man.rndc.html revision 3b4098640dd85040270f39b9a5ee5e22de99d3d6
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering - Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC")
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering - Copyright (C) 2000-2003 Internet Software Consortium.
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering - Permission to use, copy, modify, and distribute this software for any
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering - purpose with or without fee is hereby granted, provided that the above
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering - copyright notice and this permission notice appear in all copies.
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering - PERFORMANCE OF THIS SOFTWARE.
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<!-- $Id: man.rndc.html,v 1.13 2006/01/06 01:55:39 marka Exp $ -->
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<meta name="generator" content="DocBook XSL Stylesheets V1.69.1">
6bedfcbb2970e06a4d3280c8fb62083d252ede73Lennart Poettering<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
c6878637502b1717a110a9a7e8bba32a8583fcdfLennart Poettering<link rel="prev" href="man.named.html" title="named">
6bedfcbb2970e06a4d3280c8fb62083d252ede73Lennart Poettering<link rel="next" href="man.rndc.conf.html" title="rndc.conf">
6bedfcbb2970e06a4d3280c8fb62083d252ede73Lennart Poettering<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<table width="100%" summary="Navigation header">
0c0cdb06c139b52ff103287f6909b3daa5b2dc54Ronny Chevalier<tr><th colspan="3" align="center"><span class="application">rndc</span></th></tr>
6bedfcbb2970e06a4d3280c8fb62083d252ede73Lennart Poettering<a accesskey="p" href="man.named.html">Prev</a>�</td>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<th width="60%" align="center">Manual pages</th>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<td width="20%" align="right">�<a accesskey="n" href="man.rndc.conf.html">Next</a>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<a name="man.rndc"></a><div class="titlepage"></div>
c6511e859c35b12de4e6fb5f58d7258d9de3b8f2Lennart Poettering<p><span class="application">rndc</span> — name server control utility</p>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<div class="cmdsynopsis"><p><code class="command">rndc</code> [<code class="option">-b <em class="replaceable"><code>source-address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key-file</code></em></code>] [<code class="option">-s <em class="replaceable"><code>server</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-V</code>] [<code class="option">-y <em class="replaceable"><code>key_id</code></em></code>] {command}</p></div>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<a name="id2585612"></a><h2>DESCRIPTION</h2>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<p><span><strong class="command">rndc</strong></span>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering controls the operation of a name
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering server. It supersedes the <span><strong class="command">ndc</strong></span> utility
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering that was provided in old BIND releases. If
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering <span><strong class="command">rndc</strong></span> is invoked with no command line
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering options or arguments, it prints a short summary of the
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering supported commands and the available options and their
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<p><span><strong class="command">rndc</strong></span>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering communicates with the name server
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering over a TCP connection, sending commands authenticated with
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering digital signatures. In the current versions of
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering <span><strong class="command">rndc</strong></span> and <span><strong class="command">named</strong></span> named
c6511e859c35b12de4e6fb5f58d7258d9de3b8f2Lennart Poettering the only supported authentication algorithm is HMAC-MD5,
c6511e859c35b12de4e6fb5f58d7258d9de3b8f2Lennart Poettering which uses a shared secret on each end of the connection.
c6511e859c35b12de4e6fb5f58d7258d9de3b8f2Lennart Poettering This provides TSIG-style authentication for the command
c6511e859c35b12de4e6fb5f58d7258d9de3b8f2Lennart Poettering request and the name server's response. All commands sent
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering over the channel must be signed by a key_id known to the
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<p><span><strong class="command">rndc</strong></span>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering reads a configuration file to
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering determine how to contact the name server and decide what
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering algorithm and key it should use.
3b6c7e78cf38c1cad8fbb44d21e40ebf69c7cc77Zbigniew Jędrzejewski-Szmek<a name="id2585662"></a><h2>OPTIONS</h2>
3c1668da6202f1ead3d4d3981b89e9da1a0e98e3Lennart Poettering<dt><span class="term">-b <em class="replaceable"><code>source-address</code></em></span></dt>
98d2a5341788b49e82d628dfdc2e241af6d70dcdLennart Poettering Use <em class="replaceable"><code>source-address</code></em>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering as the source address for the connection to the server.
143bfdaf0b890fa7acadf02d1eafacaef1b696bdHolger Hans Peter Freyther Multiple instances are permitted to allow setting of both
143bfdaf0b890fa7acadf02d1eafacaef1b696bdHolger Hans Peter Freyther the IPv4 and IPv6 source addresses.
