rndc.html revision 9b6a170d22d61026d31bde87523f3320628b6ebc
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk - Copyright (C) 2000, 2001 Internet Software Consortium.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk - Permission to use, copy, modify, and distribute this software for any
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk - purpose with or without fee is hereby granted, provided that the above
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk - copyright notice and this permission notice appear in all copies.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk - THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk - DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk - IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk - INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT,
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk - FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk - NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk - WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkNAME="GENERATOR"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCONTENT="Modular DocBook HTML Stylesheet Version 1.61
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REFENTRY"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkBGCOLOR="#FFFFFF"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkTEXT="#000000"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkLINK="#0000FF"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkVLINK="#840084"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkALINK="#0000FF"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="APPLICATION"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REFNAMEDIV"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="APPLICATION"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> -- name server control utility</DIV
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REFSYNOPSISDIV"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk>Synopsis</H2
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="OPTION"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk>config-file</I
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="OPTION"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="OPTION"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="OPTION"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="OPTION"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk>] {command}</P
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REFSECT1"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk>DESCRIPTION</H2
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> controls the operation of a name
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk server. It supersedes the <B
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk that was provided in old BIND releases. If
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> is invoked with no command line
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk options or arguments, it prints a short summary of the
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk supported commands and the available options and their
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> communicates with the name server
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk over a TCP connection, sending commands authenticated with
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk digital signatures. In the current versions of
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk the only supported authentication algorithm is HMAC-MD5,
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk which uses a shared secret on each end of the connection.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk This provides TSIG-style authentication for the command
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk request and the name server's response. All commands sent
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk over the channel must be signed by a key_id known to the
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> reads a configuration file to
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk determine how to contact the name server and decide what
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk algorithm and key it should use.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REFSECT1"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="VARIABLELIST"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk>config-file</I
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk>config-file</I
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk as the configuration file instead of the default,
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="FILENAME"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk the name or address of the server which matches a
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk server statement in the configuration file for
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk>. If no server is supplied on the
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk command line, the host named by the default-server clause
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk in the option statement of the configuration file will be
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> Send commands to TCP port
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk of BIND 9's default control channel port, 953.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> Use the key <TT
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk from the configuration file.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk known by named with the same algorithm and secret string
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk in order for control message validation to succeed.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REPLACEABLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk is specified, <B
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> will first look
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk for a key clause in the server statement of the server
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk being used, or if no server statement is present for that
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk host, then the default-key clause of the options statement.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk Note that the configuration file contains shared secrets
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk which are used to send authenticated control commands
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk to name servers. It should therefore not have general read
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk or write access.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> Enable verbose logging.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> For the complete set of commands supported by <B
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk see the BIND 9 Administrator Reference Manual or run
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> without arguments to see its help message.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REFSECT1"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk>LIMITATIONS</H2
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> does not yet support all the commands of
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk the BIND 8 <B
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="COMMAND"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> There is currently no way to provide the shared secret for a
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="OPTION"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> without using the configuration file.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> Several error messages could be clearer.
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REFSECT1"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk>SEE ALSO</H2
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="CITEREFENTRY"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REFENTRYTITLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="CITEREFENTRY"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REFENTRYTITLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="CITEREFENTRY"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REFENTRYTITLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="CITEREFENTRY"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REFENTRYTITLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="CITETITLE"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk>BIND 9 Administrator Reference Manual</I
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkCLASS="REFSECT1"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenkNAME="AEN106"
4b8d88eb610aa1e0bb6ec632f792744b3d6b5f22jeff.schenk> Internet Software Consortium