mirror of
https://github.com/webmin/webmin.git
synced 2026-02-08 00:12:14 +00:00
2330 lines
59 KiB
Perl
2330 lines
59 KiB
Perl
# bind8-lib.pl
|
|
# Common functions for bind8 config files
|
|
|
|
do '../web-lib.pl';
|
|
&init_config();
|
|
do 'records-lib.pl';
|
|
do '../ui-lib.pl';
|
|
@extra_forward = split(/\s+/, $config{'extra_forward'});
|
|
@extra_reverse = split(/\s+/, $config{'extra_reverse'});
|
|
%is_extra = map { $_, 1 } (@extra_forward, @extra_reverse);
|
|
%access = &get_module_acl();
|
|
$zone_names_cache = "$module_config_directory/zone-names";
|
|
$zone_names_version = 2;
|
|
|
|
if (open(VERSION, "$module_config_directory/version")) {
|
|
chop($bind_version = <VERSION>);
|
|
close(VERSION);
|
|
}
|
|
|
|
# get_config()
|
|
# Returns an array of references to assocs, each containing the details of
|
|
# one directive
|
|
sub get_config
|
|
{
|
|
if (!@get_config_cache) {
|
|
@get_config_cache = &read_config_file($config{'named_conf'});
|
|
}
|
|
return \@get_config_cache;
|
|
}
|
|
|
|
# get_config_parent([file])
|
|
# Returns a structure containing the top-level config as members
|
|
sub get_config_parent
|
|
{
|
|
local $file = $_[0] || $config{'named_conf'};
|
|
if (!defined($get_config_parent_cache{$file})) {
|
|
local $conf = &get_config();
|
|
if (!defined($lines_count{$file})) {
|
|
local $lref = &read_file_lines($file);
|
|
$lines_count{$file} = @$lref;
|
|
}
|
|
$get_config_parent_cache{$file} =
|
|
{ 'file' => $file,
|
|
'type' => 1,
|
|
'line' => -1,
|
|
'eline' => $lines_count{$file},
|
|
'members' => $conf };
|
|
}
|
|
return $get_config_parent_cache{$file};
|
|
}
|
|
|
|
# read_config_file(file, [expand includes])
|
|
# Reads a config file and returns an array of values
|
|
sub read_config_file
|
|
{
|
|
local($lnum, $line, $cmode, @ltok, @lnum, @tok,
|
|
@rv, $i, $t, $j, $ifile, @inc, $str);
|
|
$lnum = 0;
|
|
open(FILE, &make_chroot($_[0]));
|
|
while($line = <FILE>) {
|
|
# strip comments
|
|
$line =~ s/\r|\n//g;
|
|
$line =~ s/#.*$//g;
|
|
$line =~ s/\/\/.*$//g if ($line !~ /".*\/\/.*"/);
|
|
$line =~ s/\/\*.*\*\///g;
|
|
while(1) {
|
|
if (!$cmode && $line =~ /\/\*/) {
|
|
# start of a C-style comment
|
|
$cmode = 1;
|
|
$line =~ s/\/\*.*$//g;
|
|
}
|
|
elsif ($cmode) {
|
|
if ($line =~ /\*\//) {
|
|
# end of comment
|
|
$cmode = 0;
|
|
$line =~ s/^.*\*\///g;
|
|
}
|
|
else { $line = ""; last; }
|
|
}
|
|
else { last; }
|
|
}
|
|
|
|
# split line into tokens
|
|
undef(@ltok);
|
|
while(1) {
|
|
if ($line =~ /^\s*\"([^"]*)"(.*)$/) {
|
|
push(@ltok, $1); $line = $2;
|
|
}
|
|
elsif ($line =~ /^\s*([{};])(.*)$/) {
|
|
push(@ltok, $1); $line = $2;
|
|
}
|
|
elsif ($line =~ /^\s*([^{}; \t]+)(.*)$/) {
|
|
push(@ltok, $1); $line = $2;
|
|
}
|
|
else { last; }
|
|
}
|
|
foreach $t (@ltok) {
|
|
push(@tok, $t); push(@lnum, $lnum);
|
|
}
|
|
$lnum++;
|
|
}
|
|
close(FILE);
|
|
$lines_count{$_[0]} = $lnum;
|
|
|
|
# parse tokens into data structures
|
|
$i = 0; $j = 0;
|
|
while($i < @tok) {
|
|
$str = &parse_struct(\@tok, \@lnum, \$i, $j++, $_[0]);
|
|
if ($str) { push(@rv, $str); }
|
|
}
|
|
if (!@rv) {
|
|
# Add one dummy directive, so that the file is known
|
|
push(@rv, { 'name' => 'dummy',
|
|
'line' => 0,
|
|
'eline' => 0,
|
|
'index' => 0,
|
|
'file' => $_[0] });
|
|
}
|
|
|
|
if (!$_[1]) {
|
|
# expand include directives
|
|
while(&recursive_includes(\@rv, &base_directory(\@rv))) {
|
|
# This is done repeatedly to handle includes within includes
|
|
}
|
|
}
|
|
|
|
return @rv;
|
|
}
|
|
|
|
# recursive_includes(&dirs, base)
|
|
sub recursive_includes
|
|
{
|
|
local ($i, $j);
|
|
local $any = 0;
|
|
for($i=0; $i<@{$_[0]}; $i++) {
|
|
if (lc($_[0]->[$i]->{'name'}) eq "include") {
|
|
# found one.. replace the include directive with it
|
|
$ifile = $_[0]->[$i]->{'value'};
|
|
if ($ifile !~ /^\//) {
|
|
$ifile = "$_[1]/$ifile";
|
|
}
|
|
local @inc = &read_config_file($ifile, 1);
|
|
|
|
# update index of included structures
|
|
local $j;
|
|
for($j=0; $j<@inc; $j++) {
|
|
$inc[$j]->{'index'} += $_[0]->[$i]->{'index'};
|
|
}
|
|
|
|
# update index of structures after include
|
|
for($j=$i+1; $j<@{$_[0]}; $j++) {
|
|
$_[0]->[$j]->{'index'} += scalar(@inc) - 1;
|
|
}
|
|
splice(@{$_[0]}, $i--, 1, @inc);
|
|
$any++;
|
|
}
|
|
elsif ($_[0]->[$i]->{'type'} == 1) {
|
|
# Check sub-structures too
|
|
$any += &recursive_includes($_[0]->[$i]->{'members'}, $_[1]);
|
|
}
|
|
}
|
|
return $any;
