source: server/major/bind.xml@ 59b836c8

11.1 11.2 11.3 12.0 12.1 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 59b836c8 was 59b836c8, checked in by Bruce Dubbs <bdubbs@…>, 2 years ago

Package updates.
Update to bind9-9.16.24.
Update to qemu-6.2.0.
  • Property mode set to 100644
File size: 34.8 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY bind-download-http "https://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.xz">
8 <!ENTITY bind-download-ftp "ftp://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.xz">
9 <!ENTITY bind-md5sum "b77fc1bb53cf2b7a606c76992f1f7103">
10 <!ENTITY bind-size "4.8 MB">
11 <!ENTITY bind-buildsize "117 MB (20 MB installed)">
12 <!ENTITY bind-time "0.8 SBU (with parallelism=4; add 30+ minutes, somewhat processor independent, to run the complete test suite)">
13]>
14
15<sect1 id="bind" xreflabel="BIND-&bind-version;">
16 <?dbhtml filename="bind.html"?>
17
18 <sect1info>
19 <date>$Date$</date>
20 </sect1info>
21
22 <title>BIND-&bind-version;</title>
23
24 <indexterm zone="bind">
25 <primary sortas="a-BIND">BIND</primary>
26 </indexterm>
27
28 <sect2 role="package">
29 <title>Introduction to BIND</title>
30
31 <para>
32 The <application>BIND</application> package provides a DNS server
33 and client utilities. If you are only interested in the utilities, refer
34 to the <xref linkend="bind-utils"/>.
35 </para>
36
37 &lfs110a_checked;
38
39 <bridgehead renderas="sect3">Package Information</bridgehead>
40 <itemizedlist spacing="compact">
41 <listitem>
42 <para>
43 Download (HTTP): <ulink url="&bind-download-http;"/>
44 </para>
45 </listitem>
46 <listitem>
47 <para>
48 Download (FTP): <ulink url="&bind-download-ftp;"/>
49 </para>
50 </listitem>
51 <listitem>
52 <para>
53 Download MD5 sum: &bind-md5sum;
54 </para>
55 </listitem>
56 <listitem>
57 <para>
58 Download size: &bind-size;
59 </para>
60 </listitem>
61 <listitem>
62 <para>
63 Estimated disk space required: &bind-buildsize;
64 </para>
65 </listitem>
66 <listitem>
67 <para>
68 Estimated build time: &bind-time;
69 </para>
70 </listitem>
71 </itemizedlist>
72<!--
73 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
74 <itemizedlist spacing="compact">
75 <listitem>
76 <para>
77 Required patch:
78 <ulink url="&patch-root;/bind-&bind-version;-upstream_fixes-1.patch"/>
79 </para>
80 </listitem>
81 </itemizedlist>
82-->
83 <bridgehead renderas="sect3">BIND Dependencies</bridgehead>
84
85 <bridgehead renderas="sect4">Required</bridgehead>
86 <para role="required">
87 <xref linkend="libuv"/>
88 </para>
89
90 <bridgehead renderas="sect4">Recommended</bridgehead>
91 <para role="recommended">
92 <xref linkend="json-c"/> and
93 <xref linkend="libcap-pam"/>
94 </para>
95
96 <bridgehead renderas="sect4">Optional</bridgehead>
97 <para role="optional">
98 <xref linkend="curl"/>,
99 <xref linkend="libidn2"/>,
100 <xref linkend="libxml2"/>,
101 <xref linkend="lmdb"/>,
102 <xref linkend="mitkrb"/>,
103 <ulink url="https://cmocka.org/">cmocka</ulink>,
104 <ulink url="https://github.com/cjheath/geoip">geoip</ulink>,
105 <ulink url="https://docs.pytest.org/en/stable/">pytest</ulink>,
106 <ulink url="https://pypi.python.org/pypi/Sphinx">Sphinx</ulink>, and
107 <ulink url="&w3m-url;">w3m</ulink>
108 </para>
109
110 <bridgehead renderas="sect4">Optional database backends</bridgehead>
111 <para role="optional">
112 <xref linkend="db"/>,
113 <xref linkend="mariadb"/> or <ulink url="http://www.mysql.com/">MySQL</ulink>,
114 <xref linkend="openldap"/>,
115 <xref linkend="postgresql"/>, and
116 <xref linkend="unixodbc"/>
117 </para>
118
119 <bridgehead renderas="sect4">Optional (to run the test suite)</bridgehead>
120 <para role="optional">
121 <xref linkend="perl-net-dns"/>
122 </para>
123
124 <bridgehead renderas="sect4">Optional (to rebuild the documentation)</bridgehead>
125 <para role="optional">
126 <xref linkend="doxygen"/>,
127 <xref linkend="libxslt"/>, and
128 <xref linkend="texlive"/> (or <xref linkend="tl-installer"/>)
129 </para>
130
131 <para condition="html" role="usernotes">User Notes:
132 <ulink url="&blfs-wiki;/bind"/></para>
133
134 </sect2>
135
136 <sect2 role="installation">
137 <title>Installation of BIND</title>
138
139 <para>
140 To ensure <application>BIND</application> will build dnssec-keymgr,
141 install a python module as the <systemitem
142 class="username">root</systemitem> user:
143 </para>
144
145<screen role="root"><userinput>pip3 install ply</userinput></screen>
146
147 <para>
148 Install <application>BIND</application> by running the
149 following commands:
150 </para>
151
152<screen><userinput>./configure --prefix=/usr \
153 --sysconfdir=/etc \
154 --localstatedir=/var \
155 --mandir=/usr/share/man \
156 --with-libtool \
157 --disable-static &amp;&amp;
