Bienvenue sur le site admin-sys

Configuration de clients DNS (HPUX)

Jerome ROBERT — 2009-04-17T15:40:02Z

Configuration de clients DNS
Modifier ou créer /etc/resolv.conf
domain admin-sys.org
nameserver 192.168.3.120 # serveur primaire
nameserver 192.168.3.121 # serveur secondaire
Modifier ou créer /etc/nsswitch.conf
hosts : dns nis files
pour ma part je préfere cette l'ordre suivant :
hosts : files dns
Modifier les fichiers /.rhosts, /etc/hosts.equiv, si ces
derniers existent

- DNS

nslookup (HPUX)

Jerome ROBERT — 2009-04-17T15:35:47Z

nslookup(1)

Description
Diagnostics
Files

Arguments
Author
See
Also

NAME

nslookup - query name servers
interactively

SYNOPSIS

nslookup
[-option ...] host-to-find [server]

nslookup [-option
...] [- [server]]

DESCRIPTION

nslookup is a
program to query Internet domain name servers. nslookup

has been extended to follow the configured name resolution algorithm
of the host and to query NIS, as well as, DNS and host tables.

Both an interactive and non-interactive mode are available with
nslookup.
Interactive mode allows the user to query a name server for
information about various hosts and domains, or print a list of hosts
in the domain. Non-interactive mode is used to query a name server
for information about one host or domain.

By default, nslookup
accesses name services for name and address resolution based on the
policy information obtained from the switch configuration file
/etc/nsswitch.conf. When the policy is set to use NIS or
/etc/hosts first, or when DNS is first but unavailable,
then nslookup will
only provide a limited command set (a help command while
in this situation will show what actions are possible when querying
NIS or /etc/hosts). To override the switch policy and
query DNS servers directly, the server command can be
used to specify a nameserver. This same overriding of the switch
policy can also be done by providing a nameserver as the second
argument on the command line. In this case, nslookup

will ignore the switch policy and directly query nameservers, until a
reset command is issued. Whenever an action is taken that
causes the switch policy to be overridden, a warning message is
displayed.

Note, NIS+ is not supported by nslookup.
If the hosts source nisplus is found in the
/etc/nsswitch.conf file. It will be ignored.

ARGUMENTS

Interactive mode is entered in the following cases :

No arguments are given.
The first argument is a hyphen (-). The optional
second argument is a host name or Internet (IP) address of a name
server.

Non-interactive mode is used when the name of the host to be
looked up is given as the first argument. The optional second
argument is a host name or Internet address of a name server.

Options listed under the set command below can be
specified one per line in the .nslookuprc file in the
user's home directory. Alternatively, these options may be specified
on the command line by prefixing them with a hyphen and they must
precede other command line arguments. For example, to change the
default query type to host information, and the initial timeout to 10
seconds, type :

nslookup -query=hinfo -timeout=10

The command line option -swdebug may be used to debug
syntactic errors in the switch configuration file. This option turns
on tracing during initialization, causing the switch module to print
out a trace of the scan and parse actions on the "hosts"
entry (see nsswitch.conf(4)
) in the /etc/nsswitch.conf file.

Interactive
Commands

Commands
can be interrupted at any time by using the interrupt character. To
exit, type a Ctrl-D (EOF) or type exit. To treat a
built-in command as a host name, precede it with an escape character
(\). When using NIS or the host table, only host names
and Internet addresses are allowed as commands. An unrecognized
command is interpreted as a host name.

host [server]

Look up information for host using the current default
server or using server if specified. If host is an
Internet address and the query type is A or PTR,
the name of the host is returned. If host is a name and
does not have a trailing period, one or more domains are appended
to the name (this behavior depends on the state of the set

options domain, srchlist, defname,
and search). Answers from a name server's cache are
labeled ``non-authoritative.''

server domain

lserver domain

Change the default server to domain. lserver
uses the initial server to look up information about domain
while server uses the current default server. When
server is used while the current name service being
pointed to is either NIS or /etc/hosts, then the
switch policy will be overridden until a reset is
issued.

root

Changes the default server to the server for the root of the
domain name space. Currently, the host ns.nic.ddn.mil
is used (this command is a synonym for lserverns.nic.ddn.mil).
The name of the root server can be changed with the set
root command.

policy

Prints out the policy read from the switch configuration file.
The number of name services specified in the file are shown, as
well as the order and criteria on how the name services are to be
used. The four statuses of the criteria are represented by the
four positions within the square brackets. The order of the
statuses are : SUCCESS, NOTFOUND, UNAVAIL and TRYAGAIN. The two
actions of the criteria are represented by the two possible
letters used in the four status positions : R for
return and C for continue. However, if no criteria is
specified between two sources, then the default actions are
assigned to the statuses :

SUCCESS= return NOTFOUND= continue UNAVAIL= continue TRYAGAIN= continue

finger [name] [>
filename]

finger [name] [>>
filename]

Connects with the finger server on the current host. The
current host is defined when a previous lookup for a host was
successful and returned address information (see the set
querytype=A command). name is optional. >
and >> can be used to redirect output in the
usual manner.

ls [option] domain [>

filename]

ls [option] domain [>>

filename]

List the information available for domain, optionally
creating or appending to filename. The default output
contains host names and their Internet addresses. option
can be one of the following :

-t querytype

lists all records of the specified type (see querytype
below).

