DTCK(1p) User Contributed Perl Documentation DTCK(1p)NAME
dtck - Check the DNSSEC-Tools data files for sanity.
SYNOPSIS
dtck [options] [dtck_config_file]
DESCRIPTION
dtck checks DNSSEC-Tools data files to determine if the entries are valid. dtck checks the validity of DNSSEC-Tools configuration files,
rollrec files, and keyrec files. It does not perform the file checking itself, but runs checking programs specific to each type of data
file.
A dtck configuration file is consulted to determine the files to check. This file lists the DNSSEC-Tools data files and their types. If a
dtck configuration file is not given on the command line, dtck will only check the DNSSEC-Tools configuration file. This is equivalent to
running dtconfchk directly.
DTCK CONFIGURATION FILE
A dtck configuration file contains a list of the files to be checked by dtck. Except for comments, each line has the following format:
keyword file directory
keyword is one of "config", "rollrec", or "keyrec". file is the pathname of the file to be checked. directory is the name of the
directory that holds file and is optional.
The dtck configuration file contains the following types of records:
config
These lines define the DNSSEC-Tools configuration files that will be checked. The dtconfchk program will be used to verify these
files.
rollrec
These lines define the rollrec files that will be checked. The rollchk program will be used to verify these files.
keyrec
These lines define the keyrec files that will be checked. The krfcheck program will be used to verify these files.
comments
Any lines starting with an octothorpe (#) are comment lines and are ignored.
OPTIONS
dtck takes two types of options. Options of the first type are handled directly by dtck, controlling its output and processing. Options
of the second type are passed to the file-checking programs and are not further handled by dtck.
Options Handled by dtck
-defcon
This option directs dtck to add the default DNSSEC-Tools configuration file to the list of configuration files to be checked.
-list
The names of the files will be listed as they are checked.
-pretty
Clarifying output is added to the output from dtck and the file-checking programs.
-help
Display a usage message.
Options Not Handled by dtck
-count
The file-checking programs will display a final error count.
-quiet
No output will be given by the file-checking program.
-verbose
Verbose output will be given by the file-checking program.
-Version
Displays the version information for dtck and the DNSSEC-Tools package.
COPYRIGHT
Copyright 2007-2012 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details.
AUTHOR
Wayne Morrison, tewok@tislabs.com
SEE ALSO dtconfchk(8), krfcheck(8), rollchk(8)dnssec-tools.conf(5), keyrec(5), rollrec(5)perl v5.14.2 2012-06-21 DTCK(1p)
Check Out this Related Man Page
realm(3pm) User Contributed Perl Documentation realm(3pm)NAME
Realm - Realm-related data used by DNSSEC-Tools programs.
DESCRIPTION
The DNSSEC-Tools dtrealms command manages a group of distinct rollover environments running on a single host. These distinct rollover
environments are called realms. dtrealms uses a realm file to properly create and manage each of its realms.
A realms file is organized in sets of realm records. Each realm record describes the execution environment of a single rollover instance.
A realm consists of a set of keyword/value entries.
The DNSSEC-Tools realm.pm module manipulates the contents of a realm file. Module interfaces exist for looking up realm records, creating
new records, and modifying existing records.
Comment lines and blank lines are ignored by the DNSSEC-Tools programs. Comment lines start with either a '#' character or a ';'
character.
A realm's name may consist of alphabetic characters, numbers, and several special characters. The special characters are the minus sign,
the plus sign, the underscore, the comma, the period, the colon, the forward-slash, the space, and the tab. This name is an identifier.
The values in a realm's entries may consist of alphabetic characters, numbers, and several special characters. The special characters are
the minus sign, the plus sign, the underscore, the comma, the period, the colon, the forward-slash, the space, and the tab.
REALM FIELDS
The fields in a realm record are:
* administrator
This is the email address for the realm's administrative user.
* args
The user-specified arguments for the rollover manager. This is not a required field.
* configdir
This field contains the name of the directory in which dtrealms will find the realm's configuration information. This directory must
contain a subdirectory named dnssec-tools, and the realm's configuration file will be stored there. This is a required field.
* display
This boolean field indicates whether or not the realm should be displayed by the grandvizier program. This is an optional field.
* hoard
This field contains the pathname to a collection of files used to build a realm. This field is only used by the buildrealms program.
* manager
This field contains the name of the rollover manager program for the realm. If this is not defined, then rollerd will be used.
* realmdir
This field contains the name of the directory in which dtrealms will execute the realm's rollover manager. This is a required field.
* rollrec
The realm's rollrec file. This file will be used by the rollover manager to control the rollover environment.
* state
This field contains the realm's state. It must be either "active" or "inactive".
* statedir
This field contains the name of the directory in which rollerd and other DNSSEC-Tools programs will find the realm's state information. If
this is not specified, the configdir directory will be used.
* user
This field contains the name of the user that the realm will be executed as. This is an optional field. This is not yet implemented in
dtrealms.
EXAMPLES
The following are examples of realms:
realm "example"
state "active"
configdir "/realms/configs/example"
statedir "/realms/states/example"
realmdir "/realms/realms/example"
rollrec "demo-example.rollrec"
administrator "zonefolks@example.com"
display "1"
manager "rollerd"
args "-sleep 600 -loglevel phase -logfile log.example"
user "zonemgr"
realm "testing"
state "inactive"
configdir "/realms/configs/testing"
realmdir "/realms/realms/testing"
rollrec "demo-testing.rollrec"
display "1"
manager "rollerd-tester"
args "-sleep 60 -loglevel tmi -logfile log.testing"
COPYRIGHT
Copyright 2012 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details.
AUTHOR
Wayne Morrison, tewok@tislabs.com
SEE ALSO buildrealms(8), dtrealms(8), grandvizier(8), lsrealm(8), realmchk(8), realminit(8)Net::DNS::SEC::Tools::keyrec(3), Net::DNS::SEC::Tools::rollrec(3)keyrec(5)perl v5.14.2 2012-06-14 realm(3pm)