source: server/major/bind.xml@ 60a2f00

11.3 12.0 12.1 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt plabs/newcss python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk xry111/llvm18 xry111/xf86-video-removal
Last change on this file since 60a2f00 was 60a2f00, checked in by Bruce Dubbs <bdubbs@…>, 15 months ago

Use an entity for md5sums that are used more than once
  • Property mode set to 100644
File size: 35.9 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY bind-download-http "https://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.xz">
8 <!ENTITY bind-download-ftp "ftp://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.xz">
9 <!ENTITY bind-md5sum "&bind-md5;">
10 <!ENTITY bind-size "5.0 MB">
11 <!ENTITY bind-buildsize "139 MB (26 MB installed)"><!-- differs much from prev maybe because of docs? -->
12 <!ENTITY bind-time "0.4 SBU (with parallelism=4; about 20 SBU somewhat processor independent, to run the complete test suite)">
13]>
14
15<sect1 id="bind" xreflabel="BIND-&bind-version;">
16 <?dbhtml filename="bind.html"?>
17
18
19 <title>BIND-&bind-version;</title>
20
21 <indexterm zone="bind">
22 <primary sortas="a-BIND">BIND</primary>
23 </indexterm>
24
25 <sect2 role="package">
26 <title>Introduction to BIND</title>
27
28 <para>
29 The <application>BIND</application> package provides a DNS server
30 and client utilities. If you are only interested in the utilities, refer
31 to the <xref linkend="bind-utils"/>.
32 </para>
33
34 &lfs112_checked;
35
36 <bridgehead renderas="sect3">Package Information</bridgehead>
37 <itemizedlist spacing="compact">
38 <listitem>
39 <para>
40 Download (HTTP): <ulink url="&bind-download-http;"/>
41 </para>
42 </listitem>
43 <listitem>
44 <para>
45 Download (FTP): <ulink url="&bind-download-ftp;"/>
46 </para>
47 </listitem>
48 <listitem>
49 <para>
50 Download MD5 sum: &bind-md5sum;
51 </para>
52 </listitem>
53 <listitem>
54 <para>
55 Download size: &bind-size;
56 </para>
57 </listitem>
58 <listitem>
59 <para>
60 Estimated disk space required: &bind-buildsize;
61 </para>
62 </listitem>
63 <listitem>
64 <para>
65 Estimated build time: &bind-time;
66 </para>
67 </listitem>
68 </itemizedlist>
69<!--
70 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
71 <itemizedlist spacing="compact">
72 <listitem>
73 <para>
74 Required patch:
75 <ulink url="&patch-root;/bind-&bind-version;-upstream_fixes-1.patch"/>
76 </para>
77 </listitem>
78 </itemizedlist>
79-->
80 <bridgehead renderas="sect3">BIND Dependencies</bridgehead>
81
82 <bridgehead renderas="sect4">Required</bridgehead>
83 <para role="required">
84 <xref linkend="libuv"/>
85 </para>
86
87 <bridgehead renderas="sect4">Recommended</bridgehead>
88 <para role="recommended">
89 <xref linkend="json-c"/> and
90 <xref linkend="libcap-pam"/>
91 </para>
92
93 <bridgehead renderas="sect4">Optional</bridgehead>
94 <para role="optional">
95 <xref linkend="curl"/>,
96 <xref linkend="libidn2"/>,
97 <xref linkend="libxml2"/>,
98 <xref linkend="lmdb"/>,
99 <xref linkend="mitkrb"/>,
100 <xref linkend="pytest"/>,
101 <xref linkend="sphinx"/> (required to build documentation),
102 <ulink url="https://cmocka.org/">cmocka</ulink>,
103 <ulink url="https://github.com/cjheath/geoip">geoip</ulink>,
104 <ulink url="&w3m-url;">w3m</ulink>
105 </para>
106
107 <bridgehead renderas="sect4">Optional database backends</bridgehead>
108 <para role="optional">
109 <xref linkend="db"/>,
110 <xref linkend="mariadb"/> or <ulink url="https://www.mysql.com/">MySQL</ulink>,
111 <xref linkend="openldap"/>,
112 <xref linkend="postgresql"/>, and
113 <xref linkend="unixodbc"/>
114 </para>
115
116 <bridgehead renderas="sect4">Optional (to run the test suite)</bridgehead>
117 <para role="optional">
118 <xref linkend="perl-net-dns"/>
119 </para>
120
121<!-- docs are now all sphinx based
122 <bridgehead renderas="sect4">Optional (to rebuild the documentation)</bridgehead>
123 <para role="optional">
124 <xref linkend="doxygen"/>,
125 <xref linkend="libxslt"/>, and
126 <xref linkend="texlive"/> (or <xref linkend="tl-installer"/>)
127 </para>
128-->
129
130 <para condition="html" role="usernotes">User Notes:
131 <ulink url="&blfs-wiki;/bind"/></para>
132
133 </sect2>
134
135 <sect2 role="installation">
136 <title>Installation of BIND</title>
137
138<!--
139 <para>
140 To ensure <application>BIND</application> will build dnssec-keymgr,
141 install a python module as the <systemitem
142 class="username">root</systemitem> user:
143 </para>
144
145<screen role="root"><userinput>pip3 install ply</userinput></screen>
146-->
147
148 <para>
149 Install <application>BIND</application> by running the
150 following commands:
151 </para>
152
153<screen><userinput>./configure --prefix=/usr \
154 --sysconfdir=/etc \
155 --localstatedir=/var \
156 --mandir=/usr/share/man \
157 --disable-static &amp;&amp;