|
|
}
|
|
|
|
|
|
# parse_struct(&tokens, &lines, &line_num, index, file)
|
|
# A structure can either have one value, or a list of values.
|
|
# Pos will end up at the start of the next structure
|
|
sub parse_struct
|
|
{
|
|
local (%str, $i, $j, $t, @vals, $str);
|
|
$i = ${$_[2]};
|
|
$str{'name'} = lc($_[0]->[$i]);
|
|
$str{'line'} = $_[1]->[$i];
|
|
$str{'index'} = $_[3];
|
|
$str{'file'} = $_[4];
|
|
if ($str{'name'} eq 'inet') {
|
|
# The inet directive doesn't have sub-structures, just multiple
|
|
# values with { } in them
|
|
$str{'type'} = 2;
|
|
$str{'members'} = { };
|
|
while(1) {
|
|
$t = $_[0]->[++$i];
|
|
if ($_[0]->[$i+1] eq "{") {
|
|
# Start of a named sub-structure ..
|
|
$i += 2; # skip {
|
|
$j = 0;
|
|
while($_[0]->[$i] ne "}") {
|
|
$str = &parse_struct($_[0], $_[1], \$i, $j++, $_[4]);
|
|
if ($str) {
|
|
push(@{$str{'members'}->{$t}}, $str);
|
|
}
|
|
}
|
|
next;
|
|
}
|
|
elsif ($t eq ";") { last; }
|
|
push(@vals, $t);
|
|
}
|
|
$i++; # skip trailing ;
|
|
$str{'values'} = \@vals;
|
|
$str{'value'} = $vals[0];
|
|
}
|
|
else {
|
|
# Normal directive, like foo bar; or foo bar { smeg; };
|
|
while(1) {
|
|
$t = $_[0]->[++$i];
|
|
if ($t eq "{" || $t eq ";" || $t eq "}") { last; }
|
|
elsif (!defined($t)) { ${$_[2]} = $i; return undef; }
|
|
else { push(@vals, $t); }
|
|
}
|
|
$str{'values'} = \@vals;
|
|
$str{'value'} = $vals[0];
|
|
if ($t eq "{") {
|
|
# contains sub-structures.. parse them
|
|
local(@mems, $j);
|
|
$i++; # skip {
|
|
$str{'type'} = 1;
|
|
$j = 0;
|
|
while($_[0]->[$i] ne "}") {
|
|
if (!defined($_[0]->[$i])) { ${$_[2]} = $i; return undef; }
|
|
$str = &parse_struct($_[0], $_[1], \$i, $j++, $_[4]);
|
|
if ($str) { push(@mems, $str); }
|
|
}
|
|
$str{'members'} = \@mems;
|
|
$i += 2; # skip trailing } and ;
|
|
}
|
|
else {
|
|
# only a single value..
|
|
$str{'type'} = 0;
|
|
if ($t eq ";") {
|
|
$i++; # skip trailing ;
|
|
}
|
|
}
|
|
}
|
|
$str{'eline'} = $_[1]->[$i-1]; # ending line is the line number the trailing
|
|
# ; is on
|
|
${$_[2]} = $i;
|
|
return \%str;
|
|
}
|
|
|
|
# find(name, &array)
|
|
sub find
|
|
{
|
|
local($c, @rv);
|
|
foreach $c (@{$_[1]}) {
|
|
if ($c->{'name'} eq $_[0]) {
|
|
push(@rv, $c);
|
|
}
|
|
}
|
|
return @rv ? wantarray ? @rv : $rv[0]
|
|
: wantarray ? () : undef;
|
|
}
|
|
|
|
# find_value(name, &array)
|
|
sub find_value
|
|
{
|
|
local(@v);
|
|
@v = &find($_[0], $_[1]);
|
|
if (!@v) { return undef; }
|
|
elsif (wantarray) { return map { $_->{'value'} } @v; }
|
|
else { return $v[0]->{'value'}; }
|
|
}
|
|
|
|
# base_directory([&config], [no-cache])
|
|
# Returns the base directory for named files
|
|
sub base_directory
|
|
{
|
|
if ($_[1] || !-r $zone_names_cache) {
|
|
# Actually work out base
|
|
local ($opts, $dir, $conf);
|
|
$conf = $_[0] ? $_[0] : &get_config();
|
|
if (($opts = &find("options", $conf)) &&
|
|
($dir = &find("directory", $opts->{'members'}))) {
|
|
return $dir->{'value'};
|
|
}
|
|
if ($config{'named_conf'} =~ /^(.*)\/[^\/]+$/ && $1) {
|
|
return $1;
|
|
}
|
|
return "/etc";
|
|
}
|
|
else {
|
|
# Use cache
|
|
local %znc;
|
|
&read_file_cached($zone_names_cache, \%znc);
|
|
return $znc{'base'} || &base_directory($_[0], 1);
|
|
}
|
|
}
|
|
|
|
# save_directive(&parent, name|&old, &values, indent, [structonly])
|
|
# Given a structure containing a directive name, type, values and members
|
|
# add, update or remove that directive in config structure and data files.
|
|
# Updating of files assumes that there is no overlap between directives -
|
|
# each line in the config file must contain part or all of only one directive.
|
|
sub save_directive
|
|
{
|
|
local(@oldv, @newv, $pm, $i, $o, $n, $lref, @nl);
|
|
$pm = $_[0]->{'members'};
|
|
@oldv = ref($_[1]) ? @{$_[1]} : &find($_[1], $pm);
|
|
@newv = @{$_[2]};
|
|
for($i=0; $i<@oldv || $i<@newv; $i++) {
|
|
if ($i >= @oldv && !$_[5]) {
|
|
# a new directive is being added.. put it at the end of
|
|
# the parent
|
|
if (!$_[4]) {
|
|
local $parent = &get_config_parent($newv[$i]->{'file'} ||
|
|
$_[0]->{'file'});
|
|
$lref = &read_file_lines(
|
|
&make_chroot($newv[$i]->{'file'} ||
|
|
$_[0]->{'file'}));
|
|
@nl = &directive_lines($newv[$i], $_[3]);
|
|
splice(@$lref, $_[0]->{'eline'}, 0, @nl);
|
|
$newv[$i]->{'file'} = $_[0]->{'file'};
|
|
$newv[$i]->{'line'} = $_[0]->{'eline'};
|
|
$newv[$i]->{'eline'} =
|
|
$_[0]->{'eline'} + scalar(@nl) - 1;
|
|
&renumber($parent, $_[0]->{'eline'}-1,
|
|
$_[0]->{'file'}, scalar(@nl));
|
|
}
|
|
push(@$pm, $newv[$i]);
|
|
}
|
|
elsif ($i >= @oldv && $_[5]) {
|
|
# a new directive is being added.. put it at the start of
|
|
# the parent
|
|
if (!$_[4]) {
|
|
