path: root/dns_wizard/Bind.pm

#!/usr/bin/perl -w
#
# version 0.4
# Copyright (C) 2004 Mandrakesoft
# Author: Antoine Ginies <aginies _ateuh _ mandrakesoft.com>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2, or (at your option)
# any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.

package MDK::Wizard::Bind;
use lib qw(/usr/lib/libDrakX);

use strict;
use services;
use common;
use MDK::Wizard::Varspaceval;
use MDK::Wizard::Wizcommon;
use network::network;

my $wiz = new MDK::Wizard::Wizcommon;
my $in = interactive->vnew;
my $SERIAL = chomp_(`date +20%y%m%d`);
my $HOSTNAME = $wiz->{net}->network_get("HOSTNAME");
my $BIND_CHROOT = "/var/lib/named";

my $IPSERVER = $wiz->{net}->itf_get("IPADDR");
my $sys_wizard_dns = "/etc/sysconfig/drak_dns_wiz";
if (-f $sys_wizard_dns) {
  our ($interface) = cat_($sys_wizard_dns) =~ /INTERFACE=(.*)/;
  ($IPSERVER) = `/sbin/ip addr show dev $interface` =~ /^\s*inet\s+(\d+\.\d+\.\d+\.\d+)/m;
} else {
  our $interface = "eth0";
  ($IPSERVER) = `/sbin/ip addr show dev $interface` =~ /^\s*inet\s+(\d+\.\d+\.\d+\.\d+)/m;
}

my $DOMAINNAME = chomp_(`dnsdomainname`);
my $CLIENTIP = get_spe_ip("ipnor", $IPSERVER) . ".";
my $WDIR = "/tmp/dnstest";
my $NAMED_DIR = $BIND_CHROOT . "/var/named";
my $DNSKEY = "";
my $SHORTHOSTNAME = chomp_(`hostname -s`);
my $TEXTINFO = "dns Wizard";
my $REP_SAVE = "/tmp/bck";
my $ZONE_DIR = $NAMED_DIR . "/zone";
my $DATE = `date +%d-%m-20%y`;
my $WIZARD_SCRIPTS = "/usr/share/wizards/dns_wizard/scripts";

my $o = {
	 name => 'DNS Configuration Wizard',
	 var => {
		 IPOFFORWARDER => '',
		 ADDSEARCH => '',
		 DOMAINNAME => $DOMAINNAME,
		 SHORTHOSTNAME => $SHORTHOSTNAME,
		 IPMASTER => '',
		 CLIENTNAME => '',
		 CLIENTIP => $CLIENTIP,
		},
	 init => sub {
	   my ($err, $msg) = test_host_domain($SHORTHOSTNAME, $DOMAINNAME);
	   if (!$err) {
	     $in->ask_warn(N("Error"), $msg);
	     die 'wizcancel';
	   }
	   ($err, $msg);
	 },
	 needed_rpm => [ 'bind' ],
	 defaultimage => "/usr/share/mcc/themes/default/dns_server-mdk.png",
	};

my %level = (
	     1 => N("Master DNS server"),
	     2 => N("Slave DNS server"),
	     3 => N("Add host in DNS"),
	     4 => N("Remove host in DNS"),
	     );

my @list_hosts;

sub list_hosts {
  my $iprev = get_spe_ip('iprev', $IPSERVER);
  my $db = "$ZONE_DIR/db.$iprev.hosts";
  #my $ipnor = get_spe_ip('iprev', $IPSERVER);
#  push @list_hosts, "";
  foreach (cat_($db)) {
    my ($h) = /\d{1,3}\tIN\tPTR\t(.*)/;
    !$h or push @list_hosts,$h;
  }
  @list_hosts;
}

