man.rndc.html revision 97e74139b19368e385a3564746d42db70879195e
80833bb9a1bf25dcf19e814438a4b311d2e1f4cffuankg - Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC")
a34684a59b60a4173c25035d0c627ef17e6dc215rpluem - Copyright (C) 2000-2003 Internet Software Consortium.
1337c7673efc1f80f634139fbad7cbb98a0dc657ylavic - Permission to use, copy, modify, and/or distribute this software for any
1337c7673efc1f80f634139fbad7cbb98a0dc657ylavic - purpose with or without fee is hereby granted, provided that the above
1337c7673efc1f80f634139fbad7cbb98a0dc657ylavic - copyright notice and this permission notice appear in all copies.
4da61833a1cbbca94094f9653fd970582b97a72etrawick - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
4da61833a1cbbca94094f9653fd970582b97a72etrawick - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
4da61833a1cbbca94094f9653fd970582b97a72etrawick - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
4da61833a1cbbca94094f9653fd970582b97a72etrawick - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
4789804be088bcd86ae637a29cdb7fda25169521jailletc - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
4789804be088bcd86ae637a29cdb7fda25169521jailletc - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
4789804be088bcd86ae637a29cdb7fda25169521jailletc - PERFORMANCE OF THIS SOFTWARE.
e50c3026198fd496f183cda4c32a202925476778covener<!-- $Id: man.rndc.html,v 1.222 2011/12/22 18:10:10 tbox Exp $ -->
5b88c8507d5ef6d0c4cfbc78230294968175b638minfrin<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
6c3b9cebb551140fbb25d58bae08b539b3802133ylavic<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
6c3b9cebb551140fbb25d58bae08b539b3802133ylavic<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
6c3b9cebb551140fbb25d58bae08b539b3802133ylavic<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
4f29b65ab4b547ad5dbe506e2d0ff5d12ead9247ylavic<link rel="prev" href="man.nsupdate.html" title="nsupdate">
4f29b65ab4b547ad5dbe506e2d0ff5d12ead9247ylavic<link rel="next" href="man.rndc.conf.html" title="rndc.conf">
0a0df13b7f1f4f1a74fe295253d89ca3911b301aylavic<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
69301145375a889e7e37caf7cc7321ac0f91801erpluem<tr><th colspan="3" align="center"><span class="application">rndc</span></th></tr>
506bfe33206b2fece40ef25f695af39dd4130facjkaluza<a accesskey="p" href="man.nsupdate.html">Prev</a>�</td>
506bfe33206b2fece40ef25f695af39dd4130facjkaluza<td width="20%" align="right">�<a accesskey="n" href="man.rndc.conf.html">Next</a>
17e6c95f3b22d18acdf8380fb26a8d0e10c80767ylavic<p><span class="application">rndc</span> — name server control utility</p>
e8bd80a4bb88199d2f9a24a50345688e52d9c116ylavic<div class="cmdsynopsis"><p><code class="command">rndc</code> [<code class="option">-b <em class="replaceable"><code>source-address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key-file</code></em></code>] [<code class="option">-s <em class="replaceable"><code>server</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-V</code>] [<code class="option">-y <em class="replaceable"><code>key_id</code></em></code>] {command}</p></div>
330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic controls the operation of a name
330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic server. It supersedes the <span><strong class="command">ndc</strong></span> utility
330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic that was provided in old BIND releases. If
330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic <span><strong class="command">rndc</strong></span> is invoked with no command line
d7205b1a86c51c27b71a2c458dc453fd53a261c1covener options or arguments, it prints a short summary of the
d7205b1a86c51c27b71a2c458dc453fd53a261c1covener supported commands and the available options and their
d7205b1a86c51c27b71a2c458dc453fd53a261c1covener<p><span><strong class="command">rndc</strong></span>
44ff304057225e944e220e981d434a046d14cf06covener communicates with the name server
44ff304057225e944e220e981d434a046d14cf06covener over a TCP connection, sending commands authenticated with
44ff304057225e944e220e981d434a046d14cf06covener digital signatures. In the current versions of
44ff304057225e944e220e981d434a046d14cf06covener <span><strong class="command">rndc</strong></span> and <span><strong class="command">named</strong></span>,
5d1ba75b8794925e67591c209085a49279791de9covener the only supported authentication algorithm is HMAC-MD5,
5d1ba75b8794925e67591c209085a49279791de9covener which uses a shared secret on each end of the connection.