local $parent = &get_config_parent($newv[$i]->{'file'} ||
|
|
$_[0]->{'file'});
|
|
$lref = &read_file_lines(
|
|
&make_chroot($newv[$i]->{'file'} ||
|
|
$_[0]->{'file'}));
|
|
@nl = &directive_lines($newv[$i], $_[3]);
|
|
splice(@$lref, $_[0]->{'line'}+1, 0, @nl);
|
|
$newv[$i]->{'file'} = $_[0]->{'file'};
|
|
$newv[$i]->{'line'} = $_[0]->{'line'}+1;
|
|
$newv[$i]->{'eline'} =
|
|
$_[0]->{'line'} + scalar(@nl);
|
|
&renumber($parent, $_[0]->{'line'},
|
|
$_[0]->{'file'}, scalar(@nl));
|
|
}
|
|
splice(@$pm, 0, 0, $newv[$i]);
|
|
}
|
|
elsif ($i >= @newv) {
|
|
# a directive was deleted
|
|
if (!$_[4]) {
|
|
local $parent = &get_config_parent($oldv[$i]->{'file'});
|
|
$lref = &read_file_lines(
|
|
&make_chroot($oldv[$i]->{'file'}));
|
|
$ol = $oldv[$i]->{'eline'} - $oldv[$i]->{'line'} + 1;
|
|
splice(@$lref, $oldv[$i]->{'line'}, $ol);
|
|
&renumber($parent, $oldv[$i]->{'eline'},
|
|
$oldv[$i]->{'file'}, -$ol);
|
|
}
|
|
splice(@$pm, &indexof($oldv[$i], @$pm), 1);
|
|
}
|
|
else {
|
|
# updating some directive
|
|
if (!$_[4]) {
|
|
local $parent = &get_config_parent($oldv[$i]->{'file'});
|
|
$lref = &read_file_lines(
|
|
&make_chroot($oldv[$i]->{'file'}));
|
|
@nl = &directive_lines($newv[$i], $_[3]);
|
|
$ol = $oldv[$i]->{'eline'} - $oldv[$i]->{'line'} + 1;
|
|
splice(@$lref, $oldv[$i]->{'line'}, $ol, @nl);
|
|
$newv[$i]->{'file'} = $_[0]->{'file'};
|
|
$newv[$i]->{'line'} = $oldv[$i]->{'line'};
|
|
$newv[$i]->{'eline'} =
|
|
$oldv[$i]->{'line'} + scalar(@nl) - 1;
|
|
&renumber($parent, $oldv[$i]->{'eline'},
|
|
$oldv[$i]->{'file'}, scalar(@nl) - $ol);
|
|
}
|
|
$pm->[&indexof($oldv[$i], @$pm)] = $newv[$i];
|
|
}
|
|
}
|
|
}
|
|
|
|
# directive_lines(&directive, tabs)
|
|
# Renders some directive into a number of lines of text
|
|
sub directive_lines
|
|
{
|
|
local(@rv, $v, $m, $i);
|
|
$rv[0] = "\t" x $_[1];
|
|
$rv[0] .= "$_[0]->{'name'}";
|
|
foreach $v (@{$_[0]->{'values'}}) {
|
|
if ($need_quote{$_[0]->{'name'}} && !$i) { $rv[0] .= " \"$v\""; }
|
|
else { $rv[0] .= " $v"; }
|
|
$i++;
|
|
}
|
|
if ($_[0]->{'type'} == 1) {
|
|
# multiple values.. include them as well
|
|
$rv[0] .= " {";
|
|
foreach $m (@{$_[0]->{'members'}}) {
|
|
push(@rv, &directive_lines($m, $_[1]+1));
|
|
}
|
|
push(@rv, ("\t" x ($_[1]+1))."}");
|
|
}
|
|
elsif ($_[0]->{'type'} == 2) {
|
|
# named sub-structures .. include them too
|
|
foreach my $sn (sort { $a cmp $b } (keys %{$_[0]->{'members'}})) {
|
|
$rv[0] .= " ".$sn." {";
|
|
foreach $m (@{$_[0]->{'members'}->{$sn}}) {
|
|
$rv[0] .= " ".join(" ", &directive_lines($m, 0));
|
|
}
|
|
$rv[0] .= " }";
|
|
}
|
|
}
|
|
$rv[$#rv] .= ";";
|
|
return @rv;
|
|
}
|
|
|
|
# renumber(&parent, line, file, count)
|
|
# Runs through the given array of directives and increases the line numbers
|
|
# of all those greater than some line by the given count
|
|
sub renumber
|
|
{
|
|
if ($_[0]->{'file'} eq $_[2]) {
|
|
if ($_[0]->{'line'} > $_[1]) { $_[0]->{'line'} += $_[3]; }
|
|
if ($_[0]->{'eline'} > $_[1]) { $_[0]->{'eline'} += $_[3]; }
|
|
}
|
|
if ($_[0]->{'type'} == 1) {
|
|
# Do sub-members
|
|
local $d;
|
|
foreach $d (@{$_[0]->{'members'}}) {
|
|
&renumber($d, $_[1], $_[2], $_[3]);
|
|
}
|
|
}
|
|
elsif ($_[0]->{'type'} == 2) {
|
|
# Do sub-members
|
|
local ($sm, $d);
|
|
foreach $sm (keys %{$_[0]->{'members'}}) {
|
|
foreach $d (@{$_[0]->{'members'}->{$sm}}) {
|
|
&renumber($d, $_[1], $_[2], $_[3]);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
# choice_input(text, name, &config, [display, option]+)
|
|
sub choice_input
|
|
{
|
|
local($rv, $v, $i, @ops);
|
|
$rv = "<td valign=top><b>$_[0]</b></td> <td valign=top>";
|
|
$v = &find_value($_[1], $_[2]);
|
|
for($i=3; $i<@_; $i+=2) {
|
|
$rv .= sprintf "<input type=radio name=%s value='%s' %s> %s\n",
|
|
$_[1], $_[$i+1], $v eq $_[$i+1] ? "checked" : "", $_[$i];
|
|
}
|
|
return $rv."</td>\n";
|
|
}
|
|
|
|
# save_choice(name, &parent, indent)
|
|
sub save_choice
|
|
{
|
|
local($nd);
|
|
if ($in{$_[0]}) { $nd = { 'name' => $_[0], 'values' => [ $in{$_[0]} ] }; }
|
|
&save_directive($_[1], $_[0], $nd ? [ $nd ] : [ ], $_[2]);
|
|
}
|
|
|
|
# addr_match_input(text, name, &config)
|
|
# A field for editing a list of addresses, ACLs and partial IP addresses
|
|
sub addr_match_input
|
|
{
|
|
local($v, $rv, $av, @av);
|
|
$v = &find($_[1], $_[2]);
|
|
$rv = "<td valign=top><b>$_[0]</b></td> <td valign=top>";
|
|
$rv .= "<input type=radio name=$_[1]_def value=1 ".
|
|
($v ? "" : "checked")."> $text{'default'}";
|
|
$rv .= "<input type=radio name=$_[1]_def value=0 ".
|
|
($v ? "checked" : "")."> $text{'listed'}<br>";
|
|
foreach $av (@{$v->{'members'}}) { push(@av, $av->{'name'}); }
|
|
$rv .= "<textarea name=$_[1] rows=3 cols=15>".
