HP-UX IP Address and Client Management Administrator's Guide HP-UX 11i v2, HP-UX 11i v3

Disabling Compartments in BIND
To disable compartments in BIND, complete the following steps:
1. To delete security information for /usr/sbin/named from the /etc/named.conf
configuration file and the kernel, enter the following command at the HP-UX prompt:
# setfilexsec –d /usr/sbin/named
2. 2. To disable the compartments and to reboot the system, enter the following command at
the HP-UX prompt:
# cmpt_tune –d -r
Troubleshooting the BIND Name Server
This section describes how to identify and correct problems with the BIND name server. It
discusses the following topics:
• “Troubleshooting Tools and Techniques” (page 89)
• “Problem Symptoms” (page 91)
• “Name Server Problems” (page 92)
• “Understanding Name Server Debugging Output” (page 95)
• “Name Server Statistics” (page 97)
NOTE: After you configure the BIND name service on your network, the following failures
may occur:
• rcp and remsh may fail with permission denied messages.
• rlogin may prompt you for a password.
These problems are the result of switching to domain names. To correct these problems, you
must update other network files. See “Updating Network-Related Files” (page 83).
If you want to run both BIND and HP VUE, you must have an /etc/resolv.conf file on your
system, or HP VUE does not start. See “Configuring the Resolver to Query a Remote Name
Server” (page 78).
After you configure the BIND name service, sendmail uses the name server’s mail exchanger
(MX) records for mail routing. See the HP-UX Mailing Services Administrator’s Guide at the URL
http://www.docs.hp.com /hpux/netcom/index.html#Internet%20Services for
information on Sendmail.
Troubleshooting Tools and Techniques
This section describes the available tools for troubleshooting the BIND name server.
The ping Command
Use the ping command to test whether you can look up a specific host name. You can also use
it to check network connectivity to the name server.
$ /usr/sbin/ping hostname
If the host name lookup fails, use ping with an IP address to test network connectivity.
$ /usr/sbin/ping IP_address
The nsquery Command
Issue the nsquery command to perform a hosts, passwd, or group lookup, as follows:
/usr/contrib/bin/nsquery lookup_typelookup_query
Troubleshooting the BIND Name Server 89