suppressing bind

[John_608]

I have been asked to suppress the bind service on a 10.20 server do i simply edit namesvrs and change named=0 ?

thanks
John.

[harry d brown jr]

No. First check to see if it is running:

ps -ef | grep named

Second, stop it (if it is running).

Then change the namesvrs to named=0.

Or, change namesvrs and use the kill command.

THe biggest question I have is if you kill/remove named from running, then how are you going to do name resolutions? Do you plan on making changes to /etc/resolv.conf and /etc/nsswitch.conf?

live free or die
harry

[John_608]

harry

ok when the named is killed and the namesvrs is changed how do you tell the system to read the nmaesvrs file. I relaise there is no need to but if i was invoking rather than stopping i would need to.

cheers
John.

[harry d brown jr]

If you change /etc/rc.config.d/namesvrs with NAMED=0 and someone issues a

/sbin/init.d/named start
or
/sbin/init.d/named stop

then the service (/sbin/init.d/named) will tell the user that it is not configured to start, thus not starting it. This will also happen (it not starting) at boot time.

Again, if you remove "named" from this server, are there any other servers pointing to this server as a DNS server? And how will this local machine resolve DNS?

live free or die
harry

[Todd Whitcher]

Hi John,

You can figure out if your a DNS nameserver by checking for a /etc/named.boot ( 4.X version of configuration file ) or a /etc/named.conf file. These are the configuration files for DNS/BIND. You can also check your systems /etc/resolv.conf to see if you are referencing yourself as a nameserver. If you don't have any of this then its safe to simply disable DNS/BIND via the method Harry described.

If you are a nameserver and you have resolver clients pointing to your server for name resolution, once you disable DNS/BIND you will have resolver clients that will hang while they attempt to resolve names from your DNS server. In most cases the clients will be configured to use more than one nameserver so they will eventually time out and try the next nameserver listed in their configuration ( /etc/resolv.conf in HPUX ) but this would cause unwanted time delays.

For your reference here is the link to the Installing and administering Internet Services manual which contains some details on configuring BIND etc.

http://www.docs.hp.com/hpux/onlinedocs/B2355-90110/B2355-90110.html

I hope this helps some, let us know if you have more questions.

Todd

[John_608]

thanks it worked now i have to do it to Sun server can anyone tell me the sun file to edit please
John