|
|
join("\n", @av)."</textarea></td>\n";
|
|
}
|
|
|
|
# save_addr_match(name, &parent, indent)
|
|
sub save_addr_match
|
|
{
|
|
local($addr, @vals, $dir);
|
|
if ($in{"$_[0]_def"}) { &save_directive($_[1], $_[0], [ ], $_[2]); }
|
|
else {
|
|
foreach $addr (split(/\s+/, $in{$_[0]})) {
|
|
push(@vals, { 'name' => $addr });
|
|
}
|
|
$dir = { 'name' => $_[0], 'type' => 1, 'members' => \@vals };
|
|
&save_directive($_[1], $_[0], [ $dir ], $_[2]);
|
|
}
|
|
}
|
|
|
|
# address_port_input(addresstext, portlabeltext, portnametext, defaulttext,
|
|
# addressname, portname, &config, size, type)
|
|
sub address_port_input
|
|
{
|
|
my $rv = &address_input($_[0], $_[4], $_[6], $_[8]);
|
|
my $v = &find($_[4], $_[6]);
|
|
|
|
my $port;
|
|
for ($i = 0; $i < @{$v->{'values'}}; $i++) {
|
|
if ($v->{'values'}->[$i] eq $_[5]) {
|
|
$port = $v->{'values'}->[$i+1];
|
|
last;
|
|
}
|
|
}
|
|
my $n;
|
|
($n = $_[5]) =~ s/[^A-Za-z0-9_]/_/g;
|
|
$rv .= "<td valign=top><b>$_[1]</b></td> <td nowrap valign=top>\n";
|
|
$rv .= sprintf "<input type=radio name=${n}_def value=1 %s> $_[3]\n",
|
|
defined($port) ? "" : "checked";
|
|
$rv .= sprintf "<input type=radio name=${n}_def value = 0 %s> ",
|
|
defined($port) ? "checked" : "";
|
|
$rv .= sprintf "<input name=$n size=$_[7] value=\"%s\"> $_[2]</td>\n",
|
|
defined($port) ? $port : "";
|
|
|
|
return $rv;
|
|
}
|
|
|
|
# address_input(text, name, &config, type)
|
|
sub address_input
|
|
{
|
|
local($v, $rv, $av, @av);
|
|
$v = &find($_[1], $_[2]);
|
|
foreach $av (@{$v->{'members'}}) {
|
|
push(@av, join(" ", $av->{'name'}, @{$av->{'values'}}));
|
|
}
|
|
if ($_[3] == 0) {
|
|
# text area
|
|
$rv = "<td valign=top><b>$_[0]</b></td> <td valign=top>";
|
|
$rv .= "<textarea name=$_[1] rows=3 cols=15>".
|
|
join("\n", @av)."</textarea></td>\n";
|
|
}
|
|
else {
|
|
$rv = "<td valign=top><b>$_[0]</b></td> <td colspan=3 valign=top>";
|
|
$rv .= "<input name=$_[1] size=50 value=\"".join(' ',@av)."\"></td>\n";
|
|
}
|
|
return $rv;
|
|
}
|
|
|
|
# save_port_address(name, portname, &config, indent)
|
|
sub save_port_address {
|
|
local($addr, $port, @vals, $dir);
|
|
foreach $addr (split(/\s+/, $in{$_[0]})) {
|
|
$addr =~ /^\S+$/ || &error(&text('eipacl', $addr));
|
|
push(@vals, { 'name' => $addr });
|
|
}
|
|
$dir = { 'name' => $_[0], 'type' => 1, 'members' => \@vals };
|
|
($n = $_[1]) =~ s/[^A-Za-z0-9_]/_/g;
|
|
$dir->{'values'} = [ $_[1], $in{$_[1]} ] if (!$in{"${n}_def"});
|
|
&save_directive($_[2], $_[0], @vals ? [ $dir ] : [ ], $_[3]);
|
|
}
|
|
|
|
# save_address(name, &parent, indent, ips-only)
|
|
sub save_address
|
|
{
|
|
local ($addr, @vals, $dir, $i);
|
|
local @sp = split(/\s+/, $in{$_[0]});
|
|
for($i=0; $i<@sp; $i++) {
|
|
!$_[3] || &check_ipaddress($sp[$i]) || &error(&text('eip', $sp[$i]));
|
|
if (lc($sp[$i]) eq "key") {
|
|
push(@vals, { 'name' => $sp[$i],
|
|
'values' => [ $sp[++$i] ] });
|
|
}
|
|
else {
|
|
push(@vals, { 'name' => $sp[$i] });
|
|
}
|
|
}
|
|
$dir = { 'name' => $_[0], 'type' => 1, 'members' => \@vals };
|
|
&save_directive($_[1], $_[0], @vals ? [ $dir ] : [ ], $_[2]);
|
|
}
|
|
|
|
# forwarders_input(text, name, &config)
|
|
sub forwarders_input
|
|
{
|
|
local($v, $rv, $av, @ips, @prs);
|
|
$v = &find($_[1], $_[2]);
|
|
foreach $av (@{$v->{'members'}}) {
|
|
push(@ips, $av->{'name'});
|
|
if ($av->{'values'}->[0] eq 'port') {
|
|
push(@prs, $av->{'values'}->[1]);
|
|
}
|
|
else {
|
|
push(@prs, undef);
|
|
}
|
|
}
|
|
$rv = "<td valign=top><b>$_[0]</b></td> <td valign=top>\n";
|
|
$rv .= "<table border>\n";
|
|
$rv .= "<tr $tb> <td><b>$text{'forwarding_ip'}</b></td> ".
