rndc.html revision d4ef65050feac78554addf6e16a06c6e2e0bd331
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - Copyright (C) 2001 Internet Software Consortium.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - Permission to use, copy, modify, and distribute this software for any
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - purpose with or without fee is hereby granted, provided that the above
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - copyright notice and this permission notice appear in all copies.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<!-- $Id: rndc.html,v 1.4 2001/04/10 21:50:56 bwelling Exp $ -->
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterNAME="GENERATOR"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCONTENT="Modular DocBook HTML Stylesheet Version 1.61
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REFENTRY"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterBGCOLOR="#FFFFFF"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterTEXT="#000000"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterLINK="#0000FF"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterVLINK="#840084"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterALINK="#0000FF"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="APPLICATION"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REFNAMEDIV"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="APPLICATION"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> -- name server control utility</DIV
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REFSYNOPSISDIV"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster>Synopsis</H2
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="OPTION"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster>config-file</I
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="OPTION"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="OPTION"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="OPTION"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="OPTION"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster>] {command}</P
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REFSECT1"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster>DESCRIPTION</H2
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> controls the operation of a name
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster server. It supersedes the <B
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster that was provided in old BIND releases. If
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> is invoked with no command line
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster options or arguments, it prints a short summary of the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster supported commands and the available options and their
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> communicates with the name server
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster over a TCP connection, sending commands authenticated with
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster digital signatures. In the current versions of
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the only supported authentication algorithm is HMAC-MD5,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster which uses a shared secret on each end of the connection.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster This provides TSIG-style authentication for the command
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster request and the name server's response. All commands sent
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster over the channel must be signed by a key_id known to the
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> reads a configuration file to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster determine how to contact the name server and decide what
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster algorithm and key it should use.
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REFSECT1"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="VARIABLELIST"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster>config-file</I
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster>config-file</I
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster as the configuration file instead of the default,
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="FILENAME"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the name or address of the server which matches a
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster server statement in the configuration file for
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster>. If no server is supplied on the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster command line, the host named by the default-server clause
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster in the option statement of the configuration file will be
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> Send commands to TCP port
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster of BIND 9's default control channel port, 953.
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> Use the key <TT
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster from the configuration file.
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster known by named with the same algorithm and secret string
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster in order for control message validation to succeed.
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REPLACEABLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster is specified, <B
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> will first look
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster for a key clause in the server statement of the server
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster being used, or if no server statement is present for that
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster host, then the default-key clause of the options statement.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Note that the configuration file contains shared secrets
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster which are used to send authenticated control commands
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster to name servers. It should therefore not have general read
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster or write access.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> Enable verbose logging.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> For the complete set of commands supported by <B
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster see the BIND 9 Administrator Reference Manual or run
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> without arguments to see its help message.
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REFSECT1"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster>LIMITATIONS</H2
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> does not yet support all the commands of
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the BIND 8 <B
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="COMMAND"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> There is currently no way to provide the shared secret for a
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="OPTION"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> without using the configuration file.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> Several error messages could be clearer.
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REFSECT1"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster>SEE ALSO</H2
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="CITEREFENTRY"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REFENTRYTITLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="CITEREFENTRY"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REFENTRYTITLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="CITEREFENTRY"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REFENTRYTITLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="CITEREFENTRY"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REFENTRYTITLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="CITETITLE"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster>BIND 9 Administrator Reference Manual</I
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterCLASS="REFSECT1"
8af80418ba1ec431c8027fa9668e5678658d3611Allan FosterNAME="AEN106"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster> Internet Software Consortium