]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
regen master
authorTinderbox User <tbox@isc.org>
Thu, 12 Dec 2013 01:05:00 +0000 (01:05 +0000)
committerTinderbox User <tbox@isc.org>
Thu, 12 Dec 2013 01:05:00 +0000 (01:05 +0000)
17 files changed:
bin/dnssec/dnssec-signzone.8
bin/dnssec/dnssec-signzone.html
doc/arm/man.arpaname.html
doc/arm/man.ddns-confgen.html
doc/arm/man.dnssec-signzone.html
doc/arm/man.dnssec-verify.html
doc/arm/man.genrandom.html
doc/arm/man.isc-hmac-fixup.html
doc/arm/man.named-checkconf.html
doc/arm/man.named-checkzone.html
doc/arm/man.named-journalprint.html
doc/arm/man.named.html
doc/arm/man.nsec3hash.html
doc/arm/man.nsupdate.html
doc/arm/man.rndc-confgen.html
doc/arm/man.rndc.conf.html
doc/arm/man.rndc.html

index 7d98172363416787214b65d657d6e1a6bcba339c..45aaafb4a64e669dbf5d4fd24321632143d83087 100644 (file)
@@ -261,15 +261,25 @@ Disable post sign verification tests.
 The post sign verification test ensures that for each algorithm in use there is at least one non revoked self signed KSK key, that all revoked KSK keys are self signed, and that all records in the zone are signed by the algorithm. This option skips these tests.
 .RE
 .PP
-\-R
+\-Q
 .RS 4
-Remove signatures from keys that no longer exist.
+Remove signatures from keys that are no longer active.
 .sp
 Normally, when a previously\-signed zone is passed as input to the signer, and a DNSKEY record has been removed and replaced with a new one, signatures from the old key that are still within their validity period are retained. This allows the zone to continue to validate with cached copies of the old DNSKEY RRset. The
-\fB\-R\fR
+\fB\-Q\fR
 forces
 \fBdnssec\-signzone\fR
-to remove all orphaned signatures.
+to remove signatures from keys that are no longer active. This enables ZSK rollover using the procedure described in RFC 4641, section 4.2.1.1 ("Pre\-Publish Key Rollover").
+.RE
+.PP
+\-R
+.RS 4
+Remove signatures from keys that are no longer published.
+.sp
+This option is similar to
+\fB\-Q\fR, except it forces
+\fBdnssec\-signzone\fR
+to signatures from keys that are no longer published. This enables ZSK rollover using the procedure described in RFC 4641, section 4.2.1.2 ("Double Signature Zone Signing Key Rollover").
 .RE
 .PP
 \-r \fIrandomdev\fR
@@ -424,7 +434,8 @@ db.example.com.signed
 .PP
 \fBdnssec\-keygen\fR(8),
 BIND 9 Administrator Reference Manual,
-RFC 4033.
+RFC 4033,
+RFC 4641.
 .SH "AUTHOR"
 .PP
 Internet Systems Consortium
index 42e737dc4609ce2ac1ce2705f42accb594583598..96be9bff389694fdf8de709e5333f8569d45c398 100644 (file)
            This option skips these tests.
           </p>
 </dd>
-<dt><span class="term">-R</span></dt>
+<dt><span class="term">-Q</span></dt>
 <dd>
 <p>
-           Remove signatures from keys that no longer exist.
+           Remove signatures from keys that are no longer active.
           </p>
 <p>
             Normally, when a previously-signed zone is passed as input
             replaced with a new one, signatures from the old key 
             that are still within their validity period are retained.
            This allows the zone to continue to validate with cached
-           copies of the old DNSKEY RRset.  The <code class="option">-R</code> forces
-            <span><strong class="command">dnssec-signzone</strong></span> to remove all orphaned
-            signatures.
+           copies of the old DNSKEY RRset.  The <code class="option">-Q</code>
+            forces <span><strong class="command">dnssec-signzone</strong></span> to remove
+            signatures from keys that are no longer active. This
+            enables ZSK rollover using the procedure described in
+            RFC 4641, section 4.2.1.1 ("Pre-Publish Key Rollover").
