*nix Documentation Project
·  Home
 +   man pages
·  Linux HOWTOs
·  FreeBSD Tips
·  *niX Forums

  man pages->OpenBSD man pages -> rndc-confgen (8)              




NAME    [Toc]    [Back]

       rndc-confgen - rndc key generation tool

SYNOPSIS    [Toc]    [Back]

       rndc-confgen  [ -a ]  [ -b keysize ]  [ -c keyfile ]  [ -h
       ]  [ -k keyname ]  [ -p port ]  [ -r randomfile  ]   [  -s
       address ]  [ -t chrootdir ]  [ -u user ]

DESCRIPTION    [Toc]    [Back]

       rndc-confgen  generates  configuration  files for rndc. It
       can be used as a convenient  alternative  to  writing  the
       rndc.conf  file  and  the  corresponding  controls and key
       statements in named.conf by hand.  Alternatively,  it  can
       be  run  with  the -a option to set up a rndc.key file and
       avoid the need for a rndc.conf file and a controls  statement

OPTIONS    [Toc]    [Back]

       -a     Do  automatic  rndc  configuration.  This creates a
              file rndc.key in /etc (or whatever  sysconfdir  was
              specified  as  when BIND was built) that is read by
              both rndc and named on startup. The  rndc.key  file
              defines  a  default command channel and authentication
 key allowing rndc to  communicate  with  named
              with no further configuration.

              Running  rndc-confgen  -a allows BIND 9 and rndc to
              be used as drop-in replacements for BIND 8 and ndc,
              with  no  changes to the existing BIND 8 named.conf

       -b keysize
              Specifies the size of  the  authentication  key  in
              bits.   Must be between 1 and 512 bits; the default
              is 128.

       -c keyfile
              Used with the -a option  to  specify  an  alternate
              location for rndc.key.

       -h     Prints a short summary of the options and arguments
              to rndc-confgen.

       -k keyname
              Specifies the key name of the  rndc  authentication
              key.   This  must  be  a  valid  domain  name.  The
              default is rndc-key.

       -p port
              Specifies the command channel port where named listens
  for  connections  from  rndc.  The default is
       -r randomfile
              Specifies a source of random  data  for  generating
              the authorization. If the operating system does not
              provide a /dev/random  or  equivalent  device,  the
              default  source  of  randomness  is keyboard input.
              randomdev specifies the name of a character  device
              or  file  containing random data to be used instead
              of the default. The special  value  keyboard  indicates
 that keyboard input should be used.

       -s address
              Specifies  the  IP  address where named listens for
              command channel connections from rndc. The  default
              is the loopback address

       -t chrootdir
              Used  with  the  -a  option  to specify a directory
              where named will run chrooted. An  additional  copy
              of  the  rndc.key  will be written relative to this
              directory so that it will be found by the  chrooted

       -u user
              Used  with  the  -a  option to set the owner of the
              rndc.key file generated. If -t  is  also  specified
              only  the  file  in  the  chroot area has its owner

EXAMPLES    [Toc]    [Back]

       To allow rndc to be used with no manual configuration, run

       rndc-confgen -a

       To  print  a  sample rndc.conf file and corresponding con-
       trols and key statements  to  be  manually  inserted  into
       named.conf, run


SEE ALSO    [Toc]    [Back]

       rndc(8), rndc.conf(5), named(8), BIND 9 Administrator Ref-
       erence Manual.

AUTHOR    [Toc]    [Back]

       Internet Software Consortium

BIND9                      Aug 27, 2001                         2
[ Back ]
 Similar pages
Name OS Title
dnssec-keygen HP-UX key generation tool for DNSSEC
rndc.conf OpenBSD rndc configuration file
rndc.conf HP-UX rndc configuration file
siginfo Tru64 Details of signal generation
siginfo IRIX signal generation information
glTexGeniv Tru64 control the generation of texture coordinates
ssh-keygen OpenBSD authentication key generation, management and conversion
glTexGeni Tru64 control the generation of texture coordinates
glTexGenfv Tru64 control the generation of texture coordinates
glTexGenf Tru64 control the generation of texture coordinates
Copyright © 2004-2005 DeniX Solutions SRL
newsletter delivery service