Open System Services Management and Operations Guide (G06.29+, H06.07+)

Managing Servers
Open System Services Management and Operations Guide—527191-005
4-28
Adding a Server
See the named(8), lwresd(8), rndc(8), and nsupdate(8) reference pages
online or the DNS Configuration and Management Manual for more information about
the use of these files with the nonsecure BIND 9 server. See the dnssec_named(8),
lwresd(8), dnssec_rndc(8), and dnssec_nsupdate(8) reference pages online
or the DNS Configuration and Management Manual for more information about the use
of these files with the secure BIND 9 server.
The DNS security extension utilities (dnssec-keygen and dnssec-signzone)
generate the following additional files:
See the BIND 9 Administrator Reference Manual and the DNS Configuration and
Management Manual for more information about these files.
Adding a Server
Some kinds of OSS servers can be added to the OSS configuration database. In the
current RVU, you can add only an OSS name server for a fileset other than the root
fileset.
To add an OSS name server to the OSS configuration database:
1. Determine the appropriate configuration for the new server. For help in defining an
appropriate configuration, see the rules described under The ZOSSSERV File on
page 4-14.
2. Use the SCF ADD SERVER Command to add the new server to the configuration
database.
3. If the new OSS name server is assuming some of the workload of an existing OSS
name server:
a. Use the ALTER FILESET Command to change the OSS name server assigned
to the NAMESERVER attribute of a started fileset.
/etc/dns_secure/
named.conf
Sample of /etc/named.conf provided for the secure
version of named.
/etc/dns923/rndc.conf Sample of /etc/rndc.conf provided for the nonsecure
version of rndc.
/etc/dns_secure/
rndc.conf
Sample of /etc/rndc.conf provided for the secure
version of rndc.
File Purpose
basename.key Public key for a signed zone. This file is created by
dnssec-keygen.
basename.private Private key for a signed zone. This file is created by
dnssec-keygen.
zone-filename.signed Signed zone file. This file is created by dnssec-signzone.
File Purpose (continued)