f743002678eb67b99bbc29fee116b65d9530fec0wrowe<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook V4.1//EN">

e50c3026198fd496f183cda4c32a202925476778covener

5b88c8507d5ef6d0c4cfbc78230294968175b638minfrin

5b88c8507d5ef6d0c4cfbc78230294968175b638minfrin<refentry>

6c3b9cebb551140fbb25d58bae08b539b3802133ylavic <refentryinfo>

6c3b9cebb551140fbb25d58bae08b539b3802133ylavic <date>Aug 27, 2001</date>

6c3b9cebb551140fbb25d58bae08b539b3802133ylavic </refentryinfo>

4f29b65ab4b547ad5dbe506e2d0ff5d12ead9247ylavic

4f29b65ab4b547ad5dbe506e2d0ff5d12ead9247ylavic <refmeta>

0a0df13b7f1f4f1a74fe295253d89ca3911b301aylavic <refentrytitle><application>rndc-confgen</application></refentrytitle>

0a0df13b7f1f4f1a74fe295253d89ca3911b301aylavic <manvolnum>8</manvolnum>

0a0df13b7f1f4f1a74fe295253d89ca3911b301aylavic <refmiscinfo>BIND9</refmiscinfo>

0a0df13b7f1f4f1a74fe295253d89ca3911b301aylavic </refmeta>

69301145375a889e7e37caf7cc7321ac0f91801erpluem

69301145375a889e7e37caf7cc7321ac0f91801erpluem <refnamediv>

69301145375a889e7e37caf7cc7321ac0f91801erpluem <refname><application>rndc-confgen</application></refname>

506bfe33206b2fece40ef25f695af39dd4130facjkaluza <refpurpose>rndc key generation tool</refpurpose>

506bfe33206b2fece40ef25f695af39dd4130facjkaluza </refnamediv>

506bfe33206b2fece40ef25f695af39dd4130facjkaluza

506bfe33206b2fece40ef25f695af39dd4130facjkaluza <refsynopsisdiv>

d58a848a016d401b965111e50ef829e1641f7834minfrin <cmdsynopsis>

d58a848a016d401b965111e50ef829e1641f7834minfrin <command>rndc-confgen</command>

d58a848a016d401b965111e50ef829e1641f7834minfrin <arg><option>-a</option></arg>

2e6f4d654c96c98b761fb012fd25c5d5b1558c44sf <arg><option>-b <replaceable class="parameter">keysize</replaceable></option></arg>

2e6f4d654c96c98b761fb012fd25c5d5b1558c44sf <arg><option>-c <replaceable class="parameter">keyfile</replaceable></option></arg>

2e6f4d654c96c98b761fb012fd25c5d5b1558c44sf <arg><option>-h</option></arg>

17e6c95f3b22d18acdf8380fb26a8d0e10c80767ylavic <arg><option>-k <replaceable class="parameter">keyname</replaceable></option></arg>

17e6c95f3b22d18acdf8380fb26a8d0e10c80767ylavic <arg><option>-p <replaceable class="parameter">port</replaceable></option></arg>

17e6c95f3b22d18acdf8380fb26a8d0e10c80767ylavic <arg><option>-r <replaceable class="parameter">randomfile</replaceable></option></arg>

17e6c95f3b22d18acdf8380fb26a8d0e10c80767ylavic <arg><option>-s <replaceable class="parameter">address</replaceable></option></arg>

17e6c95f3b22d18acdf8380fb26a8d0e10c80767ylavic <arg><option>-t <replaceable class="parameter">chrootdir</replaceable></option></arg>

e8bd80a4bb88199d2f9a24a50345688e52d9c116ylavic <arg><option>-u <replaceable class="parameter">user</replaceable></option></arg>

e8bd80a4bb88199d2f9a24a50345688e52d9c116ylavic </cmdsynopsis>

e8bd80a4bb88199d2f9a24a50345688e52d9c116ylavic </refsynopsisdiv>

330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic

330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic <refsect1>

330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic <title>DESCRIPTION</title>

330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic <para>

330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic <command>rndc-confgen</command> generates configuration files

330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic for <command>rndc</command>. It can be used as a

