named.docbook revision 31cca00bba8c9204b842de1a43248fd42041b207
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews [<!ENTITY mdash "—">]>
8c850a29eda020642c84038e449d60f124c6123bMark Andrews - Copyright (C) 2004-2009, 2011, 2013-2015 Internet Systems Consortium, Inc. ("ISC")
8c850a29eda020642c84038e449d60f124c6123bMark Andrews - Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews - Permission to use, copy, modify, and/or distribute this software for any
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews - purpose with or without fee is hereby granted, provided that the above
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews - copyright notice and this permission notice appear in all copies.
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
301f6ffbbeabcbf765f8163f4ffb7f6f0146b926Mark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
301f6ffbbeabcbf765f8163f4ffb7f6f0146b926Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
7314547af7aa1dd25d690dd3f034d49e5cc8fa9dMark Andrews <refentryinfo>
541b9722d8031485922ab11221c2e747c0262cf5Mark Andrews </refentryinfo>
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews <refentrytitle><application>named</application></refentrytitle>
d7e8610d31d83ff863e8b2dc05c238376c35e949Mark Andrews <refnamediv>
d7e8610d31d83ff863e8b2dc05c238376c35e949Mark Andrews <refname><application>named</application></refname>
d7e8610d31d83ff863e8b2dc05c238376c35e949Mark Andrews <refpurpose>Internet domain name server</refpurpose>
7e8214191899dc8043babdfbe9235ba14c825005Mark Andrews </refnamediv>
404df30f4fcbd318dd1e3cc027d2b5abff3ab6d5Mark Andrews <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
404df30f4fcbd318dd1e3cc027d2b5abff3ab6d5Mark Andrews </copyright>
1f2635d3f7b3f0b3bf0d0310fe880d95e84f09fcMark Andrews </copyright>
802760773ca5224b29a610741a7f2e0a7d6e031bMark Andrews <refsynopsisdiv>
b6d496d53851e5ab5ba82e800062a431b05310cbEvan Hunt <cmdsynopsis>
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews <arg><option>-c <replaceable class="parameter">config-file</replaceable></option></arg>
67213ca3d0594588a6fac32d8188efc68b0ad572Shane Kerr <arg><option>-d <replaceable class="parameter">debug-level</replaceable></option></arg>
67213ca3d0594588a6fac32d8188efc68b0ad572Shane Kerr <arg><option>-D <replaceable class="parameter">string</replaceable></option></arg>
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews <arg><option>-E <replaceable class="parameter">engine-name</replaceable></option></arg>
33170a4b2b2765583df543efbb13a01e7b664037Mark Andrews <arg><option>-L <replaceable class="parameter">logfile</replaceable></option></arg>
33170a4b2b2765583df543efbb13a01e7b664037Mark Andrews <arg><option>-M <replaceable class="parameter">option</replaceable></option></arg>
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews <arg><option>-m <replaceable class="parameter">flag</replaceable></option></arg>
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews <arg><option>-n <replaceable class="parameter">#cpus</replaceable></option></arg>
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews <arg><option>-p <replaceable class="parameter">port</replaceable></option></arg>
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews <arg><option>-S <replaceable class="parameter">#max-socks</replaceable></option></arg>
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
03745451370778a867e46fdbe315eb958745a391Mark Andrews <arg><option>-U <replaceable class="parameter">#listeners</replaceable></option></arg>
03745451370778a867e46fdbe315eb958745a391Mark Andrews <arg><option>-u <replaceable class="parameter">user</replaceable></option></arg>
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews <arg><option>-X <replaceable class="parameter">lock-file</replaceable></option></arg>
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews <arg><option>-x <replaceable class="parameter">cache-file</replaceable></option></arg>
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews </cmdsynopsis>
e9908a145e763591bb407a4cd3d2062c7bc94cd8Mark Andrews </refsynopsisdiv>
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews is a Domain Name System (DNS) server,
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews part of the BIND 9 distribution from ISC. For more
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews information on the DNS, see RFCs 1033, 1034, and 1035.