-a

lists aliases of hosts in the domain (synonym for

-t CNAME

-d

lists all records for the domain (synonym for -t ANY).

-h

lists CPU and operating system information for the domain
(synonym for -t HINFO).

-s

lists well-known services of hosts in the domain (synonym for
-t WKS).

When
output is directed to a file, # characters are
printed for every 50 records received from the server.

view filename

Sorts and lists the output of previous ls
command(s) using more (see more(1)
).

help

?

Prints a brief summary of commands.

exit

Exits the program.

reset

Returns to the use of the configured name service switch policy
and resets to use the original nameservers.

set keyword[=value]

This command is used to change state information that affects
the lookups. Valid keywords are :

all

Prints the current values of the various options to set.
Information about the current default server and host is also
printed.

cl[ass]=value

Change the query class to one of :
	`IN`	the Internet class.
	`CHAOS`	the Chaos class.
	`HESIOD`	the MIT Athena Hesiod class.
	`ANY`	wildcard (any of the above).
The class specifies the protocol group of the information. (Default = `IN`)

[no]deb[ug]

Turn debugging mode on. More information is printed about the
packet sent to the server and the resulting answer. (Default =
nodebug)

[no]d2

Turn exhaustive debugging mode on. Essentially all fields of
every packet are printed. (Default = nod2)

[no]def[name]

If set, append the default domain name to a single-component
lookup request (i.e., one that does not contain a period
character). (Default = defname)

do[main]=name

Change the default domain name to name. The default
domain name is appended to a lookup request, depending on the
state of the defname and search options.
The domain search list contains the parents of the default domain
if it has at least two components in its name. For example, if the
default domain is CC.Berkeley.EDU, the search list is
CC.Berkeley.EDU and Berkeley.EDU. Use
the set srchlist command to specify a
different list. Use the set all command
to display the list. (Default = value from hostname,
/etc/resolv.conf or LOCALDOMAIN)

[no]ig[nore]

Ignore truncation errors. (Default = noignore)

q[uerytype]=value

ty[pe]=value

Change the type of information returned from a query to one of :
	`A`	Host's Internet address
	`ANY`	All types of data
	`CNAME`	Canonical name for an alias
	`GID`	Group ID
	`HINFO`	Host CPU and operating system type
	`MB`	Mailbox domain name
	`MG`	Mail group member
	`MINFO`	Mailbox or mail list information
	`MR`	Mail rename domain name
	`MX`	Mail exchanger
	`NS`	Name server for the named zone
	`PTR`	Host name if the query is an Internet address, otherwise the pointer to other information.
	`SOA`	Start of authority record
	`TXT`	Text information
	`UID`	User ID
	`UINFO`	User information
	`WKS`	Well-known service description

po[rt]=value

Change the default TCP/UDP name server port to value.
(Default = 53)

[no]rec[urse]

Tell the name server to query other servers if it does not have
the information. (Default = recurse)

ret[ry]=number

Set the number of retries to number. When a reply to a
request is not received within a certain amount of time (changed
with set timeout), the timeout period is doubled and
the request is resent. The retry value controls how many times a
request is resent before giving up. (Default = 4)

ro[ot]=host

Change the name of the root server to host. This affects
the root command. (Default = ns.nic.ddn.mil)

[no]sea[rch]

If the lookup request contains at least one period but doesn't
end with a trailing period, append the domain names in the domain
search list to the request until an answer is received. See
hostname(5)
. (Default = search)

srchl[ist]=name1/name2/...

