JavaScript is required to for searching.
跳过导航链接
退出打印视图
系统管理指南：命名和目录服务（DNS、NIS 和 LDAP）     Oracle Solaris 10 8/11 Information Library (简体中文)
Oracle 技术网
文档库
PDF
打印视图
反馈
search filter icon
search icon

文档信息

前言

第 1 部分关于命名和目录服务

1.  命名和目录服务（概述）

2.  名称服务转换器（概述）

第 2 部分DNS 设置和管理

3.  DNS 设置和管理（参考）

相关材料

从 BIND 8 迁移到 BIND 9

DNS 和服务管理工具

实现 rndc

rndc.conf 配置文件

控制通道之间的差别

BIND 9 rndc 的命令

BIND 9 命令、文件、工具和选项

BIND 9 工具和配置文件

BIND 8 和 BIND 9 命令和文件比较

命令和选项更改的说明

named.conf 选项

BIND 9 中的语句

Controls 语句

Zone 语句

ACL 语句

Key 语句

Trusted-Keys 语句

Server 语句

Include 语句

named.conf 选项摘要

第 3 部分NIS 设置和管理

4.  网络信息服务 (Network Information Service, NIS)（概述）

5.  设置和配置 NIS 服务

6.  管理 NIS（任务）

7.  NIS 疑难解答

第 4 部分LDAP 命名服务的设置和管理

8.  LDAP 命名服务介绍（概述/参考）

9.  LDAP 基本组件和概念（概述）

10.  LDAP 命名服务的规划要求（任务）

11.  为使用 LDAP 客户机设置 Sun Java System Directory Server（任务）

12.  设置 LDAP 客户机（任务）

13.  LDAP 疑难解答（参考）

14.  LDAP 一般参考（参考）

15.  从 NIS 转换为 LDAP（概述/任务）

16.  从 NIS+ 转换为 LDAP

A.  Solaris 10 软件中对 DNS、NIS 和 LDAP 的更新

服务管理工具的更改

DNS BIND

pam_ldap 更改

文档错误

词汇表

索引

named.conf 选项

以下列表比较了 BIND 8 和 BIND 9 的 named.conf 选项，并对更改进行了简短说明。“更改”列中的 OK 表示选项在 BIND 9 版本的 named 中工作方式不变。

选项 {
更改
[ version version_string; ]
OK
[ directory path_name; ]
OK
[ named-xfer path_name; ]
过时1
[ dump-file path_name; ]
OK
[ memstatistics-file path_name; ]
未实现
[ pid-file path_name; ]
OK
[ statistics-file path_name; ]
OK
[ auth-nxdomain yes_or_no; ]
OK2
[ dialup yes_or_no;
OK
[ fake-iquery yes_or_no; ]
过时
[ fetch-glue yes_or_no; ]
过时
[ has-old-clients yes_or_no; ]
过时
[ host-statistics yes_or_no; ]
未实现
[ host-statistics-max number; ]
未实现
[ multiple-cnames yes_or_no; ]
过时
[ notify yes_or_no | explicit; ]
OK
[ recursion yes_or_no; ]
OK
[ rfc2308-type1 yes_or_no; ]
未实现
[ use-id-pool yes_or_no; ]
过时
[ treat-cr-as-space yes_or_no; ]
过时
[ also-notify yes_or_no; ]
语法已更改3
[ forward ( only | first ); ]
OK4
[ forwarders { [ in_addr ; \

[ in_addr ; ... ] ] }; ]

OK5
[ check-names ( master | slave | \

response ) ( warn | fail | ignore); ]
未实现
[ allow-query { address_match_list }; ]
OK
[ allow-recursion { address_match_list }; ]
OK
[ allow-transfer { address_match_list }; ]
OK
[ blackhole { address_match_list }; ]
OK
[ listen-on [ port ip_port ] \

{ address_match_list }; ]

OK
[ query-source [ address ( ip_addr | * ) ] \
OK
[ port ( ip_port | * ) ] ; ]

[ lame-ttl number; ]

OK
[ max-transfer-time-in number; ]
OK
[ max-ncache-ttl number; ]
OK
[ min-roots number; ]
未实现
[ transfer-format ( one-answer | \

many-answers ); ]

OK6
[ transfers-in number; ]
OK
[ transfers-out number; ]
OK
[ transfers-per-ns number; ]
OK
[ transfer-source ip_addr; ]
OK
[ maintain-ixfr-base yes_or_no; ]
过时
[ max-ixfr-log-size number; ]
过时7
[ coresize size_spec ; ]
OK
[ datasize size_spec ; ]
OK
[ files size_spec ; ]
OK
[ stacksize size_spec ; ]
OK
[ cleaning-interval number; ]
OK
[ heartbeat-interval number; ]
OK
[ interface-interval number; ]
OK
[ statistics-interval number; ]
未实现
[ topology { address_match_list }; ]
未实现
[ sortlist { address_match_list }; ]
OK
[ rrset-order { order_spec ; \

