HP-UX Reference (11i v3 07/02) - 4 File Formats (vol 8)

r
rndc.conf(4) rndc.conf(4)
(BIND 9.3)
NAME
rndc.conf - rndc configuration file
DESCRIPTION
rndc.conf is the configuration file for
rndc, the BIND 9 name server control utility. This file has a
structure and syntax similar to the
named
configuration file, named.conf .
The standard (default)
rndc configuration file is located at
/etc/rndc.conf
. The standard (default)
named configuration file is located at
/etc/named.conf.
Syntax
The syntax of the
rndc.conf file is much simpler than that of the
named.conf configuration file. It
includes three statements and optional comments. Statement blocks are enclosed in braces and terminated
with a semicolon. Clauses in the statements are also semicolon-terminated.
options {
default-server
defserver ;
default-key
defkey ;
};
server
servername {
key
keyname ;
};
key keyname {
algorithm
algoname ;
secret "
secretvalue";
};
A servername or keyname must be quoted using double quotes if it matches a keyword, such as having a
key named "key".
The options Statement
The options statement specifies the default server and key definition for the configuration.
The default-server clause specifies the default server on which
rndc runs, if the server is not
specified with the
-s option in the rndc command. defserver is the name or IP address of a name server
that is specified in a server statement.
The default-key clause specifies the default key that will authenticate the server’s commands and
responses if a key is not specified with the -y option in the
rndc command. defkey is the name of a key
that is specified in a
key statement.
The server Statement
The server statement specifies the servername of a name server, as a host name or an IP address.
The key clause specifies a keyname that matches a keyname in a key statement.
Multiple
server statements are permitted.
The key Statement
The key statement specifies the name, keyname, and definition of a key.
The algorithm clause identifies the encryption algorithm, algoname. Currently only HMAC-MD5 is sup-
ported.
The secret clause contains the random key, secretvalue, that will be used for authentication. It is base-
64-encoded, using the algorithm specified in the algorithm clause. secretvalue is enclosed in double
quotes.
The BIND 9 program dnssec-keygen can be used to generate the secretvalue.
Multiple key statements are permitted.
Comments
The following comment styles are supported:
HP-UX 11i Version 3: February 2007 − 1 − Hewlett-Packard Company 375