>
</trID>
</response>
</epp>This command is not supported.
This command will always return: 2101, indicating unimplemented command.
The deletion of contact objects is handled automatically by DK Hostmaster. The following status flags will be set:
- clientDeleteProhibited
- serverDeleteProhibited
The later will only be lifted when the contact object is not linked to any other objects and automatic deletion is scheduled.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<command>
<delete>
<contact:delete
xmlns:contact="urn:ietf:params:xml:ns:contact-1.0">
<contact:id>sh8013</contact:id>
</contact:delete>
</delete>
<clTRID>ABC-12345</clTRID>
</command>
</epp><?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<response>
<result code="2101">
<msg>Unimplemented command</msg>
</result>
<trID>
<clTRID>ABC-12345</clTRID>
<svTRID>54321-XYZ</svTRID>
</trID>
</response>
</epp>This chapter describes the data collection policy announced via the greeting available using the hello command.
Please refer to the greeting response example included in the Appendices.
The EPP service provides access to identified data relating to all available entities (personal and organizational) under the terms and conditions that anonymity will be applied as specified by the entities in question, and in accordance with General Terms and Conditions and legislation.
The collected data will be used solely for provisioning and administrative purposes. As specified under access above, and in the recipient statement below, some data are required to be publicly available and therefore some data will be accessible to the public under the circumstances specified in the referred sections.
Address data and contact information is collected as required by Danish legislation.
Recipients of data are specified as other and unrelated. As specified in the purpose statement section and under access, identified data is made publicly available, therefore DK Hostmaster will not be able to control how the publicly available information is used.
Data will be retained with DK Hostmaster as required by Danish legislation.
Here is a list of documents and references used in this document
-
Terms and conditions for the right of use to a .dk domain name
-
RFC 3735: Guidelines for Extending Extensible Provisioning Protocol
-
RFC 5910: Domain Name System (DNS) Security Extensions for the Extensible Provisioning Protocol
-
DK Hostmaster: Documentation on the current domain registration form
A list of resources for DK Hostmaster EPP support is located below.
This is a list of the schemas currently used in the DKHM EPP Service described in this document. Please note that the XSD implementation preserves the original namespace and does not make alterations to this apart from adding the already described XML elements.
- epp-1.0.xsd
- eppcom-1.0.xsd
- contact-1.0.xsd
- domain-1.0.xsd
- host-1.0.xsd
- dkhm-2.4.xsd
- secDNS-1.1.xsd
The files are all available for download.
-
2.6
- EPP Service version 2.3.X
- Rolled back changes introduced in 2.5
-
2.5
- EPP Service version 2.3.X
- Attempt to remove backwards compatibility
-
2.4
- EPP Service version 2.3.X
- Minor bug fix release as 2.4, since 2.3 had some minor issues
-
2.3
- EPP Service version 2.3.X
- Introduction of
dkhm:urlfor poll messages in relation to domain creation, where a URL is communicated, which can be presented to the end-user as part of the domain creation process.
-
2.2
- EPP Service version 2.3.X
- Introduction of
dkhm:risk_assessmentfor poll messages in relation to domain creation, where the risk assessment is communicated as part of the domain creation process.
-
2.1
-
Warning! This release includes a change to the standard XSD from RFC:5730, aligning the values for the password type. It has not been possible to get the patch applied using the XML Schema feature:
redefineoroverwrite. When this succeeds this change will have to be rolled-back. The change has been applied so the schema file conforms with the schema file used at DK Hostmaster A/S. -
The DKHM Schema file has been updated to revision 2.1, the file does not contain any changes apart from the import, this file was created for a uniform communication in regard to revision numbers etc.
-
-
2.0
- EPP Service version 2.0.X, 2.1.X and 2.2.X
- Introduction of
dkhm:requestedNsAdminfor update host and create host - Introduction of
dkhm:mobilephoneon update contact - Introduction of
dkhm:secondaryEmailon update contact
-
1.4
- EPP Service version 1.3.X
- Introduction of
dkhm:pnumberfor production unit number information for create contact command section
-
1.3
- EPP Service version 1.2.X
- Introduction of
dkhm:domain_confirmedfor information for create domain - Introduction of
dkhm:contact_validatedfor information for info contact - Introduction of
dkhm:registrant_validatedfor information for create domain
-
1.2
- EPP Service version 1.1.X
- Introduction of
dkhm:orderConfirmationfor create domain and support of Pre-activation Service
-
1.1
- EPP Service version 1.0.9
- Introduction of
dkhm:domainAdvisoryfor support of blocked status for create domain for blocked domain names
-
1.0
- EPP Service version 1.0.0
- Released 2014-02-25
DK Hostmaster operates a mailing list for discussion and inquiries about the DK Hostmaster EPP implementation. To subscribe to this list, write to the address below and follow the instructions. Please note that the list is for technical discussion only, any issues beyond the technical scope will not be responded to, please send these to the contact issue reporting address below and they will be passed on to the appropriate entities within DK Hostmaster.
For issue reporting related to this specification, the EPP implementation or test, sandbox or production environments, please contact us. You are of course welcome to post these to the mailing list mentioned above, otherwise use the address specified below:
We have developed a demo/test client, which is freely available and open sourced under a MIT license.
The client is available at:
More information is available at the DK Hostmaster website:
Do note the service version is available in the svID tag, meaning you can see what given version of the
EPP service is running in the environment queried.