158make</userinput></screen>
159
160 <para>
161 Issue the following commands to run the complete suite of tests.
162 First, as the <systemitem class="username">root</systemitem> user, set up
163 some test interfaces:
164 </para>
165
166 <note>
167 <para>
168 If IPv6 is not enabled in the kernel, there will be several
169 error messages: "RTNETLINK answers: Operation not permitted". These
170 messages do not affect the tests.
171 </para>
172 </note>
173
174<screen role="root"
175 remap="test"><userinput>bin/tests/system/ifconfig.sh up</userinput></screen>
176
177 <para>
178 The test suite may indicate some skipped tests depending on
179 what configuration options are used. Some tests are marked
180 <quote>UNTESTED</quote> or do even fail if <xref linkend="perl-net-dns"/>
181 is not installed. <!--One test, <quote>CPU</quote>, is known to fail.-->
182 To run the tests, as an unprivileged user, execute:
183 </para>
184
185<screen remap="test"><userinput>make -k check</userinput></screen>
186
187 <para>
188 Again as <systemitem class="username">root</systemitem>, clean up the
189 test interfaces:
190 </para>
191
192<screen role="root"
193 remap="test"><userinput>bin/tests/system/ifconfig.sh down</userinput></screen>
194
195 <para>
196 Finally, install the package as the <systemitem
197 class="username">root</systemitem> user:
198 </para>
199
200<!-- Documentation is an issue - The docs are now all in .rst format and appear
201to be sphinx based. install source .rst files for now...
202
203leave docs untouched as they does only use disk space when not
204used to recreate the docs via Sphinx. I've added a note regarding
205the documentation. (thomas)
206
207<screen role="root"><userinput>make install &amp;&amp;
208
209install -vdm 755 /usr/share/doc/bind-&bind-version;/{arm,dnssec-guide} &amp;&amp;
210install doc/arm/* /usr/share/doc/bind-&bind-version;/arm &amp;&amp;
211install doc/dnssec-guide/* /usr/share/doc/bind-&bind-version;/dnssec-guide</userinput></screen>
212-->
213<screen role="root"><userinput>make install</userinput></screen>
214
215 </sect2>
216
217 <sect2 role="commands">
218 <title>Command Explanations</title>
219
220 <para>
221 <parameter>--sysconfdir=/etc</parameter>: This parameter forces
222 <application>BIND</application> to look for configuration
223 files in <filename class='directory'>/etc</filename> instead of
224 <filename class='directory'>/usr/etc</filename>.
225 </para>
226
227 <!-- Seems to be removed in 9.18.0
228 <para>
229 <parameter>- -with-libtool</parameter>: This parameter forces the
230 building of dynamic libraries and links the installed binaries to these
231 libraries.
232 </para>
233 -->
234
235 <para>
236 <option>--with-libidn2</option>: This parameter enables
237 the IDNA2008 (Internationalized Domain Names in Applications)
238 support.
239 </para>
240
241 <para>
242 <option>--enable-fetchlimit</option>: Use this option if you want
243 to be able to limit the rate of recursive client queries. This may be
244 useful on servers which receive a large number of queries.
245 </para>
246
247 <para>
248 <option>--disable-linux-caps</option>: BIND can also be built without
249 capability support by using this option, at the cost of some loss of
250 security.
251 </para>
252
253 <para>
254 <option>--with-dlz-{mysql,bdb,filesystem,ldap,odbc,stub}</option>: Use
255 one (or more) of those options to add Dynamically Loadable Zones support.
256 For more information refer to <ulink
257 url="http://bind-dlz.sourceforge.net/">bind-dlz.sourceforge.net</ulink>.