158make</userinput></screen>
159
160 <para>
161 Issue the following commands to run the complete suite of tests.
162 First, as the <systemitem class="username">root</systemitem> user, set up
163 some test interfaces:
164 </para>
165
166 <note>
167 <para>
168 If IPv6 is not enabled in the kernel, there will be several
169 error messages: "RTNETLINK answers: Operation not permitted". These
170 messages do not affect the tests.
171 </para>
172 </note>
173
174<screen role="root"
175 remap="test"><userinput>bin/tests/system/ifconfig.sh up</userinput></screen>
176
177 <para>
178 The test suite may indicate some skipped tests depending on
179 what configuration options are used. Some tests are marked
180 <quote>UNTESTED</quote> if <xref linkend="perl-net-dns"/> is not
181 installed. <!--One test, <quote>CPU</quote>, is known to fail.-->
182 To run the tests, as an unprivileged user, execute:
183 </para>
184
185<screen remap="test"><userinput>make -k check</userinput></screen>
186
187 <para>
188 Again as <systemitem class="username">root</systemitem>, clean up the
189 test interfaces:
190 </para>
191
192<screen role="root"
193 remap="test"><userinput>bin/tests/system/ifconfig.sh down</userinput></screen>
194
195 <para>
196 Finally, install the package as the <systemitem
197 class="username">root</systemitem> user:
198 </para>
199
200<screen role="root"><userinput>make install</userinput></screen>
201 </sect2>
202
203<!-- Documentation is an issue - The docs are now all in .rst format and appear
204to be sphinx based.
205-->
206
207 <sect2 role="commands">
208 <title>Command Explanations</title>
209
210 <para>
211 <parameter>--sysconfdir=/etc</parameter>: This parameter forces
212 <application>BIND</application> to look for configuration
213 files in <filename class='directory'>/etc</filename> instead of
214 <filename class='directory'>/usr/etc</filename>.
215 </para>
216
217 <para>
218 <parameter>--with-libtool</parameter>: This parameter forces the
219 building of dynamic libraries and links the installed binaries to these
220 libraries.
221 </para>
222
223 <para>
224 <option>--with-libidn2</option>: This parameter enables
225 the IDNA2008 (Internationalized Domain Names in Applications)
226 support.
227 </para>
228
229 <para>
230 <option>--enable-fetchlimit</option>: Use this option if you want
231 to be able to limit the rate of recursive client queries. This may be
232 useful on servers which receive a large number of queries.
233 </para>
234
235 <para>
236 <option>--disable-linux-caps</option>: BIND can also be built without
237 capability support by using this option, at the cost of some loss of
238 security.
239 </para>
240
241 <para>
242 <option>--with-dlz-{mysql,bdb,filesystem,ldap,odbc,stub}</option>: Use
243 one (or more) of those options to add Dynamically Loadable Zones support.
244 For more information refer to <ulink
245 url="http://bind-dlz.sourceforge.net/">bind-dlz.sourceforge.net</ulink>.