|
|
"<td><b>$text{'forwarding_port'}</b></td> </tr>\n";
|
|
for($i=0; $i<@ips+3; $i++) {
|
|
$rv .= "<tr $cb>\n";
|
|
$rv .= "<td><input name=$_[1]_ip_$i size=20 value='$ips[$i]'></td>\n";
|
|
$rv .= "<td><input name=$_[1]_pr_$i size=15 value='$prs[$i]'></td>\n";
|
|
$rv .= "</tr>\n";
|
|
}
|
|
$rv .= "</table>\n";
|
|
return $rv;
|
|
}
|
|
|
|
# save_forwarders(name, &parent, indent)
|
|
sub save_forwarders
|
|
{
|
|
local ($i, $ip, $pr, @vals);
|
|
for($i=0; defined($ip = $in{"$_[0]_ip_$i"}); $i++) {
|
|
next if (!$ip);
|
|
&check_ipaddress($ip) || &error(&text('eip', $ip));
|
|
$pr = $in{"$_[0]_pr_$i"};
|
|
!$pr || $pr =~ /^\d+$/ || &error(&text('eport', $pr));
|
|
push(@vals, { 'name' => $ip,
|
|
'values' => $pr ? [ "port", $pr ] : [ ] });
|
|
}
|
|
local $dir = { 'name' => $_[0], 'type' => 1, 'members' => \@vals };
|
|
&save_directive($_[1], $_[0], @vals ? [ $dir ] : [ ], $_[2]);
|
|
}
|
|
|
|
# opt_input(text, name, &config, default, size, units)
|
|
sub opt_input
|
|
{
|
|
local($v, $rv, $n);
|
|
$v = &find($_[1], $_[2]);
|
|
($n = $_[1]) =~ s/[^A-Za-z0-9_]/_/g;
|
|
$rv = "<td valign=top><b>$_[0]</b></td> <td nowrap valign=top";
|
|
$rv .= $_[4] > 30 ? " colspan=3>\n" : ">\n";
|
|
$rv .= sprintf "<input type=radio name=${n}_def value=1 %s> $_[3]\n",
|
|
$v ? "" : "checked";
|
|
$rv .= sprintf "<input type=radio name=${n}_def value=0 %s> ",
|
|
$v ? "checked" : "";
|
|
$rv .= sprintf "<input name=$n size=$_[4] value=\"%s\"> $_[5]</td>\n",
|
|
$v ? $v->{'value'} : "";
|
|
return $rv;
|
|
}
|
|
|
|
sub save_opt
|
|
{
|
|
local($dir, $n);
|
|
($n = $_[0]) =~ s/[^A-Za-z0-9_]/_/g;
|
|
if ($in{"${n}_def"}) { &save_directive($_[2], $_[0], [ ], $_[3]); }
|
|
elsif ($err = &{$_[1]}($in{$n})) {
|
|
&error($err);
|
|
}
|
|
else {
|
|
$dir = { 'name' => $_[0], 'values' => [ $in{$n} ] };
|
|
&save_directive($_[2], $_[0], [ $dir ], $_[3]);
|
|
}
|
|
}
|
|
|
|
# directives that need their value to be quoted
|
|
@need_quote = ( "file", "zone", "pid-file", "statistics-file",
|
|
"dump-file", "named-xfer", "secret" );
|
|
foreach $need (@need_quote) {
|
|
$need_quote{$need}++;
|
|
}
|
|
|
|
1;
|
|
|
|
# find_reverse(address, [view])
|
|
# Returns the zone and record structures for the PTR record for some address
|
|
sub find_reverse
|
|
{
|
|
local($conf, @zl, $rev, $z, $revconf, $revfile, $revrec, @revrecs, $addr, $rr,
|
|
@octs, $i, @hexs, $ipv6, @zero);
|
|
|
|
# find reverse domain
|
|
local @zl = grep { $_->{'type'} ne 'view' } &list_zone_names();
|
|
if ($_[1] ne '') {
|
|
@zl = grep { $_->{'view'} && $_->{'viewindex'} == $_[1] } @zl;
|
|
}
|
|
else {
|
|
@zl = grep { !$_->{'view'} } @zl;
|
|
}
|
|
$ipv6 = $config{'support_aaaa'} && &check_ip6address($_[0]);
|
|
if ($ipv6) {
|
|
@zero = (0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0);
|
|
$addr = &expandall_ip6($_[0]);
|
|
$addr =~ s/://g;
|
|
@hexs = split('', $addr);
|
|
DOMAIN: for($i=30; $i>=0; $i--) {
|
|
$addr = join(':',split(/(.{4})/,join('', (@hexs[0..$i],@zero[$i..30]))));
|
|
$addr =~ s/::/:/g;
|
|
$addr =~ s/(^:|:$)//g;
|
|
$rev = &net_to_ip6int($addr, 4*($i+1));
|
|
$rev =~ s/\.$//g;
|
|
foreach $z (@zl) {
|
|
if (lc($z->{'name'}) eq $rev && $z->{'type'} eq 'master') {
|
|
# found the reverse master domain
|
|
$revconf = $z;
|
|
last DOMAIN;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
else {
|
|
@octs = split(/\./, $_[0]);
|
|
DOMAIN: for($i=2; $i>=-1; $i--) {
|
|
$rev = $i<0 ? "in-addr.arpa"
|
|
: &ip_to_arpa(join('.', @octs[0..$i]));
|
|
$rev =~ s/\.$//g;
|
|
foreach $z (@zl) {
|
|
if ((lc($z->{'name'}) eq $rev ||
|
|
lc($z->{'name'}) eq "$rev.") &&
|
|
$z->{'type'} eq "master") {
|
|
# found the reverse master domain
|
|
$revconf = $z;
|
|
last DOMAIN;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
# find reverse record
|
|
if ($revconf) {
|
|
$revfile = &absolute_path($revconf->{'file'});
|
|
@revrecs = &read_zone_file($revfile, $revconf->{'name'});
|
|
if ($ipv6) {
|
|
$addr = &net_to_ip6int($_[0], 128);
|
|
}
|
|
else {
|
|
$addr = &ip_to_arpa($_[0]);
|
|
}
|
|
foreach $rr (@revrecs) {
|
|
if ($rr->{'type'} eq "PTR" &&
|
|
lc($rr->{'name'}) eq lc($addr)) {
|
|
# found the reverse record
|
|
$revrec = $rr;
|
|
last;
|
|
}
|
|
}
|
|
}
|
|
return ($revconf, $revfile, $revrec);
|
|
}
|
|
|
|
# find_forward(address, [view])
|
|
# Returns the zone and record structures for the A record for some address
|
|
sub find_forward
|
|
{
|
|
local ($fwdconf, $i, $fwdfile, $fwdrec, $fr, $ipv6);
|
|
|
|
# find forward domain
|
|
local $host = $_[0]; $host =~ s/\.$//;
|
|
local @zl = grep { $_->{'type'} ne 'view' } &list_zone_names();
|
|
if ($_[1] ne '') {
|
|
@zl = grep { $_->{'view'} && $_->{'viewindex'} == $_[1] } @zl;
|
|
}
|
|
else {
|
|
@zl = grep { !$_->{'view'} } @zl;
|
|
}
|
|
local @parts = split(/\./, $host);
|
|
DOMAIN: for($i=1; $i<@parts; $i++) {
|
|
local $fwd = join(".", @parts[$i .. @parts-1]);
|
|
foreach $z (@zl) {
|
|
local $typed;
|
|
if ((lc($z->{'name'}) eq $fwd ||
|
|
lc($z->{'name'}) eq "$fwd.") &&
|
|
$z->{'type'} eq "master") {
|
|
# Found the forward master!
|
|
$fwdconf = $z;
|
|
last DOMAIN;
|
|
}
|
|
}
|
|
}
|
|
|
|
# find forward record
|
|
if ($fwdconf) {
|
|
$fwdfile = &absolute_path($fwdconf->{'file'});
|
|
local @fwdrecs = &read_zone_file($fwdfile, $fwdconf->{'name'});
