man.named.html revision 0e9e255d1643375056aa9ed7fe2a279713ffae78
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<!--
431a83fb29482c5170b3e4026e59bb14849a6707Tinderbox User - Copyright (C) 2004-2010 Internet Systems Consortium, Inc. ("ISC")
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews - Copyright (C) 2000-2003 Internet Software Consortium.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence -
ec5347e2c775f027573ce5648b910361aa926c01Automatic Updater - Permission to use, copy, modify, and/or distribute this software for any
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson - purpose with or without fee is hereby granted, provided that the above
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson - copyright notice and this permission notice appear in all copies.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence -
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson-->
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<!-- $Id: man.named.html,v 1.179 2010/12/24 01:14:20 tbox Exp $ -->
28a8f5b0de57d269cf2845c69cb6abe18cbd3b3aMark Andrews<html>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<head>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
9c3531d72aeaad6c5f01efe6a1c82023e1379e4dDavid Lawrence<title>named</title>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<link rel="next" href="man.named-journalprint.html" title="named-journalprint">
9cd6d409b78a6f833b681c13a68fbdc7c024fe66David Lawrence</head>
22fa4e3206c2048cabaf75a3ae21132fd5542848Mark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<div class="navheader">
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<table width="100%" summary="Navigation header">
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence<tr>
364a82f7c25b62967678027043425201a5e5171aBob Halley<td width="20%" align="left">
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson<th width="60%" align="center">Manual pages</th>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson<td width="20%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson</td>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson</tr>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson</table>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson<hr>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson</div>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<div class="refentry" lang="en">
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<a name="man.named"></a><div class="titlepage"></div>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<div class="refnamediv">
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson<h2>Name</h2>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson<p><span class="application">named</span> &#8212; Internet domain name server</p>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson</div>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson<div class="refsynopsisdiv">
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson<h2>Synopsis</h2>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews</div>
ec3f1d35170225c74d11c27bb184e250d150b209Tatuya JINMEI 神明達哉<div class="refsect1" lang="en">
ec3f1d35170225c74d11c27bb184e250d150b209Tatuya JINMEI 神明達哉<a name="id2632292"></a><h2>DESCRIPTION</h2>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson<p><span><strong class="command">named</strong></span>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson is a Domain Name System (DNS) server,
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews part of the BIND 9 distribution from ISC. For more
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews information on the DNS, see RFCs 1033, 1034, and 1035.
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews </p>
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews<p>
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews When invoked without arguments, <span><strong class="command">named</strong></span>
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews will
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson read the default configuration file
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson <code class="filename">/etc/named.conf</code>, read any initial
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson data, and listen for queries.
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson </p>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson</div>
b356893425f18a2399771faa875e91318f204fb5Andreas Gustafsson<div class="refsect1" lang="en">
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<a name="id2632323"></a><h2>OPTIONS</h2>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<div class="variablelist"><dl>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dt><span class="term">-4</span></dt>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dd><p>
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews Use IPv4 only even if the host machine is capable of IPv6.
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews <code class="option">-4</code> and <code class="option">-6</code> are mutually
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews exclusive.
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews </p></dd>
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence<dt><span class="term">-6</span></dt>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dd><p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson Use IPv6 only even if the host machine is capable of IPv4.
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson <code class="option">-4</code> and <code class="option">-6</code> are mutually
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson exclusive.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence </p></dd>
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<dd><p>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews Use <em class="replaceable"><code>config-file</code></em> as the
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson configuration file instead of the default,
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson <code class="filename">/etc/named.conf</code>. To
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence ensure that reloading the configuration file continues
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence to work after the server has changed its working
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson directory due to to a possible
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson <code class="option">directory</code> option in the configuration
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson file, <em class="replaceable"><code>config-file</code></em> should be
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence an absolute pathname.
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence </p></dd>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dd><p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson Debugging traces from <span><strong class="command">named</strong></span> become
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson more verbose as the debug level increases.
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson </p></dd>
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence<dt><span class="term">-E <em class="replaceable"><code>engine-name</code></em></span></dt>
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence<dd><p>
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence Use a crypto hardware (OpenSSL engine) for the crypto operations
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson it supports, for instance re-signing with private keys from
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson a secure key store. When compiled with PKCS#11 support
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson <em class="replaceable"><code>engine-name</code></em>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson defaults to pkcs11, the empty name resets it to no engine.
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson </p></dd>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dt><span class="term">-f</span></dt>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dd><p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson Run the server in the foreground (i.e. do not daemonize).
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson </p></dd>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dt><span class="term">-g</span></dt>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dd><p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson Run the server in the foreground and force all logging
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson to <code class="filename">stderr</code>.