+          </p>
+</dd>
+<dt><span class="term">-R</span></dt>
+<dd>
+<p>
+           Remove signatures from keys that are no longer published.
+          </p>
+<p>
+            This option is similar to <code class="option">-Q</code>, except it
+            forces <span><strong class="command">dnssec-signzone</strong></span> to signatures from
+            keys that are no longer published. This enables ZSK rollover
+            using the procedure described in RFC 4641, section 4.2.1.2
+            ("Double Signature Zone Signing Key Rollover").
           </p>
 </dd>
 <dt><span class="term">-r <em class="replaceable"><code>randomdev</code></em></span></dt>
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2543163"></a><h2>EXAMPLE</h2>
+<a name="id2545165"></a><h2>EXAMPLE</h2>
 <p>
       The following command signs the <strong class="userinput"><code>example.com</code></strong>
       zone with the DSA key generated by <span><strong class="command">dnssec-keygen</strong></span>
@@ -478,14 +493,14 @@ db.example.com.signed
 %</pre>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2545335"></a><h2>SEE ALSO</h2>
+<a name="id2545221"></a><h2>SEE ALSO</h2>
 <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
       <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
-      <em class="citetitle">RFC 4033</em>.
+      <em class="citetitle">RFC 4033</em>, <em class="citetitle">RFC 4641</em>.
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2545360"></a><h2>AUTHOR</h2>
+<a name="id2545249"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index 24d85f18f82b53b39a8a4504f5e98b33e9bd6066..10e429807c797743bad3993384cd887a36472df1 100644 (file)
 <div class="cmdsynopsis"><p><code class="command">arpaname</code>  {<em class="replaceable"><code>ipaddress </code></em>...}</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2619030"></a><h2>DESCRIPTION</h2>
+<a name="id2618921"></a><h2>DESCRIPTION</h2>
 <p>
       <span><strong class="command">arpaname</strong></span> translates IP addresses (IPv4 and
       IPv6) to the corresponding IN-ADDR.ARPA or IP6.ARPA names.
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2619045"></a><h2>SEE ALSO</h2>
+<a name="id2618936"></a><h2>SEE ALSO</h2>
 <p>
       <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2658653"></a><h2>AUTHOR</h2>
+<a name="id2618950"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index 982eb92fff2b9a3ea5d391671a856259562d733c..2d3c4b433c3c3587bc66edc324b5f0feeaca07b4 100644 (file)
@@ -50,7 +50,7 @@
 <div class="cmdsynopsis"><p><code class="command">ddns-confgen</code>  [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [ -s <em class="replaceable"><code>name</code></em>  |   -z <em class="replaceable"><code>zone</code></em> ] [<code class="option">-q</code>] [name]</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2651819"></a><h2>DESCRIPTION</h2>
+<a name="id2656284"></a><h2>DESCRIPTION</h2>
 <p><span><strong class="command">ddns-confgen</strong></span>
       generates a key for use by <span><strong class="command">nsupdate</strong></span>
       and <span><strong class="command">named</strong></span>.  It simplifies configuration
@@ -77,7 +77,7 @@
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2651907"></a><h2>OPTIONS</h2>
+<a name="id2656372"></a><h2>OPTIONS</h2>
 <div class="variablelist"><dl>
 <dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
 <dd><p>
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2657842"></a><h2>SEE ALSO</h2>
+<a name="id2658620"></a><h2>SEE ALSO</h2>
 <p><span class="citerefentry"><span class="refentrytitle">nsupdate</span>(1)</span>,
       <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
       <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2657880"></a><h2>AUTHOR</h2>
+<a name="id2658659"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index 6057aed8b5913c9a75612f3156f3b2952aea9e76..fb89895f493195be42c88b0dc8597b51a74e591d 100644 (file)
@@ -50,7 +50,7 @@