Change the default domain name to name1 and the domain
search list to name1, name2, etc. A maximum of 6
names separated by slashes (/) can be specified. For
example,

set srchlist=lcs.MIT.EDU/ai.MIT.EDU/MIT.EDU

sets
the domain to lcs.MIT.EDU and the search list to the
three names. This command overrides the default domain name and
search list of the set domain command.
Use the set all command to display the
list. (Default = value based on hostname, /etc/resolv.conf

or LOCALDOMAIN)

[no]swtr[ace]

When set, this flag causes nslookup
to print out information about the sources used for resolving a
name or an address lookup. This flag traces the behavior generated
by the switch policy. (Default = noswtrace)

t[imeout]=number

Change the initial timeout interval for waiting for a reply to
number seconds. Each retry doubles the timeout period.
(Default = 5 seconds)

[no]v[c]

Always use a virtual circuit when sending requests to the
server. (Default = novc)

DIAGNOSTICS

If the lookup request was not
successful, an error message is printed. Possible errors are :

`Time-out`		The server did not respond to a request after a certain amount of time (changed with `set` `timeout=` value) and a certain number of retries (changed with `set` `retry=` value).
`No` `response` `from` `server`
		No name server is running on the server machine.
`No` `records`		The server does not have resource records of the current query type for the host, although the host name is valid. The query type is specified with the `set` `querytype` command.
`Non-existent` `domain`
		The host or domain name does not exist.
`Connection` `refused`

`Network` `is` `unreachable`
		The connection to the name server could not be made at the present time.
`Server` `failure`
		The name server found an internal inconsistency in its database and could not return a valid answer.
`Refused`		The name server refused to service the request.
`Format` `error`
		The name server found that the request packet was not in the proper format.

AUTHOR

nslookup was
developed by the University of California, Berkeley.

FILES

`/etc/resolv.conf`
		Initial domain name and name server addresses
`$HOME/.nslookuprc`
		User's initial options

hosts_to_named (HPUX)

Jerome ROBERT — 2009-04-17T15:22:10Z

hosts_to_named(1M)

Description
Author
See Also

Examples
Files

NAME

hosts_to_named - translate host table to name server file format

SYNOPSIS

hosts_to_named -d domain -n network-number [options]

DESCRIPTION

hosts_to_named translates the host table, /etc/hosts, into files that are usable by the name server named(1M) . The format of these files is defined in RFC1035. The files are created in the current directory. Once the host table is translated, the name server files can be maintained directly, or the translation can be repeated after each change to the host table.

If a line in the host table contains no domain names, all names on the line are assumed to be in the default domain. The first domain listed is the "default domain". If data is being created for more than 1 domain or if certain options are used, there must be domain names in the host table to determine which names belong in which domain.

The name server data is referred to as "resource records".

Options are :