258 </para>
259
260 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
261 href="../../xincludes/static-libraries.xml"/>
262
263 </sect2>
264
265 <sect2 role="configuration">
266 <title>Configuring BIND</title>
267
268 <sect3 id="bind-config">
269 <title>Config files</title>
270
271 <para>
272 <filename>named.conf</filename>,
273 <filename>root.hints</filename>,
274 <filename>127.0.0</filename>,
275 <filename>rndc.conf</filename>, and
276 <filename>resolv.conf</filename>
277 </para>
278
279 <indexterm zone="bind bind-config">
280 <primary sortas="e-etc-named.conf">/etc/named.conf</primary>
281 </indexterm>
282
283 <indexterm zone="bind bind-config">
284 <primary sortas="e-etc-rndc.conf">/etc/rndc.conf</primary>
285 </indexterm>
286
287 <indexterm zone="bind bind-config">
288 <primary sortas="e-etc-resolv.conf">/etc/resolv.conf</primary>
289 </indexterm>
290
291 <indexterm zone="bind bind-config">
292 <primary
293 sortas="e-etc-namedb-root.hints">/etc/namedb/root.hints</primary>
294 </indexterm>
295
296 <indexterm zone="bind bind-config">
297 <primary
298 sortas="e-etc-namedb-pz-127.0.0.0">/etc/namedb/pz/127.0.0.0</primary>
299 </indexterm>
300 </sect3>
301
302 <sect3>
303 <title>Configuration Information</title>
304
305 <para>
306 <application>BIND</application> will be configured to run in a
307 <command>chroot</command> jail as an unprivileged user (<systemitem
308 class="username">named</systemitem>). This configuration is more secure
309 in that a DNS compromise can only affect a few files in the <systemitem
310 class="username">named</systemitem> user's <envar>HOME</envar>
311 directory.
312 </para>
313
314 <para>
315 Create the unprivileged user and group <systemitem
316 class="username">named</systemitem>:
317 </para>
318
319<screen role="root"><userinput>groupadd -g 20 named &amp;&amp;
320useradd -c "BIND Owner" -g named -s /bin/false -u 20 named &amp;&amp;
321install -d -m770 -o named -g named /srv/named</userinput></screen>
322
323 <para>
324 Set up some files, directories and devices needed by
325 <application>BIND</application>:
326 </para>
327
328<screen role="root"><userinput>mkdir -p /srv/named &amp;&amp;
329cd /srv/named &amp;&amp;
330mkdir -p dev etc/named/{slave,pz} usr/lib/engines var/run/named &amp;&amp;
331mknod /srv/named/dev/null c 1 3 &amp;&amp;
332mknod /srv/named/dev/urandom c 1 9 &amp;&amp;
333chmod 666 /srv/named/dev/{null,urandom} &amp;&amp;
334cp /etc/localtime etc</userinput></screen>
335
336 <para>
337 The <filename>rndc.conf</filename> file contains information for
338 controlling <command>named</command> operations with the
339 <command>rndc</command> utility. Generate a key for use in the
340 <filename>named.conf</filename> and <filename>rndc.conf</filename>
341 with the <command>rndc-confgen</command> command:
342 </para>
343
344<screen role="root"><userinput>rndc-confgen -a -b 512 -t /srv/named</userinput></screen>
345
346 <para>
347 Complete the <filename>named.conf</filename> file from which
348 <command>named</command> will read the location of zone files, root
349 name servers and secure DNS keys:
350 </para>
351
352<screen role="root"><?dbfo keep-together="auto"?><userinput>cat &gt;&gt; /srv/named/etc/named.conf &lt;&lt; "EOF"
353<literal>options {
354 directory "/etc/named";
355 pid-file "/var/run/named.pid";
356 statistics-file "/var/run/named.stats";
357
358};
359zone "." {
360 type hint;
361 file "root.hints";
362};
363zone "0.0.127.in-addr.arpa" {
364 type master;
365 file "pz/127.0.0";
366};
367
368// Bind 9 now logs by default through syslog (except debug).
369// These are the default logging rules.
370
371logging {
372 category default { default_syslog; default_debug; };
373 category unmatched { null; };
374
375 channel default_syslog {
376 syslog daemon; // send to syslog's daemon
377 // facility
378 severity info; // only send priority info
379 // and higher
380 };
381
382 channel default_debug {
383 file "named.run"; // write to named.run in
384 // the working directory
385 // Note: stderr is used instead
386 // of "named.run"
387 // if the server is started
388 // with the '-f' option.
389 severity dynamic; // log at the server's
390 // current debug level
391 };
392
393 channel default_stderr {
394 stderr; // writes to stderr
395 severity info; // only send priority info
396 // and higher
397 };
398
399 channel null {
400 null; // toss anything sent to
401 // this channel
402 };
403};</literal>
404EOF</userinput></screen>
405
406 <para>
407 Create a zone file with the following contents:
408 </para>
409
410<screen role="root"><userinput>cat &gt; /srv/named/etc/named/pz/127.0.0 &lt;&lt; "EOF"
411<literal>$TTL 3D
412@ IN SOA ns.local.domain. hostmaster.local.domain. (
413 1 ; Serial
414 8H ; Refresh
415 2H ; Retry
416 4W ; Expire
417 1D) ; Minimum TTL
418 NS ns.local.domain.
4191 PTR localhost.</literal>
420EOF</userinput></screen>
421
422 <para>
423 Create the <filename>root.hints</filename> file with the following
424 commands:
425 </para>
426
427 <note>
428 <para>
429 Caution must be used to ensure there are no leading spaces in
430 this file.