246 </para>
247
248 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
249 href="../../xincludes/static-libraries.xml"/>
250
251 </sect2>
252
253 <sect2 role="configuration">
254 <title>Configuring BIND</title>
255
256 <sect3 id="bind-config">
257 <title>Config files</title>
258
259 <para>
260 <filename>named.conf</filename>,
261 <filename>root.hints</filename>,
262 <filename>127.0.0</filename>,
263 <filename>rndc.conf</filename>, and
264 <filename>resolv.conf</filename>
265 </para>
266
267 <indexterm zone="bind bind-config">
268 <primary sortas="e-etc-named.conf">/etc/named.conf</primary>
269 </indexterm>
270
271 <indexterm zone="bind bind-config">
272 <primary sortas="e-etc-rndc.conf">/etc/rndc.conf</primary>
273 </indexterm>
274
275 <indexterm zone="bind bind-config">
276 <primary sortas="e-etc-resolv.conf">/etc/resolv.conf</primary>
277 </indexterm>
278
279 <indexterm zone="bind bind-config">
280 <primary
281 sortas="e-etc-namedb-root.hints">/etc/namedb/root.hints</primary>
282 </indexterm>
283
284 <indexterm zone="bind bind-config">
285 <primary
286 sortas="e-etc-namedb-pz-127.0.0.0">/etc/namedb/pz/127.0.0.0</primary>
287 </indexterm>
288 </sect3>
289
290 <sect3>
291 <title>Configuration Information</title>
292
293 <para>
294 <application>BIND</application> will be configured to run in a
295 <command>chroot</command> jail as an unprivileged user (<systemitem
296 class="username">named</systemitem>). This configuration is more secure
297 in that a DNS compromise can only affect a few files in the <systemitem
298 class="username">named</systemitem> user's <envar>HOME</envar>
299 directory.
300 </para>
301
302 <para>
303 Create the unprivileged user and group <systemitem
304 class="username">named</systemitem>:
305 </para>
306
307<screen role="root"><userinput>groupadd -g 20 named &amp;&amp;
308useradd -c "BIND Owner" -g named -s /bin/false -u 20 named &amp;&amp;
309install -d -m770 -o named -g named /srv/named</userinput></screen>
310
311 <para>
312 Set up some files, directories and devices needed by
313 <application>BIND</application>:
314 </para>
315
316<screen role="root"><userinput>mkdir -p /srv/named &amp;&amp;
317cd /srv/named &amp;&amp;
318mkdir -p dev etc/named/{slave,pz} usr/lib/engines var/run/named &amp;&amp;
319mknod /srv/named/dev/null c 1 3 &amp;&amp;
320mknod /srv/named/dev/urandom c 1 9 &amp;&amp;
321chmod 666 /srv/named/dev/{null,urandom} &amp;&amp;
322cp /etc/localtime etc</userinput></screen>
323
324 <para>
325 The <filename>rndc.conf</filename> file contains information for
326 controlling <command>named</command> operations with the
327 <command>rndc</command> utility. Generate a key for use in the
328 <filename>named.conf</filename> and <filename>rndc.conf</filename>
329 with the <command>rndc-confgen</command> command:
330 </para>
331
332<screen role="root"><userinput>rndc-confgen -a -b 512 -t /srv/named</userinput></screen>
333
334 <para>
335 Complete the <filename>named.conf</filename> file from which
336 <command>named</command> will read the location of zone files, root
337 name servers and secure DNS keys:
338 </para>
339
340<screen role="root"><?dbfo keep-together="auto"?><userinput>cat &gt;&gt; /srv/named/etc/named.conf &lt;&lt; "EOF"
341<literal>options {
342 directory "/etc/named";
343 pid-file "/var/run/named.pid";
344 statistics-file "/var/run/named.stats";
345
346};
347zone "." {
348 type hint;
349 file "root.hints";
350};
351zone "0.0.127.in-addr.arpa" {
352 type master;
353 file "pz/127.0.0";
354};
355
356// Bind 9 now logs by default through syslog (except debug).
357// These are the default logging rules.
358
359logging {
360 category default { default_syslog; default_debug; };
361 category unmatched { null; };
362
363 channel default_syslog {
364 syslog daemon; // send to syslog's daemon
365 // facility
366 severity info; // only send priority info
367 // and higher
368 };
369
370 channel default_debug {
371 file "named.run"; // write to named.run in
372 // the working directory
373 // Note: stderr is used instead
374 // of "named.run"
375 // if the server is started
376 // with the '-f' option.
377 severity dynamic; // log at the server's
378 // current debug level
379 };
380
381 channel default_stderr {
382 stderr; // writes to stderr
383 severity info; // only send priority info
384 // and higher
385 };
386
387 channel null {
388 null; // toss anything sent to
389 // this channel
390 };
391};</literal>
392EOF</userinput></screen>
393
394 <para>
395 Create a zone file with the following contents:
396 </para>
397
398<screen role="root"><userinput>cat &gt; /srv/named/etc/named/pz/127.0.0 &lt;&lt; "EOF"
399<literal>$TTL 3D
400@ IN SOA ns.local.domain. hostmaster.local.domain. (
401 1 ; Serial
402 8H ; Refresh
403 2H ; Retry
404 4W ; Expire
405 1D) ; Minimum TTL
406 NS ns.local.domain.
4071 PTR localhost.</literal>
408EOF</userinput></screen>
409
410 <para>
411 Create the <filename>root.hints</filename> file with the following
412 commands:
413 </para>
414
415 <note>
416 <para>
417 Caution must be used to ensure there are no leading spaces in
418 this file.
