36d3f6b40f89cfc1be669377f6260639b53ed9c0Tinderbox User - Copyright (C) 2000, 2001, 2003-2009, 2011, 2013-2017 Internet Systems Consortium, Inc. ("ISC")
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - This Source Code Form is subject to the terms of the Mozilla Public
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - License, v. 2.0. If a copy of the MPL was not distributed with this
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - file, You can obtain one at http://mozilla.org/MPL/2.0/.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<!-- Converted by db4-upgrade version 1.0 -->
83a28ca274521e15086fc39febde507bcc4e145eMark Andrews<refentry xmlns:db="http://docbook.org/ns/docbook" version="5.0" xml:id="man.named">
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <refentryinfo>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <corpauthor>Internet Systems Consortium, Inc.</corpauthor>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </refentryinfo>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <refentrytitle><application>named</application></refentrytitle>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <refnamediv>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <refname><application>named</application></refname>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <refpurpose>Internet domain name server</refpurpose>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </refnamediv>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </copyright>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <refsynopsisdiv>
b7a823a402eb5c4e99f283e58d778a903d2e72f5Michał Kępień <arg choice="opt" rep="norepeat"><option>-4</option></arg>
b7a823a402eb5c4e99f283e58d778a903d2e72f5Michał Kępień <arg choice="opt" rep="norepeat"><option>-6</option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-c <replaceable class="parameter">config-file</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-d <replaceable class="parameter">debug-level</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-D <replaceable class="parameter">string</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-E <replaceable class="parameter">engine-name</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-f</option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-g</option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-L <replaceable class="parameter">logfile</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-M <replaceable class="parameter">option</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-m <replaceable class="parameter">flag</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-n <replaceable class="parameter">#cpus</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-p <replaceable class="parameter">port</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-s</option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-S <replaceable class="parameter">#max-socks</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-U <replaceable class="parameter">#listeners</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-u <replaceable class="parameter">user</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-v</option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-V</option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-X <replaceable class="parameter">lock-file</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-x <replaceable class="parameter">cache-file</replaceable></option></arg>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </cmdsynopsis>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </refsynopsisdiv>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <refsection><info><title>DESCRIPTION</title></info>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein is a Domain Name System (DNS) server,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein part of the BIND 9 distribution from ISC. For more
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein information on the DNS, see RFCs 1033, 1034, and 1035.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein When invoked without arguments, <command>named</command>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein read the default configuration file
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <filename>/etc/named.conf</filename>, read any initial
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein data, and listen for queries.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <variablelist>
0ffaee887ff5674b8c3bb0435ae838f641981706Mark Andrews <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Use IPv4 only even if the host machine is capable of IPv6.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <option>-4</option> and <option>-6</option> are mutually
0ffaee887ff5674b8c3bb0435ae838f641981706Mark Andrews </varlistentry>
0ffaee887ff5674b8c3bb0435ae838f641981706Mark Andrews <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Use IPv6 only even if the host machine is capable of IPv4.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <option>-4</option> and <option>-6</option> are mutually
0ffaee887ff5674b8c3bb0435ae838f641981706Mark Andrews </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <term>-c <replaceable class="parameter">config-file</replaceable></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Use <replaceable class="parameter">config-file</replaceable> as the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein configuration file instead of the default,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein ensure that reloading the configuration file continues
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein to work after the server has changed its working
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein directory due to to a possible
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <option>directory</option> option in the configuration
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein file, <replaceable class="parameter">config-file</replaceable> should be
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein an absolute pathname.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <term>-d <replaceable class="parameter">debug-level</replaceable></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Set the daemon's debug level to <replaceable class="parameter">debug-level</replaceable>.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Debugging traces from <command>named</command> become
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein more verbose as the debug level increases.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews <varlistentry>
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews <term>-D <replaceable class="parameter">string</replaceable></term>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Specifies a string that is used to identify a instance of
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <command>named</command> in a process listing. The contents
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt of <replaceable class="parameter">string</replaceable> are
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt not examined.
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews </varlistentry>
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont <varlistentry>
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont <term>-E <replaceable class="parameter">engine-name</replaceable></term>
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt When applicable, specifies the hardware to use for
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt cryptographic operations, such as a secure key store used
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt for signing.
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt When BIND is built with OpenSSL PKCS#11 support, this defaults
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt to the string "pkcs11", which identifies an OpenSSL engine
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt that can drive a cryptographic accelerator or hardware service
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt module. When BIND is built with native PKCS#11 cryptography
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt (--enable-native-pkcs11), it defaults to the path of the PKCS#11
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt provider library specified via "--with-pkcs11".
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Run the server in the foreground (i.e. do not daemonize).