`-a network-number`
		Add the information about hosts in the local domain from network network-number. This is the same as the `-n` option except that no pointer (PTR) data is created. This is useful when there are multiple domains on a network and a different server is handling the address-to-name mapping for network-number.
`-b bootfile`		Name the boot file bootfile. The default is `named.boot` in the current directory.
`-c subdomain`		Create alias (CNAME) records for hosts in subdomain of the default domain. When a subdomain is delegated, it is useful to create aliases for the old names in the default domain that point to the new names in the subdomain. After creating the alias (CNAME) records, ignore lines in the host table that contain names in the subdomain. This option can be used more than once on the command line. This option requires domain names in the host table. When the old names in this domain are no longer used, they can be ignored with the `-e` option. If the subdomain name does not have dots, the default domain is appended to subdomain.
`-d domain`		Create data for domain. This option can be used more than once on the command line if data is being created for more than 1 domain. The first domain listed is the "default domain". This option requires domain names in the host table for all hosts in domains except the default domain.
`-e subdomain`		Eliminate lines from the host table that contain names in the subdomain before translating. If the subdomain name does not have dots, the default domain is appended. This option may be used more than once on the command line. This option requires domain names in the host table.
`-f file`		Read command line options from file. The `-f` option is not allowed within a file.
`-h host`		Declare host to be the host in the start of authority (SOA) record that the name server data was created on. Also use host for the electronic mail address of the responsible user in the SOA record. The default is the host this command is run on.
`-m weight:mailhub`
		For each canonical hostname from the host table, create mail exchanger (MX) records with the specified weight and mail hub. The weight is a positive integer. The mail hub is a hostname. If the mail hub name has no dots, the default domain is appended. This option can be used more than once on the command line.
`-n network-number[:mask]`
		Create data for network-number. See below for description of network-number. If only one domain is listed with `-d`, all data for network-number is assumed to be in domain. The optional subnet mask mask can be used instead of supplying each network-number for a subnet using multiple `-n` options. mask must be in dot notation.
`-o refresh:retry:expire:min`
		Set the values in the start-of-authority (SOA) record to those specified. See below for description of the start-of-authority (SOA) record.
`-p domain`		Create only pointer (PTR) data for hosts in domain. This is useful when there are multiple domains on a network and a different server is responsible for domain, but this server is responsible for the address-to-name mapping. This option can be used more than once on the command line. This option requires domain names in the host table.
`-q`		Run quietly. No messages are printed.
`-r`		Create name server data indicating that the name server is authoritative for `.` (the root of the domain tree). The file created is `db.root`. Use this only when your network is isolated from the Internet. If other root servers exist for the isolated network, they must be added manually.
`-s server`		Create name server (NS) records that declare server is an authoritative name server for all of the domains created. If more than 1 server is authoritative, each needs to be declared. If the server name does not have any dots in it, the default domain is appended. The default server is the host this script is run on. This option can be used more than once on the command line.
`-t`		Create text (TXT) records from the comments that appear with host data. The comments will all be in lower case because the host table is translated to lower case. If `[no smtp]` appears in a comment, it is omitted. The `[no smtp]` is used to control mail exchanger (MX) data.
`-u user`		Declare user to be the electronic mail address of the person responsible for this domain. This is used in the start of authority (SOA) record. The format required in the name server data is `user.host` (host must be a domain name). If given as user, the host on which this script is run is appended. If given as user @host, the @ is replaced with a dot (`.`). The default user is `root`.
`-w`		Create well known services (WKS) data declaring that the host provides the SMTP service. This is done only when mail exchanger (MX) data is also being created and only for hosts without `[no smtp]` in a comment.
`-z internet-address`
		Create a secondary boot file, `boot.sec.save`, from the primary boot file listing internet-address as the server to load the data from. The boot file has the server back up the data on disk. The internet-address defaults to the value used with `-Z`. This option can be used more than once.
`-A`		Do not create name server data for aliases in the host table.
`-C file`		Create resource records from strings in the comment field of the host table. Each string in the comment field (except `[no smtp]` ) is searched for in file. The format of file is a string, a colon, and a resource record. If the string in the comment field matches the string before the colon in file, a resource record is added consisting of the name of the host followed by everything after the colon from the matching line in file. For example, host information (HINFO) records can be created by adding `360:IN HINFO hp9000s360 hp-ux` to file and adding 360 to comments in the host table.
`-D`		Do not create name server data for domain names in the host table.
`-F`		By default, the serial number is incremented for a domain only if the data has changed (pointer (PTR) data only). This option forces the serial number to be incremented, even if the data has not changed.
`-H host-file`		Use host-file instead of `/etc/hosts`.
`-M`		Do not create mail exchanger (MX) records for hosts in the host table.
`-N mask`		Apply the default subnet mask mask to each network-number specified with `-n` except for ones with their subnet masks already provided. mask must be in dot notation. This is the same as supplying each network-number for a subnet using multiple `-n` options.
`-S server`		This option is the same as the `-s` option, but it only applies to the last domain specified with `-d` or the last network-number specified with `-n`. This option is for when server is backing up some, but not all, of the domains.
`-Z internet-address`
		Create a secondary boot file, `boot.sec`, from the primary boot file listing internet-address as the server to load the data from. The boot file does not have the server back up the data on disk. The internet-address defaults to value used with `-z`. This option can be used more than once.
`-1`		This option is obsolete.

hosts_to_named translates the host table to lower case to help eliminate duplicate data. Since the name server treats uppercase and lowercase as equivalent, names that differ only in case are considered the same.

Alias (CNAME) records are created for subdomains delegated with -c. Lines from the host table that contain names in subdomains from -c and -e are removed from the lowercase copy of the host table.

The host table is then used to create the name server data for each network-number declared on the command line. Do not include the trailing 0's in the network number. No distinction is made between class A, B, or C addresses nor is there any understanding of subnets unless a subnet mask is supplied. Example network numbers are : 10 (for all addresses of the form 10.*.*.*), 10.1 (for addresses of the form 10.1.*.*), or 10.2.2 (for addresses of the form 10.2.2.*).

Address (A) records are created for mapping hostnames to IP addresses. Alias (CNAME) records are created for aliases of hosts that are not multi-homed. The data are placed in a file named db. DOMAIN where DOMAIN is the first part of the domain from the command line. For the domain div.inc.com, the file is named db.div. All other name server data goes in this file except the pointer (PTR) records described below.

Pointer (PTR) records are created for mapping IP addresses to host names. PTR records are placed in a file named db. NET where NET is the network number from the command line. Network 10 data is placed in db.10. Network 10.1 data are placed in "db.10.1".

Mail exchanger (MX) records are created unless the -M option is used. The default MX record has a weight of 10 with the host itself as its mail exchanger. No default MX record is created for a host if [no smtp] is in the comment section of that line in the host table. MX records for each mail hub declared with the -m option are added for each host even if [no smtp] is in the comment section.

Well known services (WKS) records are created for each host that handles SMTP mail (does not have [no smtp]) if -w is used. The only service listed is SMTP.

Text (TXT) records are created for comments associated with hosts in the host table if -t is used. The comments do not include [no smtp].