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson </p></dd>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dd><p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson Turn on memory usage debugging flags. Possible flags are
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson <em class="replaceable"><code>usage</code></em>,
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson <em class="replaceable"><code>trace</code></em>,
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson <em class="replaceable"><code>record</code></em>,
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson <em class="replaceable"><code>size</code></em>, and
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson <em class="replaceable"><code>mctx</code></em>.
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson These correspond to the ISC_MEM_DEBUGXXXX flags described in
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson <code class="filename">&lt;isc/mem.h&gt;</code>.
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson </p></dd>
91cd0f93ad34d23e8b09dca337120f64fbe8f0a1Andreas Gustafsson<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<dd><p>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson Create <em class="replaceable"><code>#cpus</code></em> worker threads
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews to take advantage of multiple CPUs. If not specified,
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson <span><strong class="command">named</strong></span> will try to determine the
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews number of CPUs present and create one thread per CPU.
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson If it is unable to determine the number of CPUs, a
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson single worker thread will be created.
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson </p></dd>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<dd><p>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews specified, the default is port 53.
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews </p></dd>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<dt><span class="term">-s</span></dt>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<dd>
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews<p>
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews Write memory usage statistics to <code class="filename">stdout</code> on exit.
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews </p>
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews<h3 class="title">Note</h3>
66a12302e12be6813c3e16e6c05e4a7871e78e6eMark Andrews<p>
66a12302e12be6813c3e16e6c05e4a7871e78e6eMark Andrews This option is mainly of interest to BIND 9 developers
66a12302e12be6813c3e16e6c05e4a7871e78e6eMark Andrews and may be removed or changed in a future release.
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews </p>
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews</div>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews</dd>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<dd>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<p>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson Allow <span><strong class="command">named</strong></span> to use up to
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson <em class="replaceable"><code>#max-socks</code></em> sockets.
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson </p>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<h3 class="title">Warning</h3>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<p>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews This option should be unnecessary for the vast majority
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews of users.
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews The use of this option could even be harmful because the
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews specified value may exceed the limitation of the
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews underlying system API.
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews It is therefore set only when the default configuration
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews causes exhaustion of file descriptors and the
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews operational environment is known to support the
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews specified number of sockets.
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson Note also that the actual maximum number is normally a little
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence fewer than the specified value because
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson <span><strong class="command">named</strong></span> reserves some file descriptors
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews for its internal use.
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson </p>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson</div>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson</dd>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<dd>
28e509b145c3d241d1d2d9102fea38afad95bbd4Andreas Gustafsson<p>Chroot
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson to <em class="replaceable"><code>directory</code></em> after
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson processing the command line arguments, but before
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson reading the configuration file.
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson </p>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<h3 class="title">Warning</h3>
4c577cbd1efc14156751e5b2ced7a866871a2f1aMark Andrews<p>
4c577cbd1efc14156751e5b2ced7a866871a2f1aMark Andrews This option should be used in conjunction with the
4c577cbd1efc14156751e5b2ced7a866871a2f1aMark Andrews <code class="option">-u</code> option, as chrooting a process
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson running as root doesn't enhance security on most
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson systems; the way <code class="function">chroot(2)</code> is
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson defined allows a process with root privileges to
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson escape a chroot jail.
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson </p>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson</div>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson</dd>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<dd>
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence<p>Setuid
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson to <em class="replaceable"><code>user</code></em> after completing
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson privileged operations, such as creating sockets that
9cd6d409b78a6f833b681c13a68fbdc7c024fe66David Lawrence listen on privileged ports.
9cd6d409b78a6f833b681c13a68fbdc7c024fe66David Lawrence </p>
9cd6d409b78a6f833b681c13a68fbdc7c024fe66David Lawrence<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<h3 class="title">Note</h3>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson<p>
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson On Linux, <span><strong class="command">named</strong></span> uses the kernel's
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson capability mechanism to drop all root privileges
8eaa51a6991ea6bc6c9db0b907beacde8dd1fed2Andreas Gustafsson except the ability to <code class="function">bind(2)</code> to
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews a
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews privileged port and set process resource limits.
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews Unfortunately, this means that the <code class="option">-u</code>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews option only works when <span><strong class="command">named</strong></span> is
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews run
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews later, since previous kernels did not allow privileges
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews to be retained after <code class="function">setuid(2)</code>.
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews </p>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews</div>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews</dd>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews<dt><span class="term">-v</span></dt>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews<dd><p>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews Report the version number and exit.
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews </p></dd>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews<dt><span class="term">-V</span></dt>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews<dd><p>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews Report the version number and build options, and exit.
