rndc-confgen(1M)					  System Administration Commands					  rndc-confgen(1M)

NAME

       rndc-confgen - rndc key generation tool

SYNOPSIS

       rndc-confgen [-ah] [-b keysize] [-c keyfile] [-k keyname] [-p port] [-r randomfile] [-s address] [-t chrootdir] [-u user]

DESCRIPTION

       The  rndc-confgen  utility  generates configuration files for rndc(1M). This utility can be used as a convenient alternative to writing	by
       hand the rndc.conf(4) file and the corresponding controls and key statements in named.conf(4). It can also be run with the -a option to set
       up a rndc.key file and avoid altogether the need for a rndc.conf file and a controls statement.

OPTIONS

       The following options are supported:

       -a	       Perform automatic rndc configuration. This option creates a file rndc.key in /etc (or however sysconfdir was specified when
		       BIND was built) that is read by both rndc and named(1M) on startup. The rndc.key file defines a default command channel and
		       authentication  key  allowing  rndc  to	communicate with named with no further configuration. Running rndc-confgen with -a
		       specified allows BIND 9 and rndc to be used as drop-in replacements for BIND 8 and ndc, with no	changes  to  the  existing
		       BIND 8 named.conf file.

       -b keysize      Specify	the  size  of  the authentication key in bits. The keysize argument must be between 1 and 512 bits; the default is
		       128.

       -c keyfile      Used with the -a option to specify an alternate location for rndc.key.

       -h	       Print a short summary of the options and arguments to rndc-confgen.

       -k keyname      Specify the key name of the rndc authentication key. The keyname argument must be a valid domain name. The default is rndc-
		       key.

       -p port	       Specify the command channel port where named listens for connections from rndc. The default is 953.

       -r randomfile   Specify a source of random data for generating the authorization. If the operating system does not provide a /dev/random or
		       equivalent device, the default source of randomness is keyboard input. The randomdev argument specifies the name of a char-
		       acter  device  or  file containing random data to be used instead of the default. The special value keyboard indicates that
		       keyboard input should be used.

       -s address      Specify the IP address where named listens for command channel connections from rndc. The default is the  loopback  address
		       127.0.0.1.

       -t chrootdir    Used with the -a option to specify a directory where named will run after the root directory is changed with chroot(1M). An
		       additional copy of the rndc.key will be written relative to this directory so that it will be found by the named in the new
		       directory.

       -u user	       Used  with  the	-a  option  to	set the owner of the rndc.key file generated. If -t is also specified only the file in the
		       chroot area has its owner changed.

EXAMPLES

       Example 1: Use rndc no manual configuration.

       rndc-confgen -a

       Example 2: Print a sample rndc.conf file and corresponding controls and key statements to be manually inserted into named.conf.

       rndc-confgen

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       |Availability		     |SUNWbind9 		   |
       |Interface Stability	     |External			   |
       +-----------------------------+-----------------------------+

SEE ALSO

       chroot(1M), named(1M), rndc(1M), named.conf(4), rndc.conf(4), attributes(5)

       BIND 9 Administrator Reference Manual

NOTES

       Source for BIND9 is available in the SUNWbind9S package.

SunOS 5.10							    15 Dec 2004 						  rndc-confgen(1M)