Changeset 634cf991 for server/major


Ignore:
Timestamp:
02/18/2012 06:41:27 PM (12 years ago)
Author:
Andrew Benton <andy@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
c81750a
Parents:
bd5c017
Message:

bind tweaks

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@9463 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:
1 edited

Legend:

Unmodified
Added
Removed

  • server/major/bind.xml

    rbd5c017 r634cf991  
    44  <!ENTITY % general-entities SYSTEM "../../general.ent">
    55  %general-entities;
    6   <!ENTITY bind-download-http "http://gd.tuwien.ac.at/infosys/servers/isc/bind9/&bind-version;/bind-&bind-version;.tar.gz">
    7   <!ENTITY bind-download-ftp "ftp://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.gz">
     6  <!ENTITY bind-download-http
     7  "http://gd.tuwien.ac.at/infosys/servers/isc/bind9/&bind-version;/bind-&bind-version;.tar.gz">
     8  <!ENTITY bind-download-ftp
     9  "ftp://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.gz">
    810  <!ENTITY bind-md5sum "afa41f8203d50bedad65071f9b6f96d7">
    911  <!ENTITY bind-size "8.1 MB">
    1012  <!ENTITY bind-buildsize "260 MB">
    11   <!ENTITY bind-time "1.7 SBU (additional 13 minutes, processor independent, to run the complete test suite)">
     13  <!ENTITY bind-time "1.7 SBU (additional 13 minutes, processor independent, to
     14  run the complete test suite)">
    1215]>
    1316
    … …  
    6164      <listitem>
    6265        <para>Optional patch (if net-tools is not installed):
    63         <ulink url="&patch-root;/bind-&bind-version;-use_iproute2-1.patch"/></para>
     66        <ulink
     67        url="&patch-root;/bind-&bind-version;-use_iproute2-1.patch"/></para>
    6468      </listitem>
    6569    </itemizedlist>
    … …  
    7579    patch to utilize iproute2, but the IPv6 tests will fail)</para>
    7680
    77     <bridgehead renderas="sect4">Optional (to rebuild documentation)</bridgehead>
     81    <bridgehead renderas="sect4">Optional (to rebuild the
     82    documentation)</bridgehead>
    7883    <para role="optional"><!--<xref linkend="tetex"/> or-->
    7984    <xref linkend="texlive"/>, and
    … …  
    141146    misc/{dnssec,ipv6,migrat*,options,rfc-compliance,roadmap,sdb} \
    142147    /usr/share/doc/bind-&bind-version;/misc</userinput></screen>
    143 
    144148  </sect2>
    145149
    … …  
    167171    additional package documentation. Omit any or all of these commands if
    168172    desired.</para>
    169 
    170173  </sect2>
    171174
    … …  
    195198
    196199      <indexterm zone="bind bind-config">
    197         <primary sortas="e-etc-namedb-root.hints">/etc/namedb/root.hints</primary>
     200        <primary
     201        sortas="e-etc-namedb-root.hints">/etc/namedb/root.hints</primary>
    198202      </indexterm>
    199203
    200204      <indexterm zone="bind bind-config">
    201         <primary sortas="e-etc-namedb-pz-127.0.0.0">/etc/namedb/pz/127.0.0.0</primary>
     205        <primary
     206        sortas="e-etc-namedb-pz-127.0.0.0">/etc/namedb/pz/127.0.0.0</primary>
    202207      </indexterm>
    203 
    204208    </sect3>
    205209
    … …  
    225229
    226230<screen role="root"><userinput>cd /srv/named &amp;&amp;
    227 mkdir -p dev etc/namedb/slave var/run &amp;&amp;
     231mkdir -p dev etc/namedb/{slave,pz} usr/lib/engines var/run/named &amp;&amp;
    228232mknod /srv/named/dev/null c 1 3 &amp;&amp;
    229233mknod /srv/named/dev/random c 1 8 &amp;&amp;
    230234chmod 666 /srv/named/dev/{null,random} &amp;&amp;
    231 mkdir /srv/named/etc/namedb/pz &amp;&amp;
    232 cp /etc/localtime /srv/named/etc</userinput></screen>
    233 
    234       <para>Then, generate a key for use in the <filename>named.conf</filename>
    235       and <filename>rdnc.conf</filename> files using the
     235cp /etc/localtime etc &amp;&amp;
     236touch /srv/named/managed-keys.bind &amp;&amp;
     237cp /usr/lib/engines/libgost.so usr/lib/engines &amp;&amp;
     238[ $(arch) = x86_64 ] &amp;&amp; ln -sv lib usr/lib64</userinput></screen>
     239
