Internet Express for Tru64 UNIX Version 6.8 Administration Guide (14233)

Table 18-1 BIND Files and Directories (continued)
ContentsDirectory
Location of BIND reference pages.
/usr/share/man/
BIND Version 9.2.0 header files. Existing header files for
older versions of BIND are not overwritten. These files
are placed in a subdirectory under the bind9 directory.
usr/include/bind9
Table 18-2 describes the contents of the binary file directories. See the BIND reference pages and
the BIND Administrator Reference Manual (/usr/internet/docs/bind9/arm) for additional
information about these files.
Table 18-2 BIND Binary File Directories
DescriptionFile
Lightweight Resolver Daemon – Experimental daemon
that provides name lookup services to clients using the
BIND Version 9.2.0 lightweight resolver library. A
simplified caching-only name server that answers queries
using the BIND version 9.2.0 lightweight resolver protocol,
rather than the DNS protocol.
/usr/sbin/lwresd
BIND Version 9.2.0 Internet domain name server.
/usr/sbin/named9
Remote Named Daemon Control.
/usr/sbin/rndc
Script to assist creation of /etc/namedb9/rndc.conf
and /etc/namedb9/named.conf excerpts.
/usr/sbin/rndc-confgen
DNSSEC key generation tool – Generates keys for
DNSSEC (Secure DNS), as defined in RFC 2535. Also
generates keys for use with TSIG (Transaction Signatures),
as defined in RFC 2845.
/usr/sbin/dnssec-keygen
DNSSEC zone signing tool – Generates a key set from one
or more keys created by dnssec-keygen. Creates a file
containing a KEY record for each key, and self-signs the
key set with each zone key. The output file is of the form
keyset-nnnn, where nnnn is the zone name
/usr/sbin/dnssec-makekeyset
DNSSEC zone signing tool – Signs a key set. Typically,
the key set will be for a child zone and will have been
generated by dnssec-makekeyset. The child zone's
keyset is signed with the zone keys for its parent zone.
The output file is of the form signedkey-nnnn, where
nnnn is the zone name.
/usr/sbin/dnssec-signkey
DNSSEC zone signing tool – Signs a zone. Generates NXT
and SIG records and produces a signed version of the
zone. If there is a signedkey file from the zone's parent,
the parent's signatures will be incorporated into the
generated signed zone file. The security status of
delegations from the signed zone (that is, whether the
child zones are secure or not) is determined by the
presence or absence of a signedkey file for each child
zone.
/usr/sbin/dnssec-signzone
Named configuration file syntax checking tool – Checks
the syntax, but not the semantics, of a named
configuration file.
/usr/sbin/named-checkconf
Zone file validity checking tool – Checks the syntax and
integrity of a zone file. It is useful for checking zone files
before configuring them into a name server. Performs the
same checking as namedwhen loading a zone.
/usr/sbin/named-checkzone
266 BIND Domain Name Server Administration