330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic convenient alternative to writing the

d7205b1a86c51c27b71a2c458dc453fd53a261c1covener <filename>rndc.conf</filename> file

d7205b1a86c51c27b71a2c458dc453fd53a261c1covener and the corresponding <command>controls</command>

d7205b1a86c51c27b71a2c458dc453fd53a261c1covener and <command>key</command>

d7205b1a86c51c27b71a2c458dc453fd53a261c1covener statements in <filename>named.conf</filename> by hand.

d7205b1a86c51c27b71a2c458dc453fd53a261c1covener Alternatively, it can be run with the <command>-a</command>

44ff304057225e944e220e981d434a046d14cf06covener option to set up a <filename>rndc.key</filename> file and

44ff304057225e944e220e981d434a046d14cf06covener avoid the need for a <filename>rndc.conf</filename> file

44ff304057225e944e220e981d434a046d14cf06covener and a <command>controls</command> statement altogether.

44ff304057225e944e220e981d434a046d14cf06covener </para>

5d1ba75b8794925e67591c209085a49279791de9covener

5d1ba75b8794925e67591c209085a49279791de9covener </refsect1>

5d1ba75b8794925e67591c209085a49279791de9covener

032982212dbcc7c3cce95bf89c503bb56e185ac7kbrand <refsect1>

032982212dbcc7c3cce95bf89c503bb56e185ac7kbrand <title>OPTIONS</title>

032982212dbcc7c3cce95bf89c503bb56e185ac7kbrand

032982212dbcc7c3cce95bf89c503bb56e185ac7kbrand <variablelist>

caad2986f81ab263f7af41467dd622dc9add17f3ylavic <varlistentry>

caad2986f81ab263f7af41467dd622dc9add17f3ylavic <term>-a</term>

caad2986f81ab263f7af41467dd622dc9add17f3ylavic <listitem>

caad2986f81ab263f7af41467dd622dc9add17f3ylavic <para>

45a10d38e6051fd7bdf9d742aaae633d97ff02abjailletc Do automatic <command>rndc</command> configuration.

f7317ff316c2b141feea31bddb74d5d3fa1584edjorton This creates a file <filename>rndc.key</filename>

f7317ff316c2b141feea31bddb74d5d3fa1584edjorton in <filename>/etc</filename> (or whatever

2165214331e4afafca4048f66f303d0253d7b001covener <varname>sysconfdir</varname>

a34684a59b60a4173c25035d0c627ef17e6dc215rpluem was specified as when <acronym>BIND</acronym> was built)

a34684a59b60a4173c25035d0c627ef17e6dc215rpluem that is read by both <command>rndc</command>

1e2d421a36999d292042a5539971070d54aa6c63ylavic and <command>named</command> on startup. The

1e2d421a36999d292042a5539971070d54aa6c63ylavic <filename>rndc.key</filename> file defines a default

1e2d421a36999d292042a5539971070d54aa6c63ylavic command channel and authentication key allowing

fa7ed98b9dc94c5845cf845aea0a44ecacd290c9humbedooh <command>rndc</command> to communicate with

fa7ed98b9dc94c5845cf845aea0a44ecacd290c9humbedooh <command>named</command> on the local host

fa7ed98b9dc94c5845cf845aea0a44ecacd290c9humbedooh with no further configuration.

0b67eb8568cd58bb77082703951679b42cf098actrawick </para>

0b67eb8568cd58bb77082703951679b42cf098actrawick <para>

0b67eb8568cd58bb77082703951679b42cf098actrawick Running <command>rndc-confgen -a</command> allows

0b67eb8568cd58bb77082703951679b42cf098actrawick BIND 9 and <command>rndc</command> to be used as drop-in

5ef3c61605a3a021ff71f488983cb0065f8e1a79covener replacements for BIND 8 and <command>ndc</command>,

fb1985a97912b25ec6564c73e610a31e5fc6e25fcovener with no changes to the existing BIND 8

09c87c777bed1655621bb20e1c46cb6b1a63279dcovener <filename>named.conf</filename> file.