$o->{pages} = {
	       welcome => {
			   name => N("DNS Master configuration wizard") . "\n\n" . N("DNS (Domain Name Server) is the service that maps an IP address of a machine with an internet host name.") . "\n\n" . N("This wizard will help you configuring the DNS services of your server. This configuration will provide a local DNS service for local computers names, with non-local requests forwarded to an outside DNS."),
			   no_back => 1,
			   pre => sub {
			     $o->{var}{wiz_level} ||= 1;
			   },
			   post => sub {
			     if ($o->{var}{wiz_level} == 2) {
			       return 'slave';
			     } elsif ($o->{var}{wiz_level} == 1) {
			       return 'interface';
			     } elsif ($o->{var}{wiz_level} == 3) { 
				 return -f $sys_wizard_dns ? 'addhost' : 'error_notmaster';
			     } elsif ($o->{var}{wiz_level} == 4) {
				 return -f $sys_wizard_dns ? 'removehost' : 'error_notmaster';
			     }
			   },
			   data => [
				    { label => '', val => \$o->{var}{wiz_level}, type => 'list', list => [ sort keys %level ], format => sub { $level{$_[0]} } },
				   ],
			   next => 'interface',
			  },
	       interface => {
			     name => N("DNS server Interface"),
			     data => [
				      { list => [ keys %{$wiz->{net}{itf}} ],  val => \$o->{var}{interface} },
				     ],
			     no_back => 1,
			     next => 'ipforward'
			    },
	       addhost => {
			   name => N("Client identification:") . "\n\n" . N("Your client on the network will be identified by name, as in clientname.company.net. Every machine on the network must have a (unique) IP address, in the usual dotted syntax.") . "\n\n" . N("(You don't need to add the domain after the name)") . "\n\n" . N("Note that the given IP address and client name should be unique in the network."),
			   data => [
				    { label => N("Server:"), val_ref => \$o->{var}{SHORTHOSTNAME} },
				    { label => N("DNS Domainname:"), val_ref => \$o->{var}{DOMAINNAME} },
				    { label => N("Name of the machine:"), val => \$o->{var}{CLIENTNAME} },
				    { label => N("IP address of the machine:"), val => \$o->{var}{CLIENTIP} },
				   ],
			       complete => sub {
				   if ($o->{var}{CLIENTIP}) {
				       if (!is_ip($o->{var}{CLIENTIP})) {
					   #$in->ask_warn(N("Error"), N("This is not a valid IP address.")); 
					   return 1;
				       } else {
					   return 0;
				       }
				   }
			       },
			   no_back => 1,
			   next => 'summaryadd', no_back => 1,
			  },
	       removehost => {
			      name => N("Remove host:") . "\n\n" . N("Remove a host in existing DNS configuration.") . "\n\n" . N("Choose the host you want to remove in the following list."),
			      data => [
				       { label => N("Computer Name:"), val => \$o->{var}{CLIENTNAME}, list_ref => \@list_hosts },
				      ],
			      post => \&list_hosts,
			      next => 'summaryremove', no_back => 1,
			     },
	       slave => {
			 name => N("Slave DNS server") . "\n\n" . N("A slave name server will take some of the burden away from your primary name server, and will also function as a backup server, in case your master server is unreachable."),
			 data => [
				  { label => N("IP Address of the master DNS server:"), val => \$o->{var}{IPMASTER} },
				 ],
 			     complete => sub {
				 if ($o->{var}{IPMASTER}) {
				     if (!is_ip($o->{var}{IPMASTER})) {
					 #$in->ask_warn(N("Error"), N("This is not a valid IP address.")); 
					 return 1;
				     } else { 
					 return 0;
				     }
				 }
			     },
			 no_back => 1,
			 next => 'summaryslave',
			},

	       ipforward => {
			     name => N("IP of your forwarder") . "\n\n" . N("Forwarding occurs on only those queries for which the server is not authoritative and  does not have the answer in its cache.") . "\n\n" . N("If you need it and know your IP forwarder enter IP address of it, if you dont know leave it blank"),
			   pre => sub {
			     ($IPSERVER) = `/sbin/ip addr show dev $o->{var}{interface}` =~ /^\s*inet\s+(\d+\.\d+\.\d+\.\d+)/m;
			     output($sys_wizard_dns, "INTERFACE=$o->{var}{interface}\n");
			   },
			     data => [
				      { label => N("External DNS:"), val => \$o->{var}{IPOFFORWARDER} },
				     ],
				 complete => sub {
				     if ($o->{var}{IPOFFORWARDER}) {
					 if (!is_ip($o->{var}{IPOFFORWARDER})) {
					     #$in->ask_warn(N("Error"), N("This is not a valid IP address for your forwarder.")); 
					     return 1;
					 } else {
					     return 0;
					 }
				     }
				 },
                             no_back => 1,
			     next => 'addsearch',
			    },
	       addsearch => {
			     name => N("Add search domain") . "\n\n" . N("Search list for host-name lookup.  The search list is normally determined from the local domain name; by default, it contains only the local domain name. This may be changed by listing the desired domain search path following the search keyword") . "\n\n" . N("Domainname of this server is automatically added, and you dont need to add it here."),