[ order_spec ; ... ] }; ]

未实现
};

1由于体系结构差别而过时。

2BIND 8 中缺省设置为 yes，而 BIND 9 中缺省设置为 no。

3选择 yes 时，需要一个 IP 地址。

4如果不指定转发器，此选项将不起作用；在此情况下，会产生 no matching 'forwarders' statement（没有匹配的“forwarders”语句）错误。

5请参见 [ forward ] 子句。

6BIND 8 中缺省设置为 one-answer，而 BIND 9 中缺省设置为 many-answers。

7不需要此选项，因为 BIND 9 会自动剪裁其日志文件的大小。

BIND 9 中的语句

本节介绍 BIND 8 语句与 BIND 9 语句之间的所有差别。

Controls 语句

unix 是 ndc 的缺省设置，并且编译了所有参数。inet 是 rndc 唯一的选项，并且未编译任何内容。

  Syntax
     controls {
       [ inet ip_addr
         port ip_port
         allow { address_match_list; }; ]    OK
       [ unix path_name
         perm number
         owner number
         group number; ]            Not Implemented
     };

日志语法发生了显著变化。有关 named.conf 选项的列表，请参见named.conf 选项。

Zone 语句

BIND 8 named.conf 手册页中用于区域语句的语法大部分在 BIND 9 中是受支持的，但以下语法除外：

  [ pubkey number number number string; ]    Obsolete
  [ check-names ( warn | fail | ignore ); ]    Not Implemented

ACL 语句

该语句的工作方式在 BIND 9 中未变化。

  Syntax
     acl name {
       address_match_list
     };

Key 语句

该语句的工作方式在 BIND 9 中未变化。

  Syntax
     key key_id {
       algorithm algorithm_id;
       secret secret_string;
     };

Trusted-Keys 语句

工作方式未变化，但使用此语句的代码在 BIND 9.2.4 中已禁用。

  Syntax
     trusted-keys {
       [ domain_name flags protocol algorithm key; ]
     };

Server 语句

support-ixfr 已过时，但以下所有选项的工作方式在 BIND 9 中未变化。请注意，transfer-format 的缺省设置已变化。

  Syntax
     server ip_addr {
       [ bogus yes_or_no; ]
       [ transfers number; ]
       [ transfer-format ( one-answer | many-answers ); ]
       [ keys { key_id [ key_id ... ] }; ]
       [ edns yes_or_no; ]
     };

Include 语句

该语句的工作方式在 BIND 9 中未变化。

  Syntax
     include path_name;

