man.named.html revision dd59fe01c9b4dc2a1b852c4a2e6973db5ff1d721
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews<!--
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - Copyright (C) 2000-2003 Internet Software Consortium.
6a42ab64276ff832a47e009be1208f7c7d4da22dAutomatic Updater -
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - Permission to use, copy, modify, and/or distribute this software for any
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - purpose with or without fee is hereby granted, provided that the above
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - copyright notice and this permission notice appear in all copies.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater -
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User - PERFORMANCE OF THIS SOFTWARE.
b6b8f8a0362da8c749021c4b6376cfb96047912bTinderbox User-->
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<!-- $Id$ -->
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<html>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<head>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<title>named</title>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
b6b8f8a0362da8c749021c4b6376cfb96047912bTinderbox User<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<link rel="next" href="man.named-journalprint.html" title="named-journalprint">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater</head>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<div class="navheader">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<table width="100%" summary="Navigation header">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<tr>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<td width="20%" align="left">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<th width="60%" align="center">Manual pages</th>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<td width="20%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User</td>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater</tr>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User</table>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<hr>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User</div>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="refentry" lang="en">
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<a name="man.named"></a><div class="titlepage"></div>
7e71f05d8643aca84914437c900cb716444507e4Tinderbox User<div class="refnamediv">
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<h2>Name</h2>
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater<p><span class="application">named</span> &#8212; Internet domain name server</p>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater</div>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<div class="refsynopsisdiv">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<h2>Synopsis</h2>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-U <em class="replaceable"><code>#listeners</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater</div>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<div class="refsect1" lang="en">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<a name="id2640853"></a><h2>DESCRIPTION</h2>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p><span><strong class="command">named</strong></span>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater is a Domain Name System (DNS) server,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt part of the BIND 9 distribution from ISC. For more
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater information on the DNS, see RFCs 1033, 1034, and 1035.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater </p>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<p>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater When invoked without arguments, <span><strong class="command">named</strong></span>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User will
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater read the default configuration file
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <code class="filename">/etc/named.conf</code>, read any initial
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater data, and listen for queries.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater </p>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater</div>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<div class="refsect1" lang="en">
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<a name="id2640884"></a><h2>OPTIONS</h2>
ed4475f3f583f6137b4ff7fea775c5363a4fdb29Automatic Updater<div class="variablelist"><dl>
ed4475f3f583f6137b4ff7fea775c5363a4fdb29Automatic Updater<dt><span class="term">-4</span></dt>
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater<dd><p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Use IPv4 only even if the host machine is capable of IPv6.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <code class="option">-4</code> and <code class="option">-6</code> are mutually
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User exclusive.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p></dd>
ed4475f3f583f6137b4ff7fea775c5363a4fdb29Automatic Updater<dt><span class="term">-6</span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dd><p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Use IPv6 only even if the host machine is capable of IPv4.
ed4475f3f583f6137b4ff7fea775c5363a4fdb29Automatic Updater <code class="option">-4</code> and <code class="option">-6</code> are mutually
ed4475f3f583f6137b4ff7fea775c5363a4fdb29Automatic Updater exclusive.
ed4475f3f583f6137b4ff7fea775c5363a4fdb29Automatic Updater </p></dd>
ed4475f3f583f6137b4ff7fea775c5363a4fdb29Automatic Updater<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dd><p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Use <em class="replaceable"><code>config-file</code></em> as the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt configuration file instead of the default,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <code class="filename">/etc/named.conf</code>. To
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User ensure that reloading the configuration file continues
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User to work after the server has changed its working
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User directory due to to a possible
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <code class="option">directory</code> option in the configuration
ed4475f3f583f6137b4ff7fea775c5363a4fdb29Automatic Updater file, <em class="replaceable"><code>config-file</code></em> should be
ed4475f3f583f6137b4ff7fea775c5363a4fdb29Automatic Updater an absolute pathname.