			     data => [
				      { label => N("Default domain name to search:"), val => \$o->{var}{ADDSEARCH} },
				     ],
			     next => 'summary',
			    },
	       error_ipf => {
			     name => N("This is not a valid IP address for your forwarder... press next to continue"),
			     ignore => 1,
			     next => 'ipforward',
			    },
	       error_ipm => {
			     name => N("This is not a valid Master DNS IP address... press next to continue"),
			     ignore => 1,
			     next => 'slave',
			    },
	       error_iph => {
			     name => N("This is not a valid IP address... press next to continue"),
			     ignore => 1,
			     next => 'addhost',
			    },
	       dhcp_warning => {
				name => N("Warning") . "\n\n" . N("You are in dhcp, server may not work with your configuration."),
				ignore => 1,
				next => 'client_id'
			       },
	       error_add => {
			     name => N("Error.") . "\n\n" . N("It seems that host is already in your DNS configuration... press next to continue"),
			     ignore => 1,
			     next => 'addhost',
			    },
	       error_remove => {
				name => N("Error:") . "\n\n" . N("It seems that this is not present in your DNS configuration... press next to continue"),
				ignore => 1,
				next => 'removehost',
			       },
	       error_nosrv => {
			       name => N("It seems that no DNS server has been set through wizard. Please run DNS wizard: Master DNS server."),
			       end => 1,
			      },
	       error_notmaster => {
				   name => N("It seems that you are not a master DNS server, so I can't add/remove host."),
				   end => 1,
				  },
	       summaryslave => {
				name => N("Wizard will Now build your DNS slave configuration") . "\n\n" . N("with this configuration:"),
				data => [
					 { label => N("IP Address of the master DNS server:"), val_ref => \$o->{var}{IPMASTER} },
					],
				post => \&do_it_slave,
				next => 'end',
			       },
	       summaryadd => {
			      name => N("Client with this identification will be added to your DNS"),
			      data => [
				       { label => N("Server:"), val_ref => \$o->{var}{SHORTHOSTNAME} },
				       { label => N("DNS Domainname:"), val_ref => \$o->{var}{DOMAINNAME} },
				       { label => N("Computer name:"), val_ref => \$o->{var}{CLIENTNAME} },
				       { label => N("Computer IP address:"), val_ref => \$o->{var}{CLIENTIP} },
				      ],
			      post => \&do_it_add,
			     },
	       summaryremove => {
				 name => N("Client with this identification will be removed from your DNS"),
				 data => [
					  { label => N("Computer name:"), val => \$o->{var}{CLIENTNAME}, list_ref => \@list_hosts },
					 ],
				 post => \&do_it_remove,
				 next => 'endremove',
				},
	       summary => {
			   name => N("The DNS server is about to be configured with the following configuration"),
			   data => [
				    { label => N("Server Hostname:"), val_ref => \$o->{var}{SHORTHOSTNAME} },
				    { label => N("Domainname:"), val_ref => \$o->{var}{DOMAINNAME} },
				    { label => N("External DNS:"), val_ref => \$o->{var}{IPOFFORWARDER} },
				    { label => N("Default domain name to search:"), val_ref => \$o->{var}{ADDSEARCH} },
				   ],
			   post => \&do_it_master,
			   next => 'end',
			  },
	       endadd => {
			  name => N("Congratulations"),
			  data => [ { label => N("The wizard successfully added the host in your DNS.") } ],
			  no_back => 1,
			  end => 1,
			 },
	       endremove => {
			     name => N("Congratulations"),
			     data => [ { label => N("The wizard successfully removed the host from your DNS.") } ],
			     no_back => 1,
			     end => 1,
			 },
	       end => {
		       name => N("Congratulations"),
		       data => [ { label => N("The wizard successfully configured the DNS service of your server.") } ],
		       no_back => 1,
		       end => 1,
		      },
	       error_end => {
			     name => N("Failed"),
			     data => [ { label => N("Please Relaunch drakwizard, and try to change some parameters.") } ],
			     no_back => 1,
			     end => 1,
			    },
	      };