419 </para>
420 </note>
421
422<screen role="root"><userinput>cat &gt; /srv/named/etc/named/root.hints &lt;&lt; "EOF"
423<literal>. 6D IN NS A.ROOT-SERVERS.NET.
424. 6D IN NS B.ROOT-SERVERS.NET.
425. 6D IN NS C.ROOT-SERVERS.NET.
426. 6D IN NS D.ROOT-SERVERS.NET.
427. 6D IN NS E.ROOT-SERVERS.NET.
428. 6D IN NS F.ROOT-SERVERS.NET.
429. 6D IN NS G.ROOT-SERVERS.NET.
430. 6D IN NS H.ROOT-SERVERS.NET.
431. 6D IN NS I.ROOT-SERVERS.NET.
432. 6D IN NS J.ROOT-SERVERS.NET.
433. 6D IN NS K.ROOT-SERVERS.NET.
434. 6D IN NS L.ROOT-SERVERS.NET.
435. 6D IN NS M.ROOT-SERVERS.NET.
436A.ROOT-SERVERS.NET. 6D IN A 198.41.0.4
437A.ROOT-SERVERS.NET. 6D IN AAAA 2001:503:ba3e::2:30
438B.ROOT-SERVERS.NET. 6D IN A 192.228.79.201
439B.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:200::b
440C.ROOT-SERVERS.NET. 6D IN A 192.33.4.12
441C.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:2::c
442D.ROOT-SERVERS.NET. 6D IN A 199.7.91.13
443D.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:2d::d
444E.ROOT-SERVERS.NET. 6D IN A 192.203.230.10
445E.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:a8::e
446F.ROOT-SERVERS.NET. 6D IN A 192.5.5.241
447F.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:2f::f
448G.ROOT-SERVERS.NET. 6D IN A 192.112.36.4
449G.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:12::d0d
450H.ROOT-SERVERS.NET. 6D IN A 198.97.190.53
451H.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:1::53
452I.ROOT-SERVERS.NET. 6D IN A 192.36.148.17
453I.ROOT-SERVERS.NET. 6D IN AAAA 2001:7fe::53
454J.ROOT-SERVERS.NET. 6D IN A 192.58.128.30
455J.ROOT-SERVERS.NET. 6D IN AAAA 2001:503:c27::2:30
456K.ROOT-SERVERS.NET. 6D IN A 193.0.14.129
457K.ROOT-SERVERS.NET. 6D IN AAAA 2001:7fd::1
458L.ROOT-SERVERS.NET. 6D IN A 199.7.83.42
459L.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:9f::42
460M.ROOT-SERVERS.NET. 6D IN A 202.12.27.33
461M.ROOT-SERVERS.NET. 6D IN AAAA 2001:dc3::35</literal>
462EOF</userinput></screen>
463
464 <para>
465 The <filename>root.hints</filename> file is a list of root name
466 servers. This file must be updated periodically with the
467 <command>dig</command> utility. A current copy of root.hints can be
468 obtained from <ulink url="ftp://rs.internic.net/domain/named.root" />.
469 For details, consult the "BIND 9 Administrator Reference Manual",
470 included in every source archive of BIND 9 distributed by ISC, in HTML
471 and PDF formats, also available at <ulink
472 url="ftp://ftp.isc.org/isc/bind9/cur/&bind-minor-version;/doc/arm/Bv9ARM.html">
473 BIND 9 Administrator Reference Manual</ulink>.
474 </para>
475
476 <para>
477 Create or modify <filename>resolv.conf</filename> to use the new
478 name server with the following commands:
479 </para>
480
481 <note>
482 <para>
483 Replace <replaceable>&lt;yourdomain.com&gt;</replaceable> with
484 your own valid domain name.
