man.named.html revision 1fdd2470b625a58b57d0b155e6caf8c4fc0afe8a
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<!--
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater - Copyright (C) 2004-2009 Internet Systems Consortium, Inc. ("ISC")
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - Copyright (C) 2000-2003 Internet Software Consortium.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews -
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - Permission to use, copy, modify, and distribute this software for any
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - purpose with or without fee is hereby granted, provided that the above
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - copyright notice and this permission notice appear in all copies.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews -
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews-->
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<!-- $Id: man.named.html,v 1.102 2009/01/08 01:11:50 tbox Exp $ -->
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<html>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<head>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<title>named</title>
e21a2904f02a03fa06b6db04d348f65fe9c67b2bMark Andrews<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<link rel="next" href="man.nsupdate.html" title="nsupdate">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</head>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="navheader">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<table width="100%" summary="Navigation header">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<tr>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<td width="20%" align="left">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<th width="60%" align="center">Manual pages</th>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<td width="20%" align="right">�<a accesskey="n" href="man.nsupdate.html">Next</a>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</td>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</tr>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</table>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<hr>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="refentry" lang="en">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<a name="man.named"></a><div class="titlepage"></div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="refnamediv">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<h2>Name</h2>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p><span class="application">named</span> &#8212; Internet domain name server</p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="refsynopsisdiv">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<h2>Synopsis</h2>
824f38c0310fddef55f0f691580154022a7852f5Automatic Updater<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="refsect1" lang="en">
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<a name="id2609052"></a><h2>DESCRIPTION</h2>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p><span><strong class="command">named</strong></span>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews is a Domain Name System (DNS) server,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews part of the BIND 9 distribution from ISC. For more
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews information on the DNS, see RFCs 1033, 1034, and 1035.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews When invoked without arguments, <span><strong class="command">named</strong></span>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews will
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews read the default configuration file
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <code class="filename">/etc/named.conf</code>, read any initial
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews data, and listen for queries.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="refsect1" lang="en">
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<a name="id2609698"></a><h2>OPTIONS</h2>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="variablelist"><dl>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-4</span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd><p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Use IPv4 only even if the host machine is capable of IPv6.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <code class="option">-4</code> and <code class="option">-6</code> are mutually
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews exclusive.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p></dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-6</span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd><p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Use IPv6 only even if the host machine is capable of IPv4.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <code class="option">-4</code> and <code class="option">-6</code> are mutually
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews exclusive.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p></dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd><p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Use <em class="replaceable"><code>config-file</code></em> as the
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews configuration file instead of the default,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <code class="filename">/etc/named.conf</code>. To
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews ensure that reloading the configuration file continues
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews to work after the server has changed its working
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews directory due to to a possible
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <code class="option">directory</code> option in the configuration
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews file, <em class="replaceable"><code>config-file</code></em> should be
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews an absolute pathname.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p></dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd><p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Debugging traces from <span><strong class="command">named</strong></span> become
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews more verbose as the debug level increases.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p></dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-f</span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd><p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Run the server in the foreground (i.e. do not daemonize).
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p></dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-g</span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd><p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Run the server in the foreground and force all logging
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews to <code class="filename">stderr</code>.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p></dd>
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews<dd><p>
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews Turn on memory usage debugging flags. Possible flags are
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews <em class="replaceable"><code>usage</code></em>,
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews <em class="replaceable"><code>trace</code></em>,
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews <em class="replaceable"><code>record</code></em>,
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews <em class="replaceable"><code>size</code></em>, and
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews <em class="replaceable"><code>mctx</code></em>.
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews These correspond to the ISC_MEM_DEBUGXXXX flags described in
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews <code class="filename">&lt;isc/mem.h&gt;</code>.
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews </p></dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd><p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Create <em class="replaceable"><code>#cpus</code></em> worker threads
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews to take advantage of multiple CPUs. If not specified,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <span><strong class="command">named</strong></span> will try to determine the
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews number of CPUs present and create one thread per CPU.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews If it is unable to determine the number of CPUs, a
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews single worker thread will be created.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p></dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd><p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews specified, the default is port 53.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p></dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-s</span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Write memory usage statistics to <code class="filename">stdout</code> on exit.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<h3 class="title">Note</h3>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews This option is mainly of interest to BIND 9 developers
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews and may be removed or changed in a future release.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</dd>
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater<dd>
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater<p>
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater Allow <span><strong class="command">named</strong></span> to use up to
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater <em class="replaceable"><code>#max-socks</code></em> sockets.
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater </p>
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater<h3 class="title">Warning</h3>
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater<p>
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater This option should be unnecessary for the vast majority
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater of users.
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater The use of this option could even be harmful because the
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater specified value may exceed the limitation of the
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater underlying system API.
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater It is therefore set only when the default configuration
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater causes exhaustion of file descriptors and the
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater operational environment is known to support the
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater specified number of sockets.