 <div class="cmdsynopsis"><p><code class="command">dnssec-signzone</code>  [<code class="option">-a</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-d <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-e <em class="replaceable"><code>end-time</code></em></code>] [<code class="option">-f <em class="replaceable"><code>output-file</code></em></code>] [<code class="option">-g</code>] [<code class="option">-h</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-I <em class="replaceable"><code>input-format</code></em></code>] [<code class="option">-j <em class="replaceable"><code>jitter</code></em></code>] [<code class="option">-N <em class="replaceable"><code>soa-serial-format</code></em></code>] [<code class="option">-o <em class="replaceable"><code>origin</code></em></code>] [<code class="option">-O <em class="replaceable"><code>output-format</code></em></code>] [<code class="option">-P</code>] [<code class="option">-p</code>] [<code class="option">-R</code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-S</code>] [<code class="option">-s <em class="replaceable"><code>start-time</code></em></code>] [<code class="option">-T <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-t</code>] [<code class="option">-u</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-X <em class="replaceable"><code>extended end-time</code></em></code>] [<code class="option">-x</code>] [<code class="option">-z</code>] [<code class="option">-3 <em class="replaceable"><code>salt</code></em></code>] [<code class="option">-H <em class="replaceable"><code>iterations</code></em></code>] [<code class="option">-A</code>] {zonefile} [key...]</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2635364"></a><h2>DESCRIPTION</h2>
+<a name="id2635187"></a><h2>DESCRIPTION</h2>
 <p><span><strong class="command">dnssec-signzone</strong></span>
       signs a zone.  It generates
       NSEC and RRSIG records and produces a signed version of the
@@ -61,7 +61,7 @@
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2635383"></a><h2>OPTIONS</h2>
+<a name="id2635206"></a><h2>OPTIONS</h2>
 <div class="variablelist"><dl>
 <dt><span class="term">-a</span></dt>
 <dd><p>
            This option skips these tests.
           </p>
 </dd>
-<dt><span class="term">-R</span></dt>
+<dt><span class="term">-Q</span></dt>
 <dd>
 <p>
-           Remove signatures from keys that no longer exist.
+           Remove signatures from keys that are no longer active.
           </p>
 <p>
             Normally, when a previously-signed zone is passed as input
             replaced with a new one, signatures from the old key 
             that are still within their validity period are retained.
            This allows the zone to continue to validate with cached
-           copies of the old DNSKEY RRset.  The <code class="option">-R</code> forces
-            <span><strong class="command">dnssec-signzone</strong></span> to remove all orphaned
-            signatures.
+           copies of the old DNSKEY RRset.  The <code class="option">-Q</code>
+            forces <span><strong class="command">dnssec-signzone</strong></span> to remove
+            signatures from keys that are no longer active. This
+            enables ZSK rollover using the procedure described in
+            RFC 4641, section 4.2.1.1 ("Pre-Publish Key Rollover").
+          </p>
+</dd>
+<dt><span class="term">-R</span></dt>
+<dd>
+<p>
+           Remove signatures from keys that are no longer published.
+          </p>
+<p>
+            This option is similar to <code class="option">-Q</code>, except it
+            forces <span><strong class="command">dnssec-signzone</strong></span> to signatures from
+            keys that are no longer published. This enables ZSK rollover
+            using the procedure described in RFC 4641, section 4.2.1.2
+            ("Double Signature Zone Signing Key Rollover").
           </p>
 </dd>
 <dt><span class="term">-r <em class="replaceable"><code>randomdev</code></em></span></dt>
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2671985"></a><h2>EXAMPLE</h2>
+<a name="id2671832"></a><h2>EXAMPLE</h2>
 <p>
       The following command signs the <strong class="userinput"><code>example.com</code></strong>
       zone with the DSA key generated by <span><strong class="command">dnssec-keygen</strong></span>
@@ -496,14 +511,14 @@ db.example.com.signed
 %</pre>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2672200"></a><h2>SEE ALSO</h2>
+<a name="id2672048"></a><h2>SEE ALSO</h2>
 <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
       <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
-      <em class="citetitle">RFC 4033</em>.