6502b7b32f980cc2093bb3ebce37e5e4dc68fba4ylavic </para>

6502b7b32f980cc2093bb3ebce37e5e4dc68fba4ylavic <para>

3060ce7f798fbda7999cd4ddf89b525d2b294185covener If a more elaborate configuration than that

c1a63b8fad09c419c1a64f75993feb8a343a6801ylavic generated by <command>rndc-confgen -a</command>

c1a63b8fad09c419c1a64f75993feb8a343a6801ylavic is required, for example if rndc is to be used remotely,

c1a63b8fad09c419c1a64f75993feb8a343a6801ylavic you should run <command>rndc-confgen</command> without the

e6b4bd1113567627ab6bb6c6a7105e1e01a7d889jailletc <command>-a</command> option and set up a

e6b4bd1113567627ab6bb6c6a7105e1e01a7d889jailletc <filename>rndc.conf</filename> and

e466c40e1801982602ee0200c9e8b61cc148742djailletc <filename>named.conf</filename>

e466c40e1801982602ee0200c9e8b61cc148742djailletc as directed.

457468b82e59d01eba00dd9d0817309c8f5e414ejim </para>

457468b82e59d01eba00dd9d0817309c8f5e414ejim </listitem>

457468b82e59d01eba00dd9d0817309c8f5e414ejim </varlistentry>

04983e3bd1754764eec7d6bb772fe3b0bf391771jorton

04983e3bd1754764eec7d6bb772fe3b0bf391771jorton <varlistentry>

15890c9306ba98f6fc243e15a3c4778ddc7d773erpluem <term>-b <replaceable class="parameter">keysize</replaceable></term>

15660979a30d251681463de2e0584853890082accovener <listitem>

15660979a30d251681463de2e0584853890082accovener <para>

49dacedb6c387b786b7911082ff35121a45f414bcovener Specifies the size of the authentication key in bits.

49dacedb6c387b786b7911082ff35121a45f414bcovener Must be between 1 and 512 bits; the default is 128.

cfd9415521847b2f9394fad04fb701cfb955f503rjung </para>

cfd9415521847b2f9394fad04fb701cfb955f503rjung </listitem>

cfd9415521847b2f9394fad04fb701cfb955f503rjung </varlistentry>

28c31fb73c1264bd1d0ff932573677030b024c7dwrowe

28c31fb73c1264bd1d0ff932573677030b024c7dwrowe <varlistentry>

28c31fb73c1264bd1d0ff932573677030b024c7dwrowe <term>-c <replaceable class="parameter">keyfile</replaceable></term>

28c31fb73c1264bd1d0ff932573677030b024c7dwrowe <listitem>

28c31fb73c1264bd1d0ff932573677030b024c7dwrowe <para>

8491e0600f69b0405e156ea8a419653c065c645bcovener Used with the <command>-a</command> option to specify

63b9f1f5880391261705f696d7d65507bbe9ace3covener an alternate location for <filename>rndc.key</filename>.

63b9f1f5880391261705f696d7d65507bbe9ace3covener </para>

63b9f1f5880391261705f696d7d65507bbe9ace3covener </listitem>

49dacedb6c387b786b7911082ff35121a45f414bcovener </varlistentry>

49dacedb6c387b786b7911082ff35121a45f414bcovener

49dacedb6c387b786b7911082ff35121a45f414bcovener <varlistentry>

49dacedb6c387b786b7911082ff35121a45f414bcovener <term>-h</term>

3c990331fc6702119e4f5b8ba9eae3021aea5265jim <listitem>

3c990331fc6702119e4f5b8ba9eae3021aea5265jim <para>

3c990331fc6702119e4f5b8ba9eae3021aea5265jim Prints a short summary of the options and arguments to

3c990331fc6702119e4f5b8ba9eae3021aea5265jim <command>rndc-confgen</command>.

fc42512879dd0504532f52fe5d0d0383dda96a1eniq </para>

fc42512879dd0504532f52fe5d0d0383dda96a1eniq </listitem>

fc42512879dd0504532f52fe5d0d0383dda96a1eniq </varlistentry>

0451df5dc50fa5d8b3e07d92ee6a92e36a1181a5niq

0451df5dc50fa5d8b3e07d92ee6a92e36a1181a5niq <varlistentry>

0451df5dc50fa5d8b3e07d92ee6a92e36a1181a5niq <term>-k <replaceable class="parameter">keyname</replaceable></term>

da0442c0440caef34706e2c2f3af05cb65921cc0jailletc <listitem>

983528026996668ea295be95aedb9c7a346af470ylavic <para>

da0442c0440caef34706e2c2f3af05cb65921cc0jailletc Specifies the key name of the rndc authentication key.

da0442c0440caef34706e2c2f3af05cb65921cc0jailletc This must be a valid domain name.