For each domain, a start of authority (SOA) record is created. The SOA record requires 2 domain names : the host that the data is created on and the electronic mail address of the person responsible. The -h and -u options influence the names. In addition, the SOA record requires 5 values : a serial number, a refresh time, a retry time, an expire time, and a minimum ttl (time to live). The first time the data is created, the serial number is set to 1, the refresh time is set to 3 hours, the retry time is set to 1 hour, the expire time is set to 1 week, and the minimum ttl is set to 1 day. The -o option changes these values except for the serial number. Each subsequent time hosts_to_named is run, the serial number is incremented. If any of the other fields in the SOA record are modified, the changed values are retained.

If there are files named spcl. DOMAIN or spcl. NET in the current directory, $INCLUDE directives are added to the corresponding db. DOMAIN or db. NET file for the spcl file. In this way, special data can be added to the data generated by hosts_to_named.

The first time hosts_to_named is run, it creates a default boot file for a primary name server. Each subsequent time hosts_to_named is run, the boot file is updated if necessary. New entries are made in the boot file for any additional networks or domains not already in the boot file. No entries are deleted from the boot file.

The boot file for a caching-only server, boot.cacheonly, is created if it does not exist. The boot files for secondary servers, boot.sec.save and boot.sec, are created if the -z or -Z options are used. The boot files for secondary servers are created new each time from the primary server boot file so that they are equivalent.

EXAMPLES

Create name server data for networks 15.19.8 and 15.19.9 in div.inc.com.

hosts_to_named -d div.inc.com -n 15.19.8 -n 15.19.9

Create name server data for networks 15.19.8 and 15.19.9 in div.inc.com. Ignore aliases in the host table and include 2 mail hubs - aaa.div.inc.com and bbb.mkt.inc.comk. Put all of the options in a file.

hosts_to_named -f option_file

Option_file contains the following lines :

-d div.inc.com -n 15.19.8 -n 15.19.9 -m 20:aaa -m 30:bbb.mkt.inc.com -A

Network 15.19.15 has hosts in the xx.inc.com domain and the div.inc.com domain. Create name server data for xx.inc.com. Create only pointer (PTR) data for hosts in div.inc.com on network 15.19.15 (this requires the hosts in div.inc.com to have the canonical name or an alias of the form x.div.inc.com).

hosts_to_named -d xx.inc.com -n 15.19.15 -p div.inc.com

Create name server data for network 15.19.8 in div.inc.com. Include div.inc.com data from network 15.19.15 but do not create pointer (PTR) data for 15.19.15 since that is being handled by the xx.inc.com server.

hosts_to_named -d div.inc.com -n 15.19.8 -a 15.19.15

AUTHOR

hosts_to_named was developed by HP.

FILES

`/etc/hosts`		The host table
`named.boot`		Primary server boot file
`boot.cacheonly`
		Caching only server boot file
`boot.sec.save`
		Secondary server boot file
`boot.sec`		Secondary server boot file
`db.127.0.0`		Pointer information for 127.0.0.1
`db.cache`		Stub cache file for root server addresses
`db.root`		Data for servers for the root domain
`db.DOMAIN`		Address and other data for a domain
`db.DOMAIN.in-addr`
		Pointer data for all network-numbers
`db.NET`		Pointer data for a network-number

nsswitch.conf (HPUX)

Jerome ROBERT — 2009-04-17T15:18:08Z

Syntax of the nsswitch.conf File

Each line in the /etc/nsswitch.conf file has the following syntax :

lookup_type name_service [status=action status=action ...] name_service ...

If you include any status=action pairs after a name service, the square brackets are required.

lookup_type The type of information to be looked up. The supported keywords and the information types they represent are listed in Types of Lookups Controlled by the Name Service Switch. These keywords are case-sensitive.

name_service

One of the following name services to use for the type of information in the lookup_type field. These keywords must be in lowercase.

`files`		Files in the `/etc` directory on the local host (`/etc/hosts`, `/etc/services`, and so on).
`nis`		Network Information Service (NIS).
`dns`		Domain Name System (DNS), which is implemented by Berkeley Internet Name Domain (BIND) on HP-UX. See the Installing and Administering Internet Services manual for more information. The `dns` keyword may be used only on the line beginning with `hosts`.

status

One of the following statuses returned by a name service query. These values may be entered in uppercase or lowercase.

`SUCCESS`		The lookup was successful, and the requested information was found.
`NOTFOUND`		The name service returned a response, but the requested data was not in its database.
`UNAVAIL`		The name service is not configured.
`TRYAGAIN`		The name service was busy and the request timed out. This value is returned only by DNS.

action

The action to take based on the status of the name service query. The following values may be entered in uppercase or lowercase.

`continue`		Try the next name service in the list.
`return`		End the lookup and return control to the calling process without consulting the next name service in the list.