|
|
foreach $fr (@fwdrecs) {
|
|
if ($ipv6 ? $fr->{'type'} eq "AAAA" : $fr->{'type'} eq "A" &&
|
|
$fr->{'name'} eq $_[0]) {
|
|
# found the forward record!
|
|
$fwdrec = $fr;
|
|
last;
|
|
}
|
|
}
|
|
}
|
|
|
|
return ($fwdconf, $fwdfile, $fwdrec);
|
|
}
|
|
|
|
# can_edit_zone(&zone, [&view] | &cachedzone)
|
|
# Returns 1 if some zone can be edited
|
|
sub can_edit_zone
|
|
{
|
|
local %zcan;
|
|
local ($zn, $vn, $file);
|
|
if ($_[0]->{'members'}) {
|
|
# A full zone structure
|
|
$zn = $_[0]->{'value'};
|
|
$vn = $_[1] ? 'view_'.$_[1]->{'value'} : undef;
|
|
$file = &find_value("file", $_[0]->{'members'});
|
|
}
|
|
else {
|
|
# A cached zone object
|
|
$zn = $_[0]->{'name'};
|
|
$vn = $_[0]->{'view'} eq '*' ? undef : $_[0]->{'view'};
|
|
$file = $_[0]->{'file'};
|
|
}
|
|
|
|
# Check zone name
|
|
if ($access{'zones'} eq '*') {
|
|
# Always can
|
|
}
|
|
elsif ($access{'zones'} =~ /^\!/) {
|
|
# List of denied zones
|
|
foreach (split(/\s+/, $access{'zones'})) {
|
|
return 0 if ($_ eq $zn || ($vn && $_ eq $vn));
|
|
}
|
|
}
|
|
else {
|
|
# List of allowed zones
|
|
local $ok;
|
|
foreach (split(/\s+/, $access{'zones'})) {
|
|
$ok++ if ($_ eq $zn || ($vn && $_ eq $vn));
|
|
}
|
|
return 0 if (!$ok);
|
|
}
|
|
|
|
if ($access{'dironly'}) {
|
|
# Check directory access control
|
|
return 1 if (!$file);
|
|
$file = &absolute_path($file);
|
|
return 0 if (!&allowed_zone_file(\%access, $file));
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
# can_edit_reverse(&zone)
|
|
sub can_edit_reverse
|
|
{
|
|
return $access{'reverse'} || &can_edit_zone($_[0]);
|
|
}
|
|
|
|
# record_input(zoneindex, view, type, file, origin, [num], [record])
|
|
# Display a form for editing or creating a DNS record
|
|
sub record_input
|
|
{
|
|
local(%rec, @recs, $ttl, $ttlunit);
|
|
local $type = $_[6] ? $_[6]->{'type'} : $_[2];
|
|
print &ui_form_start("save_record.cgi");
|
|
print &ui_hidden("index", $_[0]);
|
|
print &ui_hidden("view", $_[1]);
|
|
print &ui_hidden("file", $_[3]);
|
|
print &ui_hidden("origin", $_[4]);
|
|
print &ui_hidden("sort", $in{'sort'});
|
|
if (@_ >= 6) {
|
|
print &ui_hidden("num", $_[5]);
|
|
%rec = %{$_[6]};
|
|
}
|
|
else {
|
|
print &ui_hidden("new", 1);
|
|
}
|
|
print &ui_hidden("type", $type);
|
|
print &ui_hidden("redirtype", $_[2]);
|
|
print &ui_table_start(&text(@_ >= 6 ? 'edit_edit' : 'edit_add',
|
|
$text{"edit_".$type}));
|
|
|
|
# Record name field(s)
|
|
if ($type eq "PTR") {
|
|
print &ui_table_row($text{'edit_addr'},
|
|
&ui_textbox("name",
|
|
!%rec && $_[4] =~ /^(\d+)\.(\d+)\.(\d+)\.in-addr/ ?
|
|
"$3.$2.$1." :
|
|
&ip6int_to_net(&arpa_to_ip($rec{'name'})), 30));
|
|
}
|
|
elsif ($type eq "NS") {
|
|
print &ui_table_row($text{'edit_zonename'},
|
|
&ui_textbox("name", $rec{'name'}, 30));
|
|
}
|
|
elsif ($type eq "SRV") {
|
|
local ($serv, $proto, $name) =
|
|
$rec{'name'} =~ /^([^\.]+)\.([^\.]+)\.(\S+)/ ? ($1, $2, $3) :
|
|
(undef, undef, undef);
|
|
$serv =~ s/^_//;
|
|
$proto =~ s/^_//;
|
|
print &ui_table_row($text{'edit_name'},
|
|
&ui_textbox("name", $name, 30));
|
|
|
|
print &ui_table_row($text{'edit_proto'},
|
|
&ui_select("proto", $proto,
|
|
[ [ "tcp", "TCP" ],
|
|
[ "udp", "UDP" ],
|
|
[ "tls", "TLS" ] ], undef, undef, 1));
|
|
|
|
print &ui_table_row($text{'edit_serv'},
|
|
&ui_textbox("serv", $serv, 20));
|
|
}
|
|
else {
|
|
print &ui_table_row($text{'edit_name'},
|
|
&ui_textbox("name", $rec{'name'}, 30));
|
|
}
|
|
|
|
# TTL field
|
|
if ($rec{'ttl'} =~ /^(\d+)([SMHDW]?)$/i) {
|
|
$ttl = $1; $ttlunit = $2;
|
|
}
|
|
else {
|
|
$ttl = $rec{'ttl'}; $ttlunit = "";
|
|
}
|
|
print &ui_table_row($text{'edit_ttl'},
|
|
&ui_opt_textbox("ttl", $ttl, 8, $text{'default'})." ".
|
|
&time_unit_choice("ttlunit", $ttlunit));
|
|
|
|
# Value(s) fields
|
|
@v = @{$rec{'values'}};
|
|
if ($type eq "A" || $type eq "AAAA") {
|
|
print &ui_table_row($text{'value_A1'},
|
|
&ui_textbox("value0", $v[0], 20)." ".