143bfdaf0b890fa7acadf02d1eafacaef1b696bdHolger Hans Peter Freyther<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering Use <em class="replaceable"><code>config-file</code></em>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering as the configuration file instead of the default,
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering <code class="filename">/etc/rndc.conf</code>.
16e9f408fa9a9626059bdd6c89dc175e06b9e976Lennart Poettering<dt><span class="term">-k <em class="replaceable"><code>key-file</code></em></span></dt>
16e9f408fa9a9626059bdd6c89dc175e06b9e976Lennart Poettering Use <em class="replaceable"><code>key-file</code></em>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering as the key file instead of the default,
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering <code class="filename">/etc/rndc.key</code>. The key in
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering <code class="filename">/etc/rndc.key</code> will be used to
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering commands sent to the server if the <em class="replaceable"><code>config-file</code></em>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering does not exist.
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<dt><span class="term">-s <em class="replaceable"><code>server</code></em></span></dt>
98d2a5341788b49e82d628dfdc2e241af6d70dcdLennart Poettering<dd><p><em class="replaceable"><code>server</code></em> is
98d2a5341788b49e82d628dfdc2e241af6d70dcdLennart Poettering the name or address of the server which matches a
98d2a5341788b49e82d628dfdc2e241af6d70dcdLennart Poettering server statement in the configuration file for
98d2a5341788b49e82d628dfdc2e241af6d70dcdLennart Poettering <span><strong class="command">rndc</strong></span>. If no server is supplied on
98d2a5341788b49e82d628dfdc2e241af6d70dcdLennart Poettering command line, the host named by the default-server clause
98d2a5341788b49e82d628dfdc2e241af6d70dcdLennart Poettering in the option statement of the configuration file will be
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering Send commands to TCP port
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering <em class="replaceable"><code>port</code></em>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering of BIND 9's default control channel port, 953.
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering Enable verbose logging.
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<dt><span class="term">-y <em class="replaceable"><code>keyid</code></em></span></dt>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering Use the key <em class="replaceable"><code>keyid</code></em>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering from the configuration file.
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering <em class="replaceable"><code>keyid</code></em>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering known by named with the same algorithm and secret string
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering in order for control message validation to succeed.
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering If no <em class="replaceable"><code>keyid</code></em>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering is specified, <span><strong class="command">rndc</strong></span> will first look
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering for a key clause in the server statement of the server
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering being used, or if no server statement is present for that
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering host, then the default-key clause of the options statement.
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering Note that the configuration file contains shared secrets
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering which are used to send authenticated control commands
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering to name servers. It should therefore not have general read
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering or write access.
3c1668da6202f1ead3d4d3981b89e9da1a0e98e3Lennart Poettering For the complete set of commands supported by <span><strong class="command">rndc</strong></span>,
3c1668da6202f1ead3d4d3981b89e9da1a0e98e3Lennart Poettering see the BIND 9 Administrator Reference Manual or run
c6511e859c35b12de4e6fb5f58d7258d9de3b8f2Lennart Poettering <span><strong class="command">rndc</strong></span> without arguments to see its help
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<a name="id2586632"></a><h2>LIMITATIONS</h2>
7fd1b19bc9e9f5574f2877936b8ac267c7706947Harald Hoyer<p><span><strong class="command">rndc</strong></span>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering does not yet support all the commands of
3c1668da6202f1ead3d4d3981b89e9da1a0e98e3Lennart Poettering the BIND 8 <span><strong class="command">ndc</strong></span> utility.
c6511e859c35b12de4e6fb5f58d7258d9de3b8f2Lennart Poettering There is currently no way to provide the shared secret for a
c6511e859c35b12de4e6fb5f58d7258d9de3b8f2Lennart Poettering <code class="option">key_id</code> without using the configuration file.
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering Several error messages could be clearer.
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<p><span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>,
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering <span class="citerefentry"><span class="refentrytitle">ndc</span>(8)</span>,
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<p><span class="corpauthor">Internet Systems Consortium</span>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<table width="100%" summary="Navigation footer">
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<a accesskey="p" href="man.named.html">Prev</a>�</td>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<td width="40%" align="right">�<a accesskey="n" href="man.rndc.conf.html">Next</a>
3c1668da6202f1ead3d4d3981b89e9da1a0e98e3Lennart Poettering<td width="40%" align="left" valign="top"><span class="application">named</span>�</td>
c6878637502b1717a110a9a7e8bba32a8583fcdfLennart Poettering<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
cbdca8525b4f36297cb9e5cb090a9648763ed1bfLennart Poettering<td width="40%" align="right" valign="top">�<code class="filename">rndc.conf</code></td>