man.rndc.html revision ebabe300b615154d08f5577822cfd8726d2643c8
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - Copyright (C) 2004-2010 Internet Systems Consortium, Inc. ("ISC")
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence - Copyright (C) 2000-2003 Internet Software Consortium.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - Permission to use, copy, modify, and/or distribute this software for any
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - purpose with or without fee is hereby granted, provided that the above
0e0b744f611e1ffc2432ef0bf66bfc6ff90a556cMichael Graff - copyright notice and this permission notice appear in all copies.
28a8f5b0de57d269cf2845c69cb6abe18cbd3b3aMark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
9c3531d72aeaad6c5f01efe6a1c82023e1379e4dDavid Lawrence - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
0e0b744f611e1ffc2432ef0bf66bfc6ff90a556cMichael Graff - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
0e0b744f611e1ffc2432ef0bf66bfc6ff90a556cMichael Graff - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
0e0b744f611e1ffc2432ef0bf66bfc6ff90a556cMichael Graff - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
12178c86525332bb0ab66155feb61fbf32eca6acEvan Hunt - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - PERFORMANCE OF THIS SOFTWARE.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<!-- $Id: man.rndc.html,v 1.184 2011/01/04 01:14:08 tbox Exp $ -->
0e0b744f611e1ffc2432ef0bf66bfc6ff90a556cMichael Graff<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence<link rel="prev" href="man.nsupdate.html" title="nsupdate">
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence<link rel="next" href="man.rndc.conf.html" title="rndc.conf">
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence<table width="100%" summary="Navigation header">
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence<tr><th colspan="3" align="center"><span class="application">rndc</span></th></tr>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<a accesskey="p" href="man.nsupdate.html">Prev</a>�</td>
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉<td width="20%" align="right">�<a accesskey="n" href="man.rndc.conf.html">Next</a>
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt<a name="man.rndc"></a><div class="titlepage"></div>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<p><span class="application">rndc</span> — name server control utility</p>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<div class="cmdsynopsis"><p><code class="command">rndc</code> [<code class="option">-b <em class="replaceable"><code>source-address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key-file</code></em></code>] [<code class="option">-s <em class="replaceable"><code>server</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-V</code>] [<code class="option">-y <em class="replaceable"><code>key_id</code></em></code>] {command}</p></div>
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews<p><span><strong class="command">rndc</strong></span>
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 controls the operation of a name
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein server. It supersedes the <span><strong class="command">ndc</strong></span> utility
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein that was provided in old BIND releases. If
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <span><strong class="command">rndc</strong></span> is invoked with no command line
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein options or arguments, it prints a short summary of the
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein supported commands and the available options and their
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<p><span><strong class="command">rndc</strong></span>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein communicates with the name server
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein over a TCP connection, sending commands authenticated with
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein digital signatures. In the current versions of
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <span><strong class="command">rndc</strong></span> and <span><strong class="command">named</strong></span>,
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein the only supported authentication algorithm is HMAC-MD5,
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉 which uses a shared secret on each end of the connection.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein This provides TSIG-style authentication for the command
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein request and the name server's response. All commands sent
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein over the channel must be signed by a key_id known to the
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<p><span><strong class="command">rndc</strong></span>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein reads a configuration file to
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein determine how to contact the name server and decide what
d389069a397c99347b5b281f90577e19e7662b03Mark Andrews algorithm and key it should use.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term">-b <em class="replaceable"><code>source-address</code></em></span></dt>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein Use <em class="replaceable"><code>source-address</code></em>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein as the source address for the connection to the server.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein Multiple instances are permitted to allow setting of both
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein the IPv4 and IPv6 source addresses.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
b9fcdde267398d4f94e5cc5fe280eba738191247Bob Halley Use <em class="replaceable"><code>config-file</code></em>
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier as the configuration file instead of the default,
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 <code class="filename">/etc/rndc.conf</code>.
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews<dt><span class="term">-k <em class="replaceable"><code>key-file</code></em></span></dt>
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews Use <em class="replaceable"><code>key-file</code></em>
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt as the key file instead of the default,
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews <code class="filename">/etc/rndc.key</code>. The key in
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews <code class="filename">/etc/rndc.key</code> will be used to
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews authenticate
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews commands sent to the server if the <em class="replaceable"><code>config-file</code></em>
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews does not exist.
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews<dt><span class="term">-s <em class="replaceable"><code>server</code></em></span></dt>
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉<dd><p><em class="replaceable"><code>server</code></em> is
0e0b744f611e1ffc2432ef0bf66bfc6ff90a556cMichael Graff the name or address of the server which matches a
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein server statement in the configuration file for
d653744935f98ace7e5a6423c93ed77bcea34b4aDavid Lawrence <span><strong class="command">rndc</strong></span>. If no server is supplied on the
d653744935f98ace7e5a6423c93ed77bcea34b4aDavid Lawrence command line, the host named by the default-server clause
d653744935f98ace7e5a6423c93ed77bcea34b4aDavid Lawrence in the options statement of the <span><strong class="command">rndc</strong></span>
d653744935f98ace7e5a6423c93ed77bcea34b4aDavid Lawrence configuration file will be used.
d653744935f98ace7e5a6423c93ed77bcea34b4aDavid Lawrence<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
d653744935f98ace7e5a6423c93ed77bcea34b4aDavid Lawrence Send commands to TCP port
d653744935f98ace7e5a6423c93ed77bcea34b4aDavid Lawrence <em class="replaceable"><code>port</code></em>
d653744935f98ace7e5a6423c93ed77bcea34b4aDavid Lawrence of BIND 9's default control channel port, 953.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt Enable verbose logging.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt<dt><span class="term">-y <em class="replaceable"><code>key_id</code></em></span></dt>
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt Use the key <em class="replaceable"><code>key_id</code></em>
0e0b744f611e1ffc2432ef0bf66bfc6ff90a556cMichael Graff from the configuration file.