Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
NAMED-CHECKCONF(1)		     BIND 9		      NAMED-CHECKCONF(1)

NAME
     named-checkconf - named configuration file syntax checking tool

SYNOPSIS
     named-checkconf [-achjklvz] [-p [-x ]] [-t directory] {filename}

DESCRIPTION
     named-checkconf  checks  the syntax, but not the semantics, of a named con-
     figuration file. The file, along with all files included by it,  is  parsed
     and   checked  for  syntax  errors.  If  no  file	is  specified,	/usr/lo-
     cal/etc/namedb/named.conf is read by default.

     Note: files that named reads in separate parser contexts, such as rndc.conf
     or rndc.key, are not automatically read by named-checkconf.   Configuration
     errors  in these files may cause named to fail to run, even if named-check-
     conf was successful.  However, named-checkconf can be run	on  these  files
     explicitly.

OPTIONS
     -a     Don't  check the dnssec-policy's DNSSEC key algorithms against those
	    supported by the crypto provider.  This is useful  when  checking  a
	    named.conf	intended  to  be  run on another machine with possibly a
	    different set of supported DNSSEC key algorithms.

     -h     This option prints the usage summary and exits.

     -j     When loading a zonefile, this option instructs  named  to  read  the
	    journal if it exists.

     -k     Check  the	dnssec-policy's DNSSEC keys against the key files in the
	    key-directory.  This is useful when checking a named.conf to  ensure
	    a DNSSEC policy matches the existing keys.

     -l     This option lists all the configured zones. Each line of output con-
	    tains  the	zone name, class (e.g. IN), view, and type (e.g. primary
	    or secondary).

     -c     This option specifies that only the "core" configuration  should  be
	    checked.  This  suppresses the loading of plugin modules, and causes
	    all parameters to plugin statements to be ignored.

     -i     This option ignores warnings on deprecated options.

     -p     This option prints out the named.conf and included files in  canoni-
	    cal form if no errors were detected. See also the -x option.

     -t directory
	    This  option instructs named to chroot to directory, so that include
	    directives in the configuration file are processed as if  run  by  a
	    similarly chrooted named.

     -v     This  option  prints  the version of the named-checkconf program and
	    exits.

     -x     When printing the configuration files in canonical form, this option
	    obscures shared secrets by replacing them with strings  of	question
	    marks  (?). This allows the contents of named.conf and related files
	    to be shared - for example, when submitting bug  reports  -  without
	    compromising private data. This option cannot be used without -p.

     -z     This  option performs a test load of all zones of type primary found
	    in named.conf.

     filename
	    This indicates the name of the configuration file to be checked.  If
	    not specified, it defaults to /usr/local/etc/namedb/named.conf.

RETURN VALUES
     named-checkconf  returns  an exit status of 1 if errors were detected and 0
     otherwise.

SEE ALSO
     named(8), named-checkzone(8), BIND 9 Administrator Reference Manual.

AUTHOR
     Internet Systems Consortium

COPYRIGHT
     2026, Internet Systems Consortium

9.20.26 			   2026-07-20		      NAMED-CHECKCONF(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=named-checkconf&sektion=1&manpath=FreeBSD+Ports+15.1.quarterly>

home | help