485 </para>
486 </note>
487
488<screen role="root"><userinput>cp /etc/resolv.conf /etc/resolv.conf.bak &amp;&amp;
489cat &gt; /etc/resolv.conf &lt;&lt; "EOF"
490<literal>search <replaceable>&lt;yourdomain.com&gt;</replaceable>
491nameserver 127.0.0.1</literal>
492EOF</userinput></screen>
493
494 <para>
495 Set permissions on the <command>chroot</command> jail with the
496 following command:
497 </para>
498
499<screen role="root"><userinput>chown -R named:named /srv/named</userinput></screen>
500
501 </sect3>
502
503 <sect3 id="bind-init">
504 <title><phrase revision="sysv">Boot Script</phrase>
505 <phrase revision="systemd">Systemd Unit</phrase></title>
506
507 <para>
508 To start the DNS server at boot, install the
509 <phrase revision="sysv"><filename>/etc/rc.d/init.d/bind</filename> init
510 script</phrase>
511 <phrase revision="systemd"><filename>named.service</filename>
512 unit</phrase> included in the
513 <xref linkend="bootscripts" revision="sysv"/>
514 <xref linkend="systemd-units" revision="systemd"/> package:
515 </para>
516
517 <indexterm zone="bind bind-init">
518 <primary sortas="f-bind">bind</primary>
519 </indexterm>
520
521<screen role="root" revision="sysv"><userinput>make install-bind</userinput></screen>
522<screen role="root" revision="systemd"><userinput>make install-named</userinput></screen>
523
524 <para>
525 Now start <application>BIND</application> with the following command:
526 </para>
527
528<screen role="root" revision="sysv"><userinput>/etc/rc.d/init.d/bind start</userinput></screen>
529<screen role="root" revision="systemd"><userinput>systemctl start named</userinput></screen>
530
531 </sect3>
532
533 <sect3>
534 <title>Testing BIND</title>
535
536 <para>
537 Test out the new <application>BIND</application> 9 installation.
538 First query the local host address with <command>dig</command>:
539 </para>
540
541<screen><userinput>dig -x 127.0.0.1</userinput></screen>
542
543 <para>
544 Now try an external name lookup, taking note of the speed
545 difference in repeated lookups due to the caching. Run the
546 <command>dig</command> command twice on the same address:
547 </para>
548
549<screen><userinput>dig www.&lfs-domainname; &amp;&amp;
550dig www.&lfs-domainname;</userinput></screen>
551
552 <para>
553 You can see almost instantaneous results with the named caching
554 lookups. Consult the <application>BIND</application> Administrator
555 Reference Manual located at
556 <ulink url="https://bind9.readthedocs.io/en/v9_16/"/>
557 for further configuration options.
558 </para>
559
560 </sect3>
561
562 </sect2>
563
564 <sect2 role="content">
565 <title>Contents</title>
566
567 <segmentedlist>
568 <segtitle>Installed Programs</segtitle>
569 <segtitle>Installed Libraries</segtitle>
570 <segtitle>Installed Directories</segtitle>
571
572 <seglistitem>
573
574 <seg>arpaname, <!--bind9-config hardlinked to isc-config.sh,-->
575 ddns-confgen, delv, dig, dnssec-cds, dnssec-checkds, dnssec-coverage,
576 dnssec-dsfromkey, dnssec-importkey, dnssec-keyfromlabel, dnssec-keygen,
577 dnssec-keymgr, dnssec-revoke, dnssec-settime, dnssec-signzone,
578 dnssec-verify, host, mdig, named, named-checkconf,
579 named-checkzone, named-compilezone (symlink), named-journalprint,
580 named-nzd2nzf, named-rrchecker, nsec3hash, nslookup, nsupdate, rndc,
581 rndc-confgen, and tsig-keygen (symlink)</seg>
582
583 <seg>libbind9.so, libdns.so, libirs.so, libisc.so, libisccc.so,
584 libisccfg.so, and libns.so</seg>
585
586 <seg>/usr/include/{bind9,dns,dst,irs,isc,isccc,isccfg,ns,pk11,pkcs11},
587 /usr/lib/named, /usr/lib/python&python3-majorver;/site-packages/isc,
588 and /srv/named</seg>
589 </seglistitem>
590 </segmentedlist>
591
592 <variablelist>
593 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
594 <?dbfo list-presentation="list"?>
595 <?dbhtml list-presentation="table"?>
596
597 <varlistentry id="arpaname">
598 <term><command>arpaname</command></term>
599 <listitem>
600 <para>
601 translates IP addresses to the corresponding ARPA names
602 </para>
603 <indexterm zone="bind arpaname">
604 <primary sortas="b-arpaname">arpaname</primary>
605 </indexterm>
606 </listitem>
607 </varlistentry>
608
609<!-- Not present as of 9.16.5
610 <varlistentry id="bind9-config">
611 <term><command>bind9-config</command></term>
612 <listitem>
613 <para>
614 is hardlinked to <command>isc-config.sh</command>.