431 </para>
432 </note>
433
434<screen role="root"><userinput>cat &gt; /srv/named/etc/named/root.hints &lt;&lt; "EOF"
435<literal>. 6D IN NS A.ROOT-SERVERS.NET.
436. 6D IN NS B.ROOT-SERVERS.NET.
437. 6D IN NS C.ROOT-SERVERS.NET.
438. 6D IN NS D.ROOT-SERVERS.NET.
439. 6D IN NS E.ROOT-SERVERS.NET.
440. 6D IN NS F.ROOT-SERVERS.NET.
441. 6D IN NS G.ROOT-SERVERS.NET.
442. 6D IN NS H.ROOT-SERVERS.NET.
443. 6D IN NS I.ROOT-SERVERS.NET.
444. 6D IN NS J.ROOT-SERVERS.NET.
445. 6D IN NS K.ROOT-SERVERS.NET.
446. 6D IN NS L.ROOT-SERVERS.NET.
447. 6D IN NS M.ROOT-SERVERS.NET.
448A.ROOT-SERVERS.NET. 6D IN A 198.41.0.4
449A.ROOT-SERVERS.NET. 6D IN AAAA 2001:503:ba3e::2:30
450B.ROOT-SERVERS.NET. 6D IN A 199.9.14.201
451B.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:200::b
452C.ROOT-SERVERS.NET. 6D IN A 192.33.4.12
453C.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:2::c
454D.ROOT-SERVERS.NET. 6D IN A 199.7.91.13
455D.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:2d::d
456E.ROOT-SERVERS.NET. 6D IN A 192.203.230.10
457E.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:a8::e
458F.ROOT-SERVERS.NET. 6D IN A 192.5.5.241
459F.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:2f::f
460G.ROOT-SERVERS.NET. 6D IN A 192.112.36.4
461G.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:12::d0d
462H.ROOT-SERVERS.NET. 6D IN A 198.97.190.53
463H.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:1::53
464I.ROOT-SERVERS.NET. 6D IN A 192.36.148.17
465I.ROOT-SERVERS.NET. 6D IN AAAA 2001:7fe::53
466J.ROOT-SERVERS.NET. 6D IN A 192.58.128.30
467J.ROOT-SERVERS.NET. 6D IN AAAA 2001:503:c27::2:30
468K.ROOT-SERVERS.NET. 6D IN A 193.0.14.129
469K.ROOT-SERVERS.NET. 6D IN AAAA 2001:7fd::1
470L.ROOT-SERVERS.NET. 6D IN A 199.7.83.42
471L.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:9f::42
472M.ROOT-SERVERS.NET. 6D IN A 202.12.27.33
473M.ROOT-SERVERS.NET. 6D IN AAAA 2001:dc3::35</literal>
474EOF</userinput></screen>
475
476 <para>
477 The <filename>root.hints</filename> file is a list of root name
478 servers. This file must be updated periodically with the
479 <command>dig</command> utility. A current copy of root.hints can be
480 obtained from <ulink url="https://www.internic.net/domain/named.root"/>.
481 For details, consult the "BIND 9 Administrator Reference Manual".
482 </para>
483
484 <para>
485 Create or modify <filename>resolv.conf</filename> to use the new
486 name server with the following commands:
487 </para>
488
489 <note>
490 <para>
491 Replace <replaceable>&lt;yourdomain.com&gt;</replaceable> with
492 your own valid domain name.