If a line beginning with one of the lookup_types does not exist in the /etc/nsswitch.conf file, the default Name Service Switch configuration for that type of information is used. If the /etc/nsswitch.conf file does not exist, the default configuration is used for every type of information. The default Name Service Switch configuration is described in Default Configuration.

**Table 1** **Types of Lookups Controlled by the Name Service Switch**
Keyword	Type of Information Represented by Keyword
`automount`	NFS automounter maps stored in files like `/etc/auto_master` and `/etc/auto_home` or in NIS maps like `auto.master` and `auto.home`.
`hosts`	Host names and IP addresses stored in the `/etc/hosts` file or the NIS `hosts.byaddr` and `hosts.byname` maps.
`netgroup`	NFS netgroups stored in the `/etc/netgroup` file or the NIS `netgroup`, `netgroup.byhost` and `netgroup.byuser` maps.
`networks`	Network names and IP addresses stored in the `/etc/networks` file or the NIS `networks.byaddr` and `networks.byname` maps.
`protocols`	Networking protocol names and numbers stored in the `/etc/protocols` file or the NIS `protocols.byname` and `protocols.bynumber` maps.
`rpc`	RPC program names and numbers stored in the `/etc/rpc` file or the NIS `rpc.byname` and `rpc.bynumber` maps.
`services`	Mapping of networking services to port numbers and protocols, stored in the `/etc/services` file or the NIS `services.byname` and `services.bynp` maps.

nsswitch.conf (HPUX)

Jerome ROBERT — 2009-04-17T15:16:24Z

Syntax
of the nsswitch.conf File

Each
line in the /etc/nsswitch.conf file has the following
syntax :

lookup_type name_service [status=action status=action ...] name_service ...

If you include any status=action pairs
after a name service, the square brackets are required.

lookup_type	The type of information to be looked up. The supported keywords and the information types they represent are listed in Types of Lookups Controlled by the Name Service Switch. These keywords are case-sensitive.
name_service	One of the following name services to use for the type of information in the lookup_type field. These keywords must be in lowercase.
		`files`	Files in the `/etc` directory on the local host (`/etc/hosts`, `/etc/services`, and so on).
		`nis`	Network Information Service (NIS).
		`dns`	Domain Name System (DNS), which is implemented by Berkeley Internet Name Domain (BIND) on HP-UX. See the Installing and Administering Internet Services manual for more information. The `dns` keyword may be used only on the line beginning with `hosts`.

status	One of the following statuses returned by a name service query. These values may be entered in uppercase or lowercase.
		`SUCCESS`		The lookup was successful, and the requested information was found.
		`NOTFOUND`		The name service returned a response, but the requested data was not in its database.
		`UNAVAIL`		The name service is not configured.
		`TRYAGAIN`		The name service was busy and the request timed out. This value is returned only by DNS.

action	The action to take based on the status of the name service query. The following values may be entered in uppercase or lowercase.
		`continue`		Try the next name service in the list.
		`return`		End the lookup and return control to the calling process without consulting the next name service in the list.

If a line beginning with one of the
lookup_types does not exist in the /etc/nsswitch.conf

file, the default Name Service Switch configuration for that type of
information is used. If the /etc/nsswitch.conf file does
not exist, the default configuration is used for every type of
information. The default Name Service Switch configuration is
described in Default Configuration.

Table
1 Types of Lookups Controlled by the Name
Service Switch

Keyword	Type of Information Represented by Keyword
`automount`	NFS automounter maps stored in files like `/etc/auto_master` and `/etc/auto_home` or in NIS maps like `auto.master` and `auto.home`.
`hosts`	Host names and IP addresses stored in the `/etc/hosts` file or the NIS `hosts.byaddr` and `hosts.byname` maps.
`netgroup`	NFS netgroups stored in the `/etc/netgroup` file or the NIS `netgroup`, `netgroup.byhost` and `netgroup.byuser` maps.
`networks`	Network names and IP addresses stored in the `/etc/networks` file or the NIS `networks.byaddr` and `networks.byname` maps.
`protocols`	Networking protocol names and numbers stored in the `/etc/protocols` file or the NIS `protocols.byname` and `protocols.bynumber` maps.
`rpc`	RPC program names and numbers stored in the `/etc/rpc` file or the NIS `rpc.byname` and `rpc.bynumber` maps.
`services`	Mapping of networking services to port numbers and protocols, stored in the `/etc/services` file or the NIS `services.byname` and `services.bynp` maps.