615 </para>
616 <indexterm zone="bind bind9-config">
617 <primary sortas="b-bind9-config">bind9-config</primary>
618 </indexterm>
619 </listitem>
620 </varlistentry>
621-->
622
623 <varlistentry id="ddns-confgen">
624 <term><command>ddns-confgen</command></term>
625 <listitem>
626 <para>
627 generates a key for use by nsupdate and named
628 </para>
629 <indexterm zone="bind ddns-confgen">
630 <primary sortas="b-ddns-confgen">ddns-confgen</primary>
631 </indexterm>
632 </listitem>
633 </varlistentry>
634
635 <varlistentry id="delv">
636 <term><command>delv</command></term>
637 <listitem>
638 <para>
639 is a new debugging tool that is a successor to
640 <command>dig</command>
641 </para>
642 <indexterm zone="bind delv">
643 <primary sortas="b-delv">delv</primary>
644 </indexterm>
645 </listitem>
646 </varlistentry>
647
648 <varlistentry id="dig">
649 <term><command>dig</command></term>
650 <listitem>
651 <para>
652 interrogates DNS servers
653 </para>
654 <indexterm zone="bind dig">
655 <primary sortas="b-dig">dig</primary>
656 </indexterm>
657 </listitem>
658 </varlistentry>
659
660 <varlistentry id="dnssec-cds">
661 <term><command>dnssec-cds</command></term>
662 <listitem>
663 <para>
664 changes DS records for a child zone based on
665 CDS/CDNSKEY
666 </para>
667 <indexterm zone="bind dnssec-cds">
668 <primary sortas="b-dnssec-cds">dnssec-cds</primary>
669 </indexterm>
670 </listitem>
671 </varlistentry>
672
673 <varlistentry id="dnssec-checkds">
674 <term><command>dnssec-checkds</command></term>
675 <listitem>
676 <para>
677 is a DNSSEC delegation consistency checking tool
678 </para>
679 <indexterm zone="bind dnssec-checkds">
680 <primary sortas="b-dnssec-checkds">dnssec-checkds</primary>
681 </indexterm>
682 </listitem>
683 </varlistentry>
684
685 <varlistentry id="dnssec-coverage">
686 <term><command>dnssec-coverage</command></term>
687 <listitem>
688 <para>
689 verifies that the DNSSEC keys for a given zone or a set of zones
690 have timing metadata set properly to ensure no future lapses
691 in DNSSEC coverage
692 </para>
693 <indexterm zone="bind dnssec-coverage">
694 <primary sortas="b-dnssec-coverage">dnssec-coverage</primary>
695 </indexterm>
696 </listitem>
697 </varlistentry>
698
699 <varlistentry id="dnssec-dsfromkey">
700 <term><command>dnssec-dsfromkey</command></term>
701 <listitem>
702 <para>
703 outputs the Delegation Signer (DS) resource record (RR)
704 </para>
705 <indexterm zone="bind dnssec-dsfromkey">
706 <primary sortas="b-dnssec-dsfromkey">dnssec-dsfromkey</primary>
707 </indexterm>
708 </listitem>
709 </varlistentry>
710
711 <varlistentry id="dnssec-importkey">
712 <term><command>dnssec-importkey</command></term>
713 <listitem>
714 <para>
715 reads a public DNSKEY record and generates a pair of
716 .key/.private files
717 </para>
718 <indexterm zone="bind dnssec-importkey">
719 <primary sortas="b-dnssec-importkey">dnssec-importkey</primary>
720 </indexterm>
721 </listitem>
722 </varlistentry>
723
724 <varlistentry id="dnssec-keyfromlabel">
725 <term><command>dnssec-keyfromlabel</command></term>
726 <listitem>
727 <para>
728 gets keys with the given label from a cryptography hardware device
729 and builds key files for DNSSEC
730 </para>
731 <indexterm zone="bind dnssec-keyfromlabel">
732 <primary sortas="b-dnssec-keyfromlabel">dnssec-keyfromlabel</primary>
733 </indexterm>
734 </listitem>
735 </varlistentry>
736
737 <varlistentry id="dnssec-keygen">
738 <term><command>dnssec-keygen</command></term>
739 <listitem>
740 <para>