+      <em class="citetitle">RFC 4033</em>, <em class="citetitle">RFC 4641</em>.
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2672225"></a><h2>AUTHOR</h2>
+<a name="id2672075"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index 88f7ffb7894e05cabc079bc78ab22f040e4bdb4f..854a5633d6dc6199d49a6e68a5bb1182f5abbf47 100644 (file)
@@ -50,7 +50,7 @@
 <div class="cmdsynopsis"><p><code class="command">dnssec-verify</code>  [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-I <em class="replaceable"><code>input-format</code></em></code>] [<code class="option">-o <em class="replaceable"><code>origin</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-x</code>] [<code class="option">-z</code>] {zonefile}</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2628947"></a><h2>DESCRIPTION</h2>
+<a name="id2629589"></a><h2>DESCRIPTION</h2>
 <p><span><strong class="command">dnssec-verify</strong></span>
       verifies that a zone is fully signed for each algorithm found
       in the DNSKEY RRset for the zone, and that the NSEC / NSEC3
@@ -58,7 +58,7 @@
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2628961"></a><h2>OPTIONS</h2>
+<a name="id2629603"></a><h2>OPTIONS</h2>
 <div class="variablelist"><dl>
 <dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
 <dd><p>
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2629588"></a><h2>SEE ALSO</h2>
+<a name="id2629752"></a><h2>SEE ALSO</h2>
 <p>
       <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
       <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2629613"></a><h2>AUTHOR</h2>
+<a name="id2632713"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index e74a6c97b083fda6b821fd56f2cafb2e753505a7..f4439261d0868a9e45f0d6fad596b45e84f5d4b8 100644 (file)
@@ -50,7 +50,7 @@
 <div class="cmdsynopsis"><p><code class="command">genrandom</code>  [<code class="option">-n <em class="replaceable"><code>number</code></em></code>] {<em class="replaceable"><code>size</code></em>} {<em class="replaceable"><code>filename</code></em>}</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2620384"></a><h2>DESCRIPTION</h2>
+<a name="id2619046"></a><h2>DESCRIPTION</h2>
 <p>
       <span><strong class="command">genrandom</strong></span>
       generates a file or a set of files containing a specified quantity
@@ -59,7 +59,7 @@
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2620398"></a><h2>ARGUMENTS</h2>
+<a name="id2658792"></a><h2>ARGUMENTS</h2>
 <div class="variablelist"><dl>
 <dt><span class="term">-n <em class="replaceable"><code>number</code></em></span></dt>
 <dd><p>
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2658757"></a><h2>SEE ALSO</h2>
+<a name="id2658853"></a><h2>SEE ALSO</h2>
 <p>
       <span class="citerefentry"><span class="refentrytitle">rand</span>(3)</span>,
       <span class="citerefentry"><span class="refentrytitle">arc4random</span>(3)</span>
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2658784"></a><h2>AUTHOR</h2>
+<a name="id2658880"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index 6e0202a30a92c81c0a2e51372d125ca35f3b6e4a..70a93fe4724c6554af0c1277eec849d1b3e0012e 100644 (file)
@@ -50,7 +50,7 @@
 <div class="cmdsynopsis"><p><code class="command">isc-hmac-fixup</code>  {<em class="replaceable"><code>algorithm</code></em>} {<em class="replaceable"><code>secret</code></em>}</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2620471"></a><h2>DESCRIPTION</h2>
+<a name="id2659342"></a><h2>DESCRIPTION</h2>
 <p>
       Versions of BIND 9 up to and including BIND 9.6 had a bug causing
       HMAC-SHA* TSIG keys which were longer than the digest length of the
@@ -76,7 +76,7 @@
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2659206"></a><h2>SECURITY CONSIDERATIONS</h2>
+<a name="id2659370"></a><h2>SECURITY CONSIDERATIONS</h2>
 <p>
       Secrets that have been converted by <span><strong class="command">isc-hmac-fixup</strong></span>
       are shortened, but as this is how the HMAC protocol works in
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2659222"></a><h2>SEE ALSO</h2>
+<a name="id2659386"></a><h2>SEE ALSO</h2>
 <p>
       <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
       <em class="citetitle">RFC 2104</em>.
