1 '\" te |
|
2 .\" Copyright (C) 2010 Internet Systems Consortium, Inc. ("ISC") |
|
3 .\" Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies. THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. |
|
4 .\" Portions Copyright (c) 2010, Sun Microsystems, Inc. All Rights Reserved. |
|
5 .TH rndc-confgen 1M "11 Jan 2010" "SunOS 5.12" "System Administration Commands" |
|
6 .SH NAME |
|
7 rndc-confgen \- rndc key generation tool |
|
8 .SH SYNOPSIS |
|
9 .LP |
|
10 .nf |
|
11 \fBrndc-confgen\fR [\fB-ah\fR] [\fB-b\fR \fIkeysize\fR] [\fB-c\fR \fIkeyfile\fR] [\fB-k\fR \fIkeyname\fR] |
|
12 [\fB-p\fR \fIport\fR] [\fB-r\fR \fIrandomfile\fR] [\fB-s\fR \fIaddress\fR] [\fB-t\fR \fIchrootdir\fR] |
|
13 [\fB-u\fR \fIuser\fR] |
|
14 .fi |
|
15 |
|
16 .SH DESCRIPTION |
|
17 .sp |
|
18 .LP |
|
19 The \fBrndc-confgen\fR utility generates configuration files for \fBrndc\fR(1M). This utility can be used as a convenient alternative to writing by hand the \fBrndc.conf\fR(4) file and the corresponding \fBcontrols\fR and \fBkey\fR statements in \fBnamed.conf\fR. It can also be run with the \fB-a\fR option to set up a \fBrndc.key\fR file and avoid altogether the need for a \fBrndc.conf\fR file and a \fBcontrols\fR statement. |
|
20 .SH OPTIONS |
|
21 .sp |
|
22 .LP |
|
23 The following options are supported: |
|
24 .sp |
|
25 .ne 2 |
|
26 .mk |
|
27 .na |
|
28 \fB\fB-a\fR\fR |
|
29 .ad |
|
30 .sp .6 |
|
31 .RS 4n |
|
32 Perform automatic \fBrndc\fR configuration. This option creates a file \fBrndc.key\fR in \fB/etc\fR (or however \fIsysconfdir\fR was specified when BIND was built) that is read by both \fBrndc\fR and \fBnamed\fR(1M) on startup. The \fBrndc.key\fR file defines a default command channel and authentication key allowing \fBrndc\fR to communicate with \fBnamed\fR with no further configuration. |
|
33 .sp |
|
34 Running \fBrndc-confgen\fR with \fB-a\fR specified allows BIND 9 and \fBrndc\fR to be used as drop-in replacements for BIND 8 and \fBndc\fR, with no changes to the existing BIND 8 \fBnamed.conf\fR file. |
|
35 .sp |
|
36 If a more elaborate configuration than that generated by \fBrndc-confgen\fR \fB-a\fR is required, for example if \fBrndc\fR is to be used remotely, you should run \fBrndc-confgen\fR without the \fB-a\fR option and set up \fBrndc.conf\fR and \fBnamed.conf\fR files, as directed. |
|
37 .RE |
|
38 |
|
39 .sp |
|
40 .ne 2 |
|
41 .mk |
|
42 .na |
|
43 \fB\fB-b\fR \fIkeysize\fR\fR |
|
44 .ad |
|
45 .sp .6 |
|
46 .RS 4n |
|
47 Specify the size of the authentication key in bits. The \fIkeysize\fR argument must be between 1 and 512 bits; the default is 128. |
|
48 .RE |
|
49 |
|
50 .sp |
|
51 .ne 2 |
|
52 .mk |
|
53 .na |
|
54 \fB\fB-c\fR \fIkeyfile\fR\fR |
|
55 .ad |
|
56 .sp .6 |
|
57 .RS 4n |
|
58 Used with the \fB-a\fR option to specify an alternate location for \fBrndc.key\fR. |
|
59 .RE |
|
60 |
|
61 .sp |
|
62 .ne 2 |
|
63 .mk |
|
64 .na |
|
65 \fB\fB-h\fR\fR |
|
66 .ad |
|
67 .sp .6 |
|
68 .RS 4n |
|
69 Print a short summary of the options and arguments to \fBrndc-confgen\fR. |
|
70 .RE |
|
71 |
|
72 .sp |
|
73 .ne 2 |
|
74 .mk |
|
75 .na |
|
76 \fB\fB-k\fR \fIkeyname\fR\fR |
|
77 .ad |
|
78 .sp .6 |
|
79 .RS 4n |
|
80 Specify the key name of the \fBrndc\fR authentication key. The \fIkeyname\fR argument must be a valid domain name. The default is \fBrndc-key\fR. |
|
81 .RE |
|
82 |