741 is a key generator for secure DNS
742 </para>
743 <indexterm zone="bind dnssec-keygen">
744 <primary sortas="b-dnssec-keygen">dnssec-keygen</primary>
745 </indexterm>
746 </listitem>
747 </varlistentry>
748
749 <varlistentry id="dnssec-keymgr">
750 <term><command>dnssec-keymgr</command></term>
751 <listitem>
752 <para>
753 ensures correct DNSKEY coverage based on a defined policy
754 </para>
755 <indexterm zone="bind dnssec-keymgr">
756 <primary sortas="b-dnssec-keymgr">dnssec-keymgr</primary>
757 </indexterm>
758 </listitem>
759 </varlistentry>
760
761 <varlistentry id="dnssec-revoke">
762 <term><command>dnssec-revoke</command></term>
763 <listitem>
764 <para>
765 sets the REVOKED bit on a DNSSEC key
766 </para>
767 <indexterm zone="bind dnssec-revoke">
768 <primary sortas="b-dnssec-revoke">dnssec-revoke</primary>
769 </indexterm>
770 </listitem>
771 </varlistentry>
772
773 <varlistentry id="dnssec-settime">
774 <term><command>dnssec-settime</command></term>
775 <listitem>
776 <para>
777 sets the key timing metadata for a DNSSEC key
778 </para>
779 <indexterm zone="bind dnssec-settime">
780 <primary sortas="b-dnssec-settime">dnssec-settime</primary>
781 </indexterm>
782 </listitem>
783 </varlistentry>
784
785 <varlistentry id="dnssec-signzone">
786 <term><command>dnssec-signzone</command></term>
787 <listitem>
788 <para>
789 generates signed versions of zone files
790 </para>
791 <indexterm zone="bind dnssec-signzone">
792 <primary sortas="b-dnssec-signzone">dnssec-signzone</primary>
793 </indexterm>
794 </listitem>
795 </varlistentry>
796
797 <varlistentry id="dnssec-verify">
798 <term><command>dnssec-verify</command></term>
799 <listitem>
800 <para>
801 verifies that a zone is fully signed for each algorithm found
802 in the DNSKEY RRset for the zone, and that the NSEC / NSEC3
803 chains are complete
804 </para>
805 <indexterm zone="bind dnssec-verify">
806 <primary sortas="b-dnssec-verify">dnssec-verify</primary>
807 </indexterm>
808 </listitem>
809 </varlistentry>
810
811<!-- No longer present with 9.16.5
812 <varlistentry id="genrandom">
813 <term><command>genrandom</command></term>
814 <listitem>
815 <para>
816 generates a file containing random data.
817 </para>
818 <indexterm zone="bind genrandom">
819 <primary sortas="b-genrandom">genrandom</primary>
820 </indexterm>
821 </listitem>
822 </varlistentry>
823-->
824
825 <varlistentry id="host">
826 <term><command>host</command></term>
827 <listitem>
828 <para>
829 is a utility for DNS lookups
830 </para>
831 <indexterm zone="bind host">
832 <primary sortas="b-host">host</primary>
833 </indexterm>
834 </listitem>
835 </varlistentry>
836
837 <!-- No longer present with 9.16.5
838 <varlistentry id="isc-config.sh">
839 <term><command>isc-config.sh</command></term>
840 <listitem>
841 <para>
842 prints information related to the installed version of ISC BIND.
843 </para>
844 <indexterm zone="bind isc-config.sh">
845 <primary sortas="b-isc-config.sh">isc-config.sh</primary>
846 </indexterm>
847 </listitem>
848 </varlistentry>
849
850 <varlistentry id="isc-hmac-fixup">
851 <term><command>isc-hmac-fixup</command></term>
852 <listitem>
853 <para>
854 fixes HMAC keys generated by older versions of BIND.
855 </para>
856 <indexterm zone="bind isc-hmac-fixup">
857 <primary sortas="b-isc-hmac-fixup">isc-hmac-fixup</primary>
858 </indexterm>
859 </listitem>
860 </varlistentry>
861
862 <varlistentry id="lwresd">
863 <term><command>lwresd</command></term>
864 <listitem>
865 <para>
866 is a caching-only name server for local process use.