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2659239"></a><h2>AUTHOR</h2>
+<a name="id2659403"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index 1e4558a06d0fe00b017580d20d9870ef655dc259..076957b93c7f27791412be4a71889f568a076e50 100644 (file)
@@ -50,7 +50,7 @@
 <div class="cmdsynopsis"><p><code class="command">named-checkconf</code>  [<code class="option">-h</code>] [<code class="option">-v</code>] [<code class="option">-j</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] {filename} [<code class="option">-p</code>] [<code class="option">-z</code>]</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2632786"></a><h2>DESCRIPTION</h2>
+<a name="id2635885"></a><h2>DESCRIPTION</h2>
 <p><span><strong class="command">named-checkconf</strong></span>
       checks the syntax, but not the semantics, of a
       <span><strong class="command">named</strong></span> configuration file.  The file is parsed
@@ -70,7 +70,7 @@
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2632856"></a><h2>OPTIONS</h2>
+<a name="id2635956"></a><h2>OPTIONS</h2>
 <div class="variablelist"><dl>
 <dt><span class="term">-h</span></dt>
 <dd><p>
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2635926"></a><h2>RETURN VALUES</h2>
+<a name="id2636090"></a><h2>RETURN VALUES</h2>
 <p><span><strong class="command">named-checkconf</strong></span>
       returns an exit status of 1 if
       errors were detected and 0 otherwise.
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2635940"></a><h2>SEE ALSO</h2>
+<a name="id2636104"></a><h2>SEE ALSO</h2>
 <p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
       <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
       <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2635970"></a><h2>AUTHOR</h2>
+<a name="id2637977"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index 080cb6ef5a82833f1c7a973e017ade329250233e..4d7ea5107f0d12d18b7e9a7bc4dc4979335b0811 100644 (file)
@@ -51,7 +51,7 @@
 <div class="cmdsynopsis"><p><code class="command">named-compilezone</code>  [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-C <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-J <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-r <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-T <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {<code class="option">-o <em class="replaceable"><code>filename</code></em></code>} {zonename} {filename}</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2672358"></a><h2>DESCRIPTION</h2>
+<a name="id2672181"></a><h2>DESCRIPTION</h2>
 <p><span><strong class="command">named-checkzone</strong></span>
       checks the syntax and integrity of a zone file.  It performs the
       same checks as <span><strong class="command">named</strong></span> does when loading a
@@ -71,7 +71,7 @@
      </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2672408"></a><h2>OPTIONS</h2>
+<a name="id2672231"></a><h2>OPTIONS</h2>
 <div class="variablelist"><dl>
 <dt><span class="term">-d</span></dt>
 <dd><p>
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2673350"></a><h2>RETURN VALUES</h2>
+<a name="id2673173"></a><h2>RETURN VALUES</h2>
 <p><span><strong class="command">named-checkzone</strong></span>
       returns an exit status of 1 if
       errors were detected and 0 otherwise.