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews When invoked without arguments, <command>named</command>
05d2776f6fa8e3628555463b06cb43288c9ee68eEvan Hunt read the default configuration file
05d2776f6fa8e3628555463b06cb43288c9ee68eEvan Hunt <filename>/etc/named.conf</filename>, read any initial
05d2776f6fa8e3628555463b06cb43288c9ee68eEvan Hunt data, and listen for queries.
8c76634f88c5b3169b61505925e10b997ea08e54Mark Andrews <variablelist>
8bedd9647f4d6894e12a8c94d3ccc624dddcee50Mark Andrews <varlistentry>
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews Use IPv4 only even if the host machine is capable of IPv6.
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews <option>-4</option> and <option>-6</option> are mutually
e6555b046798b1900e93c3208d26301872f50ca5Shane Kerr </varlistentry>
9a41f786b167a2a6df498d5e9c699f9835e1e9dcMark Andrews <varlistentry>
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews Use IPv6 only even if the host machine is capable of IPv4.
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews <option>-4</option> and <option>-6</option> are mutually
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews </varlistentry>
65391557db5d7dc725ed3f2b759248fea31a2445Mark Andrews <varlistentry>
65391557db5d7dc725ed3f2b759248fea31a2445Mark Andrews <term>-c <replaceable class="parameter">config-file</replaceable></term>
e2c3f8059e77a8e11c4378d22e5d8e78b423a28fMark Andrews Use <replaceable class="parameter">config-file</replaceable> as the
a7b7a4ebc38ec7460e95da6d3d70ffe7b59573b8Mark Andrews configuration file instead of the default,
1ca168b58e02fda534cad741a248e549e0f98d4dMark Andrews ensure that reloading the configuration file continues
6f1b09965f26ab0d6c38dec4a38f67bb34ebddceMark Andrews to work after the server has changed its working
23450c23fd19138cfad95b6c7728e2965abfc154Mark Andrews directory due to to a possible
de05f7d061abfe0ce555e0d0f2089f1261b031b6Mark Andrews <option>directory</option> option in the configuration
de05f7d061abfe0ce555e0d0f2089f1261b031b6Mark Andrews file, <replaceable class="parameter">config-file</replaceable> should be
d468b1b7b2ccfdf132df15f600be48dccf447eb1Evan Hunt an absolute pathname.
c7e266b7e5675e12d1ca3cc929f24b3e86d41f8eEvan Hunt </varlistentry>
c7e266b7e5675e12d1ca3cc929f24b3e86d41f8eEvan Hunt <varlistentry>
85db2b5fb360ccd2aeec1e6e22336b3d654bb39aMark Andrews <term>-d <replaceable class="parameter">debug-level</replaceable></term>
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews Set the daemon's debug level to <replaceable class="parameter">debug-level</replaceable>.
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews Debugging traces from <command>named</command> become
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews more verbose as the debug level increases.
709220567fb820cf7e7625925449dadf86317629Mark Andrews </varlistentry>
adc3f2c0fdcc0a2bee469ffb0e7ae41b83cbf403Mark Andrews <varlistentry>
adc3f2c0fdcc0a2bee469ffb0e7ae41b83cbf403Mark Andrews <term>-D <replaceable class="parameter">string</replaceable></term>
8731a2bd2f5483f50d82cf28e315090b7ceeed54Mark Andrews Specifies a string that is used to identify a instance of
8731a2bd2f5483f50d82cf28e315090b7ceeed54Mark Andrews <command>named</command> in a process listing. The contents
2de90cd1e20061bde684a21c3d852056a2e290d0Mark Andrews of <replaceable class="parameter">string</replaceable> are
2de90cd1e20061bde684a21c3d852056a2e290d0Mark Andrews not examined.