06b8f183140c8e02e0974e938a05078b511d1603covener The default is <constant>rndc-key</constant>.

06b8f183140c8e02e0974e938a05078b511d1603covener </para>

06b8f183140c8e02e0974e938a05078b511d1603covener </listitem>

15890c9306ba98f6fc243e15a3c4778ddc7d773erpluem </varlistentry>

259878293a997ff49f5ddfc53d3739cbdc25444ecovener

259878293a997ff49f5ddfc53d3739cbdc25444ecovener <varlistentry>

259878293a997ff49f5ddfc53d3739cbdc25444ecovener <term>-p <replaceable class="parameter">port</replaceable></term>

259878293a997ff49f5ddfc53d3739cbdc25444ecovener <listitem>

15890c9306ba98f6fc243e15a3c4778ddc7d773erpluem <para>

b54b024c06a19926832d77d40ba35ad8c41e4d3dminfrin Specifies the command channel port where <command>named</command>

b54b024c06a19926832d77d40ba35ad8c41e4d3dminfrin listens for connections from <command>rndc</command>.

b54b024c06a19926832d77d40ba35ad8c41e4d3dminfrin The default is 953.

65967d05f839dbf27cf91d91fa79585eeae19660minfrin </para>

65967d05f839dbf27cf91d91fa79585eeae19660minfrin </listitem>

65967d05f839dbf27cf91d91fa79585eeae19660minfrin </varlistentry>

65967d05f839dbf27cf91d91fa79585eeae19660minfrin

8152945ae46857b170cb227e79bb799f4fc7710dminfrin <varlistentry>

8152945ae46857b170cb227e79bb799f4fc7710dminfrin <term>-r <replaceable class="parameter">randomfile</replaceable></term>

8152945ae46857b170cb227e79bb799f4fc7710dminfrin <listitem>

8152945ae46857b170cb227e79bb799f4fc7710dminfrin <para>

75f5c2db254c0167a0e396254460de09b775d203trawick Specifies a source of random data for generating the

75f5c2db254c0167a0e396254460de09b775d203trawick authorization. If the operating

75f5c2db254c0167a0e396254460de09b775d203trawick system does not provide a <filename>/dev/random</filename>

4f0358189bfa57b8e75bd6b94db264302a8f336amrumph or equivalent device, the default source of randomness

4f0358189bfa57b8e75bd6b94db264302a8f336amrumph is keyboard input. <filename>randomdev</filename> specifies

4f0358189bfa57b8e75bd6b94db264302a8f336amrumph the name of a character device or file containing random

5716f9c6daa92dde5f2f9d11ed63f7c9549c223atrawick data to be used instead of the default. The special value

5716f9c6daa92dde5f2f9d11ed63f7c9549c223atrawick <filename>keyboard</filename> indicates that keyboard

5716f9c6daa92dde5f2f9d11ed63f7c9549c223atrawick input should be used.

5716f9c6daa92dde5f2f9d11ed63f7c9549c223atrawick </para>

54d750a84a175d8e338880514d440773eb986b50covener </listitem>

54d750a84a175d8e338880514d440773eb986b50covener </varlistentry>

54d750a84a175d8e338880514d440773eb986b50covener

54d750a84a175d8e338880514d440773eb986b50covener <varlistentry>

54d750a84a175d8e338880514d440773eb986b50covener <term>-s <replaceable class="parameter">address</replaceable></term>

54d750a84a175d8e338880514d440773eb986b50covener <listitem>

54d750a84a175d8e338880514d440773eb986b50covener <para>

54d750a84a175d8e338880514d440773eb986b50covener Specifies the IP address where <command>named</command>

7a3aa12f0eda24793ee26d6a179bd53132e9dae8covener listens for command channel connections from

54d750a84a175d8e338880514d440773eb986b50covener <command>rndc</command>. The default is the loopback

54d750a84a175d8e338880514d440773eb986b50covener address 127.0.0.1.