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2673364"></a><h2>SEE ALSO</h2>
+<a name="id2673187"></a><h2>SEE ALSO</h2>
 <p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
       <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
       <em class="citetitle">RFC 1035</em>,
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2673397"></a><h2>AUTHOR</h2>
+<a name="id2673220"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index 1d0a9b87f84b3a37746923bf2f9f2045c1c9c428..bf1982ad1b7b154ce68b9f802662a8bb749f6780 100644 (file)
@@ -50,7 +50,7 @@
 <div class="cmdsynopsis"><p><code class="command">named-journalprint</code>  {<em class="replaceable"><code>journal</code></em>}</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2617886"></a><h2>DESCRIPTION</h2>
+<a name="id2617846"></a><h2>DESCRIPTION</h2>
 <p>
       <span><strong class="command">named-journalprint</strong></span>
       prints the contents of a zone journal file in a human-readable
@@ -76,7 +76,7 @@
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2642713"></a><h2>SEE ALSO</h2>
+<a name="id2643355"></a><h2>SEE ALSO</h2>
 <p>
       <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
       <span class="citerefentry"><span class="refentrytitle">nsupdate</span>(8)</span>,
@@ -84,7 +84,7 @@
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2642744"></a><h2>AUTHOR</h2>
+<a name="id2643386"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index 1838186b62ea8a0804776dec96e77286aceb39ba..1ddccca95f451777ef9ddf5372da683cf9ad98e2 100644 (file)
@@ -50,7 +50,7 @@
 <div class="cmdsynopsis"><p><code class="command">named</code>  [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-D <em class="replaceable"><code>string</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-U <em class="replaceable"><code>#listeners</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2641367"></a><h2>DESCRIPTION</h2>
+<a name="id2642555"></a><h2>DESCRIPTION</h2>
 <p><span><strong class="command">named</strong></span>
       is a Domain Name System (DNS) server,
       part of the BIND 9 distribution from ISC.  For more
@@ -65,7 +65,7 @@
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2641466"></a><h2>OPTIONS</h2>
+<a name="id2642586"></a><h2>OPTIONS</h2>
 <div class="variablelist"><dl>
 <dt><span class="term">-4</span></dt>
 <dd><p>
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2674580"></a><h2>SIGNALS</h2>
+<a name="id2674539"></a><h2>SIGNALS</h2>
 <p>
       In routine operation, signals should not be used to control
       the nameserver; <span><strong class="command">rndc</strong></span> should be used
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2674630"></a><h2>CONFIGURATION</h2>
+<a name="id2674589"></a><h2>CONFIGURATION</h2>
 <p>
       The <span><strong class="command">named</strong></span> configuration file is too complex
       to describe in detail here.  A complete description is provided
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2674679"></a><h2>FILES</h2>
+<a name="id2674638"></a><h2>FILES</h2>
 <div class="variablelist"><dl>
 <dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
 <dd><p>
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2674723"></a><h2>SEE ALSO</h2>
+<a name="id2674682"></a><h2>SEE ALSO</h2>
 <p><em class="citetitle">RFC 1033</em>,
       <em class="citetitle">RFC 1034</em>,
       <em class="citetitle">RFC 1035</em>,
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2674793"></a><h2>AUTHOR</h2>
+<a name="id2674753"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index 508c294a4a387dcef97648a1f68a29fd803c26a1..d46511615c41e1c422722794f0a1e7817bcbd8de 100644 (file)
@@ -48,7 +48,7 @@
 <div class="cmdsynopsis"><p><code class="command">nsec3hash</code>  {<em class="replaceable"><code>salt</code></em>} {<em class="replaceable"><code>algorithm</code></em>} {<em class="replaceable"><code>iterations</code></em>} {<em class="replaceable"><code>domain</code></em>}</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2659284"></a><h2>DESCRIPTION</h2>
+<a name="id2620468"></a><h2>DESCRIPTION</h2>
 <p>
       <span><strong class="command">nsec3hash</strong></span> generates an NSEC3 hash based on
       a set of NSEC3 parameters.  This can be used to check the validity
@@ -56,7 +56,7 @@
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2659299"></a><h2>ARGUMENTS</h2>
+<a name="id2620483"></a><h2>ARGUMENTS</h2>
 <div class="variablelist"><dl>
 <dt><span class="term">salt</span></dt>
 <dd><p>
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2659429"></a><h2>SEE ALSO</h2>
+<a name="id2659593"></a><h2>SEE ALSO</h2>
 <p>
       <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
       <em class="citetitle">RFC 5155</em>.
