Internet Express for Tru64 UNIX Version 6.10 Administration Guide (5900-1418, March 2011)

Table 35 describes the contents of the binary file directories. See the BIND reference pages and
the BIND Administrator Reference Manual (/usr/internet/docs/bind9/arm) for additional
information about these files.
Table 35 BIND Binary File Directories
DescriptionFile
Lightweight Resolver Daemon – Experimental daemon that
provides name lookup services to clients using the BIND
Version 9.3.6-P1 lightweight resolver library. A simplified
caching-only name server that answers queries using the
BIND Version 9.3.6-P1 lightweight resolver protocol, rather
than the DNS protocol.
/usr/sbin/lwresd
BIND Version 9.3.6-P1 Internet domain name server./usr/sbin/named9
Remote Named Daemon Control./usr/sbin/rndc
Script to assist creation of /etc/namedb9/rndc.conf
and /etc/namedb9/named.conf excerpts.
/usr/sbin/rndc-confgen
DNSSEC key generation tool – Generates keys for DNSSEC
(Secure DNS), as defined in RFC 2535. Also generates
keys for use with TSIG (Transaction Signatures), as defined
in RFC 2845.
/usr/sbin/dnssec-keygen
DNSSEC zone signing tool – Generates a key set from one
or more keys created by dnssec-keygen. Creates a file
containing a KEY record for each key, and self-signs the
key set with each zone key. The output file is of the form
keyset-nnnn, where nnnn is the zone name
/usr/sbin/dnssec-makekeyset
DNSSEC zone signing tool – Signs a key set. Typically,
the key set will be for a child zone and will have been
generated by dnssec-makekeyset. The child zone's
keyset is signed with the zone keys for its parent zone. The
output file is of the form signedkey-nnnn, where nnnn
is the zone name.
/usr/sbin/dnssec-signkey
DNSSEC zone signing tool – Signs a zone. Generates NXT
and SIG records and produces a signed version of the
zone. If there is a signedkey file from the zone's parent,
the parent's signatures will be incorporated into the
generated signed zone file. The security status of
delegations from the signed zone (that is, whether the child
zones are secure or not) is determined by the presence or
absence of a signedkey file for each child zone.
/usr/sbin/dnssec-signzone
Named configuration file syntax checking tool – Checks
the syntax, but not the semantics, of a named configuration
file.
/usr/sbin/named-checkconf
Zone file validity checking tool – Checks the syntax and
integrity of a zone file. It is useful for checking zone files
before configuring them into a name server. Performs the
same checking as namedwhen loading a zone.
/usr/sbin/named-checkzone
DNS lookup utility dig (domain information groper) –
Interrogates DNS name servers. This tool performs DNS
lookups and displays the answers that are returned from
the name server (or servers) that were queried. Most DNS
administrators use dig to troubleshoot DNS problems
because of its flexibility, ease of use, and clarity of output.
Other lookup tools tend to have less functionality than dig.
/usr/bin/dig
DNS lookup utility host – Performs DNS lookups. This utility
is normally used to convert names to IP addresses and vice
versa.
/usr/bin/host
Important BIND Files and Directories 261