|Internet Business Consultant|
|Home||Blog||Bio||Projects||Contact||Latest Blog (new site): How to Get to Genius|
BIND includes a utility called rndc which allows command line administration of the named daemon from the localhost or from a remote host.
In order to prevent unauthorized access to the named daemon, BIND uses a shared secret key method is used to grant privileges to hosts. This means an identical key must be present in both /etc/named.conf and the rndc configuration file, /etc/rndc.conf
In order for rndc to connect to a named service, there must a controls statement in the BIND server's /etc/named.conf file.
The controls statement below shown in the following example allows rndc to connect from the localhost.
This statement tells named to listen on the default TCP port 953 of the loopback address and allow rndc commands coming from the localhost, if the proper key is given. The <key-name> relates to the key statement, which is also in the /etc/named.conf file. The next example illustrates a sample key statement.
In this case, the <key-value> is a HMAC-MD5 key. Use the following command to generate HMAC-MD5 keys:
A key with at least a 256-bit length is a good idea. The actual key that should be placed in the <key-value> area can be found in the <key-file-name>.
The key is the most important statement in /etc/rndc.conf.
The <key-name> and <key-value> should be exactly the same as their settings in /etc/named.conf.
To match the keys specified in the target server's /etc/named.conf, add the following lines to /etc/rndc.conf.
This command sets a global default key. However the rndc command can also use different keys for different servers, as in the following example:
An rndc command takes the following form:
When executing rndc on a properly configured localhost, the following commands are available:
Occasionally, it may be necessary to override the default settings in the /etc/rndc.conf file. The following options are available:
Additional information about these options can be found in the rndc man page.
Services: Ecommerce Web Site Developer
|Electric Speed: Search Engine Optimization Firm|