Configuration d'un DNS secondaire (HPUX)

Jerome ROBERT — 2009-04-17T15:14:04Z

Configuration d'un DNS secondaire

1° Préparation

Modifier le fichier /etc/rc.config.d/namesvrs

NAMED=1

NAMED_ARGS=""

Modifier ou créer /etc/resolv.conf

domain admin-sys.org

nameserver 192.168.3.120 # serveur primaire

nameserver 192.168.3.121 # serveur secondaire

Création du répertoire de configuration

mkdir /etc/named.data

cd /etc/named.data

2° Récupération des fichiers

grace à l'option z ou Z dans le fichier de configuration de
hosts_to_named. Ce dernier a créé le fichier de
configuration des DNS secondaire

fichier de configuration de named

ftp DNS_primaine

get /etc/named.data/boot.sec.save /etc/named.boot

quit

fichiers de data

ftp DNS_primaine

get /etc/named.data/db.127.0.0

get /etc/named.data/db.cache

quit

Attention : Le fichier db.cache n'est nécessaire que
si votre DNS est connecté sur le réseau public

3° Relancer le service

/sbin/init.d/named stop

/sbin/init.d/named start

4° Divers

Pour forcer la mise à jour, des serveurs secondaire :
sig_named restart

Configuration d'un serveur DNS primaire : (HPUX)

Jerome ROBERT — 2009-04-17T15:12:53Z

Configuration d'un serveur DNS primaire :

1° aller a la recherche d'information :

Pour les information :

http://rs.ineternic.net

http://www.nic.com/

http://www.nic.fr

pour récupérer de fichier de configuration :

ftp://rs.internic.net/domain/

ftp://ftp.nic.fr/pub/documents/DNS/root.cache/

2° Création d'un fichier /etc/hosts

HP a créé le script hosts_to_named qui permet de
créer les fichiers de configuration DNS en partant de la
configuration existant sur le système. Mais pour cela, il faud
mettre à jour le fichier /etc/hosts.

cat /etc/hosts

127.0.0.1 localhost

192.168.3.120 serveur1.admin-sys.org serveur1

192.168.3.121 serveur2.admin-sys.org serveur2

192.168.3.122 serveur3.admin-sys.org serveur3

128.128.1.100 client1.admin-sys.org client1

128.128.1.101 client2.admin-sys.org client2

128.128.1.102 client3.admin-sys.org client3

3° Préparation

mkdir /etc/named.data

cd /etc/named.data

Pour configurer hosts_to_named, on peut utiliser un fichier qu'on
va appeler param.

Le script hosts_to_named peut utiliser plusieurs options :