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater </p></dd>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater<dd><p>
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater Debugging traces from <span><strong class="command">named</strong></span> become
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater more verbose as the debug level increases.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater </p></dd>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="term">-E <em class="replaceable"><code>engine-name</code></em></span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dd><p>
7e71f05d8643aca84914437c900cb716444507e4Tinderbox User Use a crypto hardware (OpenSSL engine) for the crypto operations
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User it supports, for instance re-signing with private keys from
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User a secure key store. When compiled with PKCS#11 support
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <em class="replaceable"><code>engine-name</code></em>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User defaults to pkcs11, the empty name resets it to no engine.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p></dd>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term">-f</span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dd><p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Run the server in the foreground (i.e. do not daemonize).
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User </p></dd>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term">-g</span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dd><p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Run the server in the foreground and force all logging
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User to <code class="filename">stderr</code>.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p></dd>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dd><p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Turn on memory usage debugging flags. Possible flags are
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <em class="replaceable"><code>usage</code></em>,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="replaceable"><code>trace</code></em>,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="replaceable"><code>record</code></em>,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <em class="replaceable"><code>size</code></em>, and
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="replaceable"><code>mctx</code></em>.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User These correspond to the ISC_MEM_DEBUGXXXX flags described in
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <code class="filename">&lt;isc/mem.h&gt;</code>.
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User </p></dd>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dd><p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Create <em class="replaceable"><code>#cpus</code></em> worker threads
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt to take advantage of multiple CPUs. If not specified,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <span><strong class="command">named</strong></span> will try to determine the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User number of CPUs present and create one thread per CPU.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt If it is unable to determine the number of CPUs, a
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt single worker thread will be created.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </p></dd>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dd><p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User specified, the default is port 53.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p></dd>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="term">-s</span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dd>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Write memory usage statistics to <code class="filename">stdout</code> on exit.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<h3 class="title">Note</h3>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User This option is mainly of interest to BIND 9 developers
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User and may be removed or changed in a future release.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</div>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User</dd>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dd>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Allow <span><strong class="command">named</strong></span> to use up to
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <em class="replaceable"><code>#max-socks</code></em> sockets.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<h3 class="title">Warning</h3>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User This option should be unnecessary for the vast majority
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User of users.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User The use of this option could even be harmful because the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User specified value may exceed the limitation of the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User underlying system API.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User It is therefore set only when the default configuration
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User causes exhaustion of file descriptors and the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User operational environment is known to support the
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User specified number of sockets.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Note also that the actual maximum number is normally a little
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User fewer than the specified value because
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <span><strong class="command">named</strong></span> reserves some file descriptors
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User for its internal use.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</div>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User</dd>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dd>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<p>Chroot
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User to <em class="replaceable"><code>directory</code></em> after
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User processing the command line arguments, but before
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User reading the configuration file.
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User </p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<h3 class="title">Warning</h3>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User This option should be used in conjunction with the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <code class="option">-u</code> option, as chrooting a process
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User running as root doesn't enhance security on most
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User systems; the way <code class="function">chroot(2)</code> is
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User defined allows a process with root privileges to
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User escape a chroot jail.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</div>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</dd>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="term">-U <em class="replaceable"><code>#listeners</code></em></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dd><p>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User Use <em class="replaceable"><code>#listeners</code></em>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User worker threads to listen for incoming UDP packets on each
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt address. If not specified, <span><strong class="command">named</strong></span> will
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User use the number of detected CPUs. If <code class="option">-n</code>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User has been set to a higher value than the number of CPUs,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User then <code class="option">-U</code> may be increased as high as that
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User value, but no higher.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p></dd>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dd>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p>Setuid
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User to <em class="replaceable"><code>user</code></em> after completing
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User privileged operations, such as creating sockets that
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User listen on privileged ports.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<h3 class="title">Note</h3>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User On Linux, <span><strong class="command">named</strong></span> uses the kernel's
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User capability mechanism to drop all root privileges
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User except the ability to <code class="function">bind(2)</code> to
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User a
281ed127e3ed6c7e07792c19c3bc4562f71cfa90Tinderbox User privileged port and set process resource limits.