8a45eeebb8bdd4633bccfd9d77d9b50c1d337d54Mark Andrews </varlistentry>
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews <varlistentry>
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews <term>-E <replaceable class="parameter">engine-name</replaceable></term>
ee4bbc8454cc0cb36a25a7d26c5b47370f96d9b2Mark Andrews When applicable, specifies the hardware to use for
ee4bbc8454cc0cb36a25a7d26c5b47370f96d9b2Mark Andrews cryptographic operations, such as a secure key store used
ee4bbc8454cc0cb36a25a7d26c5b47370f96d9b2Mark Andrews for signing.
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews When BIND is built with OpenSSL PKCS#11 support, this defaults
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews to the string "pkcs11", which identifies an OpenSSL engine
f568dad6c7ddaa732e6562a4b89fd2ac922d263bMark Andrews that can drive a cryptographic accelerator or hardware service
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews module. When BIND is built with native PKCS#11 cryptography
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews (--enable-native-pkcs11), it defaults to the path of the PKCS#11
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews provider library specified via "--with-pkcs11".
d91df50b670d92d0ab784b741e2ee9af7f2dc4a1Mark Andrews </varlistentry>
3eab85ca54b681504d772b1d6bb3ccf4f08d4305Mark Andrews <varlistentry>
557bcc2092642b2d4668c9b08872c9f2bb88bddbMark Andrews Run the server in the foreground (i.e. do not daemonize).
c60eaaf9b3c6bb4d693cdb5f68acdfacf076e1fdMark Andrews </varlistentry>
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews <varlistentry>
c0720b90ed6e673264b17eb752d873a89cbd6db5Mark Andrews Run the server in the foreground and force all logging
c06cb907737eb7ce128c92dd729c73798733f37aMark Andrews </varlistentry>
6e5e27c38d86f2338688f5123d2ff84558956dd0Mark Andrews <varlistentry>
6e5e27c38d86f2338688f5123d2ff84558956dd0Mark Andrews <term>-L <replaceable class="parameter">logfile</replaceable></term>
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews Log to the file <option>logfile</option> by default
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews instead of the system log.
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews </varlistentry>
dd19fbaf817f974c24ddfa1d276d7594d5b18750Mark Andrews <varlistentry>
dd19fbaf817f974c24ddfa1d276d7594d5b18750Mark Andrews <term>-M <replaceable class="parameter">option</replaceable></term>
f408773d47b25594d1302525a4db6efb84b1843cMark Andrews Sets the default memory context options. Currently
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews the only supported option is
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews <replaceable class="parameter">external</replaceable>,
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews which causes the internal memory manager to be bypassed
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews in favor of system-provided memory allocation functions.
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews </varlistentry>
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews <varlistentry>
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews <term>-m <replaceable class="parameter">flag</replaceable></term>
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews Turn on memory usage debugging flags. Possible flags are
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews <replaceable class="parameter">usage</replaceable>,
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews <replaceable class="parameter">trace</replaceable>,
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews <replaceable class="parameter">record</replaceable>,
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews <replaceable class="parameter">size</replaceable>, and
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews <replaceable class="parameter">mctx</replaceable>.
5888f62c204a99da60d7854fe01eda4960fb3b36Mark Andrews These correspond to the ISC_MEM_DEBUGXXXX flags described in
7c200913aa7e55bbe28de456bb593c1e05bf6f79Mark Andrews </varlistentry>
07072c9456f1112705db701bb35f12dbdcb217b0Mark Andrews <varlistentry>
07072c9456f1112705db701bb35f12dbdcb217b0Mark Andrews <term>-n <replaceable class="parameter">#cpus</replaceable></term>
afd002e89aadf30181155566544480349e70339dMark Andrews Create <replaceable class="parameter">#cpus</replaceable> worker threads
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews to take advantage of multiple CPUs. If not specified,
ba5d2a97ee0cd2cc9d4b9e7e344ae8f607cc2994Mark Andrews <command>named</command> will try to determine the
ba5d2a97ee0cd2cc9d4b9e7e344ae8f607cc2994Mark Andrews number of CPUs present and create one thread per CPU.
