man.rndc.conf.html revision 71c66a876ecca77923638d3f94cc0783152b2f03
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync - Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC")
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync - Copyright (C) 2000-2003 Internet Software Consortium.
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync - Permission to use, copy, modify, and distribute this software for any
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync - purpose with or without fee is hereby granted, provided that the above
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync - copyright notice and this permission notice appear in all copies.
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync - PERFORMANCE OF THIS SOFTWARE.
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<!-- $Id: man.rndc.conf.html,v 1.33 2006/06/29 13:03:32 marka Exp $ -->
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.70.1">
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<link rel="next" href="man.rndc-confgen.html" title="rndc-confgen">
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<tr><th colspan="3" align="center"><code class="filename">rndc.conf</code></th></tr>
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<a accesskey="p" href="man.rndc.html">Prev</a>�</td>
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<td width="20%" align="right">�<a accesskey="n" href="man.rndc-confgen.html">Next</a>
c473b29b7812ebca7a632b4a17fa3605ccb1a0cavboxsync<a name="man.rndc.conf"></a><div class="titlepage"></div>
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<p><code class="filename">rndc.conf</code> — rndc configuration file</p>
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<div class="cmdsynopsis"><p><code class="command">rndc.conf</code> </p></div>
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<p><code class="filename">rndc.conf</code> is the configuration file
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync for <span><strong class="command">rndc</strong></span>, the BIND 9 name server control
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync utility. This file has a similar structure and syntax to
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync <code class="filename">named.conf</code>. Statements are enclosed
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync in braces and terminated with a semi-colon. Clauses in
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync the statements are also semi-colon terminated. The usual
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync comment styles are supported:
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync C style: /* */
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync C++ style: // to end of line
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync Unix style: # to end of line
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync<p><code class="filename">rndc.conf</code> is much simpler than
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync <code class="filename">named.conf</code>. The file uses three
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync statements: an options statement, a server statement
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync and a key statement.
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync The <code class="option">options</code> statement contains five clauses.
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync The <code class="option">default-server</code> clause is followed by the
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync name or address of a name server. This host will be used when
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync no name server is given as an argument to
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync <span><strong class="command">rndc</strong></span>. The <code class="option">default-key</code>
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync clause is followed by the name of a key which is identified by
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync <code class="option">keyid</code> is provided on the rndc command line,
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync and no <code class="option">key</code> clause is found in a matching
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync <code class="option">server</code> statement, this default key will be
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync used to authenticate the server's commands and responses. The
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync <code class="option">default-port</code> clause is followed by the port
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync to connect to on the remote name server. If no
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync <code class="option">port</code> option is provided on the rndc command
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync line, and no <code class="option">port</code> clause is found in a
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync matching <code class="option">server</code> statement, this default port
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync will be used to connect.
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync The <code class="option">default-source-address</code> and
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync <code class="option">default-source-address-v6</code> clauses which
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync can be used to set the IPv4 and IPv6 source addresses
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync respectively.
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync After the <code class="option">server</code> keyword, the server
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync statement includes a string which is the hostname or address
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync for a name server. The statement has three possible clauses:
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync <code class="option">key</code>, <code class="option">port</code> and
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync <code class="option">addresses</code>. The key name must match the
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync name of a key statement in the file. The port number
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync specifies the port to connect to. If an <code class="option">addresses</code>
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync clause is supplied these addresses will be used instead of
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync the server name. Each address can take a optional port.
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync If an <code class="option">source-address</code> or <code class="option">source-address-v6</code>
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync of supplied then these will be used to specify the IPv4 and IPv6
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync source addresses respectively.
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync The <code class="option">key</code> statement begins with an identifying
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync string, the name of the key. The statement has two clauses.
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync <code class="option">algorithm</code> identifies the encryption algorithm
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync for <span><strong class="command">rndc</strong></span> to use; currently only HMAC-MD5
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync supported. This is followed by a secret clause which contains
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync the base-64 encoding of the algorithm's encryption key. The
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync base-64 string is enclosed in double quotes.
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync There are two common ways to generate the base-64 string for the
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync secret. The BIND 9 program <span><strong class="command">rndc-confgen</strong></span>
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync be used to generate a random key, or the
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync <span><strong class="command">mmencode</strong></span> program, also known as
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync <span><strong class="command">mimencode</strong></span>, can be used to generate a
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync string from known input. <span><strong class="command">mmencode</strong></span> does
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync ship with BIND 9 but is available on many systems. See the
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync EXAMPLE section for sample command lines for each.
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync default-server localhost;
c74a793852e1fd8994bf9bd2495e1b731ed4ac09vboxsync default-key samplekey;