2086N/A - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC") 2086N/A - Copyright (C) 2000-2003 Internet Software Consortium. 2086N/A - Permission to use, copy, modify, and/or distribute this software for any 2086N/A - purpose with or without fee is hereby granted, provided that the above 2086N/A - copyright notice and this permission notice appear in all copies. 2086N/A - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 2086N/A - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 2086N/A - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 2086N/A - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 2086N/A - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 2086N/A - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 2086N/A - PERFORMANCE OF THIS SOFTWARE. 2086N/A<
meta http-
equiv="Content-Type" content="text/html; charset=ISO-8859-1">
2086N/A<
meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
2086N/A<
link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
2086N/A<
body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
2086N/A<
table width="100%" summary="Navigation header">
2086N/A<
tr><
th colspan="3" align="center"><
span class="application">rndc</
span></
th></
tr>
2202N/A<
td width="20%" align="left">
2086N/A<
th width="60%" align="center">Manual pages</
th>
2086N/A<
div class="refentry" lang="en">
2086N/A<
p><
span class="application">rndc</
span> — name server control utility</
p>
2086N/A<
div class="refsynopsisdiv">
2086N/A<
div class="cmdsynopsis"><
p><
code class="command">rndc</
code> [<
code class="option">-b <
em class="replaceable"><
code>source-address</
code></
em></
code>] [<
code class="option">-c <
em class="replaceable"><
code>config-file</
code></
em></
code>] [<
code class="option">-k <
em class="replaceable"><
code>key-file</
code></
em></
code>] [<
code class="option">-s <
em class="replaceable"><
code>server</
code></
em></
code>] [<
code class="option">-p <
em class="replaceable"><
code>port</
code></
em></
code>] [<
code class="option">-V</
code>] [<
code class="option">-y <
em class="replaceable"><
code>key_id</
code></
em></
code>] {command}</
p></
div>
2086N/A<
div class="refsect1" lang="en">
2086N/A<
a name="id2644896"></
a><
h2>DESCRIPTION</
h2>
2086N/A<
p><
span><
strong class="command">rndc</
strong></
span>
2086N/A controls the operation of a name
2086N/A server. It supersedes the <
span><
strong class="command">ndc</
strong></
span> utility
2086N/A that was provided in old BIND releases. If
2086N/A <
span><
strong class="command">rndc</
strong></
span> is invoked with no command line
2086N/A options or arguments, it prints a short summary of the
2086N/A supported commands and the available options and their
2086N/A<
p><
span><
strong class="command">rndc</
strong></
span>
2086N/A communicates with the name server over a TCP connection, sending
2086N/A commands authenticated with digital signatures. In the current
2086N/A <
span><
strong class="command">rndc</
strong></
span> and <
span><
strong class="command">named</
strong></
span>,
2086N/A the only supported authentication algorithms are HMAC-MD5
2086N/A (for compatibility), HMAC-SHA1, HMAC-SHA224, HMAC-SHA256
2086N/A (default), HMAC-SHA384 and HMAC-SHA512.
2086N/A They use a shared secret on each end of the connection.
2086N/A This provides TSIG-style authentication for the command
2202N/A request and the name server's response. All commands sent
2202N/A over the channel must be signed by a key_id known to the
2086N/A<
p><
span><
strong class="command">rndc</
strong></
span>
2086N/A reads a configuration file to
2086N/A determine how to contact the name server and decide what
2086N/A algorithm and key it should use.
2086N/A<
div class="refsect1" lang="en">
2086N/A<
a name="id2644946"></
a><
h2>OPTIONS</
h2>
2127N/A<
div class="variablelist"><
dl>
2127N/A<
dt><
span class="term">-b <
em class="replaceable"><
code>source-address</
code></
em></
span></
dt>
2202N/A Use <
em class="replaceable"><
code>source-address</
code></
em>
2086N/A as the source address for the connection to the server.
2086N/A Multiple instances are permitted to allow setting of both
2086N/A the IPv4 and IPv6 source addresses.