281ed127e3ed6c7e07792c19c3bc4562f71cfa90Tinderbox User Unfortunately, this means that the <code class="option">-u</code>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User option only works when <span><strong class="command">named</strong></span> is
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User run
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User later, since previous kernels did not allow privileges
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User to be retained after <code class="function">setuid(2)</code>.
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User </p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</div>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</dd>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="term">-v</span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dd><p>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User Report the version number and exit.
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User </p></dd>
7e71f05d8643aca84914437c900cb716444507e4Tinderbox User<dt><span class="term">-V</span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dd><p>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater Report the version number and build options, and exit.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater </p></dd>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<dd>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<p>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater Load data from <em class="replaceable"><code>cache-file</code></em> into the
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater cache of the default view.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater </p>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<h3 class="title">Warning</h3>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<p>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater This option must not be used. It is only of interest
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater to BIND 9 developers and may be removed or changed in a
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User future release.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater </p>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater</div>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater</dd>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater</dl></div>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt</div>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<div class="refsect1" lang="en">
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<a name="id2642974"></a><h2>SIGNALS</h2>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<p>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater In routine operation, signals should not be used to control
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User the nameserver; <span><strong class="command">rndc</strong></span> should be used
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater instead.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater </p>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="variablelist"><dl>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<dt><span class="term">SIGHUP</span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dd><p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Force a reload of the server.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p></dd>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term">SIGINT, SIGTERM</span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dd><p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Shut down the server.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p></dd>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</dl></div>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User The result of sending any other signals to the server is undefined.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</div>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<div class="refsect1" lang="en">
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<a name="id2678114"></a><h2>CONFIGURATION</h2>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User The <span><strong class="command">named</strong></span> configuration file is too complex
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User to describe in detail here. A complete description is provided
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User in the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater <span><strong class="command">named</strong></span> inherits the <code class="function">umask</code>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt (file creation mode mask) from the parent process. If files
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User created by <span><strong class="command">named</strong></span>, such as journal files,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User need to have custom permissions, the <code class="function">umask</code>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User should be set explicitly in the script used to start the
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <span><strong class="command">named</strong></span> process.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</div>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<div class="refsect1" lang="en">
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<a name="id2678163"></a><h2>FILES</h2>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<div class="variablelist"><dl>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dd><p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User The default configuration file.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p></dd>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dd><p>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User The default process-id file.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater </p></dd>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt</dl></div>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</div>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<div class="refsect1" lang="en">
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<a name="id2678275"></a><h2>SEE ALSO</h2>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<p><em class="citetitle">RFC 1033</em>,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="citetitle">RFC 1034</em>,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="citetitle">RFC 1035</em>,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater </p>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt</div>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<div class="refsect1" lang="en">
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<a name="id2678345"></a><h2>AUTHOR</h2>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p><span class="corpauthor">Internet Systems Consortium</span>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User </p>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</div>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</div>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<div class="navfooter">
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<hr>
731cc132f22dbc9e0ecd7035dce314a61076d31bAutomatic Updater<table width="100%" summary="Navigation footer">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<tr>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<td width="40%" align="left">
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<td width="40%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
731cc132f22dbc9e0ecd7035dce314a61076d31bAutomatic Updater</td>
731cc132f22dbc9e0ecd7035dce314a61076d31bAutomatic Updater</tr>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<tr>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater<td width="40%" align="left" valign="top">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<span class="application">named-checkzone</span>�</td>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<td width="40%" align="right" valign="top">�<span class="application">named-journalprint</span>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</td>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User</tr>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</table>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</div>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</body>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User</html>
281ed127e3ed6c7e07792c19c3bc4562f71cfa90Tinderbox User