867 </para>
868 <indexterm zone="bind lwresd">
869 <primary sortas="b-lwresd">lwresd</primary>
870 </indexterm>
871 </listitem>
872 </varlistentry>
873-->
874
875 <varlistentry id="mdig">
876 <term><command>mdig</command></term>
877 <listitem>
878 <para>
879 is a version of dig that allows multiple queries at once
880 </para>
881 <indexterm zone="bind mdig">
882 <primary sortas="b-mdig">mdig</primary>
883 </indexterm>
884 </listitem>
885 </varlistentry>
886
887 <varlistentry id="named">
888 <term><command>named</command></term>
889 <listitem>
890 <para>
891 is the name server daemon
892 </para>
893 <indexterm zone="bind named">
894 <primary sortas="b-named">named</primary>
895 </indexterm>
896 </listitem>
897 </varlistentry>
898
899 <varlistentry id="named-checkconf">
900 <term><command>named-checkconf</command></term>
901 <listitem>
902 <para>
903 checks the syntax of <filename>named.conf</filename>
904 files
905 </para>
906 <indexterm zone="bind named-checkconf">
907 <primary sortas="b-named-checkconf">named-checkconf</primary>
908 </indexterm>
909 </listitem>
910 </varlistentry>
911
912 <varlistentry id="named-checkzone">
913 <term><command>named-checkzone</command></term>
914 <listitem>
915 <para>
916 checks zone file validity
917 </para>
918 <indexterm zone="bind named-checkzone">
919 <primary sortas="b-named-checkzone">named-checkzone</primary>
920 </indexterm>
921 </listitem>
922 </varlistentry>
923
924 <varlistentry id="named-compilezone">
925 <term><command>named-compilezone</command></term>
926 <listitem>
927 <para>
928 is similar to <command>named-checkzone</command>, but it always
929 dumps the zone contents to a specified file in a specified format
930 </para>
931 <indexterm zone="bind named-compilezone">
932 <primary sortas="b-named-compilezone">named-compilezone</primary>
933 </indexterm>
934 </listitem>
935 </varlistentry>
936
937 <varlistentry id="named-journalprint">
938 <term><command>named-journalprint</command></term>
939 <listitem>
940 <para>
941 prints the zone journal in human-readable form
942 </para>
943 <indexterm zone="bind named-journalprint">
944 <primary sortas="b-named-journalprint">named-journalprint</primary>
945 </indexterm>
946 </listitem>
947 </varlistentry>
948
949 <varlistentry id="named-rrchecker">
950 <term><command>named-rrchecker</command></term>
951 <listitem>
952 <para>
953 reads an individual DNS resource record from standard input and
954 checks if it is syntactically correct
955 </para>
956 <indexterm zone="bind named-rrchecker">
957 <primary sortas="b-named-rrchecker">named-rrchecker</primary>
958 </indexterm>
959 </listitem>
960 </varlistentry>
961
962 <varlistentry id="named-nzd2nzf">
963 <term><command>named-nzd2nzf</command></term>
964 <listitem>
965 <para>
966 converts an NZD database to NZF text format
967 </para>
968 <indexterm zone="bind named-nzd2nzf">
969 <primary sortas="b-named-nzd2nzf">named-nzd2nzf</primary>
970 </indexterm>
971 </listitem>
972 </varlistentry>
973
974 <varlistentry id="nsec3hash">
975 <term><command>nsec3hash</command></term>
976 <listitem>
977 <para>
978 generates an NSEC3 hash based on a set of NSEC3 parameters
979 </para>
980 <indexterm zone="bind nsec3hash">
981 <primary sortas="b-nsec3hash">nsec3hash</primary>
982 </indexterm>
983 </listitem>
984 </varlistentry>
985
986 <varlistentry id="nslookup">
987 <term><command>nslookup</command></term>
988 <listitem>
989 <para>
990 is a program used to query Internet domain nameservers
991 </para>
992 <indexterm zone="bind nslookup">
993 <primary sortas="b-nslookup">nslookup</primary>
994 </indexterm>
995 </listitem>
996 </varlistentry>
997
998 <varlistentry id="nsupdate">
999 <term><command>nsupdate</command></term>
1000 <listitem>
1001 <para>
1002 is used to submit DNS update requests
1003 </para>
1004 <indexterm zone="bind nsupdate">
1005 <primary sortas="b-nsupdate">nsupdate</primary>
1006 </indexterm>
1007 </listitem>
1008 </varlistentry>
1009
1010 <varlistentry id="rndc">
1011 <term><command>rndc</command></term>
1012 <listitem>
1013 <para>
1014 controls the operation of <application>BIND</application>
1015 </para>
1016 <indexterm zone="bind rndc">
1017 <primary sortas="b-rndc">rndc</primary>
1018 </indexterm>
1019 </listitem>
1020 </varlistentry>
1021
1022 <varlistentry id="rndc-confgen">
1023 <term><command>rndc-confgen</command></term>
1024 <listitem>
1025 <para>
1026 generates <filename>rndc.conf</filename> files
1027 </para>
1028 <indexterm zone="bind rndc-confgen">
1029 <primary sortas="b-rndc-confgen">rndc-confgen</primary>
1030 </indexterm>
1031 </listitem>
1032 </varlistentry>
1033
1034 <varlistentry id="tsig-keygen">
1035 <term><command>tsig-keygen</command></term>
1036 <listitem>
1037 <para>
1038 is a symlink to <command>ddns-confgen</command>
1039 </para>
1040 <indexterm zone="bind tsig-keygen">
1041 <primary sortas="b-tsig-keygen">tsig-keygen</primary>
1042 </indexterm>
1043 </listitem>
1044 </varlistentry>
1045
1046 </variablelist>
1047
1048 </sect2>
1049
1050</sect1>
Note: See TracBrowser for help on using the repository browser.