sub test_srv {
  my $dir = $BIND_CHROOT . "/var/named/zone";
  -d $dir or return 'error_nosrv';
}

sub interface_to_ip {
  my ($interface) = @_;
  my ($ip) = `/sbin/ip addr show dev $interface` =~ /^\s*inet\s+(\d+\.\d+\.\d+\.\d+)/m;
  $ip;
}

sub crea_wdir {
  if (-e $WDIR) { system("rm -rf $WDIR") }
  mkdir_p($WDIR);
}

sub resolv_ip {
  my ($ip) = @_;
  gethostbyaddr(Socket::inet_aton($ip), Socket::AF_INET());
}

sub resolv_name {
  my ($name) = @_;
  join(".", unpack "C4", (gethostbyname $name)[4]);
}


sub get_spe_ip {
  # waiting iprev, ipnorm or ipend
  my ($att, $ip) = @_;
  my @o = split(/\./, $ip);
  if ($att =~ /iprev/) {
    my $iprev = $o[2] . "." . $o[1] . "." . $o[0];
    return $iprev;
  } elsif ($att =~ /ipnor/) {
    my $ipnor = $o[0] . "." . $o[1] . "." . $o[2];
    return $ipnor;
  } elsif ($att =~ /ipend/) {
    my $ipend = $o[3];
    return $ipend;
  }
}

sub increment_serial {
  my ($iprev) = @_;
  my ($SERIAL) = cat_("$ZONE_DIR/db.$DOMAINNAME.hosts") =~ m/\s+(.*?)\s+;\s+Serial/;
  $SERIAL = chomp_($SERIAL+1);
  substInFile {
      s/\s+\d+\s+;\s+Serial/     $SERIAL ; Serial/;
  } "$ZONE_DIR/db.$DOMAINNAME.hosts";

  substInFile {
      s/\s+\d+\s+;\s+Serial/     $SERIAL ; Serial/;
  } "$ZONE_DIR/db.$iprev.hosts"; 
}


sub crea_db_local {
    output($WDIR . "/db.localhost", <<EOF);
\$TTL 3D
\@       IN      SOA     $HOSTNAME. root.$HOSTNAME. (
         $SERIAL  ; Serial
	 8H  ; Refresh
	 2H  ; Retry
	 4W  ; Expire
	 1D) ; Minimum TTL
         NS      $HOSTNAME.
1        IN PTR   localhost.
EOF
}
# end of db.local


# create named.conf file
sub crea_named_common {
    output($WDIR . "/named.conf", <<EOF);
// (oe) Loosely based on the document below and from production server configurations.
// http://www.cymru.com/Documents/secure-bind-template.html

// secret must be the same as in /etc/rndc.conf
include "/etc/rndc.key";

controls {
    inet 127.0.0.1 port 953
    allow { 127.0.0.1; } keys { mykey; };
};

options {
    version "";
    directory "/var/named";
    dump-file "/var/tmp/named_dump.db";
    pid-file "/var/run/named/named.pid";
    statistics-file "/var/tmp/named.stats";
    zone-statistics yes;
//    datasize 256M;
    coresize 100M; 
//    fetch-glue no;
//    recursion no;
//    recursive-clients 10000;
    auth-nxdomain yes;
    query-source address * port *;
    listen-on port 53 { any; };
    cleaning-interval 120;
    transfers-in 20;
    transfers-per-ns 2;
    lame-ttl 0;
    max-ncache-ttl 10800;

//    forwarders { first_public_nameserver_ip; second_public_nameserver_ip; };
EOF
    !$o->{var}{IPOFFORWARDER} or append_to_file($WDIR . "/named.conf", "\tforwarders { $o->{var}{IPOFFORWARDER}; };\n");
    append_to_file($WDIR . "/named.conf", <<EOF);

//    allow-update { none; };
//    allow-transfer { any; };
// Prevent DoS attacks by generating bogus zone transfer 
// requests.  This will result in slower updates to the 
// slave servers (e.g. they will await the poll interval 
// before checking for updates). 
    notify no; 
//    notify explicit; 
//    also-notify { secondary_name_server };