|
83 .sp |
|
84 .ne 2 |
|
85 .mk |
|
86 .na |
|
87 \fB\fB-p\fR \fIport\fR\fR |
|
88 .ad |
|
89 .sp .6 |
|
90 .RS 4n |
|
91 Specify the command channel port where \fBnamed\fR listens for connections from \fBrndc\fR. The default is 953. |
|
92 .RE |
|
93 |
|
94 .sp |
|
95 .ne 2 |
|
96 .mk |
|
97 .na |
|
98 \fB\fB-r\fR \fIrandomfile\fR\fR |
|
99 .ad |
|
100 .sp .6 |
|
101 .RS 4n |
|
102 Specify a source of random data for generating the authorization. By default, \fB/dev/random\fR is used. The \fIrandomdev\fR argument specifies the name of a character device or file containing random data to be used instead of the default. The special value \fBkeyboard\fR indicates that keyboard input should be used. |
|
103 .RE |
|
104 |
|
105 .sp |
|
106 .ne 2 |
|
107 .mk |
|
108 .na |
|
109 \fB\fB-s\fR \fIaddress\fR\fR |
|
110 .ad |
|
111 .sp .6 |
|
112 .RS 4n |
|
113 Specify the IP address where \fBnamed\fR listens for command channel connections from \fBrndc\fR. The default is the loopback address 127.0.0.1. |
|
114 .RE |
|
115 |
|
116 .sp |
|
117 .ne 2 |
|
118 .mk |
|
119 .na |
|
120 \fB\fB-t\fR \fIchrootdir\fR\fR |
|
121 .ad |
|
122 .sp .6 |
|
123 .RS 4n |
|
124 Used with the \fB-a\fR option to specify a directory where \fBnamed\fR will run after the root directory is changed with \fBchroot\fR(2). An additional copy of the \fBrndc.key\fR will be written relative to this directory so that it will be found by the \fBnamed\fR in the new directory. |
|
125 .RE |
|
126 |
|
127 .sp |
|
128 .ne 2 |
|
129 .mk |
|
130 .na |
|
131 \fB\fB-u\fR \fIuser\fR\fR |
|
132 .ad |
|
133 .sp .6 |
|
134 .RS 4n |
|
135 Used with the \fB-a\fR option to set the owner of the \fBrndc.key\fR file generated. If \fB-t\fR is also specified only the file in the chroot area has its owner changed. |
|
136 .RE |
|
137 |
|
138 .SH EXAMPLES |
|
139 .LP |
|
140 \fBExample 1 \fRCreate Automatic \fBrndc\fR Configuration |
|
141 .sp |
|
142 .LP |
|
143 The following command creates an automatic \fBrndc\fR configuration, so that \fBrndc\fR can be used immediately. |
|
144 |
|
145 .sp |
|
146 .in +2 |
|
147 .nf |
|
148 # rndc-confgen -a |
|
149 .fi |
|
150 .in -2 |
|
151 .sp |
|
152 |
|
153 .LP |
|
154 \fBExample 2 \fRPrint a Sample \fBrndc.conf\fR File |
|
155 .sp |
|
156 .LP |
|
157 The following command prints a sample \fBrndc.conf\fR file with corresponding \fBcontrols\fR and \fBkey\fR statements. These statements can subsequently be manually inserted in the file \fBnamed.conf\fR. |
|
158 |
|
159 .sp |
|
160 .in +2 |
|
161 .nf |
|
162 # rndc-confgen |
|
163 .fi |
|
164 .in -2 |
|
165 .sp |
|
166 |
|
167 .SH ATTRIBUTES |
|
168 .sp |
|
169 .LP |
|
170 See \fBattributes\fR(5) for descriptions of the following attributes: |
|
171 .sp |
|
172 |
|
173 .sp |
|
174 .TS |
|
175 tab() box; |
|
176 cw(2.75i) |cw(2.75i) |
|
177 lw(2.75i) |lw(2.75i) |
|
178 . |
|
179 ATTRIBUTE TYPEATTRIBUTE VALUE |
|
180 _ |
|
181 Availabilitynetwork/dns/bind |
|
182 _ |
|
183 Interface StabilityVolatile |
|
184 .TE |
|
185 |
|
186 .SH SEE ALSO |
|
187 .sp |
|
188 .LP |
|
189 \fBchroot\fR(2), \fBnamed\fR(1M), \fBrndc\fR(1M), \fBrndc.conf\fR(4), \fBattributes\fR(5) |
|
190 .sp |
|
191 .LP |
|
192 See the BIND 9 \fIAdministrator's Reference Manual\fR. As of the date of publication of this man page, this document is available at https://www.isc.org/software/bind/documentation\&. |
|