83b50288fa7d306324bba68832011ea08f5c7832covener </para>

4e30ef014533a7e93c92d88306291f5e49c9692ftrawick </listitem>

83b50288fa7d306324bba68832011ea08f5c7832covener </varlistentry>

5f066f496cd9f20a2a701255bc67d44e7cb46daetrawick

5f066f496cd9f20a2a701255bc67d44e7cb46daetrawick <varlistentry>

5f066f496cd9f20a2a701255bc67d44e7cb46daetrawick <term>-t <replaceable class="parameter">chrootdir</replaceable></term>

2e15620d724fb8e3a5be183b917359a2fd6e9468covener <listitem>

2e15620d724fb8e3a5be183b917359a2fd6e9468covener <para>

2e15620d724fb8e3a5be183b917359a2fd6e9468covener Used with the <command>-a</command> option to specify

2e15620d724fb8e3a5be183b917359a2fd6e9468covener a directory where <command>named</command> will run

1b988c41ee505962781d110a3e4c2c90f1ea0aa4covener chrooted. An additional copy of the <filename>rndc.key</filename>

1b988c41ee505962781d110a3e4c2c90f1ea0aa4covener will be written relative to this directory so that

1b988c41ee505962781d110a3e4c2c90f1ea0aa4covener it will be found by the chrooted <command>named</command>.

1b988c41ee505962781d110a3e4c2c90f1ea0aa4covener </para>

b8efdc95bec9cf089aa1be0bfd07d46aa1137a7acovener </listitem>

b8efdc95bec9cf089aa1be0bfd07d46aa1137a7acovener </varlistentry>

b8efdc95bec9cf089aa1be0bfd07d46aa1137a7acovener

f06e7c4b1bce6b6491e5de0b7998d3f5696b293dchrisd <varlistentry>

f06e7c4b1bce6b6491e5de0b7998d3f5696b293dchrisd <term>-u <replaceable class="parameter">user</replaceable></term>

f06e7c4b1bce6b6491e5de0b7998d3f5696b293dchrisd <listitem>

179565be4043d7e5f9161aa75271fa0a001866d9covener <para>

179565be4043d7e5f9161aa75271fa0a001866d9covener Used with the <command>-a</command> option to set the owner

179565be4043d7e5f9161aa75271fa0a001866d9covener of the <filename>rndc.key</filename> file generated. If

111436a32ba1254291e4883292fb116d15fe8f64covener <command>-t</command> is also specified only the file in

fce4949fb0b309a5744afcd503c6ed2d35621ee2covener the chroot area has its owner changed.

fce4949fb0b309a5744afcd503c6ed2d35621ee2covener </para>

fce4949fb0b309a5744afcd503c6ed2d35621ee2covener </listitem>

fce4949fb0b309a5744afcd503c6ed2d35621ee2covener </varlistentry>

7b7430e701e9a31ce809da7c220bb8dfcf68c86etrawick

7b7430e701e9a31ce809da7c220bb8dfcf68c86etrawick </variablelist>

7b7430e701e9a31ce809da7c220bb8dfcf68c86etrawick </refsect1>

ccc20788c1e5fc973f36df634399c89acb70deaejerenkrantz

ccc20788c1e5fc973f36df634399c89acb70deaejerenkrantz <refsect1>

ccc20788c1e5fc973f36df634399c89acb70deaejerenkrantz <title>EXAMPLES</title>

273e512f20f262e5e2aa8e0e83371d1929fb76adjkaluza <para>

273e512f20f262e5e2aa8e0e83371d1929fb76adjkaluza To allow <command>rndc</command> to be used with