named.conf 选项摘要

BIND 9.2.4 不包括详细的 named.conf 手册页。下面是 BIND 9.2.4 支持的 named.conf 选项的摘要。

options  {
        blackhole { <address_match_element>; ... };
        coresize <size>;
        datasize <size>;
        deallocate-on-exit <boolean>; // obsolete
        directory <quoted_string>;
        dump-file <quoted_string>;
        fake-iquery <boolean>; // obsolete
        files <size>;
        has-old-clients <boolean>; // obsolete
        heartbeat-interval <integer>;
        host-statistics <boolean>; // not implemented
        host-statistics-max <integer>; // not implemented
        interface-interval <integer>;
        listen-on [ port <integer> ] { <address_match_element>; ... };
        listen-on-v6 [ port <integer> ] { <address_match_element>; ... };
        match-mapped-addresses <boolean>;
        memstatistics-file <quoted_string>; // not implemented
        multiple-cnames <boolean>; // obsolete
        named-xfer <quoted_string>; // obsolete
        pid-file <quoted_string>;
        port <integer>;
        random-device <quoted_string>;
        recursive-clients <integer>;
        rrset-order { [ class <string> ] [ type <string> ] [ name
            <quoted_string> ] <string> <string>; ... }; // not implemented
        serial-queries <integer>; // obsolete
        serial-query-rate <integer>;
        stacksize <size>;
        statistics-file <quoted_string>;
        statistics-interval <integer>; // not yet implemented
        tcp-clients <integer>;
        tkey-dhkey <quoted_string> <integer>;
        tkey-gssapi-credential <quoted_string>;
        tkey-domain <quoted_string>;
        transfers-per-ns <integer>;
        transfers-in <integer>;
        transfers-out <integer>;
        treat-cr-as-space <boolean>; // obsolete
        use-id-pool <boolean>; // obsolete
        use-ixfr <boolean>;
        version <quoted_string>;
        allow-recursion { <address_match_element>; ... };
        allow-v6-synthesis { <address_match_element>; ... };
        sortlist { <address_match_element>; ... };
        topology { <address_match_element>; ... }; // not implemented
        auth-nxdomain <boolean>; // default changed
        minimal-responses <boolean>;
        recursion <boolean>;
        provide-ixfr <boolean>;
        request-ixfr <boolean>;
        fetch-glue <boolean>; // obsolete
        rfc2308-type1 <boolean>; // not yet implemented
        additional-from-auth <boolean>;
        additional-from-cache <boolean>;
        query-source <querysource4>;
        query-source-v6 <querysource6>;
        cleaning-interval <integer>;
        min-roots <integer>; // not implemented
        lame-ttl <integer>;
        max-ncache-ttl <integer>;
        max-cache-ttl <integer>;
        transfer-format ( many-answers | one-answer );
        max-cache-size <size_no_default>;
        check-names <string> <string>; // not implemented
        cache-file <quoted_string>;
        allow-query { <address_match_element>; ... };
        allow-transfer { <address_match_element>; ... };
        allow-update-forwarding { <address_match_element>; ... };
        allow-notify { <address_match_element>; ... };
        notify <notifytype>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
            ) [ port <integer> ]; ... };
        dialup <dialuptype>;
        forward ( first | only );
        forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        maintain-ixfr-base <boolean>; // obsolete
        max-ixfr-log-size <size>; // obsolete
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-retry-time <integer>;
        min-retry-time <integer>;
        max-refresh-time <integer>;
        min-refresh-time <integer>;
        sig-validity-interval <integer>;
        zone-statistics <boolean>;
};

controls {
        inet ( <ipv4_address> | <ipv6_address> | * ) [ port ( <integer> | *
            ) ] allow { <address_match_element>; ... } [ keys { <string>; ... } ];
        unix <unsupported>; // not implemented
};

acl <string> { <address_match_element>; ... };

logging {
        channel <string> {
                file <logfile>;
                syslog <optional_facility>;
                null;
                stderr;
                severity <logseverity>;
                print-time <boolean>;
                print-severity <boolean>;
                print-category <boolean>;
        };
        category <string> { <string>; ... };
};

view <string> <optional_class> {
        match-clients { <address_match_element>; ... };
        match-destinations { <address_match_element>; ... };
        match-recursive-only <boolean>;
        key <string> {
                algorithm <string>;
                secret <string>;
        };
        zone <string> <optional_class> {
                type ( master | slave | stub | hint | forward );
                allow-update { <address_match_element>; ... };
                file <quoted_string>;
                ixfr-base <quoted_string>; // obsolete
                ixfr-tmp-file <quoted_string>; // obsolete
                masters [ port <integer> ] { ( <ipv4_address> |
                    <ipv6_address> ) [ port <integer> ] [ key <string> ]; ... };
                pubkey <integer> <integer> <integer> <quoted_string>; //
                    obsolete
                update-policy { ( grant | deny ) <string> ( name |
                    subdomain | wildcard | self ) <string> <rrtypelist>; ... };
                database <string>;
                check-names <string>; // not implemented
                allow-query { <address_match_element>; ... };
                allow-transfer { <address_match_element>; ... };
                allow-update-forwarding { <address_match_element>; ... };
                allow-notify { <address_match_element>; ... };
                notify <notifytype>;
                notify-source ( <ipv4_address> | * ) [ port ( <integer> | *
                    ) ];
                notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer>
                    | * ) ];
                also-notify [ port <integer> ] { ( <ipv4_address> |
                    <ipv6_address> ) [ port <integer> ]; ... };
                dialup <dialuptype>;
                forward ( first | only );
                forwarders [ port <integer> ] { ( <ipv4_address> |
                    <ipv6_address> ) [ port <integer> ]; ... };
                maintain-ixfr-base <boolean>; // obsolete
                max-ixfr-log-size <size>; // obsolete
                transfer-source ( <ipv4_address> | * ) [ port ( <integer> |
                    * ) ];
                transfer-source-v6 ( <ipv6_address> | * ) [ port (
                    <integer> | * ) ];
                max-transfer-time-in <integer>;
                max-transfer-time-out <integer>;
                max-transfer-idle-in <integer>;
                max-transfer-idle-out <integer>;
                max-retry-time <integer>;
                min-retry-time <integer>;
                max-refresh-time <integer>;
                min-refresh-time <integer>;
                sig-validity-interval <integer>;
                zone-statistics <boolean>;
        };
        server {
                bogus <boolean>;
                provide-ixfr <boolean>;
                request-ixfr <boolean>;
                support-ixfr <boolean>; // obsolete
                transfers <integer>;
                transfer-format ( many-answers | one-answer );
                keys <server_key>;
                edns <boolean>;
        };
        trusted-keys { <string> <integer> <integer> <integer>
            <quoted_string>; ... };
        allow-recursion { <address_match_element>; ... };
        allow-v6-synthesis { <address_match_element>; ... };
        sortlist { <address_match_element>; ... };
        topology { <address_match_element>; ... }; // not implemented
        auth-nxdomain <boolean>; // default changed
        minimal-responses <boolean>;
        recursion <boolean>;
        provide-ixfr <boolean>;
        request-ixfr <boolean>;
        fetch-glue <boolean>; // obsolete
        rfc2308-type1 <boolean>; // not yet implemented
        additional-from-auth <boolean>;
        additional-from-cache <boolean>;
        query-source <querysource4>;
        query-source-v6 <querysource6>;
        cleaning-interval <integer>;
        min-roots <integer>; // not implemented
        lame-ttl <integer>;
        max-ncache-ttl <integer>;
        max-cache-ttl <integer>;
        transfer-format ( many-answers | one-answer );
        max-cache-size <size_no_default>;
        check-names <string> <string>; // not implemented
        cache-file <quoted_string>;
        allow-query { <address_match_element>; ... };
        allow-transfer { <address_match_element>; ... };
        allow-update-forwarding { <address_match_element>; ... };
        allow-notify { <address_match_element>; ... };
        notify <notifytype>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
            ) [ port <integer> ]; ... };
        dialup <dialuptype>;
        forward ( first | only );
        forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        maintain-ixfr-base <boolean>; // obsolete
        max-ixfr-log-size <size>; // obsolete
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-retry-time <integer>;
        min-retry-time <integer>;
        max-refresh-time <integer>;
        min-refresh-time <integer>;
        sig-validity-interval <integer>;
        zone-statistics <boolean>;
};