`-a network-number`
		Add the information about hosts in the local domain from network network-number. This is the same as the `-n` option except that no pointer (PTR) data is created. This is useful when there are multiple domains on a network and a different server is handling the address-to-name mapping for network-number.
`-b bootfile`		Précise le nom et l'emplacement du fichier de configuration. Name the boot file bootfile. The default is `named.boot` in the current directory.
`-c subdomain`		Create alias (CNAME) records for hosts in subdomain of the default domain. When a subdomain is delegated, it is useful to create aliases for the old names in the default domain that point to the new names in the subdomain. After creating the alias (CNAME) records, ignore lines in the host table that contain names in the subdomain. This option can be used more than once on the command line. This option requires domain names in the host table. When the old names in this domain are no longer used, they can be ignored with the `-e` option. If the subdomain name does not have dots, the default domain is appended to subdomain.
`-d domain`		Create data for domain. This option can be used more than once on the command line if data is being created for more than 1 domain. The first domain listed is the "default domain". This option requires domain names in the host table for all hosts in domains except the default domain.
`-e subdomain`		Eliminate lines from the host table that contain names in the subdomain before translating. If the subdomain name does not have dots, the default domain is appended. This option may be used more than once on the command line. This option requires domain names in the host table.
`-f file`		Read command line options from file. The `-f` option is not allowed within a file.
`-h host`		Declare host to be the host in the start of authority (SOA) record that the name server data was created on. Also use host for the electronic mail address of the responsible user in the SOA record. The default is the host this command is run on.
`-m weight:mailhub`
		For each canonical hostname from the host table, create mail exchanger (MX) records with the specified weight and mail hub. The weight is a positive integer. The mail hub is a hostname. If the mail hub name has no dots, the default domain is appended. This option can be used more than once on the command line.
`-n network-number[:mask]`
		Spécifie les données à créer pour le numéro de réseau indiqué. Create data for network-number. See below for description of network-number. If only one domain is listed with `-d`, all data for network-number is assumed to be in domain. The optional subnet mask mask can be used instead of supplying each network-number for a subnet using multiple `-n` options. mask must be in dot notation.
`-o refresh:retry:expire:min`
		Set the values in the start-of-authority (SOA) record to those specified. See below for description of the start-of-authority (SOA) record.
`-p domain`		Create only pointer (PTR) data for hosts in domain. This is useful when there are multiple domains on a network and a different server is responsible for domain, but this server is responsible for the address-to-name mapping. This option can be used more than once on the command line. This option requires domain names in the host table.
`-q`		Run quietly. No messages are printed.
`-r`		Indique que le serveur primaire sera également un serveur root. Cette option entraîne la création de db.root Create name server data indicating that the name server is authoritative for `.` (the root of the domain tree). The file created is `db.root`. Use this only when your network is isolated from the Internet. If other root servers exist for the isolated network, they must be added manually.
`-s server`		Create name server (NS) records that declare server is an authoritative name server for all of the domains created. If more than 1 server is authoritative, each needs to be declared. If the server name does not have any dots in it, the default domain is appended. The default server is the host this script is run on. This option can be used more than once on the command line.
`-t`		Create text (TXT) records from the comments that appear with host data. The comments will all be in lower case because the host table is translated to lower case. If `[no smtp]` appears in a comment, it is omitted. The `[no smtp]` is used to control mail exchanger (MX) data.
`-u user`		Declare user to be the electronic mail address of the person responsible for this domain. This is used in the start of authority (SOA) record. The format required in the name server data is `user.host` (host must be a domain name). If given as user, the host on which this script is run is appended. If given as user @host, the @ is replaced with a dot (`.`). The default user is `root`.
`-w`		Create well known services (WKS) data declaring that the host provides the SMTP service. This is done only when mail exchanger (MX) data is also being created and only for hosts without `[no smtp]` in a comment.
`-z internet-address`
		Create a secondary boot file, `boot.sec.save`, from the primary boot file listing internet-address as the server to load the data from. The boot file has the server back up the data on disk. The internet-address defaults to the value used with `-Z`. This option can be used more than once.
`-A`		Do not create name server data for aliases in the host table.
`-C file`		Create resource records from strings in the comment field of the host table. Each string in the comment field (except `[no smtp]` ) is searched for in file. The format of file is a string, a colon, and a resource record. If the string in the comment field matches the string before the colon in file, a resource record is added consisting of the name of the host followed by everything after the colon from the matching line in file. For example, host information (HINFO) records can be created by adding `360:IN HINFO hp9000s360 hp-ux` to file and adding 360 to comments in the host table.
`-D`		Do not create name server data for domain names in the host table.
`-F`		By default, the serial number is incremented for a domain only if the data has changed (pointer (PTR) data only). This option forces the serial number to be incremented, even if the data has not changed.
`-H host-file`		Use host-file instead of `/etc/hosts`.
`-M`		Do not create mail exchanger (MX) records for hosts in the host table.
`-N mask`		Apply the default subnet mask mask to each network-number specified with `-n` except for ones with their subnet masks already provided. mask must be in dot notation. This is the same as supplying each network-number for a subnet using multiple `-n` options.
`-S server`		This option is the same as the `-s` option, but it only applies to the last domain specified with `-d` or the last network-number specified with `-n`. This option is for when server is backing up some, but not all, of the domains.
`-Z internet-address`
		Create a secondary boot file, `boot.sec`, from the primary boot file listing internet-address as the server to load the data from. The boot file does not have the server back up the data on disk. The internet-address defaults to value used with `-z`. This option can be used more than once.
`-1`		This option is obsolete.

vi /etc/named.data/param

-d admin-sys.org

-n 192.168.3

-Z 192.168.3.121

-b /etc/named.boot

Modifier le fichier /etc/rc.config.d/namesvrs

NAMED=1

NAMED_ARGS=""

Modifier ou créer /etc/resolv.conf

domain admin-sys.org

nameserver 192.168.3.120 # serveur primaire

nameserver 192.168.3.121 # serveur secondaire

script hosts_to_named

Ce script permet de générer les fichiers de
configuration du DNS primaire et secondaire si on positionne l'option
z ou Z cf ci-dessus

Attention : il faud executer ce script dans le répertoire de
destination des fichiers donc dans /etc/named.data

cd /etc/named.data

hosts_to_named -f param

Création des fichiers ....

/sbin/init.d/named stop

/sbin/init.d/named start

4° Divers

Les fichiers de données créés

`/etc/hosts`		The host table
named.boot		Primary server boot file
`boot.cacheonly`		Caching only server boot file
`boot.sec.save`		Secondary server boot file
`boot.sec`		Secondary server boot file
`db.127.0.0`		Pointer information for 127.0.0.1
`db.cache`		Stub cache file for root server addresses
`db.root`		Data for servers for the root domain
`db.DOMAIN`		Address and other data for a domain
`db.DOMAIN.in-addr`		Pointer data for all network-numbers
`db.NET`		Pointer data for a network-number

Mise à jour du serveur primaire

Mettre à jour le fichier /etc/hosts

Mettre à jour le fichier /etc/named.data/param, si ajout
d'un nouveau réseau

cd /etc/named.data

hosts_to_named -f param

Pour forcer la mise à jour ou la relecture des fichiers de
configuration du serveur : sig_named restart