|
|
(@_ < 6 && $type eq "A" ? &free_address_button("value0") : ""), 3);
|
|
if (@_ >= 6) {
|
|
print &ui_hidden("oldname", $rec{'name'});
|
|
print &ui_hidden("oldvalue0", $v[0]);
|
|
}
|
|
}
|
|
elsif ($type eq "NS") {
|
|
print &ui_table_row($text{'value_NS1'},
|
|
&ui_textbox("value0", $v[0], 30)." ($text{'edit_cnamemsg'})", 3);
|
|
}
|
|
elsif ($type eq "CNAME") {
|
|
print &ui_table_row($text{'value_CNAME1'},
|
|
&ui_textbox("value0", $v[0], 30)." ($text{'edit_cnamemsg'})", 3);
|
|
}
|
|
elsif ($type eq "MX") {
|
|
print &ui_table_row($text{'value_MX2'},
|
|
&ui_textbox("value1", $v[1], 30));
|
|
print &ui_table_row($text{'value_MX1'},
|
|
&ui_textbox("value0", $v[0], 8));
|
|
}
|
|
elsif ($type eq "HINFO") {
|
|
print &ui_table_row($text{'value_HINFO1'},
|
|
&ui_textbox("value0", $v[0], 20));
|
|
print &ui_table_row($text{'value_HINFO2'},
|
|
&ui_textbox("value1", $v[1], 20));
|
|
}
|
|
elsif ($type eq "TXT") {
|
|
print &ui_table_row($text{'value_TXT1'},
|
|
&ui_textbox("value0", $v[0], 40), 3);
|
|
}
|
|
elsif ($type eq "WKS") {
|
|
# Well known server
|
|
print &ui_table_row($text{'value_WKS1'},
|
|
&ui_textbox("value0", $v[0], 15));
|
|
|
|
print &ui_table_row($text{'value_WKS2'},
|
|
&ui_select("value1", lc($v[1]),
|
|
[ [ "tcp", "TCP" ], [ "udp", "UDP" ] ]));
|
|
|
|
print &ui_table_row($text{'value_WKS3'},
|
|
&ui_textarea("value2", join(' ', @v[2..$#v]), 3, 20));
|
|
}
|
|
elsif ($type eq "RP") {
|
|
# Responsible person
|
|
print &ui_table_row($text{'value_RP1'},
|
|
&ui_textbox("value0", &dotted_to_email($v[0]), 20));
|
|
|
|
print &ui_table_row($text{'value_RP2'},
|
|
&ui_textbox("value1", $v[1], 30));
|
|
}
|
|
elsif ($type eq "PTR") {
|
|
# Reverse address
|
|
print &ui_table_row($text{'value_PTR1'},
|
|
&ui_textbox("value0", $v[0], 30), 3);
|
|
if (@_ >= 6) {
|
|
print &ui_hidden("oldname", $rec{'name'});
|
|
print &ui_hidden("oldvalue0", $v[0]);
|
|
}
|
|
}
|
|
elsif ($type eq "SRV") {
|
|
print &ui_table_row($text{'value_SRV1'},
|
|
&ui_textbox("value0", $v[0], 8));
|
|
|
|
print &ui_table_row($text{'value_SRV2'},
|
|
&ui_textbox("value1", $v[1], 8));
|
|
|
|
print &ui_table_row($text{'value_SRV3'},
|
|
&ui_textbox("value2", $v[2], 8));
|
|
|
|
print &ui_table_row($text{'value_SRV4'},
|
|
&ui_textbox("value3", $v[3], 30));
|
|
}
|
|
elsif ($type eq "LOC") {
|
|
print &ui_table_row($text{'value_LOC1'},
|
|
&ui_textbox("value0", join(" ", @v), 40), 3);
|
|
}
|
|
elsif ($type eq "KEY") {
|
|
print &ui_table_row($text{'value_KEY1'},
|
|
&ui_textbox("value0", $v[0], 8));
|
|
|
|
print &ui_table_row($text{'value_KEY2'},
|
|
&ui_textbox("value1", $v[1], 8));
|
|
|
|
print &ui_table_row($text{'value_KEY3'},
|
|
&ui_textbox("value2", $v[2], 8));
|
|
|
|
print &ui_table_row($text{'value_KEY4'},
|
|
&ui_textarea("value3", join("\n", &wrap_lines($v[3], 80)),
|
|
5, 80), 3);
|
|
}
|
|
elsif ($type eq "SPF") {
|
|
# SPF records are complex, as they have several attributes encoded
|
|
# in the TXT value
|
|
local $spf = &parse_spf($v[0]);
|
|
print &ui_table_row($text{'value_spfa'},
|
|
&ui_yesno_radio("spfa", $spf->{'a'} ? 1 : 0), 3);
|
|
|
|
print &ui_table_row($text{'value_spfmx'},
|
|
&ui_yesno_radio("spfmx", $spf->{'mx'} ? 1 : 0), 3);
|
|
|
|
print &ui_table_row($text{'value_spfptr'},
|
|
&ui_yesno_radio("spfptr", $spf->{'ptr'} ? 1 : 0), 3);
|
|
|
|
print &ui_table_row($text{'value_spfas'},
|
|
&ui_textarea("spfas", join("\n", @{$spf->{'a:'}}), 3, 40), 3);
|
|
|
|
print &ui_table_row($text{'value_spfmxs'},
|
|
&ui_textarea("spfmxs", join("\n", @{$spf->{'mx:'}}), 3, 40), 3);
|
|
|
|
print &ui_table_row($text{'value_spfip4s'},
|
|
&ui_textarea("spfip4s", join("\n", @{$spf->{'ip4:'}}),
|
|
3, 40), 3);
|
|
|
|
print &ui_table_row($text{'value_spfincludes'},
|
|
&ui_textarea("spfincludes", join("\n", @{$spf->{'include:'}}),
|
|
3, 40), 3);
|
|
|
|
print &ui_table_row($text{'value_spfall'},
|
|
&ui_select("spfall", int($spf->{'all'}),
|
|
[ [ 3, $text{'value_spfall3'} ],
|
|
[ 2, $text{'value_spfall2'} ],
|
|
[ 1, $text{'value_spfall1'} ],
|
|
[ 0, $text{'value_spfall0'} ],
|
|
[ undef, $text{'value_spfalldef'} ] ]), 3);
|
|
}
|
|
else {
|
|
# All other types just have a text box
|
|
print &ui_table_row($text{'value_other'},
|
|
&ui_textarea("values", join("\n", @v), 3, 40), 3);
|
|
}
|
|
|
|
# Comment field
|
|
if ($type ne "WKS") {
|
|
if ($config{'allow_comments'}) {
|
|
print &ui_table_row($text{'edit_comment'},
|
|
&ui_textbox("comment", $rec{'comment'}, 40), 3);
|
|
}
|
|
else {
|
|
print &ui_hidden("comment", $rec{'comment'});
|
|
}
|
|
}
|
|
|
|
# Update reverse/forward option
|
|
if ($type eq "A" || $type eq "AAAA") {
|
|
print &ui_table_row($text{'edit_uprev'},
|
|
&ui_radio("rev", $config{'rev_def'} == 0 ? 1 :
|
|
$config{'rev_def'} == 2 ? 2 : 0,
|
|
[ [ 1, $text{'yes'} ],
|
|
@_ < 6 ? ( [ 2, $text{'edit_over'} ] ) : ( ),
|
|
[ 0, $text{'no'} ] ]));
|
|
}
|
|
elsif ($type eq "PTR") {
|
|
print &ui_table_row($text{'edit_upfwd'},
|
|
&ui_radio("fwd", $config{'rev_def'} ? 0 : 1,
|
|
[ [ 1, $text{'yes'} ],
|
|
[ 0, $text{'no'} ] ]));
|
|
}
|
|
print &ui_table_end();
|
|
|
|
# End buttons
|
|
if (!$access{'ro'}) {
|
|
if (@_ >= 6) {
|
|
print &ui_form_end([ [ undef, $text{'save'} ],
|
|
[ "delete", $text{'delete'} ] ]);
|
|
}
|
|
else {
|
|
print &ui_form_end([ [ undef, $text{'create'} ] ]);
|
|
}
|
|
}
|
|
}
|
|
|
|
# zones_table(&links, &titles, &types, &deletes)
|
|
# Prints a table of zones, with checkboxes to delete
|
|
sub zones_table
|
|
{
|
|
local($i);
|
|
local @tds = ( "width=5" );
|
|
print &ui_columns_start([ "", $text{'index_zone'}, $text{'index_type'} ],
|
|
100, 0, \@tds);
|
|
for($i=0; $i<@{$_[0]}; $i++) {
|
|
local @cols = ( "<a href=\"$_[0]->[$i]\">$_[1]->[$i]</a>",
|
|
$_[2]->[$i] );
|
|
if (defined($_[3]->[$i])) {
|
|
print &ui_checked_columns_row(\@cols, \@tds, "d", $_[3]->[$i]);
|
|
}
|
|
else {
|
|
print &ui_columns_row(\@cols, \@tds);
|
|
}
|
|
}
|
|
print &ui_columns_end();