// Generate more efficient zone transfers.  This will place 
// multiple DNS records in a DNS message, instead of one per 
// DNS message. 
    transfer-format many-answers; 

// Set the maximum zone transfer time to something more 
// reasonable.  In this case, we state that any zone transfer 
// that takes longer than 60 minutes is unlikely to ever 
// complete.  WARNING:  If you have very large zone files, 
// adjust this to fit your requirements. 
    max-transfer-time-in 60; 

// We have no dynamic interfaces, so BIND shouldn't need to 
// poll for interface state {UP|DOWN}. 
    interface-interval 0; 

// Uncoment these to enable IPv6 connections support
// IPv4 will still work
//      listen-on { none; };
//      listen-on-v6 { any; };

    allow-query { any; };
    allow-recursion { any; };

// Deny anything from the bogon networks as
// detailed in the "bogon" ACL.
//    blackhole { bogon; };
};

// workaround stupid stuff... (OE: Wed 17 Sep 2003)
zone "ac" { type delegation-only; };
zone "cc" { type delegation-only; };
zone "com" { type delegation-only; };
zone "cx" { type delegation-only; };
zone "lv" { type delegation-only; };
zone "museum" { type delegation-only; };
zone "net" { type delegation-only; };
zone "nu" { type delegation-only; };
zone "ph" { type delegation-only; };
zone "sh" { type delegation-only; };
zone "tm" { type delegation-only; };
zone "ws" { type delegation-only; };

zone "." IN {
        type hint;
        file "named.ca";
};

zone "localdomain" IN {
        type master;
        file "master/localdomain.zone";
        allow-update { none; };
};

zone "localhost" IN {
        type master;
        file "master/localhost.zone";
        allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "reverse/named.local";
        allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
        file "reverse/named.ip6.local";
        allow-update { none; };
};

zone "255.in-addr.arpa" IN {
        type master;
        file "reverse/named.broadcast";
        allow-update { none; };
};

zone "0.in-addr.arpa" IN {
        type master;
        file "reverse/named.zero";
        allow-update { none; };
};

EOF
}
# end named.conf

sub crea_named_master {
  my ($ip, $d) = @_;
  my $iprev = get_spe_ip('iprev', $ip);
  append_to_file($WDIR . "/named.conf", <<EOF);
zone "$iprev.in-addr.arpa" {
    type master;
    file "zone/db.$iprev.hosts";
    forwarders { };
};

zone "$d" {
    type master;
    file "zone/db.$d.hosts";
    forwarders { };
};
EOF
}

sub crea_named_slave {
  my ($ip, $d, $IPM) = @_;
  my $iprev = get_spe_ip('iprev', $ip);
  append_to_file($WDIR . "/named.conf", <<EOF);
zone "$iprev.in-addr.arpa" {
    type slave;
    masters { $IPM; };
    file "bak.db.$iprev.hosts";
};

zone "$d" {
    type slave;
    masters { $IPM; };
    file "bak.db.$d.hosts";
};
EOF
}

# create hints
sub crea_hints {
    output($WDIR . "/root.hints", <<EOF);
; <<>> DiG 8.1 <<>> \@A.ROOT-SERVERS.NET.
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
;; flags: qr aa rd; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 13
;; QUERY SECTION:
;;      ., type = NS, class = IN

;; ANSWER SECTION:
.                       6D IN NS        G.ROOT-SERVERS.NET.
.                       6D IN NS        J.ROOT-SERVERS.NET.
.                       6D IN NS        K.ROOT-SERVERS.NET.
.                       6D IN NS        L.ROOT-SERVERS.NET.
.                       6D IN NS        M.ROOT-SERVERS.NET.
.                       6D IN NS        A.ROOT-SERVERS.NET.
.                       6D IN NS        H.ROOT-SERVERS.NET.
.                       6D IN NS        B.ROOT-SERVERS.NET.
.                       6D IN NS        C.ROOT-SERVERS.NET.
.                       6D IN NS        D.ROOT-SERVERS.NET.
.                       6D IN NS        E.ROOT-SERVERS.NET.
.                       6D IN NS        I.ROOT-SERVERS.NET.
.                       6D IN NS        F.ROOT-SERVERS.NET.

