HP-UX IP Address and Client Management Administrator's Guide (October 2009)

If the —r option is not included in the command, you must reboot the system manually.
During the reboot, the rules are set automatically; you need not enter the setrules command
to set the rules.
4. To set the compartment for named, enter the following command at the HP-UX prompt:
# setfileexsec –c name /usr/sbin/named
This command enables the compartment specified in the /etc/cmpts/named.rules file
and starts /usr/sbin/named in that compartment.
Disabling Compartments in BIND
To disable compartments in BIND, complete the following steps:
1. To delete security information for /usr/sbin/named from the /etc/named.conf
configuration file and the kernel, enter the following command at the HP-UX prompt:
# setfilexsec –d /usr/sbin/named
2. 2. To disable the compartments and to reboot the system, enter the following command at
the HP-UX prompt:
# cmpt_tune –d -r
Troubleshooting the BIND Name Server
This section describes how to identify and correct problems with the BIND name server. It
discusses the following topics:
• “Troubleshooting Tools and Techniques” (page 92)
• “Problem Symptoms” (page 94)
• “Name Server Problems” (page 95)
• “Understanding Name Server Debugging Output” (page 98)
• “Name Server Statistics” (page 100)
NOTE: After you configure the BIND name service on your network, the following failures
may occur:
• rcp and remsh may fail with permission denied messages.
• rlogin may prompt you for a password.
These problems are the result of switching to domain names. To correct these problems, you
must update other network files. See “Updating Network-Related Files” (page 86).
If you want to run both BIND and HP VUE, you must have an /etc/resolv.conf file on your
system, or HP VUE does not start. See “Configuring the Resolver to Query a Remote Name
Server” (page 81).
After you configure the BIND name service, sendmail uses the name server’s mail exchanger
(MX) records for mail routing. See the HP-UX Mailing Services Administrator’s Guide at the URL
http://www.docs.hp.com /hpux/netcom/index.html#Internet%20Services for
information on Sendmail.
Troubleshooting Tools and Techniques
This section describes the available tools for troubleshooting the BIND name server.
The ping Command
Use the ping command to test whether you can look up a specific host name. You can also use
it to check network connectivity to the name server.
$ /usr/sbin/ping hostname
92 Configuring and Administering the BIND Name Service