Naming and Directory Services (DNS, NIS, and LDAP)

Commanddnssec-keygen(1M)rndc(1M)nsupdate(1M)nslookup(1M)named.conf(4)Option Changesdnskeygen in BIND 8.x, used to generatekeys, and dnssec-keygen from BIND 9.x,have no common options. See thednssec-keygen man page for further details.ndc in BIND 8.x and rndc in BIND 9.x aresignificantly different. They share no commonoptions and unlike ndc, rndc needs aconfiguration file in /etc/rndc.conf inorder to run. See man pages for rndc,rndc.conf, and rndc-confgen for furtherdetails.In BIND 9.x, the syntax of the -k optionchanges in nsupdate. Instead of -kkeydir::keyname, the syntax is now k keyfile. Theonly other difference is that whereas a blankline was used to signal sending the input tothe server, an explicit send subcommand isnow used to do the same. See the nsupdateman page for further details.The following options are unsupported in the9.x version of BIND: help, host server,set ignoretc, set noignoretc, setsrch[list]=N1[/N2/.../N6], setro[ot]=host, root, finger [USER], ls[opt] DOMAIN [> FILE]Several options are unsupported, notimplemented or have changed defaults. For alist of the option changes and a summary ofall named.conf options, see “Thenamed.conf Options” on page 54.The named.conf OptionsThe following list compares the named.conf options between BIND 8 and BIND 9. Italso provides a brief description of the changes. An OK in the Changes columndenotes the option works unchanged for the BIND 9 version of named.Options {Changes[ version version_string; ] OK54 System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP) • January 2005