5d1ba75b8794925e67591c209085a49279791de9covener This provides TSIG-style authentication for the command
032982212dbcc7c3cce95bf89c503bb56e185ac7kbrand request and the name server's response. All commands sent
032982212dbcc7c3cce95bf89c503bb56e185ac7kbrand over the channel must be signed by a key_id known to the
caad2986f81ab263f7af41467dd622dc9add17f3ylavic reads a configuration file to
caad2986f81ab263f7af41467dd622dc9add17f3ylavic determine how to contact the name server and decide what
caad2986f81ab263f7af41467dd622dc9add17f3ylavic algorithm and key it should use.
a34684a59b60a4173c25035d0c627ef17e6dc215rpluem<dt><span class="term">-b <em class="replaceable"><code>source-address</code></em></span></dt>
1e2d421a36999d292042a5539971070d54aa6c63ylavic Use <em class="replaceable"><code>source-address</code></em>
1e2d421a36999d292042a5539971070d54aa6c63ylavic as the source address for the connection to the server.
fa7ed98b9dc94c5845cf845aea0a44ecacd290c9humbedooh Multiple instances are permitted to allow setting of both
fa7ed98b9dc94c5845cf845aea0a44ecacd290c9humbedooh the IPv4 and IPv6 source addresses.
0b67eb8568cd58bb77082703951679b42cf098actrawick<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
0b67eb8568cd58bb77082703951679b42cf098actrawick Use <em class="replaceable"><code>config-file</code></em>
0b67eb8568cd58bb77082703951679b42cf098actrawick as the configuration file instead of the default,
09c87c777bed1655621bb20e1c46cb6b1a63279dcovener<dt><span class="term">-k <em class="replaceable"><code>key-file</code></em></span></dt>
6502b7b32f980cc2093bb3ebce37e5e4dc68fba4ylavic Use <em class="replaceable"><code>key-file</code></em>
3060ce7f798fbda7999cd4ddf89b525d2b294185covener as the key file instead of the default,
c1a63b8fad09c419c1a64f75993feb8a343a6801ylavic <code class="filename">/etc/rndc.key</code>. The key in
c1a63b8fad09c419c1a64f75993feb8a343a6801ylavic <code class="filename">/etc/rndc.key</code> will be used to
c1a63b8fad09c419c1a64f75993feb8a343a6801ylavic authenticate
e6b4bd1113567627ab6bb6c6a7105e1e01a7d889jailletc commands sent to the server if the <em class="replaceable"><code>config-file</code></em>
e6b4bd1113567627ab6bb6c6a7105e1e01a7d889jailletc does not exist.
e466c40e1801982602ee0200c9e8b61cc148742djailletc<dt><span class="term">-s <em class="replaceable"><code>server</code></em></span></dt>
457468b82e59d01eba00dd9d0817309c8f5e414ejim<dd><p><em class="replaceable"><code>server</code></em> is
457468b82e59d01eba00dd9d0817309c8f5e414ejim the name or address of the server which matches a
457468b82e59d01eba00dd9d0817309c8f5e414ejim server statement in the configuration file for
04983e3bd1754764eec7d6bb772fe3b0bf391771jorton <span><strong class="command">rndc</strong></span>. If no server is supplied on the
04983e3bd1754764eec7d6bb772fe3b0bf391771jorton command line, the host named by the default-server clause
15890c9306ba98f6fc243e15a3c4778ddc7d773erpluem in the options statement of the <span><strong class="command">rndc</strong></span>
15660979a30d251681463de2e0584853890082accovener configuration file will be used.
49dacedb6c387b786b7911082ff35121a45f414bcovener<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
cfd9415521847b2f9394fad04fb701cfb955f503rjung Send commands to TCP port
28c31fb73c1264bd1d0ff932573677030b024c7dwrowe of BIND 9's default control channel port, 953.