     240      <para>The <filename>rndc.conf</filename> file contains information for
     241      controlling <command>named</command> operations with the
     242      <command>rndc</command> utility. Generate a key for use in the <filename>named.conf</filename> and <filename>rdnc.conf</filename> with the
    236243      <command>rndc-confgen</command> command:</para>
    237244
    238 <screen role="root"><userinput>rndc-confgen -r /dev/urandom -b 512 | \
    239     grep -m 1 "secret" | cut -d '"' -f 2</userinput></screen>
    240 
    241       <para>Create the <filename>named.conf</filename> file from which
     245<screen role="root"><userinput>rndc-confgen -r /dev/urandom -b 512 > /etc/rndc.conf &amp;&amp;
     246sed '/conf/d;/^#/!d;s:^# ::' /etc/rndc.conf > /srv/named/etc/named.conf</userinput></screen>
     247
     248      <para>Complete the <filename>named.conf</filename> file from which
    242249      <command>named</command> will read the location of zone files, root
    243250      name servers and secure DNS keys:</para>
    244251
    245 <screen role="root"><?dbfo keep-together="auto"?><userinput>cat &gt; /srv/named/etc/named.conf &lt;&lt; "EOF"
    246 <literal> options {
    247      directory "/etc/namedb";
     252<screen role="root"><?dbfo keep-together="auto"?><userinput>cat &gt;&gt; /srv/named/etc/named.conf &lt;&lt; "EOF"
     253<literal>options {
     254    directory "/etc/namedb";
    248255    pid-file "/var/run/named.pid";
    249256    statistics-file "/var/run/named.stats";
    250257
    251  };
    252  controls {
    253      inet 127.0.0.1 allow { localhost; } keys { rndc_key; };
    254  };
    255  key "rndc_key" {
    256      algorithm hmac-md5;
    257      secret "<replaceable>&lt;Insert secret from rndc-confgen's output here&gt;</replaceable>";
    258  };
    259  zone "." {
    260      type hint;
    261      file "root.hints";
    262  };
    263  zone "0.0.127.in-addr.arpa" {
    264      type master;
    265      file "pz/127.0.0";
    266  };
     258};
     259zone "." {
     260    type hint;
     261    file "root.hints";
     262};
     263zone "0.0.127.in-addr.arpa" {
     264    type master;
     265    file "pz/127.0.0";
     266};
    267267
    268268// Bind 9 now logs by default through syslog (except debug).
    … …  
    270270
    271271logging {
    272      category default { default_syslog; default_debug; };
    273      category unmatched { null; };
     272    category default { default_syslog; default_debug; };
     273    category unmatched { null; };
    274274
    275275  channel default_syslog {
    … …  
    298298
    299299  channel null {
    300      null;                                // toss anything sent to
     300      null;                               // toss anything sent to
    301301                                          // this channel
    302302  };
    303303};</literal>
    304 
    305304EOF</userinput></screen>
    306 
    307       <para>Create the <filename>rndc.conf</filename> file with the following
    308       commands:</para>
    309 
    310 <screen role="root"><userinput>cat &gt; /etc/rndc.conf &lt;&lt; "EOF"
    311 <literal>key rndc_key {
    312 algorithm "hmac-md5";
    313     secret
    314     "<replaceable>&lt;Insert secret from rndc-confgen's output here&gt;</replaceable>";
    315     };
    316 options {
    317     default-server localhost;
    318     default-key    rndc_key;
    319 };</literal>
    320 EOF</userinput></screen>
    321 
    322       <para>The <filename>rndc.conf</filename> file contains information for
    323       controlling <command>named</command> operations with the
    324       <command>rndc</command> utility.</para>
    325305
    326306      <para>Create a zone file with the following contents:</para>
    … …  
    399379      following command:</para>
    400380
    401 <screen role="root"><userinput>chown -R named.named /srv/named</userinput></screen>
     381<screen role="root"><userinput>chown -R named:named /srv/named</userinput></screen>
    402382
    403383    </sect3>
Note: See TracChangeset for help on using the changeset viewer.