<?xml version="1.0" encoding="utf-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
<greeting>
<svID>DK Hostmaster EPP Service: 2.2.3</svID>
<svDate>2016-12-27T15:19:26.0Z</svDate>
<svcMenu>
<version>1.0</version>
<lang>en</lang>
<objURI>urn:ietf:params:xml:ns:host-1.0</objURI>
<objURI>urn:ietf:params:xml:ns:domain-1.0</objURI>
<objURI>urn:ietf:params:xml:ns:contact-1.0</objURI>
<svcExtension>
<extURI>urn:ietf:params:xml:ns:secDNS-1.1</extURI>
<extURI>urn:dkhm:params:xml:ns:dkhm-2.0</extURI>
</svcExtension>
</svcMenu>
<dcp>
<access>
<personalAndOther/>
</access>
<statement>
<purpose>
<admin/>
<prov/>
</purpose>
<recipient>
<other/>
<unrelated/>
</recipient>
<retention>
<legal/>
</retention>
</statement>
</dcp>
</greeting>
</epp>| Status Code | Description |
|---|---|
addPeriod |
unsupported |
autoRenewPeriod |
unsupported |
inactive |
unsupported at this time |
ok |
exclusive for all other status codes |
pendingCreate |
indication that a the given domain is enqueue for possible creation |
pendingDelete |
deletion is pending, an advisory date is applicable |
pendingRenew |
unsupported |
pendingRestore |
unsupported |
pendingTransfer |
unsupported |
pendingUpdate |
the domain has active asynchronous requests |
redemptionPeriod |
unsupported |
renewPeriod |
unsupported |
serverDeleteProhibited |
indicates whether the registrant can delete the domain |
serverHold |
a given domain is not active, it can hold a number of different states rendering it not-active |
serverRenewProhibited |
indicates whether the billing contact can renew the domain |
serverTransferProhibited |
unsupported |
serverUpdateProhibited |
indicates whether the registrant for a given domain can have ownership transferred, can appoint new proxy/admin contact, can appoint new billing contact, change name servers and can associate DS Records |
transferPeriod |
unsupported |
clientDeleteProhibited |
unsupported |
clientHold |
unsupported |
clientRenewProhibited |
unsupported |
clientTransferProhibited |
unsupported |
clientUpdateProhibited |
unsupported |
| Command | Sub-command | Registrar | Domain admin | Domain billing | name server admin |
|---|---|---|---|---|---|
| login | ✅ | ✅ *1 | ✅ *1 | ✅ | |
| create domain | ✅ | ||||
| update domain | ✅ *2 | ✅ *2 | |||
| add billing | ✅ *8 | ✅ *3 | |||
| remove billing | ✅ *4 | ✅ *4 | ✅ *4 | ||
| add admin | ✅ *5 | ||||
| remove admin | ✅ *4 | ||||
| change registrant | ✅ *6 | ||||
| add name server | ✅ *6 | ✅ *6 / *10 | |||
| remove name server | ✅ *6 | ✅ *6 / *10 | |||
| add DSRECORDS | ✅ | ✅ *10 | |||
| remove DSRECORDS | ✅ | ✅ *10 | |||
| renew domain | ✅ | ||||
| delete domain | ✅ *6 | ||||
| info domain | ✅ *9 | ✅ *9 | ✅ *9 | ✅ *9 | |
| check domain | ✅ | ✅ | ✅ | ✅ | |
| create contact | ✅ | ✅ | ✅ | ✅ | |
| update contact | ✅ *7 | ✅ *7 | |||
| delete contact | |||||
| info contact | ✅ *9 | ✅ *9 | ✅ *9 | ✅ *9 | |
| check contact | ✅ | ✅ | ✅ | ✅ | |
| create host | ✅ | ✅ | |||
| update host | ✅ | ||||
| delete host | ✅ | ||||
| info host | ✅ | ✅ | |||
| check host | ✅ | ✅ |
- *1 as registrar
- *2 see sub-commands
- *3 request to new billing contact
- *4 defaults to registrant
- *5 request to to registrant and new admin contact
- *6 request to registrant
- *7 only own profile
- *8 can only assign self
- *9 can only see contact information for authorized objects, access to registrant is authorized as public other roles require authorization via relation
- *10 changes status of existing DSRECORDS
| EPP Command | Available since version | Exceptions and notes |
|---|---|---|
| Log in | 1 | |
| Change password | 1 | |
| Log out | 1 | |
| Check Domain | 1 | |
| Create domain | 1 | Asynchronous, requires order confirmation by the registrant. VID product not supported, PO numbers not supported |
| Info Domain | 1 / 3 | Billing contact not disclosed, Admin contact not disclosed since version 3. EPP status codes not supported completely |
| Update Domain | 2 | Change of name server is asynchronous, requires approval by the registrant. Change of registrant is not supported |
| Renew Domain | 2 | Requires that the requesting user is a registrar and billing contact for the domain. The domain name must not have any financial outstanding |
| Transfer Domain | N/A | |
| Delete Domain | N/A | |
| Check Contact | 1 / 3 | Only registrants disclosed or contacts with relation to authenticated user |
| Create Contact | 1 | Supplied handle/user-id is not supported |
| Info Contact | 1 / 3 | Only registrants disclosed or contacts with relation to authenticated user |
| Update Contact | 2 | Updating email is asynchronous, but is regarded as non-atomic due to the email validation process |
| Transfer Contact | N/A | |
| Delete Contact | N/A | |
| Check Host | 1 | |
| Create Host | 2 | Asynchronous, requires accept of the registrant of the domain name if the domain is under the .dk TLD and requires that the requesting user accepts the responsibility as name server administrator |
| Info Host | 1 | |
| Update Host | 2 | Asynchronous, requires that the requested administrator accepts the responsibility as name server administrator |
| Delete Host | 2 | |
| Poll | 1 |