2005-02-17 06:39:15 +00:00
|
|
|
# BIND named process options
|
|
|
|
# ~~~~~~~~~~~~~~~~~~~~~~~~~~
|
2004-09-09 03:30:04 +00:00
|
|
|
# Currently, you can use the following options:
|
2005-02-17 06:39:15 +00:00
|
|
|
#
|
2009-06-24 14:51:55 +00:00
|
|
|
# ROOTDIR="/var/named/chroot" -- will run named in a chroot environment.
|
2005-02-17 06:39:15 +00:00
|
|
|
# you must set up the chroot environment
|
|
|
|
# (install the bind-chroot package) before
|
2004-09-09 03:30:04 +00:00
|
|
|
# doing this.
|
2009-06-17 15:55:38 +00:00
|
|
|
# NOTE:
|
|
|
|
# Those directories are automatically mounted to chroot if they are
|
|
|
|
# empty in the ROOTDIR directory. It will simplify maintenance of your
|
|
|
|
# chroot environment.
|
|
|
|
# - /var/named
|
|
|
|
# - /etc/pki/dnssec-keys
|
|
|
|
# - /etc/named
|
2009-07-13 13:02:42 +00:00
|
|
|
# - /usr/lib64/bind or /usr/lib/bind (architecture dependent)
|
2009-06-17 15:55:38 +00:00
|
|
|
#
|
|
|
|
# Those files are mounted as well if target file doesn't exist in
|
|
|
|
# chroot.
|
|
|
|
# - /etc/named.conf
|
|
|
|
# - /etc/rndc.conf
|
|
|
|
# - /etc/rndc.key
|
|
|
|
# - /etc/named.rfc1912.zones
|
|
|
|
# - /etc/named.dnssec.keys
|
2010-02-15 16:07:02 +00:00
|
|
|
# - /etc/named.iscdlv.key
|
2009-09-15 15:34:00 +00:00
|
|
|
#
|
|
|
|
# Don't forget to add "$AddUnixListenSocket /var/named/chroot/dev/log"
|
|
|
|
# line to your /etc/rsyslog.conf file. Otherwise your logging becomes
|
|
|
|
# broken when rsyslogd daemon is restarted (due update, for example).
|
2005-02-17 06:39:15 +00:00
|
|
|
#
|
|
|
|
# OPTIONS="whatever" -- These additional options will be passed to named
|
|
|
|
# at startup. Don't add -t here, use ROOTDIR instead.
|
|
|
|
#
|
2007-08-23 09:09:35 +00:00
|
|
|
# KEYTAB_FILE="/dir/file" -- Specify named service keytab file (for GSS-TSIG)
|
2011-01-06 13:10:49 +00:00
|
|
|
#
|
|
|
|
# DISABLE_ZONE_CHECKING -- By default, initscript calls named-checkzone
|
|
|
|
# utility for every zone to ensure all zones are
|
|
|
|
# valid before named starts. If you set this option
|
|
|
|
# to 'yes' then initscript doesn't perform those
|
|
|
|
# checks.
|