;; ADDITIONAL SECTION:
G.ROOT-SERVERS.NET.     5w6d16h IN A    192.112.36.4
J.ROOT-SERVERS.NET.     5w6d16h IN A    198.41.0.10
K.ROOT-SERVERS.NET.     5w6d16h IN A    193.0.14.129
L.ROOT-SERVERS.NET.     5w6d16h IN A    198.32.64.12
M.ROOT-SERVERS.NET.     5w6d16h IN A    202.12.27.33
A.ROOT-SERVERS.NET.     5w6d16h IN A    198.41.0.4
H.ROOT-SERVERS.NET.     5w6d16h IN A    128.63.2.53
B.ROOT-SERVERS.NET.     5w6d16h IN A    128.9.0.107
C.ROOT-SERVERS.NET.     5w6d16h IN A    192.33.4.12
D.ROOT-SERVERS.NET.     5w6d16h IN A    128.8.10.90
E.ROOT-SERVERS.NET.     5w6d16h IN A    192.203.230.10
I.ROOT-SERVERS.NET.     5w6d16h IN A    192.36.148.17
F.ROOT-SERVERS.NET.     5w6d16h IN A    192.5.5.241
;; Total query time: 215 msec
;; FROM: roke.uio.no to SERVER: A.ROOT-SERVERS.NET.  198.41.0.4
;; WHEN: Sun Feb 15 01:22:51 1998
;; MSG SIZE  sent: 17  rcvd: 436
EOF
}
# end roots.hints

# create ipreverse
sub crea_iprev {
  my ($ip, $d) = @_;
  my $iprev = get_spe_ip('iprev', $ip);
  my $ipend = get_spe_ip('ipend', $ip);
  output($WDIR . "/db." . $iprev . ".hosts", <<EOF);
\$TTL 3D
@       IN      SOA     $SHORTHOSTNAME.$d.        $SHORTHOSTNAME.$d. (
		$SERIAL ; Serial
                10800   ; Refresh
                3600    ; Retry
                604800  ; Expire
                86400) ; Minimum TTL
                NS      $SHORTHOSTNAME.$d.
$ipend       IN      PTR     $SHORTHOSTNAME.$d.
; use tab to retrieve data in drakwizard bind
; 34      IN      PTR     xp2400.guibland.com.
EOF

}
# end create iprev

# create  ipnormal
sub crea_ipnorm {
  my ($ip, $d) = @_;
  output($WDIR . "/db.$d.hosts", <<EOF);
\$TTL 3D
@       IN      SOA     $SHORTHOSTNAME.$d. root.$SHORTHOSTNAME.$d. (
               $SERIAL       ; Serial
               8H   ; Refresh
               2H   ; Retry
               4W  ; Expire
               1D)  ; Minimum TTL
               TXT     $TEXTINFO
               IN      NS      $SHORTHOSTNAME.$d.
localhost              A       127.0.0.1
dnsmaster                   IN      CNAME   $SHORTHOSTNAME.$d.
$SHORTHOSTNAME.$d.        IN      A      $ip
; use tab to retrieve data in drakwizard bind
; xp2400.guibland.com.        IN      A      10.0.1.34
EOF
}
# end of ipnorm


# create 127.0.
sub crea_127 {
  my $d = $DOMAINNAME;
  output($WDIR . "/db.127.0.0.1", <<EOF);
\$TTL 3D
\@               IN      SOA     $d. root.$d. (
                $SERIAL ; Serial
                28800   ; Refresh
                7200    ; Retry
                604800  ; Expire
                86400)  ; Minimum TTL
                NS      $HOSTNAME.
localhost      IN       A     127.0.0.1
EOF
}
# end create 127

# create rndc.conf
sub crea_rndc {
  output($WDIR . "/rndc.conf", <<EOF);
/*
* Copyright (C) 2000, 2001  Internet Software Consortium.
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM
* DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL
* INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT,
* INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
* FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
* NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION
* WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
/* Id: dns_cluster.pm,v 1.18 2003/04/10 16:01:47 aginies Exp */
/*
* Sample rndc configuration file.
*/

options {
    default-server  localhost;
    default-key     "mykey";
};

server localhost {
    key     "mykey";
};

key "mykey" {
    algorithm       hmac-md5;
    secret "$DNSKEY";
};
EOF
}
# end of create rndc