493 </para>
494 </note>
495
496<screen role="root"><userinput>cp /etc/resolv.conf /etc/resolv.conf.bak &amp;&amp;
497cat &gt; /etc/resolv.conf &lt;&lt; "EOF"
498<literal>search <replaceable>&lt;yourdomain.com&gt;</replaceable>
499nameserver 127.0.0.1</literal>
500EOF</userinput></screen>
501
502 <para>
503 Set permissions on the <command>chroot</command> jail with the
504 following command:
505 </para>
506
507<screen role="root"><userinput>chown -R named:named /srv/named</userinput></screen>
508
509 </sect3>
510
511 <sect3 id="bind-init">
512 <title><phrase revision="sysv">Boot Script</phrase>
513 <phrase revision="systemd">Systemd Unit</phrase></title>
514
515 <para>
516 To start the DNS server at boot, install the
517 <phrase revision="sysv"><filename>/etc/rc.d/init.d/bind</filename> init
518 script</phrase>
519 <phrase revision="systemd"><filename>named.service</filename>
520 unit</phrase> included in the
521 <xref linkend="bootscripts" revision="sysv"/>
522 <xref linkend="systemd-units" revision="systemd"/> package:
523 </para>
524
525 <indexterm zone="bind bind-init">
526 <primary sortas="f-bind">bind</primary>
527 </indexterm>
528
529<screen role="root" revision="sysv"><userinput>make install-bind</userinput></screen>
530<screen role="root" revision="systemd"><userinput>make install-named</userinput></screen>
531
532 <para>
533 Now start <application>BIND</application> with the following command:
534 </para>
535
536<screen role="root" revision="sysv"><userinput>/etc/rc.d/init.d/bind start</userinput></screen>
537<screen role="root" revision="systemd"><userinput>systemctl start named</userinput></screen>
538
539 </sect3>
540
541 <sect3>
542 <title>Testing BIND</title>
543
544 <para>
545 Test out the new <application>BIND</application> 9 installation.
546 First query the local host address with <command>dig</command>:
547 </para>
548
549<screen><userinput>dig -x 127.0.0.1</userinput></screen>
550
551 <para>
552 Now try an external name lookup, taking note of the speed
553 difference in repeated lookups due to the caching. Run the
554 <command>dig</command> command twice on the same address:
555 </para>
556
557<screen><userinput>dig www.&lfs-domainname; &amp;&amp;
558dig www.&lfs-domainname;</userinput></screen>
559
560 <para>
561 You can see almost instantaneous results with the named caching
562 lookups. Consult the <application>BIND</application> Administrator
563 Reference Manual (see below) for further configuration options.
564 </para>
565
566 </sect3>
567
568 </sect2>
569
570 <sect2>
571 <title>Administrator Reference Manual (ARM)</title>
572
573 <para>
574 The ARM documentation (do not confuse with the processor architecture)
575 is included in the source package. The documentation is in .rst
576 format which means, it can be converted in human readable formats
577 if <xref linkend="sphinx"/> is installed.
578 </para>
579
580 <para>
581 When <application>BIND</application> is set up, especially when
582 to operate in a real live scenario, it is <emphasis>highly</emphasis>
583 recommended to consult the ARM documentation. ISC provides an
584 updated set of excellent documentation along with every release
585 so it can be easily viewed and/or downloaded &ndash; so there is
586 no excuse to not read the docs. The formats ISC provides are PDF,
587 epub and html at <ulink url="https://downloads.isc.org/isc/bind9/&bind-version;/doc/arm/"/>.
588 </para>
589 </sect2>
590
591 <sect2 role="content">
592 <title>Contents</title>
593
594 <segmentedlist>
595 <segtitle>Installed Programs</segtitle>
596 <segtitle>Installed Libraries</segtitle>
597 <segtitle>Installed Directories</segtitle>
598
599 <seglistitem>
600
601 <seg>arpaname, <!--bind9-config hardlinked to isc-config.sh,-->
602 ddns-confgen, delv, dig, dnssec-cds, dnssec-checkds, dnssec-coverage,
603 dnssec-dsfromkey, dnssec-importkey, dnssec-keyfromlabel, dnssec-keygen,
604 dnssec-keymgr, dnssec-revoke, dnssec-settime, dnssec-signzone,
605 dnssec-verify, host, mdig, named, named-checkconf,
606 named-checkzone, named-compilezone (symlink), named-journalprint,
607 named-nzd2nzf, named-rrchecker, nsec3hash, nslookup, nsupdate, rndc,
608 rndc-confgen, and tsig-keygen (symlink)</seg>
609
610 <seg>libbind9.so, libdns.so, libirs.so, libisc.so, libisccc.so,
611 libisccfg.so, and libns.so</seg>
612
613 <seg>/usr/include/{bind9,dns,dst,irs,isc,isccc,isccfg,ns,pk11,pkcs11},
614 /usr/lib/named, /usr/lib/python&python3-majorver;/site-packages/isc,
615 and /srv/named</seg>
616 </seglistitem>
617 </segmentedlist>
618
619 <variablelist>
620 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
621 <?dbfo list-presentation="list"?>
622 <?dbhtml list-presentation="table"?>
623
624 <varlistentry id="arpaname">
625 <term><command>arpaname</command></term>
626 <listitem>
627 <para>
628 translates IP addresses to the corresponding ARPA names
629 </para>
630 <indexterm zone="bind arpaname">
631 <primary sortas="b-arpaname">arpaname</primary>
632 </indexterm>
633 </listitem>
634 </varlistentry>
635
636<!-- Not present as of 9.16.5
637 <varlistentry id="bind9-config">
638 <term><command>bind9-config</command></term>
639 <listitem>
640 <para>
641 is hardlinked to <command>isc-config.sh</command>.
642 </para>
643 <indexterm zone="bind bind9-config">
644 <primary sortas="b-bind9-config">bind9-config</primary>
645 </indexterm>
646 </listitem>
647 </varlistentry>
648-->
649
650 <varlistentry id="ddns-confgen">
651 <term><command>ddns-confgen</command></term>
652 <listitem>
653 <para>
654 generates a key for use by nsupdate and named
655 </para>
656 <indexterm zone="bind ddns-confgen">
657 <primary sortas="b-ddns-confgen">ddns-confgen</primary>
658 </indexterm>
659 </listitem>
660 </varlistentry>
661
662 <varlistentry id="delv">
663 <term><command>delv</command></term>
664 <listitem>
665 <para>
666 is a new debugging tool that is a successor to
667 <command>dig</command>
668 </para>
669 <indexterm zone="bind delv">
670 <primary sortas="b-delv">delv</primary>
671 </indexterm>
672 </listitem>
673 </varlistentry>
674
675 <varlistentry id="dig">
676 <term><command>dig</command></term>
677 <listitem>
678 <para>
679 interrogates DNS servers
680 </para>
681 <indexterm zone="bind dig">
682 <primary sortas="b-dig">dig</primary>
683 </indexterm>
684 </listitem>
685 </varlistentry>
686
687 <varlistentry id="dnssec-cds">
688 <term><command>dnssec-cds</command></term>
689 <listitem>
690 <para>
691 changes DS records for a child zone based on
692 CDS/CDNSKEY
693 </para>
694 <indexterm zone="bind dnssec-cds">
695 <primary sortas="b-dnssec-cds">dnssec-cds</primary>
696 </indexterm>
697 </listitem>
698 </varlistentry>
699
700 <varlistentry id="dnssec-checkds">
701 <term><command>dnssec-checkds</command></term>
702 <listitem>
703 <para>
704 is a DNSSEC delegation consistency checking tool
705 </para>
706 <indexterm zone="bind dnssec-checkds">
707 <primary sortas="b-dnssec-checkds">dnssec-checkds</primary>
708 </indexterm>
709 </listitem>
710 </varlistentry>
711
712 <varlistentry id="dnssec-coverage">
713 <term><command>dnssec-coverage</command></term>
714 <listitem>
715 <para>
716 verifies that the DNSSEC keys for a given zone or a set of zones
717 have timing metadata set properly to ensure no future lapses
718 in DNSSEC coverage
719 </para>
720 <indexterm zone="bind dnssec-coverage">
721 <primary sortas="b-dnssec-coverage">dnssec-coverage</primary>
722 </indexterm>
723 </listitem>
724 </varlistentry>
725
726 <varlistentry id="dnssec-dsfromkey">
727 <term><command>dnssec-dsfromkey</command></term>
728 <listitem>
729 <para>
730 outputs the Delegation Signer (DS) resource record (RR)
731 </para>
732 <indexterm zone="bind dnssec-dsfromkey">
733 <primary sortas="b-dnssec-dsfromkey">dnssec-dsfromkey</primary>
734 </indexterm>
735 </listitem>
736 </varlistentry>
737
738 <varlistentry id="dnssec-importkey">
739 <term><command>dnssec-importkey</command></term>
740 <listitem>
741 <para>
742 reads a public DNSKEY record and generates a pair of
743 .key/.private files
744 </para>
745 <indexterm zone="bind dnssec-importkey">
746 <primary sortas="b-dnssec-importkey">dnssec-importkey</primary>
747 </indexterm>
748 </listitem>
749 </varlistentry>
750
751 <varlistentry id="dnssec-keyfromlabel">
752 <term><command>dnssec-keyfromlabel</command></term>
753 <listitem>
754 <para>
755 gets keys with the given label from a cryptography hardware device
756 and builds key files for DNSSEC
757 </para>
758 <indexterm zone="bind dnssec-keyfromlabel">
759 <primary sortas="b-dnssec-keyfromlabel">dnssec-keyfromlabel</primary>
760 </indexterm>
761 </listitem>
762 </varlistentry>
763
764 <varlistentry id="dnssec-keygen">
765 <term><command>dnssec-keygen</command></term>
766 <listitem>
767 <para>
768 is a key generator for secure DNS
769 </para>
770 <indexterm zone="bind dnssec-keygen">
771 <primary sortas="b-dnssec-keygen">dnssec-keygen</primary>
772 </indexterm>
773 </listitem>
774 </varlistentry>
775
776 <varlistentry id="dnssec-keymgr">
777 <term><command>dnssec-keymgr</command></term>
778 <listitem>
779 <para>
780 ensures correct DNSKEY coverage based on a defined policy
781 </para>
782 <indexterm zone="bind dnssec-keymgr">
783 <primary sortas="b-dnssec-keymgr">dnssec-keymgr</primary>
784 </indexterm>
785 </listitem>
786 </varlistentry>
787
788 <varlistentry id="dnssec-revoke">
789 <term><command>dnssec-revoke</command></term>
790 <listitem>
791 <para>
792 sets the REVOKED bit on a DNSSEC key
793 </para>
794 <indexterm zone="bind dnssec-revoke">
795 <primary sortas="b-dnssec-revoke">dnssec-revoke</primary>
796 </indexterm>
797 </listitem>
798 </varlistentry>
799
800 <varlistentry id="dnssec-settime">
801 <term><command>dnssec-settime</command></term>
802 <listitem>
803 <para>
804 sets the key timing metadata for a DNSSEC key
805 </para>
806 <indexterm zone="bind dnssec-settime">
807 <primary sortas="b-dnssec-settime">dnssec-settime</primary>
808 </indexterm>
809 </listitem>
810 </varlistentry>
811
812 <varlistentry id="dnssec-signzone">
813 <term><command>dnssec-signzone</command></term>
814 <listitem>
815 <para>
816 generates signed versions of zone files
817 </para>
818 <indexterm zone="bind dnssec-signzone">
819 <primary sortas="b-dnssec-signzone">dnssec-signzone</primary>
820 </indexterm>
821 </listitem>
822 </varlistentry>
823
824 <varlistentry id="dnssec-verify">
825 <term><command>dnssec-verify</command></term>
826 <listitem>
827 <para>
828 verifies that a zone is fully signed for each algorithm found
829 in the DNSKEY RRset for the zone, and that the NSEC / NSEC3
830 chains are complete
831 </para>
832 <indexterm zone="bind dnssec-verify">
833 <primary sortas="b-dnssec-verify">dnssec-verify</primary>
834 </indexterm>
835 </listitem>
836 </varlistentry>
837
838<!-- No longer present with 9.16.5
839 <varlistentry id="genrandom">
840 <term><command>genrandom</command></term>
841 <listitem>
842 <para>
843 generates a file containing random data.
844 </para>
845 <indexterm zone="bind genrandom">
846 <primary sortas="b-genrandom">genrandom</primary>
847 </indexterm>
848 </listitem>
849 </varlistentry>
850-->
851
852 <varlistentry id="host">
853 <term><command>host</command></term>
854 <listitem>
855 <para>
856 is a utility for DNS lookups
857 </para>
858 <indexterm zone="bind host">
859 <primary sortas="b-host">host</primary>
860 </indexterm>
861 </listitem>
862 </varlistentry>
863
864 <!-- No longer present with 9.16.5
865 <varlistentry id="isc-config.sh">
866 <term><command>isc-config.sh</command></term>
867 <listitem>
868 <para>
869 prints information related to the installed version of ISC BIND.
870 </para>
871 <indexterm zone="bind isc-config.sh">
872 <primary sortas="b-isc-config.sh">isc-config.sh</primary>
873 </indexterm>
874 </listitem>
875 </varlistentry>
876
877 <varlistentry id="isc-hmac-fixup">
878 <term><command>isc-hmac-fixup</command></term>
879 <listitem>
880 <para>
881 fixes HMAC keys generated by older versions of BIND.
882 </para>
883 <indexterm zone="bind isc-hmac-fixup">
884 <primary sortas="b-isc-hmac-fixup">isc-hmac-fixup</primary>
885 </indexterm>
886 </listitem>
887 </varlistentry>
888
889 <varlistentry id="lwresd">
890 <term><command>lwresd</command></term>
891 <listitem>
892 <para>
893 is a caching-only name server for local process use.
894 </para>
895 <indexterm zone="bind lwresd">
896 <primary sortas="b-lwresd">lwresd</primary>
897 </indexterm>
898 </listitem>
899 </varlistentry>
900-->
901
902 <varlistentry id="mdig">
903 <term><command>mdig</command></term>
904 <listitem>
905 <para>
906 is a version of dig that allows multiple queries at once
907 </para>
908 <indexterm zone="bind mdig">
909 <primary sortas="b-mdig">mdig</primary>
910 </indexterm>
911 </listitem>
912 </varlistentry>
913
914 <varlistentry id="named">
915 <term><command>named</command></term>
916 <listitem>
917 <para>
918 is the name server daemon
919 </para>
920 <indexterm zone="bind named">
921 <primary sortas="b-named">named</primary>
922 </indexterm>
923 </listitem>
924 </varlistentry>
925
926 <varlistentry id="named-checkconf">
927 <term><command>named-checkconf</command></term>
928 <listitem>
929 <para>
930 checks the syntax of <filename>named.conf</filename>
931 files
932 </para>
933 <indexterm zone="bind named-checkconf">
934 <primary sortas="b-named-checkconf">named-checkconf</primary>
935 </indexterm>
936 </listitem>
937 </varlistentry>
938
939 <varlistentry id="named-checkzone">
940 <term><command>named-checkzone</command></term>
941 <listitem>
942 <para>
943 checks zone file validity
944 </para>
945 <indexterm zone="bind named-checkzone">
946 <primary sortas="b-named-checkzone">named-checkzone</primary>
947 </indexterm>
948 </listitem>
949 </varlistentry>
950
951 <varlistentry id="named-compilezone">
952 <term><command>named-compilezone</command></term>
953 <listitem>
954 <para>
955 is similar to <command>named-checkzone</command>, but it always
956 dumps the zone contents to a specified file in a specified format
957 </para>
958 <indexterm zone="bind named-compilezone">
959 <primary sortas="b-named-compilezone">named-compilezone</primary>
960 </indexterm>
961 </listitem>
962 </varlistentry>
963
964 <varlistentry id="named-journalprint">
965 <term><command>named-journalprint</command></term>
966 <listitem>
967 <para>
968 prints the zone journal in human-readable form
969 </para>
970 <indexterm zone="bind named-journalprint">
971 <primary sortas="b-named-journalprint">named-journalprint</primary>
972 </indexterm>
973 </listitem>
974 </varlistentry>
975
976 <varlistentry id="named-rrchecker">
977 <term><command>named-rrchecker</command></term>
978 <listitem>
979 <para>
980 reads an individual DNS resource record from standard input and
981 checks if it is syntactically correct
982 </para>
983 <indexterm zone="bind named-rrchecker">
984 <primary sortas="b-named-rrchecker">named-rrchecker</primary>
985 </indexterm>
986 </listitem>
987 </varlistentry>
988
989 <varlistentry id="named-nzd2nzf">
990 <term><command>named-nzd2nzf</command></term>
991 <listitem>
992 <para>
993 converts an NZD database to NZF text format
994 </para>
995 <indexterm zone="bind named-nzd2nzf">
996 <primary sortas="b-named-nzd2nzf">named-nzd2nzf</primary>
997 </indexterm>
998 </listitem>
999 </varlistentry>
1000
1001 <varlistentry id="nsec3hash">
1002 <term><command>nsec3hash</command></term>
1003 <listitem>
1004 <para>
1005 generates an NSEC3 hash based on a set of NSEC3 parameters
1006 </para>
1007 <indexterm zone="bind nsec3hash">
1008 <primary sortas="b-nsec3hash">nsec3hash</primary>
1009 </indexterm>
1010 </listitem>
1011 </varlistentry>
1012
1013 <varlistentry id="nslookup">
1014 <term><command>nslookup</command></term>
1015 <listitem>
1016 <para>
1017 is a program used to query Internet domain nameservers
1018 </para>
1019 <indexterm zone="bind nslookup">
1020 <primary sortas="b-nslookup">nslookup</primary>
1021 </indexterm>
1022 </listitem>
1023 </varlistentry>
1024
1025 <varlistentry id="nsupdate">
1026 <term><command>nsupdate</command></term>
1027 <listitem>
1028 <para>
1029 is used to submit DNS update requests
1030 </para>
1031 <indexterm zone="bind nsupdate">
1032 <primary sortas="b-nsupdate">nsupdate</primary>
1033 </indexterm>
1034 </listitem>
1035 </varlistentry>
1036
1037 <varlistentry id="rndc">
1038 <term><command>rndc</command></term>
1039 <listitem>
1040 <para>
1041 controls the operation of <application>BIND</application>
1042 </para>
1043 <indexterm zone="bind rndc">
1044 <primary sortas="b-rndc">rndc</primary>
1045 </indexterm>
1046 </listitem>
1047 </varlistentry>
1048
1049 <varlistentry id="rndc-confgen">
1050 <term><command>rndc-confgen</command></term>
1051 <listitem>
1052 <para>
1053 generates <filename>rndc.conf</filename> files
1054 </para>
1055 <indexterm zone="bind rndc-confgen">
1056 <primary sortas="b-rndc-confgen">rndc-confgen</primary>
1057 </indexterm>
1058 </listitem>
1059 </varlistentry>
1060
1061 <varlistentry id="tsig-keygen">
1062 <term><command>tsig-keygen</command></term>
1063 <listitem>
1064 <para>
1065 is a symlink to <command>ddns-confgen</command>
1066 </para>
1067 <indexterm zone="bind tsig-keygen">
1068 <primary sortas="b-tsig-keygen">tsig-keygen</primary>
1069 </indexterm>
1070 </listitem>
1071 </varlistentry>
1072
1073 </variablelist>
1074
1075 </sect2>
1076
1077</sect1>
Note: See TracBrowser for help on using the repository browser.