d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User [<!ENTITY mdash "&#8212;">]>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User<refentry id="man.rndc-confgen">

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <refentryinfo>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <date>Aug 27, 2001</date>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </refentryinfo>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <refmeta>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <refentrytitle><application>rndc-confgen</application></refentrytitle>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <manvolnum>8</manvolnum>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <refmiscinfo>BIND9</refmiscinfo>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </refmeta>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <refnamediv>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <refname><application>rndc-confgen</application></refname>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <refpurpose>rndc key generation tool</refpurpose>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </refnamediv>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <docinfo>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <copyright>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <year>2009</year>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <holder>Internet Systems Consortium, Inc. ("ISC")</holder>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </copyright>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </docinfo>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User

7e71f05d8643aca84914437c900cb716444507e4Tinderbox User <refsynopsisdiv>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <cmdsynopsis>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <command>rndc-confgen</command>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <arg><option>-a</option></arg>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <arg><option>-b <replaceable class="parameter">keysize</replaceable></option></arg>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <arg><option>-c <replaceable class="parameter">keyfile</replaceable></option></arg>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <arg><option>-h</option></arg>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <arg><option>-k <replaceable class="parameter">keyname</replaceable></option></arg>

7e71f05d8643aca84914437c900cb716444507e4Tinderbox User <arg><option>-p <replaceable class="parameter">port</replaceable></option></arg>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <arg><option>-r <replaceable class="parameter">randomfile</replaceable></option></arg>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <arg><option>-s <replaceable class="parameter">address</replaceable></option></arg>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <arg><option>-t <replaceable class="parameter">chrootdir</replaceable></option></arg>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <arg><option>-u <replaceable class="parameter">user</replaceable></option></arg>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </cmdsynopsis>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </refsynopsisdiv>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <refsect1>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <title>DESCRIPTION</title>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <para><command>rndc-confgen</command>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User generates configuration files

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User for <command>rndc</command>. It can be used as a

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User convenient alternative to writing the

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <filename>rndc.conf</filename> file

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User and the corresponding <command>controls</command>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User and <command>key</command>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User statements in <filename>named.conf</filename> by hand.

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User Alternatively, it can be run with the <command>-a</command>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User option to set up a <filename>rndc.key</filename> file and

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User avoid the need for a <filename>rndc.conf</filename> file

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User and a <command>controls</command> statement altogether.

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </para>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </refsect1>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <refsect1>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <title>OPTIONS</title>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <variablelist>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <varlistentry>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <term>-a</term>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <listitem>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <para>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User Do automatic <command>rndc</command> configuration.

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User This creates a file <filename>rndc.key</filename>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User in <filename>/etc</filename> (or whatever

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <varname>sysconfdir</varname>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User was specified as when <acronym>BIND</acronym> was

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User built)

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User that is read by both <command>rndc</command>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User and <command>named</command> on startup. The

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <filename>rndc.key</filename> file defines a default

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User command channel and authentication key allowing

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <command>rndc</command> to communicate with

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <command>named</command> on the local host

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User with no further configuration.

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </para>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <para>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User Running <command>rndc-confgen -a</command> allows

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User BIND 9 and <command>rndc</command> to be used as

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User drop-in

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User replacements for BIND 8 and <command>ndc</command>,

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User with no changes to the existing BIND 8

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <filename>named.conf</filename> file.

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </para>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <para>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User If a more elaborate configuration than that

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User generated by <command>rndc-confgen -a</command>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User is required, for example if rndc is to be used remotely,

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User you should run <command>rndc-confgen</command> without

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User the

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <command>-a</command> option and set up a

7e71f05d8643aca84914437c900cb716444507e4Tinderbox User <filename>rndc.conf</filename> and

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <filename>named.conf</filename>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User as directed.

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </para>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </listitem>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </varlistentry>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <varlistentry>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <term>-b <replaceable class="parameter">keysize</replaceable></term>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <listitem>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <para>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User Specifies the size of the authentication key in bits.

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User Must be between 1 and 512 bits; the default is 128.

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </para>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </listitem>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </varlistentry>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <varlistentry>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <term>-c <replaceable class="parameter">keyfile</replaceable></term>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <listitem>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <para>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User Used with the <command>-a</command> option to specify

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User an alternate location for <filename>rndc.key</filename>.

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </para>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </listitem>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User </varlistentry>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <varlistentry>

c2258eedf2d9d0207b45b90014f8fde5413b41a3Tinderbox User <term>-h</term>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <listitem>

1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User <para>

Prints a short summary of the options and arguments to

<command>rndc-confgen</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-k <replaceable class="parameter">keyname</replaceable></term>

<listitem>

<para>

Specifies the key name of the rndc authentication key.

This must be a valid domain name.

The default is <constant>rndc-key</constant>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-p <replaceable class="parameter">port</replaceable></term>

<listitem>

<para>

Specifies the command channel port where <command>named</command>

listens for connections from <command>rndc</command>.

The default is 953.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-r <replaceable class="parameter">randomfile</replaceable></term>

<listitem>

<para>

Specifies a source of random data for generating the

authorization. If the operating

system does not provide a <filename>/dev/random</filename>

or equivalent device, the default source of randomness

is keyboard input. <filename>randomdev</filename>

specifies

the name of a character device or file containing random

data to be used instead of the default. The special value

<filename>keyboard</filename> indicates that keyboard

input should be used.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-s <replaceable class="parameter">address</replaceable></term>

<listitem>

<para>

Specifies the IP address where <command>named</command>

listens for command channel connections from

<command>rndc</command>. The default is the loopback

address 127.0.0.1.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-t <replaceable class="parameter">chrootdir</replaceable></term>

<listitem>

<para>

Used with the <command>-a</command> option to specify

a directory where <command>named</command> will run

chrooted. An additional copy of the <filename>rndc.key</filename>

will be written relative to this directory so that

it will be found by the chrooted <command>named</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-u <replaceable class="parameter">user</replaceable></term>

<listitem>

<para>

Used with the <command>-a</command> option to set the

owner

of the <filename>rndc.key</filename> file generated.

If

<command>-t</command> is also specified only the file

in

the chroot area has its owner changed.

</para>

</listitem>

</varlistentry>

</variablelist>

</refsect1>

<refsect1>

<title>EXAMPLES</title>

<para>

To allow <command>rndc</command> to be used with

no manual configuration, run

</para>

<para><userinput>rndc-confgen -a</userinput>

</para>

<para>

To print a sample <filename>rndc.conf</filename> file and

corresponding <command>controls</command> and <command>key</command>

statements to be manually inserted into <filename>named.conf</filename>,

run

</para>

<para><userinput>rndc-confgen</userinput>

</para>

</refsect1>

<refsect1>

<title>SEE ALSO</title>

<para><citerefentry>

<refentrytitle>rndc</refentrytitle><manvolnum>8</manvolnum>

</citerefentry>,

<citerefentry>

<refentrytitle>rndc.conf</refentrytitle><manvolnum>5</manvolnum>

</citerefentry>,

<citerefentry>

<refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>

</citerefentry>,

<citetitle>BIND 9 Administrator Reference Manual</citetitle>.

</para>

</refsect1>

<refsect1>

<title>AUTHOR</title>

<para><corpauthor>Internet Systems Consortium</corpauthor>

</para>

</refsect1>

</refentry><!--