HP-UX Reference (11i v3 07/02) - 1 User Commands N-Z (vol 2)

r
rndc-confgen(1) rndc-confgen(1)
(BIND 9.3)
NAME
rndc-confgen - rndc key generation tool
SYNOPSIS
rndc-confgen [-ah][-b
keysize][-c keyfile][-k keyname][-p
port][-r randomfile]
[
-s address][-t
chrootdir][-u user]
DESCRIPTION
rndc-confgen generates /etc/rndc.conf
, the configuration file for
rndc. Alternatively, it can be
run with the
-a option to set up a
rndc.key file and avoid the need for a rndc.conf file and a
con-
trols
statement in a named.conf file altogether.
Options
-a Configure rndc automatically. This creates the file
/etc/rndc.key that is read by both
rndc and named on startup. The rndc.key
file defines a default command channel and
authentication key allowing
rndc to communicate with named with no further configuration.
Running
rndc-confgen -a allows BIND 9 and
rndc to be used as drop-in replacements for
BIND 8 and
ndc, with no changes to the existing BIND 8 named.conf file.
-b keysize
Specify the size of the authentication key in bits. The value must range from 1 to 512. The
default is 128.
-c keyfile
Use with the -a option to specify an alternate name for the rndc.key file.
-h Print a short summary of the options.
-k keyname
Specify the key name of the rndc authentication key in
rndc.conf. The default is rndc-
key
.
-p port Specify the command channel port where named listens for connections from rndc. The
default is 953.
-r randomfile
Specify a source file of random data for generating the authorization. randomfile is the name of
a character device file or a file containing random data. The default is
/dev/random
.
If
-r is not specified and /dev/random cannot be found or -r is specified and randomfile can-
not be found, the keyboard is used as the source of randomness. The special randomfile value
keyboard specifies keyboard input.
-s address
Specify the IP address where named listens for command channel connections from rndc. The
default is the loopback address 127.0.0.1.
-t chrootdir
Use with the -a option to specify a directory where named will run chrooted (see chroot(2)). An
additional copy of the
rndc.key will be written relative to this directory so that it will be found
by the chrooted named.
-u user Use with the -a option to set the owner of the generated rndc.key file. If -t is also specified,
only the file in the chroot area has its owner changed.
EXAMPLES
Example 1
To create a rndc.key file, thus allowing rndc to be used with no manual configuration, run:
$ rndc-confgen -a
Example 2
To print a sample rndc.conf file, with corresponding controls and key statements to be manually
inserted into named.conf , run:
$ rndc-confgen
HP-UX 11i Version 3: February 2007 − 1 − Hewlett-Packard Company 207