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2659446"></a><h2>AUTHOR</h2>
+<a name="id2659610"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index 9d4d66e19dc623e0e12b3d0c1a9cb7bd05d6dfdb..925bd4b5ec848f4cbb0b9c23490911412f3d70d3 100644 (file)
@@ -50,7 +50,7 @@
 <div class="cmdsynopsis"><p><code class="command">nsupdate</code>  [<code class="option">-d</code>] [<code class="option">-D</code>] [[<code class="option">-g</code>] |  [<code class="option">-o</code>] |  [<code class="option">-l</code>] |  [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></code>] |  [<code class="option">-k <em class="replaceable"><code>keyfile</code></em></code>]] [<code class="option">-t <em class="replaceable"><code>timeout</code></em></code>] [<code class="option">-u <em class="replaceable"><code>udptimeout</code></em></code>] [<code class="option">-r <em class="replaceable"><code>udpretries</code></em></code>] [<code class="option">-R <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-v</code>] [<code class="option">-T</code>] [<code class="option">-P</code>] [filename]</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2643413"></a><h2>DESCRIPTION</h2>
+<a name="id2643714"></a><h2>DESCRIPTION</h2>
 <p><span><strong class="command">nsupdate</strong></span>
       is used to submit Dynamic DNS Update requests as defined in RFC 2136
       to a name server.
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2675047"></a><h2>INPUT FORMAT</h2>
+<a name="id2674938"></a><h2>INPUT FORMAT</h2>
 <p><span><strong class="command">nsupdate</strong></span>
       reads input from
       <em class="parameter"><code>filename</code></em>
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2676181"></a><h2>EXAMPLES</h2>
+<a name="id2676140"></a><h2>EXAMPLES</h2>
 <p>
       The examples below show how
       <span><strong class="command">nsupdate</strong></span>
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2676231"></a><h2>FILES</h2>
+<a name="id2676190"></a><h2>FILES</h2>
 <div class="variablelist"><dl>
 <dt><span class="term"><code class="constant">/etc/resolv.conf</code></span></dt>
 <dd><p>
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2676314"></a><h2>SEE ALSO</h2>
+<a name="id2676274"></a><h2>SEE ALSO</h2>
 <p>
       <em class="citetitle">RFC 2136</em>,
       <em class="citetitle">RFC 3007</em>,
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2676372"></a><h2>BUGS</h2>
+<a name="id2676331"></a><h2>BUGS</h2>
 <p>
       The TSIG key is redundantly stored in two separate files.
       This is a consequence of nsupdate using the DST library
index 31f639f3ed72240d761438b24f0d9b981cbea31a..3b1e6ff88d1bcd41b225cfaed293bc5cde1693d4 100644 (file)
@@ -50,7 +50,7 @@
 <div class="cmdsynopsis"><p><code class="command">rndc-confgen</code>  [<code class="option">-a</code>] [<code class="option">-A <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>] [<code class="option">-c <em class="replaceable"><code>keyfile</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [<code class="option">-s <em class="replaceable"><code>address</code></em></code>] [<code class="option">-t <em class="replaceable"><code>chrootdir</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>]</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2646052"></a><h2>DESCRIPTION</h2>
+<a name="id2649015"></a><h2>DESCRIPTION</h2>
 <p><span><strong class="command">rndc-confgen</strong></span>
       generates configuration files
       for <span><strong class="command">rndc</strong></span>.  It can be used as a
@@ -66,7 +66,7 @@
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2646118"></a><h2>OPTIONS</h2>
+<a name="id2651539"></a><h2>OPTIONS</h2>
 <div class="variablelist"><dl>
 <dt><span class="term">-a</span></dt>
 <dd>
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2659014"></a><h2>EXAMPLES</h2>
+<a name="id2659178"></a><h2>EXAMPLES</h2>
 <p>
       To allow <span><strong class="command">rndc</strong></span> to be used with
       no manual configuration, run
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2659070"></a><h2>SEE ALSO</h2>
+<a name="id2659235"></a><h2>SEE ALSO</h2>
 <p><span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