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Run the server in the foreground and force all logging
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt <varlistentry>
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt <term>-L <replaceable class="parameter">logfile</replaceable></term>
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt Log to the file <option>logfile</option> by default
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt instead of the system log.
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt </varlistentry>
5a505fc4c2e99842052d9409790c7da0b5663bceMukund Sivaraman <varlistentry>
5a505fc4c2e99842052d9409790c7da0b5663bceMukund Sivaraman <term>-M <replaceable class="parameter">option</replaceable></term>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Sets the default memory context options. Currently
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt the only supported option is
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <replaceable class="parameter">external</replaceable>,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt which causes the internal memory manager to be bypassed
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt in favor of system-provided memory allocation functions.
5a505fc4c2e99842052d9409790c7da0b5663bceMukund Sivaraman </varlistentry>
0f78f780648806bcb3e374b7dafac73e6c558ea8Mark Andrews <varlistentry>
0f78f780648806bcb3e374b7dafac73e6c558ea8Mark Andrews <term>-m <replaceable class="parameter">flag</replaceable></term>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Turn on memory usage debugging flags. Possible flags are
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <replaceable class="parameter">usage</replaceable>,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <replaceable class="parameter">trace</replaceable>,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <replaceable class="parameter">record</replaceable>,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <replaceable class="parameter">size</replaceable>, and
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <replaceable class="parameter">mctx</replaceable>.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt These correspond to the ISC_MEM_DEBUGXXXX flags described in
0f78f780648806bcb3e374b7dafac73e6c558ea8Mark Andrews </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <term>-n <replaceable class="parameter">#cpus</replaceable></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Create <replaceable class="parameter">#cpus</replaceable> worker threads
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein to take advantage of multiple CPUs. If not specified,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <command>named</command> will try to determine the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein number of CPUs present and create one thread per CPU.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein If it is unable to determine the number of CPUs, a
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein single worker thread will be created.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <term>-p <replaceable class="parameter">port</replaceable></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Listen for queries on port <replaceable class="parameter">port</replaceable>. If not
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein specified, the default is port 53.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Write memory usage statistics to <filename>stdout</filename> on exit.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein This option is mainly of interest to BIND 9 developers
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein and may be removed or changed in a future release.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 <varlistentry>
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 <term>-S <replaceable class="parameter">#max-socks</replaceable></term>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <replaceable class="parameter">#max-socks</replaceable> sockets.
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt The default value is 4096 on systems built with default
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt configuration options, and 21000 on systems built with
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt "configure --with-tuning=large".
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 This option should be unnecessary for the vast majority
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The use of this option could even be harmful because the
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 specified value may exceed the limitation of the
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 underlying system API.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt It is therefore set only when the default configuration
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 causes exhaustion of file descriptors and the
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 operational environment is known to support the
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 specified number of sockets.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Note also that the actual maximum number is normally a little
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 fewer than the specified value because
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <command>named</command> reserves some file descriptors
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt for its internal use.
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <term>-t <replaceable class="parameter">directory</replaceable></term>
561a29af8c54a216e7d30b5b4f6e0d21661654ecMark Andrews <para>Chroot
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt to <replaceable class="parameter">directory</replaceable> after
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein processing the command line arguments, but before
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein reading the configuration file.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein This option should be used in conjunction with the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <option>-u</option> option, as chrooting a process
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein running as root doesn't enhance security on most
561a29af8c54a216e7d30b5b4f6e0d21661654ecMark Andrews systems; the way <function>chroot(2)</function> is
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein defined allows a process with root privileges to
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein escape a chroot jail.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
5d23a6ac8392b1eeec8effdee47fb725ace1e759Evan Hunt <term>-U <replaceable class="parameter">#listeners</replaceable></term>
5d23a6ac8392b1eeec8effdee47fb725ace1e759Evan Hunt Use <replaceable class="parameter">#listeners</replaceable>
5d23a6ac8392b1eeec8effdee47fb725ace1e759Evan Hunt worker threads to listen for incoming UDP packets on each
5d23a6ac8392b1eeec8effdee47fb725ace1e759Evan Hunt address. If not specified, <command>named</command> will
83eecff731c1a049b12f01fb699fa15ab7ddac2eEvan Hunt calculate a default value based on the number of detected
1a989c43221af87ad8e64b250a31948373cc8565Mukund Sivaraman CPUs: 1 for 1 CPU, and the number of detected CPUs
1a989c43221af87ad8e64b250a31948373cc8565Mukund Sivaraman minus one for machines with more than 1 CPU. This cannot
1a989c43221af87ad8e64b250a31948373cc8565Mukund Sivaraman be increased to a value higher than the number of CPUs.