273e512f20f262e5e2aa8e0e83371d1929fb76adjkaluza no manual configuration, run

efe780dcf13b2b95effabf897d694d8f23feac74trawick </para>

fe83f60b41477b14a37edcfcd1f7f5c5a1ebfe44minfrin <para>

fe83f60b41477b14a37edcfcd1f7f5c5a1ebfe44minfrin <userinput>rndc-confgen -a</userinput>

fe83f60b41477b14a37edcfcd1f7f5c5a1ebfe44minfrin </para>

993d1261a278d7322bccef219101220b7b4fb8c5jkaluza <para>

993d1261a278d7322bccef219101220b7b4fb8c5jkaluza To print a sample <filename>rndc.conf</filename> file and

993d1261a278d7322bccef219101220b7b4fb8c5jkaluza corresponding <command>controls</command> and <command>key</command>

ba050a6f942b9fa0e81ed73437588005c569655ccovener statements to be manually inserted into <filename>named.conf</filename>,

ba050a6f942b9fa0e81ed73437588005c569655ccovener run

ba050a6f942b9fa0e81ed73437588005c569655ccovener </para>

ba050a6f942b9fa0e81ed73437588005c569655ccovener <para>

135ddda3a989215d2bedbcf1529bfb269c3eda23niq <userinput>rndc-confgen</userinput>

135ddda3a989215d2bedbcf1529bfb269c3eda23niq </para>

135ddda3a989215d2bedbcf1529bfb269c3eda23niq </refsect1>

001a44c352f89c9ec332ffd3e0a6927dcd19432chumbedooh

001a44c352f89c9ec332ffd3e0a6927dcd19432chumbedooh <refsect1>

001a44c352f89c9ec332ffd3e0a6927dcd19432chumbedooh <title>SEE ALSO</title>

efe780dcf13b2b95effabf897d694d8f23feac74trawick <para>

793214f67dede32edfd9ee96c664ead04d175cbbjfclere <citerefentry>

cc5a4a08dc9783fcbc52ce86f11e01c281a43810minfrin <refentrytitle>rndc</refentrytitle>

9b0076ddd1103e5fa9c1f9bafde4b06ce244fbaecovener <manvolnum>8</manvolnum>

9b0076ddd1103e5fa9c1f9bafde4b06ce244fbaecovener </citerefentry>,

9b0076ddd1103e5fa9c1f9bafde4b06ce244fbaecovener <citerefentry>

249d09d51808cb7981af99762c3b3736ca126cd5jkaluza <refentrytitle>rndc.conf</refentrytitle>

249d09d51808cb7981af99762c3b3736ca126cd5jkaluza <manvolnum>5</manvolnum>

249d09d51808cb7981af99762c3b3736ca126cd5jkaluza </citerefentry>,

249d09d51808cb7981af99762c3b3736ca126cd5jkaluza <citerefentry>

56589be3d7a3e9343370df240010c6928cc78b39jkaluza <refentrytitle>named</refentrytitle>

56589be3d7a3e9343370df240010c6928cc78b39jkaluza <manvolnum>8</manvolnum>

56589be3d7a3e9343370df240010c6928cc78b39jkaluza </citerefentry>,

77ca16c5676da23155311e13cee61e7eaba9fa3ejailletc <citetitle>BIND 9 Administrator Reference Manual</citetitle>.

77ca16c5676da23155311e13cee61e7eaba9fa3ejailletc </para>

77ca16c5676da23155311e13cee61e7eaba9fa3ejailletc </refsect1>

77ca16c5676da23155311e13cee61e7eaba9fa3ejailletc

f87299dab99bc04b51a6b8cad51b6795db862c0atrawick <refsect1>

f87299dab99bc04b51a6b8cad51b6795db862c0atrawick <title>AUTHOR</title>

f87299dab99bc04b51a6b8cad51b6795db862c0atrawick <para>

4d12805e6c18253040223ea637acd6b3b3c18f60jorton <corpauthor>Internet Systems Consortium</corpauthor>

4d12805e6c18253040223ea637acd6b3b3c18f60jorton </para>

4d12805e6c18253040223ea637acd6b3b3c18f60jorton </refsect1>

85eacfc96a04547ef25aabbc06440039715084c2jorton

85eacfc96a04547ef25aabbc06440039715084c2jorton</refentry>

e5d909f2b06bd880fb3675cd49363df981caa631trawick

cb666b29f81df1d11d65002250153353568021fccovener