# save old config files

sub save_old_config {
  if (-d $ZONE_DIR) {
    print " - Backup of current configuration in " . $REP_SAVE . "\n";
  }
  if (-d "$REP_SAVE/dns") { rm_rf("$REP_SAVE/dns") }
  mkdir_p($REP_SAVE . '/dns');
  system("cp -avf $ZONE_DIR/* $REP_SAVE/dns/");
#  cp_af($_, "$REP_SAVE/dns/$_" . '-' . $DATE . '.sauv') foreach glob_($ZONE_DIR . "/*");
  if (-e "$BIND_CHROOT/etc/named.conf") {
    cp_af("$BIND_CHROOT/etc/named.conf", "$REP_SAVE/dns/named.conf-$DATE");
  }
}
# end save old config

sub generate_rndc {
  mkdir_p($WDIR);
  system("rndc-confgen -a -c $WDIR/rndc.key");
  my ($key) = cat_("$WDIR/rndc.key") =~ /secret "(\S*)";/;
  $key;
}


# reinit resolv.conf
sub set_resolv {
    output($WDIR . "/resolv.conf", <<EOF);
domain $DOMAINNAME
search $DOMAINNAME
nameserver $IPSERVER
EOF

    !$o->{var}{IPMASTER} or return append_to_file($WDIR . "/resolv.conf", "nameserver $o->{var}{IPMASTER}\n");
    !$o->{var}{ADDSEARCH} or return append_to_file($WDIR . "/resolv.conf", "search $o->{var}{ADDSEARCH}\n");
    !$o->{var}{IPOFFORWARDER} or return append_to_file($WDIR . "/resolv.conf", "nameserver $o->{var}{IPOFFORWARDER}\n");
}
# end set resolv.conf

# set /etc/hosts
sub set_hosts {
  my ($ip, $h) = @_;
  if (!any { /$ip\s* $h/ } cat_($WDIR . "/hosts")) {
    append_to_file($WDIR . "/hosts", <<EOF);
$ip        $h
EOF
  }
}
# end set hosts

# check config of dns
sub check_config {
  system('named-checkconf', $WDIR . '/named.conf');
}
# end check config

# copy file correct place
sub copy_good {
  mkdir_p($ZONE_DIR);
  mkdir_p("$BIND_CHROOT/etc");
  cp_af($WDIR . '/named.conf', "$BIND_CHROOT/etc/named.conf");
  cp_af($WDIR . '/rndc.conf', "$BIND_CHROOT/etc/rndc.conf");
  cp_af($WDIR . '/hosts', '/etc/hosts');
  cp_af($WDIR . '/resolv.conf', '/etc/resolv.conf');
  cp_af($WDIR . '/root.hints', $ZONE_DIR . '/');
  cp_af(glob($WDIR . '/db*'), $ZONE_DIR . '/');
}
# end copy goodplace

my $ip_regexp = qr/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/;
sub check_ipm {
    my $ip = $o->{var}{IPMASTER};
    $ip or return 'slave';
    my @fields = $ip =~ $ip_regexp or return 'error_ipm';
    every { 0 <= $_ && $_ <= 255 } @fields or return 'error_ipm';
}

sub check_ipf {
    my $ip = $o->{var}{IPOFFORWARDER};
    $ip or return 'addsearch';
    my @fields = $ip =~ $ip_regexp or return 'error_ipf';
    every { 0 <= $_ && $_ <= 255 } @fields or return 'error_ipf';
}


sub check_iph {
  my $ip = $o->{var}{CLIENTIP};
  my @fields = $ip =~ $ip_regexp or return 'error_iph';
  every { 0 <= $_ && $_ <= 255 } @fields or return 'error_iph';
}

sub do_it {
    $::testing and return;
    foreach (qw(named.ca master reverse)) {
	cp_af("$WIZARD_SCRIPTS/$_", "$NAMED_DIR/$_") if !-e "$NAMED_DIR/$_";
    }
    #my ($st) = @_;
    crea_wdir($WDIR);
    # create files
    crea_db_local();
    crea_127();
    crea_named_common();
    # set host configuration
    if (-f $WDIR . '/hosts')  { rm_rf($WDIR . '/hosts') }
    set_hosts('127.0.0.1', 'localhost.localdomain localhost');
    set_hosts($IPSERVER, $HOSTNAME);
}