6133734cecb05630e32edb63031b95d333df8e48Mark Andrews If it is unable to determine the number of CPUs, a
6133734cecb05630e32edb63031b95d333df8e48Mark Andrews single worker thread will be created.
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews </varlistentry>
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews <varlistentry>
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews <term>-p <replaceable class="parameter">port</replaceable></term>
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews Listen for queries on port <replaceable class="parameter">port</replaceable>. If not
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews specified, the default is port 53.
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews </varlistentry>
bf45f72ed319628eebce60c368177320943d001fMark Andrews <varlistentry>
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews Write memory usage statistics to <filename>stdout</filename> on exit.
d1199d9c06ba470fa4779981bea2f8f7403e8eabMark Andrews This option is mainly of interest to BIND 9 developers
d1199d9c06ba470fa4779981bea2f8f7403e8eabMark Andrews and may be removed or changed in a future release.
7c5dfcc60a7ee41ae5ba15a3e1fe337af3bef1a9Mark Andrews </varlistentry>
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews <varlistentry>
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews <term>-S <replaceable class="parameter">#max-socks</replaceable></term>
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews <replaceable class="parameter">#max-socks</replaceable> sockets.
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews The default value is 4096 on systems built with default
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews configuration options, and 21000 on systems built with
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews "configure --with-tuning=large".
68df4d65c624a9ca06e94fc67ef915adf2ec97beMark Andrews This option should be unnecessary for the vast majority
ab6e5af4cd644b174709f95c2702ec4c442aa755Mark Andrews The use of this option could even be harmful because the
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews specified value may exceed the limitation of the
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews underlying system API.
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews It is therefore set only when the default configuration
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews causes exhaustion of file descriptors and the
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews operational environment is known to support the
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews specified number of sockets.
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews Note also that the actual maximum number is normally a little
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews fewer than the specified value because
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews <command>named</command> reserves some file descriptors
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews for its internal use.
9860862cedd41ffaf69e7806e8f8959263552721Mark Andrews </varlistentry>
9860862cedd41ffaf69e7806e8f8959263552721Mark Andrews <varlistentry>
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews <term>-t <replaceable class="parameter">directory</replaceable></term>
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews <para>Chroot
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews to <replaceable class="parameter">directory</replaceable> after
63aaac8137bd1d86aab8c950fb066bb522a26e5bMark Andrews processing the command line arguments, but before
63aaac8137bd1d86aab8c950fb066bb522a26e5bMark Andrews reading the configuration file.
40aadb6a143e0f2d351e743dce43cfc894d4d855Mark Andrews This option should be used in conjunction with the
40aadb6a143e0f2d351e743dce43cfc894d4d855Mark Andrews <option>-u</option> option, as chrooting a process
40aadb6a143e0f2d351e743dce43cfc894d4d855Mark Andrews running as root doesn't enhance security on most
65b26a4dc8c6c16d0a5ccb03b67cf968c77d6570Mark Andrews systems; the way <function>chroot(2)</function> is
65b26a4dc8c6c16d0a5ccb03b67cf968c77d6570Mark Andrews defined allows a process with root privileges to
65b26a4dc8c6c16d0a5ccb03b67cf968c77d6570Mark Andrews escape a chroot jail.