83eecff731c1a049b12f01fb699fa15ab7ddac2eEvan Hunt If <option>-n</option> has been set to a higher value than
83eecff731c1a049b12f01fb699fa15ab7ddac2eEvan Hunt the number of detected CPUs, then <option>-U</option> may
83eecff731c1a049b12f01fb699fa15ab7ddac2eEvan Hunt be increased as high as that value, but no higher.
31cca00bba8c9204b842de1a43248fd42041b207Mukund Sivaraman On Windows, the number of UDP listeners is hardwired to 1
31cca00bba8c9204b842de1a43248fd42041b207Mukund Sivaraman and this option has no effect.
5d23a6ac8392b1eeec8effdee47fb725ace1e759Evan Hunt </varlistentry>
5d23a6ac8392b1eeec8effdee47fb725ace1e759Evan Hunt <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <term>-u <replaceable class="parameter">user</replaceable></term>
561a29af8c54a216e7d30b5b4f6e0d21661654ecMark Andrews <para>Setuid
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt to <replaceable class="parameter">user</replaceable> after completing
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein privileged operations, such as creating sockets that
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein listen on privileged ports.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein On Linux, <command>named</command> uses the kernel's
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt capability mechanism to drop all root privileges
561a29af8c54a216e7d30b5b4f6e0d21661654ecMark Andrews except the ability to <function>bind(2)</function> to
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein privileged port and set process resource limits.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Unfortunately, this means that the <option>-u</option>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein option only works when <command>named</command> is
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein later, since previous kernels did not allow privileges
561a29af8c54a216e7d30b5b4f6e0d21661654ecMark Andrews to be retained after <function>setuid(2)</function>.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Report the version number and exit.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉 <varlistentry>
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉 Report the version number and build options, and exit.
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉 </varlistentry>
47d837a49967a6a1b290024f5efb0669276013b1Mukund Sivaraman <varlistentry>
47d837a49967a6a1b290024f5efb0669276013b1Mukund Sivaraman <term>-X <replaceable class="parameter">lock-file</replaceable></term>
47d837a49967a6a1b290024f5efb0669276013b1Mukund Sivaraman Acquire a lock on the specified file at runtime; this
47d837a49967a6a1b290024f5efb0669276013b1Mukund Sivaraman helps to prevent duplicate <command>named</command> instances
7ae96d882326357448f8f440c52f47ac1b1fa455Evan Hunt from running simultaneously.
7ae96d882326357448f8f440c52f47ac1b1fa455Evan Hunt Use of this option overrides the <command>lock-file</command>
7ae96d882326357448f8f440c52f47ac1b1fa455Evan Hunt If set to <literal>none</literal>, the lock file check
7ae96d882326357448f8f440c52f47ac1b1fa455Evan Hunt is disabled.
47d837a49967a6a1b290024f5efb0669276013b1Mukund Sivaraman </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <term>-x <replaceable class="parameter">cache-file</replaceable></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Load data from <replaceable class="parameter">cache-file</replaceable> into the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein cache of the default view.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein This option must not be used. It is only of interest
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein to BIND 9 developers and may be removed or changed in a
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein future release.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </variablelist>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein In routine operation, signals should not be used to control
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein the nameserver; <command>rndc</command> should be used
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <variablelist>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Force a reload of the server.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Shut down the server.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </variablelist>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The result of sending any other signals to the server is undefined.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <refsection><info><title>CONFIGURATION</title></info>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The <command>named</command> configuration file is too complex
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein to describe in detail here. A complete description is provided
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed <command>named</command> inherits the <function>umask</function>
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed (file creation mode mask) from the parent process. If files
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed created by <command>named</command>, such as journal files,
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed need to have custom permissions, the <function>umask</function>
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed should be set explicitly in the script used to start the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <variablelist>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <term><filename>/etc/named.conf</filename></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The default configuration file.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley <varlistentry>
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews <term><filename>/var/run/named/named.pid</filename></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The default process-id file.
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </varlistentry>
6ea1b817e31b89a627e146fe69e23ea0a64c89ecBob Halley </variablelist>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
6043e41fcf5dc91aa8a981c966512d73bdec31c1Mark Andrews <citerefentry>
6043e41fcf5dc91aa8a981c966512d73bdec31c1Mark Andrews </citerefentry>,
6043e41fcf5dc91aa8a981c966512d73bdec31c1Mark Andrews <citerefentry>
6043e41fcf5dc91aa8a981c966512d73bdec31c1Mark Andrews </citerefentry>,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <citerefentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </citerefentry>,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <citerefentry>
84910d09ee8244027c7031e03999bc60a3d63adbMark Andrews </citerefentry>,
84910d09ee8244027c7031e03999bc60a3d63adbMark Andrews <citerefentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </citerefentry>,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>