sub end_it {
  crea_hints();
  crea_rndc();
  # set configuration files on server
  set_resolv();
  # check generated config file are good
  check_config();
  # create backup
  save_old_config();
  # copy in correct place
  copy_good();
  reload_or_restart('named');
}

sub do_it_master {
  return if $::testing;
  my $in = 'interactive'->vnew('su', 'dns');
  check_starts_on_boot($in, 'named');
  my $w = $in->wait_message(N("Master DNS server"), N("Configuring your system as Master DNS server ..."));
  output($sys_wizard_dns, "INTERFACE=$o->{var}{interface}\n");
  do_it();
  crea_iprev($IPSERVER, $DOMAINNAME);
  crea_ipnorm($IPSERVER, $DOMAINNAME);
  crea_named_master($IPSERVER, $DOMAINNAME);
  end_it();
  undef $w;
  check_started('named');
}

sub do_it_slave {
  return if $::testing;
  my $in = 'interactive'->vnew('su', 'dns');
  check_starts_on_boot($in, 'named');
  my $w = $in->wait_message(N("Slave DNS server"), N("Configuring your system as Slave DNS server ..."));
  if (-f $sys_wizard_dns) { unlink $sys_wizard_dns }
  do_it();
  rm_rf(glob("$NAMED_DIR/bak*"));
  crea_named_slave($IPSERVER, $DOMAINNAME, $o->{var}{IPMASTER});
  end_it();
  undef $w;
  check_started('named');
}

sub get_shortname {
# sure someone can find a better method to do that
  my ($name) = @_;
  my @DT = split(/\./, $DOMAINNAME);
  my $NB = $#DT;
  if (any { /$DOMAINNAME$/x } $name) {
    my @shortname = split(/\./, $name);
    splice(@shortname, -$NB);
    my $shortn;
    foreach (@shortname) {
      $shortn or return $shortn = $_;
      !$shortn or return $shortn . "." . $_;
    }
  } else { return $name }
}

sub do_it_add {
  return if $::testing;
  test_srv();
  my $iprev = get_spe_ip('iprev', $IPSERVER);
  my $ipend = get_spe_ip('ipend', $o->{var}{CLIENTIP});
  my $SNAME = get_shortname($o->{var}{CLIENTNAME});
  if (any { /$ipend\tIN/ } cat_("$ZONE_DIR/db.$iprev.hosts")) {
    return 'error_add';
  } elsif (any { /$SNAME.$DOMAINNAME.$/ } cat_("$ZONE_DIR/db.$iprev.hosts")) {
    return 'error_add';
  } else {
    append_to_file("$ZONE_DIR/db.$DOMAINNAME.hosts",
		   "$SNAME.$DOMAINNAME.\tIN\tA\t$o->{var}{CLIENTIP}\n");
    append_to_file("$ZONE_DIR/db.$iprev.hosts",
		   "$ipend\tIN\tPTR\t$SNAME.$DOMAINNAME.\n");
  }
  increment_serial($iprev);
  system("service named reload");
  return 'endadd';
}

sub do_it_remove {
  return if $::testing;
  test_srv();
  my $iprev = get_spe_ip('iprev', $IPSERVER);
  my $NAME = $o->{var}{CLIENTNAME};
  substInFile {
    s/^\b$NAME.\b.*//;
    s/^\s*$//;
  } "$ZONE_DIR/db.$DOMAINNAME.hosts";
  substInFile {
    s/^\d+\tIN\tPTR\t$NAME.*//;
    s/^\s*$//;
  } "$ZONE_DIR/db.$iprev.hosts";
  increment_serial($iprev);
  system("service named reload");
}


#34       IN      PTR     xp2400.guibland.com.
sub do_it_list {
  return if $::testing;
  my $iprev = get_spe_ip('iprev', $IPSERVER);
  my $db = "$ZONE_DIR/db.$iprev.hosts";
  #my $ipnor = get_spe_ip('ipnor', $IPSERVER);
  my @hosts; my @ip;
  foreach (cat_($db)) {
    my ($ipend, $h) = /(\d{1,3})\tIN\tPTR\t(.*)/;
    if (!$h) { push @hosts, $h; push @ip, $ipend }
  }
}


sub new {
    my ($class) = @_;
    bless $o, $class;
}

1;