       <span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>,
       <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2659109"></a><h2>AUTHOR</h2>
+<a name="id2659273"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index b893baef63e6e08f459b6b60ba5486d15638f30d..51588ae9340f0a9f824bc6147b9e89c9256e1ad0 100644 (file)
@@ -50,7 +50,7 @@
 <div class="cmdsynopsis"><p><code class="command">rndc.conf</code> </p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2618621"></a><h2>DESCRIPTION</h2>
+<a name="id2644932"></a><h2>DESCRIPTION</h2>
 <p><code class="filename">rndc.conf</code> is the configuration file
       for <span><strong class="command">rndc</strong></span>, the BIND 9 name server control
       utility.  This file has a similar structure and syntax to
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2645076"></a><h2>EXAMPLE</h2>
+<a name="id2645104"></a><h2>EXAMPLE</h2>
 <pre class="programlisting">
       options {
         default-server  localhost;
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2645470"></a><h2>NAME SERVER CONFIGURATION</h2>
+<a name="id2645566"></a><h2>NAME SERVER CONFIGURATION</h2>
 <p>
       The name server must be configured to accept rndc connections and
       to recognize the key specified in the <code class="filename">rndc.conf</code>
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2645496"></a><h2>SEE ALSO</h2>
+<a name="id2645592"></a><h2>SEE ALSO</h2>
 <p><span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
       <span class="citerefentry"><span class="refentrytitle">rndc-confgen</span>(8)</span>,
       <span class="citerefentry"><span class="refentrytitle">mmencode</span>(1)</span>,
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2645534"></a><h2>AUTHOR</h2>
+<a name="id2645630"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>
index 6a174fec6217a9fff3c152aebc420b63e82cad72..b94aa8f8fd7da23dfe3202a325efa2c10b8a021c 100644 (file)
@@ -50,7 +50,7 @@
 <div class="cmdsynopsis"><p><code class="command">rndc</code>  [<code class="option">-b <em class="replaceable"><code>source-address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key-file</code></em></code>] [<code class="option">-s <em class="replaceable"><code>server</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-V</code>] [<code class="option">-y <em class="replaceable"><code>key_id</code></em></code>] {command}</p></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2643846"></a><h2>DESCRIPTION</h2>
+<a name="id2644147"></a><h2>DESCRIPTION</h2>
 <p><span><strong class="command">rndc</strong></span>
       controls the operation of a name
       server.  It supersedes the <span><strong class="command">ndc</strong></span> utility
@@ -81,7 +81,7 @@
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2643896"></a><h2>OPTIONS</h2>
+<a name="id2644197"></a><h2>OPTIONS</h2>
 <div class="variablelist"><dl>
 <dt><span class="term">-b <em class="replaceable"><code>source-address</code></em></span></dt>
 <dd><p>
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2681174"></a><h2>COMMANDS</h2>
+<a name="id2644611"></a><h2>COMMANDS</h2>
 <p>
       A list of commands supported by <span><strong class="command">rndc</strong></span> can
       be seen by running <span><strong class="command">rndc</strong></span> without arguments.
 </dl></div>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2682666"></a><h2>LIMITATIONS</h2>
+<a name="id2679281"></a><h2>LIMITATIONS</h2>
 <p>
       There is currently no way to provide the shared secret for a
       <code class="option">key_id</code> without using the configuration file.
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2682684"></a><h2>SEE ALSO</h2>
+<a name="id2679299"></a><h2>SEE ALSO</h2>
 <p><span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>,
       <span class="citerefentry"><span class="refentrytitle">rndc-confgen</span>(8)</span>,
       <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
     </p>
 </div>
 <div class="refsect1" lang="en">
-<a name="id2682740"></a><h2>AUTHOR</h2>
+<a name="id2679354"></a><h2>AUTHOR</h2>
 <p><span class="corpauthor">Internet Systems Consortium</span>
     </p>
 </div>