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews </p></dd>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews<dd>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews<p>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews Load data from <em class="replaceable"><code>cache-file</code></em> into the
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews cache of the default view.
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews </p>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
bfbd478cdbd57c1e03c49932cad15b7d6344d709Mark Andrews<h3 class="title">Warning</h3>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews<p>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews This option must not be used. It is only of interest
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews to BIND 9 developers and may be removed or changed in a
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews future release.
e31a37787bbde482e2e26f89d8ad4c2ada5cc3b8Mark Andrews </p>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews</div>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews</dd>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews</dl></div>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews</div>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<div class="refsect1" lang="en">
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence<a name="id2673836"></a><h2>SIGNALS</h2>
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews<p>
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence In routine operation, signals should not be used to control
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence the nameserver; <span><strong class="command">rndc</strong></span> should be used
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson instead.
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson </p>
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence<div class="variablelist"><dl>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dt><span class="term">SIGHUP</span></dt>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dd><p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson Force a reload of the server.
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence </p></dd>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dt><span class="term">SIGINT, SIGTERM</span></dt>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dd><p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson Shut down the server.
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson </p></dd>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson</dl></div>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson The result of sending any other signals to the server is undefined.
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson </p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson</div>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<div class="refsect1" lang="en">
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<a name="id2673886"></a><h2>CONFIGURATION</h2>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson The <span><strong class="command">named</strong></span> configuration file is too complex
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson to describe in detail here. A complete description is provided
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson in the
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson </p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson <span><strong class="command">named</strong></span> inherits the <code class="function">umask</code>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson (file creation mode mask) from the parent process. If files
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson created by <span><strong class="command">named</strong></span>, such as journal files,
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson need to have custom permissions, the <code class="function">umask</code>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson should be set explicitly in the script used to start the
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson <span><strong class="command">named</strong></span> process.
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson </p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson</div>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<div class="refsect1" lang="en">
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<a name="id2673936"></a><h2>FILES</h2>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<div class="variablelist"><dl>
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
91cd0f93ad34d23e8b09dca337120f64fbe8f0a1Andreas Gustafsson<dd><p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson The default configuration file.
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson </p></dd>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<dd><p>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson The default process-id file.
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence </p></dd>
91cd0f93ad34d23e8b09dca337120f64fbe8f0a1Andreas Gustafsson</dl></div>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson</div>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<div class="refsect1" lang="en">
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<a name="id2673979"></a><h2>SEE ALSO</h2>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson<p><em class="citetitle">RFC 1033</em>,
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews <em class="citetitle">RFC 1034</em>,
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews <em class="citetitle">RFC 1035</em>,
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
33cc94f04cb44dc247f605a954e45e5adc699977Automatic Updater <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
33cc94f04cb44dc247f605a954e45e5adc699977Automatic Updater <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
33cc94f04cb44dc247f605a954e45e5adc699977Automatic Updater <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
33cc94f04cb44dc247f605a954e45e5adc699977Automatic Updater <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
33cc94f04cb44dc247f605a954e45e5adc699977Automatic Updater <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
33cc94f04cb44dc247f605a954e45e5adc699977Automatic Updater </p>
33cc94f04cb44dc247f605a954e45e5adc699977Automatic Updater</div>
33cc94f04cb44dc247f605a954e45e5adc699977Automatic Updater<div class="refsect1" lang="en">
33cc94f04cb44dc247f605a954e45e5adc699977Automatic Updater<a name="id2674118"></a><h2>AUTHOR</h2>
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews<p><span class="corpauthor">Internet Systems Consortium</span>
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews </p>
33cc94f04cb44dc247f605a954e45e5adc699977Automatic Updater</div>
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews</div>
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews<div class="navfooter">
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews<hr>
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews<table width="100%" summary="Navigation footer">
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<tr>
e12b02b62c0176646aad3097b3576cd47665e347Mark Andrews<td width="40%" align="left">
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<td width="40%" align="right">�<a accesskey="n" href="man.named-journalprint.html">Next</a>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews</td>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews</tr>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<tr>
e12b02b62c0176646aad3097b3576cd47665e347Mark Andrews<td width="40%" align="left" valign="top">
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<span class="application">named-checkzone</span>�</td>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews<td width="40%" align="right" valign="top">�<span class="application">named-journalprint</span>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews</td>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson</tr>
d80da258e377f02f0dcd703b89a1044cc58e949fMichael Graff</table>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson</div>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson</body>
5d82424f5d3c77c092c111b935041fd3dc4b3e98Andreas Gustafsson</html>
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews