source: server/major/bind.xml@ fb7ec07

elogind
Last change on this file since fb7ec07 was fb7ec07, checked in by DJ Lucas <dj@…>, 5 years ago

Merge to HEAD 21661.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/branches/BOOK-elogind@21662 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 32.9 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY bind-download-http " ">
8 <!ENTITY bind-download-ftp "ftp://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.gz">
9 <!ENTITY bind-md5sum "5293355175c995210e6af6c1a5a41a66">
10 <!ENTITY bind-size "6.0 MB">
11 <!ENTITY bind-buildsize "123 MB (24 MB installed; add 7 MB for tests)">
12 <!ENTITY bind-time "1.0 SBU (with parallelism=4; add 30+ minutes, processor independent, to run the complete test suite)">
13]>
14
15<sect1 id="bind" xreflabel="BIND-&bind-version;">
16 <?dbhtml filename="bind.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>BIND-&bind-version;</title>
24
25 <indexterm zone="bind">
26 <primary sortas="a-BIND">BIND</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to BIND</title>
31
32 <para>The <application>BIND</application> package provides a DNS server
33 and client utilities. If you are only interested in the utilities, refer
34 to the <xref linkend="bind-utils"/>.</para>
35
36 &lfs84_checked;
37
38 <bridgehead renderas="sect3">Package Information</bridgehead>
39 <itemizedlist spacing="compact">
40 <listitem>
41 <para>Download (HTTP): <ulink url="&bind-download-http;"/></para>
42 </listitem>
43 <listitem>
44 <para>Download (FTP): <ulink url="&bind-download-ftp;"/></para>
45 </listitem>
46 <listitem>
47 <para>Download MD5 sum: &bind-md5sum;</para>
48 </listitem>
49 <listitem>
50 <para>Download size: &bind-size;</para>
51 </listitem>
52 <listitem>
53 <para>Estimated disk space required: &bind-buildsize;</para>
54 </listitem>
55 <listitem>
56 <para>Estimated build time: &bind-time;</para>
57 </listitem>
58 </itemizedlist>
59<!--
60 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
61 <itemizedlist spacing='compact'>
62 <listitem>
63 <para>Optional patch (if net-tools is not installed):
64 <ulink
65 url="&patch-root;/bind-&bind-version;-use_iproute2-1.patch"/></para>
66 </listitem>
67 </itemizedlist>
68-->
69 <bridgehead renderas="sect3">BIND Dependencies</bridgehead>
70
71 <bridgehead renderas="sect4">Recommended</bridgehead>
72 <para role="optional">
73 <xref linkend="libcap-pam"/>
74 </para>
75
76 <bridgehead renderas="sect4">Optional</bridgehead>
77 <para role="optional">
78 <xref linkend="libidn2"/>,
79 <xref linkend="libxml2"/>,
80 <xref linkend="mitkrb"/>, and
81 <ulink url='https://github.com/cjheath/geoip'>geoip</ulink>
82 </para>
83
84 <bridgehead renderas="sect4">Optional database backends</bridgehead>
85 <para role="optional">
86 <xref linkend="db"/>,
87 <xref linkend="mariadb"/> or <ulink url="http://www.mysql.com/">MySQL</ulink>,
88 <xref linkend="openldap"/>,
89 <xref linkend="postgresql"/>, and
90 <xref linkend="unixodbc"/>
91 </para>
92
93 <bridgehead renderas="sect4">Optional (to run the test suite)</bridgehead>
94 <para role="optional">
95 <xref linkend="perl-net-dns"/>
96<!-- and
97 <xref linkend="net-tools"/> (you may omit net-tools by using the optional
98 patch to utilize iproute2, but the IPv6 tests will fail)
99-->
100 </para>
101
102 <bridgehead renderas="sect4">Optional (to rebuild the documentation)</bridgehead>
103 <para role="optional">
104 <xref linkend="doxygen"/>,
105 <xref linkend="libxslt"/>, and
106 <xref linkend="texlive"/> (or <xref linkend="tl-installer"/>)
107 </para>
108
109 <para condition="html" role="usernotes">User Notes:
110 <ulink url="&blfs-wiki;/bind"/></para>
111
112 </sect2>
113
114 <sect2 role="installation">
115 <title>Installation of BIND</title>
116<!--
117 <para>If you have chosen not to install net-tools, apply the iproute2
118 patch with the following command:</para>
119
120<screen><userinput>patch -Np1 -i ../bind-&bind-version;-use_iproute2-1.patch</userinput></screen>
121-->
122
123 <para>To ensure <application>BIND</application> will build dnssec-keymgr,
124 install a python module as the <systemitem
125 class="username">root</systemitem> user:</para>
126
127<screen><userinput>pip3 install ply</userinput></screen>
128
129 <para>Install <application>BIND</application> by running the
130 following commands:</para>
131
132<screen><userinput>./configure --prefix=/usr \
133 --sysconfdir=/etc \
134 --localstatedir=/var \
135 --mandir=/usr/share/man \
136 --with-libtool \
137 --disable-static &amp;&amp;
138make</userinput></screen>
139
140 <para>Issue the following commands to run the complete suite of tests.
141 First, as the <systemitem class="username">root</systemitem> user, set up
142 some test interfaces:</para>
143
144 <note><para>If IPv6 is not enabled in the kernel, there will be several
145 error messages: "RTNETLINK answers: Operation not permitted". These
146 messages do not affect the tests.</para></note>
147
148<screen role="root"><userinput>bin/tests/system/ifconfig.sh up</userinput></screen>
149
150 <para>The test suite may indicate some skipped tests depending on
151 what configuration options are used. Some tests are marked <quote>UNTESTED
152 </quote> if <xref linkend="perl-net-dns"/> is not installed.
153 To run the tests, as an unprivileged user, execute:</para>
154
155<screen><userinput>make -k check</userinput></screen>
156
157 <para>Again as <systemitem class="username">root</systemitem>, clean up the
158 test interfaces:</para>
159
160<screen role="root"><userinput>bin/tests/system/ifconfig.sh down</userinput></screen>
161
162 <para>Finally, install the package as the <systemitem
163 class="username">root</systemitem> user:</para>
164
165<screen role="root"><userinput>make install &amp;&amp;
166
167install -v -m755 -d /usr/share/doc/bind-&bind-version;/arm &amp;&amp;
168install -v -m644 doc/arm/*.html \
169 /usr/share/doc/bind-&bind-version;/arm</userinput></screen>
170 </sect2>
171
172<!-- Documentation is an issue - make doc fails - some docbook problem
173install -v -m644 doc/misc/{dnssec,ipv6,migrat*,options,rfc-compliance,roadmap,sdb} \
174 /usr/share/doc/bind-&bind-version;/misc</userinput></screen>
175-->
176
177 <sect2 role="commands">
178 <title>Command Explanations</title>
179
180 <para><parameter>--sysconfdir=/etc</parameter>: This parameter forces
181 <application>BIND</application> to look for configuration
182 files in <filename class='directory'>/etc</filename> instead of
183 <filename class='directory'>/usr/etc</filename>.</para>
184
185 <!-- No longer available as of 9.14.2
186 <para><parameter>- -enable-threads</parameter>: This parameter enables
187 multi-threading capability.</para>
188 -->
189
190 <para><parameter>--with-libtool</parameter>: This parameter forces the
191 building of dynamic libraries and links the installed binaries to these
192 libraries.</para>
193
194 <para><parameter>--with-libidn2</parameter>: This parameter enables
195 the IDNA2008 (Internationalized Domain Names in Applications)
196 support.</para>
197
198<!-- no longer available
199 <para><parameter>- -with-randomdev=/dev/urandom</parameter>: This parameter
200 specifes a non-blocking random device for use with digital signatures.</para>
201-->
202 <para><option>--enable-fetchlimit</option>: Use this option if you want
203 to be able to limit the rate of recursive client queries. This may be
204 useful on servers which receive a large number of queries.</para>
205
206 <para><option>--disable-linux-caps</option>: BIND can also be built without
207 capability support by using this option, at the cost of some loss of
208 security.</para>
209
210 <para><option>--with-dlz-{mysql,bdb,filesystem,ldap,odbc,stub}</option>: Use
211 one (or more) of those options to add Dynamically Loadable Zones support.
212 For more information refer to
213 <ulink url="http://bind-dlz.sourceforge.net/">bind-dlz.sourceforge.net</ulink>.
214 </para>
215
216 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
217 href="../../xincludes/static-libraries.xml"/>
218
219 <para><command>cd doc; install ...</command>: These commands install
220 additional package documentation. Omit any or all of these commands if
221 desired.</para>
222 </sect2>
223
224 <sect2 role="configuration">
225 <title>Configuring BIND</title>
226
227 <sect3 id="bind-config">
228 <title>Config files</title>
229
230 <para><filename>named.conf</filename>,
231 <filename>root.hints</filename>,
232 <filename>127.0.0</filename>,
233 <filename>rndc.conf</filename> and
234 <filename>resolv.conf</filename></para>
235
236 <indexterm zone="bind bind-config">
237 <primary sortas="e-etc-named.conf">/etc/named.conf</primary>
238 </indexterm>
239
240 <indexterm zone="bind bind-config">
241 <primary sortas="e-etc-rndc.conf">/etc/rndc.conf</primary>
242 </indexterm>
243
244 <indexterm zone="bind bind-config">
245 <primary sortas="e-etc-resolv.conf">/etc/resolv.conf</primary>
246 </indexterm>
247
248 <indexterm zone="bind bind-config">
249 <primary
250 sortas="e-etc-namedb-root.hints">/etc/namedb/root.hints</primary>
251 </indexterm>
252
253 <indexterm zone="bind bind-config">
254 <primary
255 sortas="e-etc-namedb-pz-127.0.0.0">/etc/namedb/pz/127.0.0.0</primary>
256 </indexterm>
257 </sect3>
258
259 <sect3>
260 <title>Configuration Information</title>
261
262 <para><application>BIND</application> will be configured to run in a
263 <command>chroot</command> jail as an unprivileged user (<systemitem
264 class="username">named</systemitem>). This configuration is more secure
265 in that a DNS compromise can only affect a few files in the <systemitem
266 class="username">named</systemitem> user's <envar>HOME</envar>
267 directory.</para>
268
269 <para>Create the unprivileged user and group <systemitem
270 class="username">named</systemitem>:</para>
271
272<screen role="root"><userinput>groupadd -g 20 named &amp;&amp;
273useradd -c "BIND Owner" -g named -s /bin/false -u 20 named &amp;&amp;
274install -d -m770 -o named -g named /srv/named</userinput></screen>
275
276 <para>Set up some files, directories and devices needed by
277 <application>BIND</application>:</para>
278
279<screen role="root"><userinput>mkdir -p /srv/named &amp;&amp;
280cd /srv/named &amp;&amp;
281mkdir -p dev etc/namedb/{slave,pz} usr/lib/engines var/run/named &amp;&amp;
282mknod /srv/named/dev/null c 1 3 &amp;&amp;
283mknod /srv/named/dev/urandom c 1 9 &amp;&amp;
284chmod 666 /srv/named/dev/{null,urandom} &amp;&amp;
285cp /etc/localtime etc &amp;&amp;
286touch /srv/named/managed-keys.bind</userinput></screen>
287
288 <para>The <filename>rndc.conf</filename> file contains information for
289 controlling <command>named</command> operations with the
290 <command>rndc</command> utility. Generate a key for use in the <filename>named.conf</filename> and <filename>rdnc.conf</filename> with the
291 <command>rndc-confgen</command> command:</para>
292
293<screen role="root"><userinput>rndc-confgen -r /dev/urandom -b 512 > /etc/rndc.conf &amp;&amp;
294sed '/conf/d;/^#/!d;s:^# ::' /etc/rndc.conf > /srv/named/etc/named.conf</userinput></screen>
295
296 <para>Complete the <filename>named.conf</filename> file from which
297 <command>named</command> will read the location of zone files, root
298 name servers and secure DNS keys:</para>
299
300<screen role="root"><?dbfo keep-together="auto"?><userinput>cat &gt;&gt; /srv/named/etc/named.conf &lt;&lt; "EOF"
301<literal>options {
302 directory "/etc/namedb";
303 pid-file "/var/run/named.pid";
304 statistics-file "/var/run/named.stats";
305
306};
307zone "." {
308 type hint;
309 file "root.hints";
310};
311zone "0.0.127.in-addr.arpa" {
312 type master;
313 file "pz/127.0.0";
314};
315
316// Bind 9 now logs by default through syslog (except debug).
317// These are the default logging rules.
318
319logging {
320 category default { default_syslog; default_debug; };
321 category unmatched { null; };
322
323 channel default_syslog {
324 syslog daemon; // send to syslog's daemon
325 // facility
326 severity info; // only send priority info
327 // and higher
328 };
329
330 channel default_debug {
331 file "named.run"; // write to named.run in
332 // the working directory
333 // Note: stderr is used instead
334 // of "named.run"
335 // if the server is started
336 // with the '-f' option.
337 severity dynamic; // log at the server's
338 // current debug level
339 };
340
341 channel default_stderr {
342 stderr; // writes to stderr
343 severity info; // only send priority info
344 // and higher
345 };
346
347 channel null {
348 null; // toss anything sent to
349 // this channel
350 };
351};</literal>
352EOF</userinput></screen>
353
354 <para>Create a zone file with the following contents:</para>
355
356<screen role="root"><userinput>cat &gt; /srv/named/etc/namedb/pz/127.0.0 &lt;&lt; "EOF"
357<literal>$TTL 3D
358@ IN SOA ns.local.domain. hostmaster.local.domain. (
359 1 ; Serial
360 8H ; Refresh
361 2H ; Retry
362 4W ; Expire
363 1D) ; Minimum TTL
364 NS ns.local.domain.
3651 PTR localhost.</literal>
366EOF</userinput></screen>
367
368 <para>Create the <filename>root.hints</filename> file with the following
369 commands:</para>
370
371 <note>
372 <para>Caution must be used to ensure there are no leading spaces in
373 this file.</para>
374 </note>
375
376<screen role="root"><userinput>cat &gt; /srv/named/etc/namedb/root.hints &lt;&lt; "EOF"
377<literal>. 6D IN NS A.ROOT-SERVERS.NET.
378. 6D IN NS B.ROOT-SERVERS.NET.
379. 6D IN NS C.ROOT-SERVERS.NET.
380. 6D IN NS D.ROOT-SERVERS.NET.
381. 6D IN NS E.ROOT-SERVERS.NET.
382. 6D IN NS F.ROOT-SERVERS.NET.
383. 6D IN NS G.ROOT-SERVERS.NET.
384. 6D IN NS H.ROOT-SERVERS.NET.
385. 6D IN NS I.ROOT-SERVERS.NET.
386. 6D IN NS J.ROOT-SERVERS.NET.
387. 6D IN NS K.ROOT-SERVERS.NET.
388. 6D IN NS L.ROOT-SERVERS.NET.
389. 6D IN NS M.ROOT-SERVERS.NET.
390A.ROOT-SERVERS.NET. 6D IN A 198.41.0.4
391A.ROOT-SERVERS.NET. 6D IN AAAA 2001:503:ba3e::2:30
392B.ROOT-SERVERS.NET. 6D IN A 192.228.79.201
393B.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:200::b
394C.ROOT-SERVERS.NET. 6D IN A 192.33.4.12
395C.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:2::c
396D.ROOT-SERVERS.NET. 6D IN A 199.7.91.13
397D.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:2d::d
398E.ROOT-SERVERS.NET. 6D IN A 192.203.230.10
399E.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:a8::e
400F.ROOT-SERVERS.NET. 6D IN A 192.5.5.241
401F.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:2f::f
402G.ROOT-SERVERS.NET. 6D IN A 192.112.36.4
403G.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:12::d0d
404H.ROOT-SERVERS.NET. 6D IN A 198.97.190.53
405H.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:1::53
406I.ROOT-SERVERS.NET. 6D IN A 192.36.148.17
407I.ROOT-SERVERS.NET. 6D IN AAAA 2001:7fe::53
408J.ROOT-SERVERS.NET. 6D IN A 192.58.128.30
409J.ROOT-SERVERS.NET. 6D IN AAAA 2001:503:c27::2:30
410K.ROOT-SERVERS.NET. 6D IN A 193.0.14.129
411K.ROOT-SERVERS.NET. 6D IN AAAA 2001:7fd::1
412L.ROOT-SERVERS.NET. 6D IN A 199.7.83.42
413L.ROOT-SERVERS.NET. 6D IN AAAA 2001:500:9f::42
414M.ROOT-SERVERS.NET. 6D IN A 202.12.27.33
415M.ROOT-SERVERS.NET. 6D IN AAAA 2001:dc3::35</literal>
416EOF</userinput></screen>
417
418 <para>The <filename>root.hints</filename> file is a list of root name
419 servers. This file must be updated periodically with the
420 <command>dig</command> utility. A current copy of root.hints can be
421 obtained from <ulink url="ftp://rs.internic.net/domain/named.root" />.
422 For details, consult the "BIND 9 Administrator Reference Manual", included
423 in every source archive of BIND 9 distributed by ISC, in HTML and PDF
424 formats, also available at
425 <ulink url="ftp://ftp.isc.org/isc/bind9/cur/&bind-minor-version;/doc/arm/Bv9ARM.html">
426 BIND 9 Administrator Reference Manual</ulink>.</para>
427
428 <para>Create or modify <filename>resolv.conf</filename> to use the new
429 name server with the following commands:</para>
430
431 <note>
432 <para>Replace <replaceable>&lt;yourdomain.com&gt;</replaceable> with
433 your own valid domain name.</para>
434 </note>
435
436<screen role="root"><userinput>cp /etc/resolv.conf /etc/resolv.conf.bak &amp;&amp;
437cat &gt; /etc/resolv.conf &lt;&lt; "EOF"
438<literal>search <replaceable>&lt;yourdomain.com&gt;</replaceable>
439nameserver 127.0.0.1</literal>
440EOF</userinput></screen>
441
442 <para>Set permissions on the <command>chroot</command> jail with the
443 following command:</para>
444
445<screen role="root"><userinput>chown -R named:named /srv/named</userinput></screen>
446
447 </sect3>
448
449 <sect3 id="bind-init">
450 <title><phrase revision="sysv">Boot Script</phrase>
451 <phrase revision="systemd">Systemd Unit</phrase></title>
452
453 <para>To start the DNS server at boot, install the
454 <phrase revision="sysv"><filename>/etc/rc.d/init.d/bind</filename> init
455 script</phrase>
456 <phrase revision="systemd"><filename>named.service</filename>
457 unit</phrase> included in the
458 <xref linkend="bootscripts" revision="sysv"/>
459 <xref linkend="systemd-units" revision="systemd"/> package.</para>
460
461 <indexterm zone="bind bind-init">
462 <primary sortas="f-bind">bind</primary>
463 </indexterm>
464
465<screen role="root" revision="sysv"><userinput>make install-bind</userinput></screen>
466<screen role="root" revision="systemd"><userinput>make install-named</userinput></screen>
467
468 <para>Now start <application>BIND</application> with
469 the following command:</para>
470
471<screen role="root" revision="sysv"><userinput>/etc/rc.d/init.d/bind start</userinput></screen>
472<screen role="root" revision="systemd"><userinput>systemctl start named</userinput></screen>
473
474 </sect3>
475
476 <sect3>
477 <title>Testing BIND</title>
478
479 <para>Test out the new <application>BIND</application> 9 installation.
480 First query the local host address with <command>dig</command>:</para>
481
482<screen><userinput>dig -x 127.0.0.1</userinput></screen>
483
484 <para>Now try an external name lookup, taking note of the speed
485 difference in repeated lookups due to the caching. Run the
486 <command>dig</command> command twice on the same address:</para>
487
488<screen><userinput>dig www.&lfs-domainname; &amp;&amp;
489dig www.&lfs-domainname;</userinput></screen>
490
491 <para>You can see almost instantaneous results with the named caching
492 lookups. Consult the <application>BIND</application> Administrator
493 Reference Manual located at <filename>doc/arm/Bv9ARM.html</filename>
494 in the package source tree, for further configuration options.</para>
495
496 </sect3>
497
498 </sect2>
499
500 <sect2 role="content">
501 <title>Contents</title>
502
503 <segmentedlist>
504 <segtitle>Installed Programs</segtitle>
505 <segtitle>Installed Libraries</segtitle>
506 <segtitle>Installed Directories</segtitle>
507
508 <seglistitem>
509
510 <seg>arpaname, bind9-config hardlinked to isc-config.sh, ddns-confgen,
511 delv, dig, dnssec-dsfromkey,
512 dnssec-importkey, dnssec-keyfromlabel, dnssec-keygen, dnssec-revoke,
513 dnssec-settime, dnssec-signzone, dnssec-verify, genrandom, host,
514 isc-hmac-fixup, lwresd hardlinked to named, named-checkconf,
515 named-checkzone, named-compilezone (symlink), named-journalprint,
516 named-rrchecker, nsec3hash, nslookup, nsupdate, rndc, rndc-confgen,
517 and tsig-keygen (symlink)</seg>
518
519 <seg>libbind9.so, libdns.so, libirs.so, libisc.so, libisccc.so,
520 libisccfg.so, and liblwres.so</seg>
521
522 <seg>/usr/include/{bind9,dns,dst,irs,isc,isccc,isccfg,lwres,pk11,pkcs11},
523 /usr/share/doc/bind-&bind-version; and /srv/named</seg>
524 </seglistitem>
525 </segmentedlist>
526
527 <variablelist>
528 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
529 <?dbfo list-presentation="list"?>
530 <?dbhtml list-presentation="table"?>
531
532 <varlistentry id="arpaname">
533 <term><command>arpaname</command></term>
534 <listitem>
535 <para>
536 translates IP addresses to the corresponding ARPA names.
537 </para>
538 <indexterm zone="bind arpaname">
539 <primary sortas="b-arpaname">arpaname</primary>
540 </indexterm>
541 </listitem>
542 </varlistentry>
543
544 <varlistentry id="bind9-config">
545 <term><command>bind9-config</command></term>
546 <listitem>
547 <para>
548 is hardlinked to <command>isc-config.sh</command>.
549 </para>
550 <indexterm zone="bind bind9-config">
551 <primary sortas="b-bind9-config">bind9-config</primary>
552 </indexterm>
553 </listitem>
554 </varlistentry>
555
556 <varlistentry id="ddns-confgen">
557 <term><command>ddns-confgen</command></term>
558 <listitem>
559 <para>
560 generates a key for use by nsupdate and named.
561 </para>
562 <indexterm zone="bind ddns-confgen">
563 <primary sortas="b-ddns-confgen">ddns-confgen</primary>
564 </indexterm>
565 </listitem>
566 </varlistentry>
567
568 <varlistentry id="delv">
569 <term><command>delv</command></term>
570 <listitem>
571 <para>
572 is a new debugging tool that is a successor to
573 <command>dig</command>.
574 </para>
575 <indexterm zone="bind delv">
576 <primary sortas="b-delv">delv</primary>
577 </indexterm>
578 </listitem>
579 </varlistentry>
580
581 <varlistentry id="dig">
582 <term><command>dig</command></term>
583 <listitem>
584 <para>interrogates DNS servers.</para>
585 <indexterm zone="bind dig">
586 <primary sortas="b-dig">dig</primary>
587 </indexterm>
588 </listitem>
589 </varlistentry>
590<!--
591 <varlistentry id="dnssec-checkds">
592 <term><command>dnssec-checkds</command></term>
593 <listitem>
594 <para>
595 is a DNSSEC delegation consistency checking tool.
596 </para>
597 <indexterm zone="bind dnssec-checkds">
598 <primary sortas="b-dnssec-checkds">dnssec-checkds</primary>
599 </indexterm>
600 </listitem>
601 </varlistentry>
602
603 <varlistentry id="dnssec-coverage">
604 <term><command>dnssec-coverage</command></term>
605 <listitem>
606 <para>
607 verifies that the DNSSEC keys for a given zone or a set of zones
608 have timing metadata set properly to ensure no future lapses
609 in DNSSEC coverage.
610 </para>
611 <indexterm zone="bind dnssec-coverage">
612 <primary sortas="b-dnssec-coverage">dnssec-coverage</primary>
613 </indexterm>
614 </listitem>
615 </varlistentry>-->
616
617 <varlistentry id="dnssec-dsfromkey">
618 <term><command>dnssec-dsfromkey</command></term>
619 <listitem>
620 <para>
621 outputs the Delegation Signer (DS) resource record (RR).
622 </para>
623 <indexterm zone="bind dnssec-dsfromkey">
624 <primary sortas="b-dnssec-dsfromkey">dnssec-dsfromkey</primary>
625 </indexterm>
626 </listitem>
627 </varlistentry>
628
629 <varlistentry id="dnssec-importkey">
630 <term><command>dnssec-importkey</command></term>
631 <listitem>
632 <para>
633 reads a public DNSKEY record and generates a pair of
634 .key/.private files.
635 </para>
636 <indexterm zone="bind dnssec-importkey">
637 <primary sortas="b-dnssec-importkey">dnssec-importkey</primary>
638 </indexterm>
639 </listitem>
640 </varlistentry>
641
642 <varlistentry id="dnssec-keyfromlabel">
643 <term><command>dnssec-keyfromlabel</command></term>
644 <listitem>
645 <para>
646 gets keys with the given label from a crypto hardware and builds
647 key files for DNSSEC.
648 </para>
649 <indexterm zone="bind dnssec-keyfromlabel">
650 <primary sortas="b-dnssec-keyfromlabel">dnssec-keyfromlabel</primary>
651 </indexterm>
652 </listitem>
653 </varlistentry>
654
655 <varlistentry id="dnssec-keygen">
656 <term><command>dnssec-keygen</command></term>
657 <listitem>
658 <para>is a key generator for secure DNS.</para>
659 <indexterm zone="bind dnssec-keygen">
660 <primary sortas="b-dnssec-keygen">dnssec-keygen</primary>
661 </indexterm>
662 </listitem>
663 </varlistentry>
664
665 <varlistentry id="dnssec-revoke">
666 <term><command>dnssec-revoke</command></term>
667 <listitem>
668 <para>
669 sets the REVOKED bit on a DNSSEC key.
670 </para>
671 <indexterm zone="bind dnssec-revoke">
672 <primary sortas="b-dnssec-revoke">dnssec-revoke</primary>
673 </indexterm>
674 </listitem>
675 </varlistentry>
676
677 <varlistentry id="dnssec-settime">
678 <term><command>dnssec-settime</command></term>
679 <listitem>
680 <para>
681 sets the key timing metadata for a DNSSEC key.
682 </para>
683 <indexterm zone="bind dnssec-settime">
684 <primary sortas="b-dnssec-settime">dnssec-settime</primary>
685 </indexterm>
686 </listitem>
687 </varlistentry>
688
689 <varlistentry id="dnssec-signzone">
690 <term><command>dnssec-signzone</command></term>
691 <listitem>
692 <para>generates signed versions of zone files.</para>
693 <indexterm zone="bind dnssec-signzone">
694 <primary sortas="b-dnssec-signzone">dnssec-signzone</primary>
695 </indexterm>
696 </listitem>
697 </varlistentry>
698
699 <varlistentry id="dnssec-verify">
700 <term><command>dnssec-verify</command></term>
701 <listitem>
702 <para>
703 verifies that a zone is fully signed for each algorithm found
704 in the DNSKEY RRset for the zone, and that the NSEC / NSEC3
705 chains are complete.
706 </para>
707 <indexterm zone="bind dnssec-verify">
708 <primary sortas="b-dnssec-verify">dnssec-verify</primary>
709 </indexterm>
710 </listitem>
711 </varlistentry>
712
713 <varlistentry id="genrandom">
714 <term><command>genrandom</command></term>
715 <listitem>
716 <para>
717 generates a file containing random data.
718 </para>
719 <indexterm zone="bind genrandom">
720 <primary sortas="b-genrandom">genrandom</primary>
721 </indexterm>
722 </listitem>
723 </varlistentry>
724
725 <varlistentry id="host">
726 <term><command>host</command></term>
727 <listitem>
728 <para>is a utility for DNS lookups.</para>
729 <indexterm zone="bind host">
730 <primary sortas="b-host">host</primary>
731 </indexterm>
732 </listitem>
733 </varlistentry>
734
735 <varlistentry id="isc-config.sh">
736 <term><command>isc-config.sh</command></term>
737 <listitem>
738 <para>
739 prints information related to the installed version of ISC BIND.
740 </para>
741 <indexterm zone="bind isc-config.sh">
742 <primary sortas="b-isc-config.sh">isc-config.sh</primary>
743 </indexterm>
744 </listitem>
745 </varlistentry>
746
747 <varlistentry id="isc-hmac-fixup">
748 <term><command>isc-hmac-fixup</command></term>
749 <listitem>
750 <para>
751 fixes HMAC keys generated by older versions of BIND.
752 </para>
753 <indexterm zone="bind isc-hmac-fixup">
754 <primary sortas="b-isc-hmac-fixup">isc-hmac-fixup</primary>
755 </indexterm>
756 </listitem>
757 </varlistentry>
758
759 <varlistentry id="lwresd">
760 <term><command>lwresd</command></term>
761 <listitem>
762 <para>is a caching-only name server for local process use.</para>
763 <indexterm zone="bind lwresd">
764 <primary sortas="b-lwresd">lwresd</primary>
765 </indexterm>
766 </listitem>
767 </varlistentry>
768
769 <varlistentry id="named">
770 <term><command>named</command></term>
771 <listitem>
772 <para>is the name server daemon.</para>
773 <indexterm zone="bind named">
774 <primary sortas="b-named">named</primary>
775 </indexterm>
776 </listitem>
777 </varlistentry>
778
779 <varlistentry id="named-checkconf">
780 <term><command>named-checkconf</command></term>
781 <listitem>
782 <para>checks the syntax of <filename>named.conf</filename>
783 files.</para>
784 <indexterm zone="bind named-checkconf">
785 <primary sortas="b-named-checkconf">named-checkconf</primary>
786 </indexterm>
787 </listitem>
788 </varlistentry>
789
790 <varlistentry id="named-checkzone">
791 <term><command>named-checkzone</command></term>
792 <listitem>
793 <para>checks zone file validity.</para>
794 <indexterm zone="bind named-checkzone">
795 <primary sortas="b-named-checkzone">named-checkzone</primary>
796 </indexterm>
797 </listitem>
798 </varlistentry>
799
800 <varlistentry id="named-compilezone">
801 <term><command>named-compilezone</command></term>
802 <listitem>
803 <para>
804 is similar to <command>named-checkzone</command>, but it always
805 dumps the zone contents to a specified file in a specified format.
806 </para>
807 <indexterm zone="bind named-compilezone">
808 <primary sortas="b-named-compilezone">named-compilezone</primary>
809 </indexterm>
810 </listitem>
811 </varlistentry>
812
813 <varlistentry id="named-journalprint">
814 <term><command>named-journalprint</command></term>
815 <listitem>
816 <para>
817 prints the zone journal in human-readable form.
818 </para>
819 <indexterm zone="bind named-journalprint">
820 <primary sortas="b-named-journalprint">named-journalprint</primary>
821 </indexterm>
822 </listitem>
823 </varlistentry>
824
825 <varlistentry id="named-rrchecker">
826 <term><command>named-rrchecker</command></term>
827 <listitem>
828 <para>
829 reads an individual DNS resource record from standard input and
830 checks if it is syntactically correct.
831 </para>
832 <indexterm zone="bind named-rrchecker">
833 <primary sortas="b-named-rrchecker">named-rrchecker</primary>
834 </indexterm>
835 </listitem>
836 </varlistentry>
837
838 <varlistentry id="nsec3hash">
839 <term><command>nsec3hash</command></term>
840 <listitem>
841 <para>
842 generates an NSEC3 hash based on a set of NSEC3 parameters.
843 </para>
844 <indexterm zone="bind nsec3hash">
845 <primary sortas="b-nsec3hash">nsec3hash</primary>
846 </indexterm>
847 </listitem>
848 </varlistentry>
849
850 <varlistentry id="nslookup">
851 <term><command>nslookup</command></term>
852 <listitem>
853 <para>is a program used to query Internet domain nameservers.</para>
854 <indexterm zone="bind nslookup">
855 <primary sortas="b-nslookup">nslookup</primary>
856 </indexterm>
857 </listitem>
858 </varlistentry>
859
860 <varlistentry id="nsupdate">
861 <term><command>nsupdate</command></term>
862 <listitem>
863 <para>is used to submit DNS update requests.</para>
864 <indexterm zone="bind nsupdate">
865 <primary sortas="b-nsupdate">nsupdate</primary>
866 </indexterm>
867 </listitem>
868 </varlistentry>
869
870 <varlistentry id="rndc">
871 <term><command>rndc</command></term>
872 <listitem>
873 <para>controls the operation of <application>BIND</application>.</para>
874 <indexterm zone="bind rndc">
875 <primary sortas="b-rndc">rndc</primary>
876 </indexterm>
877 </listitem>
878 </varlistentry>
879
880 <varlistentry id="rndc-confgen">
881 <term><command>rndc-confgen</command></term>
882 <listitem>
883 <para>generates <filename>rndc.conf</filename> files.</para>
884 <indexterm zone="bind rndc-confgen">
885 <primary sortas="b-rndc-confgen">rndc-confgen</primary>
886 </indexterm>
887 </listitem>
888 </varlistentry>
889
890 <varlistentry id="tsig-keygen">
891 <term><command>tsig-keygen</command></term>
892 <listitem>
893 <para>
894 is a symlink to <command>ddns-confgen</command>.
895 </para>
896 <indexterm zone="bind tsig-keygen">
897 <primary sortas="b-tsig-keygen">tsig-keygen</primary>
898 </indexterm>
899 </listitem>
900 </varlistentry>
901
902 </variablelist>
903
904 </sect2>
905
906</sect1>
Note: See TracBrowser for help on using the repository browser.