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater Note also that the actual maximum number is normally a little
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater fewer than the specified value because
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater <span><strong class="command">named</strong></span> reserves some file descriptors
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater for its internal use.
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater </p>
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater</div>
c4d99a62407cebca29653666ae11f87e4f56ebbcAutomatic Updater</dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd>
d71e2e0c61df16ff37c9934c371a4a60c08974f7Mark Andrews<p>Chroot
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews to <em class="replaceable"><code>directory</code></em> after
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews processing the command line arguments, but before
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews reading the configuration file.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<h3 class="title">Warning</h3>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews This option should be used in conjunction with the
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <code class="option">-u</code> option, as chrooting a process
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews running as root doesn't enhance security on most
d71e2e0c61df16ff37c9934c371a4a60c08974f7Mark Andrews systems; the way <code class="function">chroot(2)</code> is
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews defined allows a process with root privileges to
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews escape a chroot jail.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd>
d71e2e0c61df16ff37c9934c371a4a60c08974f7Mark Andrews<p>Setuid
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews to <em class="replaceable"><code>user</code></em> after completing
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews privileged operations, such as creating sockets that
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews listen on privileged ports.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<h3 class="title">Note</h3>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews On Linux, <span><strong class="command">named</strong></span> uses the kernel's
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews capability mechanism to drop all root privileges
d71e2e0c61df16ff37c9934c371a4a60c08974f7Mark Andrews except the ability to <code class="function">bind(2)</code> to
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews a
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews privileged port and set process resource limits.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Unfortunately, this means that the <code class="option">-u</code>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews option only works when <span><strong class="command">named</strong></span> is
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews run
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews later, since previous kernels did not allow privileges
d71e2e0c61df16ff37c9934c371a4a60c08974f7Mark Andrews to be retained after <code class="function">setuid(2)</code>.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-v</span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd><p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Report the version number and exit.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p></dd>
824f38c0310fddef55f0f691580154022a7852f5Automatic Updater<dt><span class="term">-V</span></dt>
824f38c0310fddef55f0f691580154022a7852f5Automatic Updater<dd><p>
824f38c0310fddef55f0f691580154022a7852f5Automatic Updater Report the version number and build options, and exit.
824f38c0310fddef55f0f691580154022a7852f5Automatic Updater </p></dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Load data from <em class="replaceable"><code>cache-file</code></em> into the
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews cache of the default view.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<h3 class="title">Warning</h3>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews This option must not be used. It is only of interest
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews to BIND 9 developers and may be removed or changed in a
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews future release.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</dl></div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="refsect1" lang="en">
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<a name="id2611867"></a><h2>SIGNALS</h2>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews In routine operation, signals should not be used to control
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews the nameserver; <span><strong class="command">rndc</strong></span> should be used
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews instead.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="variablelist"><dl>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">SIGHUP</span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd><p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Force a reload of the server.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p></dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">SIGINT, SIGTERM</span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd><p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Shut down the server.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p></dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</dl></div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews The result of sending any other signals to the server is undefined.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="refsect1" lang="en">
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<a name="id2611917"></a><h2>CONFIGURATION</h2>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews The <span><strong class="command">named</strong></span> configuration file is too complex
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews to describe in detail here. A complete description is provided
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews in the
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="refsect1" lang="en">
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<a name="id2611937"></a><h2>FILES</h2>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="variablelist"><dl>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd><p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews The default configuration file.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p></dd>
18fa75b694d056da4be3ebfc2185d007d4882752Automatic Updater<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dd><p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews The default process-id file.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p></dd>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</dl></div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="refsect1" lang="en">
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<a name="id2612731"></a><h2>SEE ALSO</h2>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p><em class="citetitle">RFC 1033</em>,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <em class="citetitle">RFC 1034</em>,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <em class="citetitle">RFC 1035</em>,
1224c3b69b3d18f7127aa042644936af25a2d679Mark Andrews <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
1224c3b69b3d18f7127aa042644936af25a2d679Mark Andrews <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
f051d76c87e055c6ea3879e0c97a76609df915ccMark Andrews <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="refsect1" lang="en">
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater<a name="id2651645"></a><h2>AUTHOR</h2>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p><span class="corpauthor">Internet Systems Consortium</span>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews </p>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<div class="navfooter">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<hr>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<table width="100%" summary="Navigation footer">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<tr>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<td width="40%" align="left">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<td width="40%" align="right">�<a accesskey="n" href="man.nsupdate.html">Next</a>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</td>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</tr>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<tr>
4abdfc917e6635a7c81d1f931a0c79227e72d025Mark Andrews<td width="40%" align="left" valign="top">
4abdfc917e6635a7c81d1f931a0c79227e72d025Mark Andrews<span class="application">named-checkzone</span>�</td>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<td width="40%" align="right" valign="top">�<span class="application">nsupdate</span>
4abdfc917e6635a7c81d1f931a0c79227e72d025Mark Andrews</td>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</tr>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</table>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</div>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</body>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</html>