lwres {
        listen-on [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        view <string> <optional_class>;
        search { <string>; ... };
        ndots <integer>;
};

key <string> {
        algorithm <string>;
        secret <string>;
};

zone <string> <optional_class> {
        type ( master | slave | stub | hint | forward );
        allow-update { <address_match_element>; ... };
        file <quoted_string>;
        ixfr-base <quoted_string>; // obsolete
        ixfr-tmp-file <quoted_string>; // obsolete
        masters [ port <integer> ] { ( <ipv4_address> | <ipv6_address> ) [
            port <integer> ] [ key <string> ]; ... };
        pubkey <integer> <integer> <integer> <quoted_string>; // obsolete
        update-policy { ( grant | deny ) <string> ( name | subdomain |
            wildcard | self ) <string> <rrtypelist>; ... };
        database <string>;
        check-names <string>; // not implemented
        allow-query { <address_match_element>; ... };
        allow-transfer { <address_match_element>; ... };
        allow-update-forwarding { <address_match_element>; ... };
        allow-notify { <address_match_element>; ... };
        notify <notifytype>;
        notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        notify-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        also-notify [ port <integer> ] { ( <ipv4_address> | <ipv6_address>
            ) [ port <integer> ]; ... };
        dialup <dialuptype>;
        forward ( first | only );
        forwarders [ port <integer> ] { ( <ipv4_address> | <ipv6_address> )
            [ port <integer> ]; ... };
        maintain-ixfr-base <boolean>; // obsolete
        max-ixfr-log-size <size>; // obsolete
        transfer-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
        transfer-source-v6 ( <ipv6_address> | * ) [ port ( <integer> | * ) ];
        max-transfer-time-in <integer>;
        max-transfer-time-out <integer>;
        max-transfer-idle-in <integer>;
        max-transfer-idle-out <integer>;
        max-retry-time <integer>;
        min-retry-time <integer>;
        max-refresh-time <integer>;
        min-refresh-time <integer>;
        sig-validity-interval <integer>;
        zone-statistics <boolean>;
};

server {
        bogus <boolean>;
        provide-ixfr <boolean>;
        request-ixfr <boolean>;
        support-ixfr <boolean>; // obsolete
        transfers <integer>;
        transfer-format ( many-answers | one-answer );
        keys <server_key>;
        edns <boolean>;
};

trusted-keys { <string> <integer> <integer> <integer> <quoted_string>; ... };
版权所有 © 2002, 2010, Oracle 和/或其附属公司。 保留所有权利。 法律声明
上一页 下一页