337e70ead93aafec305ac0a7a62090339543b8d1Mark Andrews </varlistentry>
337e70ead93aafec305ac0a7a62090339543b8d1Mark Andrews <varlistentry>
f0a1b8c85792d4e04716f995a2b2a8ca73f8367dMark Andrews <term>-U <replaceable class="parameter">#listeners</replaceable></term>
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews Use <replaceable class="parameter">#listeners</replaceable>
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews worker threads to listen for incoming UDP packets on each
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews address. If not specified, <command>named</command> will
7a253b705ccbc30821253e7a124658623f10c499Mark Andrews calculate a default value based on the number of detected
7a253b705ccbc30821253e7a124658623f10c499Mark Andrews CPUs: 1 for 1 CPU, and the number of detected CPUs
f6476fa52240e3c8278ac4a27fa2cc8a5b7a3e3bMark Andrews minus one for machines with more than 1 CPU. This cannot
f6476fa52240e3c8278ac4a27fa2cc8a5b7a3e3bMark Andrews be increased to a value higher than the number of CPUs.
f6476fa52240e3c8278ac4a27fa2cc8a5b7a3e3bMark Andrews If <option>-n</option> has been set to a higher value than
cd1e58c339b2a6709d543a525de0c995bf8b5868Mark Andrews the number of detected CPUs, then <option>-U</option> may
cd1e58c339b2a6709d543a525de0c995bf8b5868Mark Andrews be increased as high as that value, but no higher.
cd1e58c339b2a6709d543a525de0c995bf8b5868Mark Andrews On Windows, the number of UDP listeners is hardwired to 1
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews and this option has no effect.
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews </varlistentry>
429e23d2f56d28d86439f75c13cda2b4ac5ab67bMark Andrews <varlistentry>
c5c825bf07a00a2478afd9400e9f8534457980b0Mark Andrews <term>-u <replaceable class="parameter">user</replaceable></term>
c5c825bf07a00a2478afd9400e9f8534457980b0Mark Andrews <para>Setuid
aaa42824d2d1f5cc4add01f0191e3784ee0f7396Mark Andrews to <replaceable class="parameter">user</replaceable> after completing
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews privileged operations, such as creating sockets that
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews listen on privileged ports.
25820cf1d110ec22cec5f6be5257aabe6853ca92Evan Hunt On Linux, <command>named</command> uses the kernel's
25820cf1d110ec22cec5f6be5257aabe6853ca92Evan Hunt capability mechanism to drop all root privileges
25820cf1d110ec22cec5f6be5257aabe6853ca92Evan Hunt except the ability to <function>bind(2)</function> to
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt privileged port and set process resource limits.
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt Unfortunately, this means that the <option>-u</option>
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt option only works when <command>named</command> is
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews later, since previous kernels did not allow privileges
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews to be retained after <function>setuid(2)</function>.
113e0b7819103f02d5a16bad1b7356587d866ac2Mark Andrews </varlistentry>
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews <varlistentry>
65085946d4f92481699678e276e3ced04bcfdafbMark Andrews Report the version number and exit.
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews </varlistentry>
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews <varlistentry>
b130bf8b4ebdabd5c94eb5c6522a9971997b6ac9Mark Andrews Report the version number and build options, and exit.
072eaf055b7fa0d8abe96146fbb9152b14946c84Mark Andrews </varlistentry>
7a3c2d189e811933c48aace1900a868dffd42f5fMark Andrews <varlistentry>
7a3c2d189e811933c48aace1900a868dffd42f5fMark Andrews <term>-X <replaceable class="parameter">lock-file</replaceable></term>
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews Acquire a lock on the specified file at runtime; this
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews helps to prevent duplicate <command>named</command> instances
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews from running simultaneously.
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews Use of this option overrides the <command>lock-file</command>
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews If set to <literal>none</literal>, the lock file check
4259095c8058beb9b475f1884dbeda375979e6f6Mark Andrews is disabled.
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews </varlistentry>
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews <varlistentry>
8c731c1219f1698f15bf5b1fcf6bc301cfd9bc42Mark Andrews <term>-x <replaceable class="parameter">cache-file</replaceable></term>
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews Load data from <replaceable class="parameter">cache-file</replaceable> into the
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews cache of the default view.