28c31fb73c1264bd1d0ff932573677030b024c7dwrowe Enable verbose logging.
63b9f1f5880391261705f696d7d65507bbe9ace3covener<dt><span class="term">-y <em class="replaceable"><code>key_id</code></em></span></dt>
63b9f1f5880391261705f696d7d65507bbe9ace3covener Use the key <em class="replaceable"><code>key_id</code></em>
49dacedb6c387b786b7911082ff35121a45f414bcovener from the configuration file.
49dacedb6c387b786b7911082ff35121a45f414bcovener known by named with the same algorithm and secret string
3c990331fc6702119e4f5b8ba9eae3021aea5265jim in order for control message validation to succeed.
3c990331fc6702119e4f5b8ba9eae3021aea5265jim is specified, <span><strong class="command">rndc</strong></span> will first look
3c990331fc6702119e4f5b8ba9eae3021aea5265jim for a key clause in the server statement of the server
fc42512879dd0504532f52fe5d0d0383dda96a1eniq being used, or if no server statement is present for that
fc42512879dd0504532f52fe5d0d0383dda96a1eniq host, then the default-key clause of the options statement.
fc42512879dd0504532f52fe5d0d0383dda96a1eniq Note that the configuration file contains shared secrets
0451df5dc50fa5d8b3e07d92ee6a92e36a1181a5niq which are used to send authenticated control commands
0451df5dc50fa5d8b3e07d92ee6a92e36a1181a5niq to name servers. It should therefore not have general read
0451df5dc50fa5d8b3e07d92ee6a92e36a1181a5niq or write access.
da0442c0440caef34706e2c2f3af05cb65921cc0jailletc For the complete set of commands supported by <span><strong class="command">rndc</strong></span>,
06b8f183140c8e02e0974e938a05078b511d1603covener see the BIND 9 Administrator Reference Manual or run
06b8f183140c8e02e0974e938a05078b511d1603covener <span><strong class="command">rndc</strong></span> without arguments to see its help
259878293a997ff49f5ddfc53d3739cbdc25444ecovener<p><span><strong class="command">rndc</strong></span>
15890c9306ba98f6fc243e15a3c4778ddc7d773erpluem does not yet support all the commands of
b54b024c06a19926832d77d40ba35ad8c41e4d3dminfrin the BIND 8 <span><strong class="command">ndc</strong></span> utility.
65967d05f839dbf27cf91d91fa79585eeae19660minfrin There is currently no way to provide the shared secret for a
65967d05f839dbf27cf91d91fa79585eeae19660minfrin <code class="option">key_id</code> without using the configuration file.
8152945ae46857b170cb227e79bb799f4fc7710dminfrin Several error messages could be clearer.
75f5c2db254c0167a0e396254460de09b775d203trawick<p><span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>,
75f5c2db254c0167a0e396254460de09b775d203trawick <span class="citerefentry"><span class="refentrytitle">rndc-confgen</span>(8)</span>,
4f0358189bfa57b8e75bd6b94db264302a8f336amrumph <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
4f0358189bfa57b8e75bd6b94db264302a8f336amrumph <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
4f0358189bfa57b8e75bd6b94db264302a8f336amrumph <span class="citerefentry"><span class="refentrytitle">ndc</span>(8)</span>,
5716f9c6daa92dde5f2f9d11ed63f7c9549c223atrawick <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
54d750a84a175d8e338880514d440773eb986b50covener<p><span class="corpauthor">Internet Systems Consortium</span>
54d750a84a175d8e338880514d440773eb986b50covener<a accesskey="p" href="man.nsupdate.html">Prev</a>�</td>
83b50288fa7d306324bba68832011ea08f5c7832covener<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
4e30ef014533a7e93c92d88306291f5e49c9692ftrawick<td width="40%" align="right">�<a accesskey="n" href="man.rndc.conf.html">Next</a>
2e15620d724fb8e3a5be183b917359a2fd6e9468covener<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
2e15620d724fb8e3a5be183b917359a2fd6e9468covener<td width="40%" align="right" valign="top">�<code class="filename">rndc.conf</code>