Internet Services Delta Manual for HP-UX 11i Version 1.6
};
};
and also if the named.conf has an identical key statement for rndckey.
NOTE: Refer to the rndc.conf(4) man page for more information on the rndc configuration
file.
Generating rndc.conf File
rndc-confgen can be used to generate rndc.conf, the configuration file for rndc. Alternatively,
it can also be run with the -a option to set up a rndc.key file thus avoiding the need for a
rndc.conf file and a control statement.
rndc-confgen is run on the command line as:
rndc-confgen [-a] [-b keysize] [-c keyfile] [-h] [-k keyname] [-p port]
[-r randomfile] [-s address] [-t chrootdir] [-u user]
Where
"-a" option is used to configure rndc automatically. This creates a file rndc.key in /etc which
is read by both rndc and named on start-up.
"-b keysize" is used to specify the size of the authentication key in bits. The value must range
between 1 and 512. Default is 128 bits.
"-c keyfile" is used with the -a option to specify an alternate location for the rndc.key file.
"-h" is used to print a short summary of the options and arguments to rndc-confgen utility.
"-k keyname" is used to specify the key name of the rndc authentication key. This must be a
valid domain name. Default is rndc-key.
"-p port" is used to specify the command channel port where named listens for connections
from rndc. Default is 953.
"-r random file" is used to specify a source file of random data for generating the
authorization. Default is keyboard input.
"-s address" is used to specify the IP address where named listens for command channel
connections from rndc. Default is the loopback address 127.0.0.1.
"-t chrootdir" is used with the -a option to specify a directory where named will run
chrooted. An additional copy of the rndc.key will be written relative to this directory so that
it will be found by the chrooted named.
"-u user" is used with the -a option to set the owner of the generated rndc.key file. If -t is
also specified, the owner of the file in chroot area will be changed.
NOTE: Refer to the rndc-confgen(1) man page for more information.
New Command Line Options
Table 3-3 lists the new command line options that have been added for the various binaries and
tools in BIND 9.2.0.
40 BIND 9.2.0