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews This option must not be used. It is only of interest
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews to BIND 9 developers and may be removed or changed in a
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews future release.
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews </varlistentry>
bde20a0436dff13e2299cfd4230ddec54d396d02Mark Andrews </variablelist>
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews In routine operation, signals should not be used to control
394f4aec2189750d7f861d00f97fe28ffcd9f659Mark Andrews the nameserver; <command>rndc</command> should be used
2e676167cc8cbb2e6dbb54e9859098dd5b9cd5c8Mark Andrews <variablelist>
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews <varlistentry>
57eb7efe13b67455e8c6a08cf080afb3de2ac622Mark Andrews Force a reload of the server.
5dcc67a0fff89e7ebf051f64b6b987862c331a04Mark Andrews </varlistentry>
5dcc67a0fff89e7ebf051f64b6b987862c331a04Mark Andrews <varlistentry>
cc2720da38bb7bab2bf283de56dd90e9093d7f00Mark Andrews Shut down the server.
10fc76d48aa7ecb8a7242970585ba154b368f97eMark Andrews </varlistentry>
5cc6a0f7dae472e5c2022b2cbb5343ec9f7f4942Mark Andrews </variablelist>
1e70c9a36639bb1e8d537dcefa3cd12a7bb39db0Mark Andrews The result of sending any other signals to the server is undefined.
f31446e6b5925395fce4f62adf71f7ad70cea6ceMark Andrews The <command>named</command> configuration file is too complex
f31446e6b5925395fce4f62adf71f7ad70cea6ceMark Andrews to describe in detail here. A complete description is provided
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
8943ff626fa337419cbffad6a4a910c7d99509f4Mark Andrews <command>named</command> inherits the <function>umask</function>
8943ff626fa337419cbffad6a4a910c7d99509f4Mark Andrews (file creation mode mask) from the parent process. If files
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews created by <command>named</command>, such as journal files,
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews need to have custom permissions, the <function>umask</function>
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews should be set explicitly in the script used to start the
e7d32e57a5c8600893f91ec08f74117c983f8b8dMark Andrews <variablelist>
fa3d0b9991ea0d8344881c5dd4609d9c33314b9bMark Andrews <varlistentry>
e3f66e1617f9fca7313e4005b8c3c611551906d1Mark Andrews <term><filename>/etc/named.conf</filename></term>
ed954ce73b1c712b24eab945190028871433f803Mark Andrews The default configuration file.
29747dfe5e073a299b3681e01f5c55540f8bfed7Mark Andrews </varlistentry>
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews <varlistentry>
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews <term><filename>/var/run/named/named.pid</filename></term>
1372e172d0e0b08996376b782a9041d1e3542489Mark Andrews The default process-id file.
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews </varlistentry>
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews </variablelist>
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews <citerefentry>
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews </citerefentry>,
e60f01cdd29c71e9224273214521b15aef4d4555Mark Andrews <citerefentry>
13290782cb83ee43c4dc942d186761a46c4a2692Mark Andrews </citerefentry>,
13290782cb83ee43c4dc942d186761a46c4a2692Mark Andrews <citerefentry>
895ae38da194143331d667289affd3b43c5bfc14Mark Andrews </citerefentry>,
824cb6567555af556d0963d961798483d252eb5fMark Andrews <citerefentry>
bca16e31b457598cd1dbbf0cdc7a26a6d2ec3753Mark Andrews </citerefentry>,
58ea8fb1dfc8c055a7d4ad74d65e345436ede790Mark Andrews <citerefentry>
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews </citerefentry>,
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
a7dd5f21e996b01262a3d564dae9561cb3f8e717Mark Andrews <para><corpauthor>Internet Systems Consortium</corpauthor>
1cbb3a4df30777791ce27a0d2349420808c013d8Mark Andrews - Local variables:
289ae548d52bc8f982d9823af64cafda7bd92232Mark Andrews - mode: sgml