2086N/A<
dt><
span class="term">-c <
em class="replaceable"><
code>config-file</
code></
em></
span></
dt>
2086N/A Use <
em class="replaceable"><
code>config-file</
code></
em>
2086N/A as the configuration file instead of the default,
2086N/A<
dt><
span class="term">-k <
em class="replaceable"><
code>key-file</
code></
em></
span></
dt>
2127N/A Use <
em class="replaceable"><
code>key-file</
code></
em>
2127N/A as the key file instead of the default,
2086N/A commands sent to the server if the <
em class="replaceable"><
code>config-file</
code></
em>
2086N/A<
dt><
span class="term">-s <
em class="replaceable"><
code>server</
code></
em></
span></
dt>
2086N/A<
dd><
p><
em class="replaceable"><
code>server</
code></
em> is
2086N/A the name or address of the server which matches a
2086N/A server statement in the configuration file for
2086N/A <
span><
strong class="command">rndc</
strong></
span>. If no server is supplied on the
2086N/A command line, the host named by the default-server clause
2202N/A in the options statement of the <
span><
strong class="command">rndc</
strong></
span>
2202N/A configuration file will be used.
2202N/A<
dt><
span class="term">-p <
em class="replaceable"><
code>port</
code></
em></
span></
dt>
2086N/A <
em class="replaceable"><
code>port</
code></
em>
2086N/A of BIND 9's default control channel port, 953.
2086N/A<
dt><
span class="term">-V</
span></
dt>
2086N/A<
dt><
span class="term">-y <
em class="replaceable"><
code>key_id</
code></
em></
span></
dt>
2086N/A Use the key <
em class="replaceable"><
code>key_id</
code></
em>
2086N/A from the configuration file.
2086N/A <
em class="replaceable"><
code>key_id</
code></
em>
2127N/A known by named with the same algorithm and secret string
2086N/A in order for control message validation to succeed.
2086N/A If no <
em class="replaceable"><
code>key_id</
code></
em>
2127N/A is specified, <
span><
strong class="command">rndc</
strong></
span> will first look
2127N/A for a key clause in the server statement of the server
2086N/A being used, or if no server statement is present for that
2086N/A host, then the default-key clause of the options statement.
2086N/A Note that the configuration file contains shared secrets
2086N/A which are used to send authenticated control commands
2086N/A to name servers. It should therefore not have general read
2127N/A For the complete set of commands supported by <
span><
strong class="command">rndc</
strong></
span>,
2086N/A see the BIND 9 Administrator Reference Manual or run
2086N/A <
span><
strong class="command">rndc</
strong></
span> without arguments to see its help
2086N/A<
div class="refsect1" lang="en">
2086N/A<
a name="id2645717"></
a><
h2>LIMITATIONS</
h2>
2086N/A<
p><
span><
strong class="command">rndc</
strong></
span>
2086N/A does not yet support all the commands of
2086N/A the BIND 8 <
span><
strong class="command">ndc</
strong></
span> utility.
2086N/A There is currently no way to provide the shared secret for a
2086N/A <
code class="option">key_id</
code> without using the configuration file.
2086N/A Several error messages could be clearer.
2202N/A<
div class="refsect1" lang="en">
2202N/A<
a name="id2645748"></
a><
h2>SEE ALSO</
h2>
2202N/A<
p><
span class="citerefentry"><
span class="refentrytitle">
rndc.conf</
span>(5)</
span>,
2202N/A <
span class="citerefentry"><
span class="refentrytitle">rndc-confgen</
span>(8)</
span>,
2202N/A <
span class="citerefentry"><
span class="refentrytitle">named</
span>(8)</
span>,
2086N/A <
span class="citerefentry"><
span class="refentrytitle">
named.conf</
span>(5)</
span>,
2086N/A <
span class="citerefentry"><
span class="refentrytitle">ndc</
span>(8)</
span>,
2086N/A <
em class="citetitle">BIND 9 Administrator Reference Manual</
em>.
2086N/A<
div class="refsect1" lang="en">
2086N/A<
a name="id2645803"></
a><
h2>AUTHOR</
h2>
2086N/A<
p><
span class="corpauthor">Internet Systems Consortium</
span>
2086N/A<
table width="100%" summary="Navigation footer">
2086N/A<
td width="40%" align="left">
2086N/A<
td width="40%" align="left" valign="top">
2086N/A<
span class="application">nsupdate</
span>�</
td>
2086N/A<
td width="40%" align="right" valign="top">�<
code class="filename">
rndc.conf</
code>