|
|
}
|
|
|
|
# convert_illegal(text)
|
|
# Convert text containing special HTML characters to properly display it.
|
|
sub convert_illegal
|
|
{
|
|
$_[0] =~ s/&/&/g;
|
|
$_[0] =~ s/>/>/g;
|
|
$_[0] =~ s/</</g;
|
|
$_[0] =~ s/"/"/g;
|
|
$_[0] =~ s/ / /g;
|
|
return $_[0];
|
|
}
|
|
|
|
sub check_net_ip
|
|
{
|
|
local($j, $arg = $_[0]);
|
|
if ($arg !~ /^(\d{1,3}\.){0,3}([0-9\-\/]+)$/) {
|
|
return 0;
|
|
}
|
|
foreach $j (split(/\./, $arg)) {
|
|
$j =~ /^(\d+)-(\d+)$/ && $1 < 255 && $2 < 255 ||
|
|
$j =~ /^(\d+)\/(\d+)$/ && $1 < 255 && $2 <= 32 ||
|
|
$j <= 255 || return 0;
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
# expand_ip6(ip)
|
|
# Transform compact (with ::) IPv6 address to the unique expanded form
|
|
# (without :: and leading zeroes in all parts)
|
|
sub expand_ip6
|
|
{
|
|
local($n);
|
|
for($n = 6 - ($_[0] =~ s/([^:]):(?=[^:])/$1:/g); $n > 0; $n--) {
|
|
$_[0] =~ s/::/:0::/;
|
|
}
|
|
$_[0] =~ s/::/:/;
|
|
$_[0] =~ s/^:/0:/;
|
|
$_[0] =~ s/:$/:0/;
|
|
$_[0] =~ s/(:|^)0(?=\w)/$1/;
|
|
$_[0] =~ tr/[A-Z]/[a-z]/;
|
|
return $_[0];
|
|
}
|
|
|
|
# expandall_ip6(ip)
|
|
# Transform IPv6 address to the expanded form containing all internal 0's
|
|
sub expandall_ip6
|
|
{
|
|
&expand_ip6($_[0]);
|
|
$_[0] =~ s/(:|^)(\w{3})(?=:|$)/:0$2/g;
|
|
$_[0] =~ s/(:|^)(\w{2})(?=:|$)/:00$2/g;
|
|
$_[0] =~ s/(:|^)(\w)(?=:|$)/:000$2/g;
|
|
return $_[0];
|
|
}
|
|
|
|
# check_ip6address(ip)
|
|
# Check if some IPv6 address is properly formatted
|
|
sub check_ip6address
|
|
{
|
|
local($ip6);
|
|
$ip6 = $_[0];
|
|
$ip6 = &expand_ip6($ip6);
|
|
return ($ip6 =~ /^([\da-f]{1,4}:){7}([\da-f]{1,4})$/i);
|
|
}
|
|
|
|
sub time_unit_choice
|
|
{
|
|
local ($name, $value) = @_;
|
|
return &ui_select($name, $value =~ /^(S?)$/i ? "" :
|
|
$value =~ /M/i ? "M" :
|
|
$value =~ /H/i ? "H" :
|
|
$value =~ /D/i ? "D" :
|
|
$value =~ /W/i ? "W" : $value,
|
|
[ [ "", $text{'seconds'} ],
|
|
[ "M", $text{'minutes'} ],
|
|
[ "H", $text{'hours'} ],
|
|
[ "D", $text{'days'} ],
|
|
[ "W", $text{'weeks'} ] ], 1, 0, 1);
|
|
}
|
|
|
|
sub extract_time_units
|
|
{
|
|
local(@ret);
|
|
foreach $j (@_) {
|
|
if ($j =~ /^(\d+)([SMHDW]?)$/is) {
|
|
push(@ret, $2); $j = $1;
|
|
}
|
|
}
|
|
return @ret;
|
|
}
|
|
|
|
sub email_to_dotted
|
|
{
|
|
local $v = $_[0];
|
|
$v =~ s/\.$//;
|
|
if ($v =~ /^([^.]+)\@(.*)$/) {
|
|
return "$1.$2.";
|
|
}
|
|
elsif ($v =~ /^(.*)\@(.*)$/) {
|
|
local ($u, $d) = ($1, $2);
|
|
$u =~ s/\./\\\./g;
|
|
return "\"$u.$d.\"";
|
|
}
|
|
else {
|
|
return $v;
|
|
}
|
|
}
|
|
|
|
sub dotted_to_email
|
|
{
|
|
local $v = $_[0];
|
|
if ($v ne ".") {
|
|
$v =~ s/([^\\])\./$1\@/;
|
|
$v =~ s/\\\./\./g;
|
|
$v =~ s/\.$//;
|
|
}
|
|
return $v;
|
|
}
|
|
|
|
# set_ownership(file)
|
|
# Sets the BIND ownership and permissions on some file
|
|
sub set_ownership
|
|
{
|
|
local ($user, $group, $perms);
|
|
if ($config{'file_owner'}) {
|
|
($user, $group) = split(/:/, $config{'file_owner'});
|
|
}
|
|
if ($config{'file_perms'}) {
|
|
$perms = oct($config{'file_perms'});
|
|
}
|
|
&set_ownership_permissions($user, $group, $perms, $_[0]);
|
|
}
|
|
|
|
if ($bind_version >= 9) {
|
|
@cat_list = ( 'default', 'general', 'database', 'security', 'config',
|
|
'resolver', 'xfer-in', 'xfer-out', 'notify', 'client',
|
|
'unmatched', 'network', 'update', 'queries', 'dispatch',
|
|
'dnssec', 'lame-servers' );
|
|
}
|
|
else {
|
|
@cat_list = ( 'default', 'config', 'parser', 'queries',
|
|
'lame-servers', 'statistics', 'panic', 'update',
|
|
'ncache', 'xfer-in', 'xfer-out', 'db',
|
|
'eventlib', 'packet', 'notify', 'cname', 'security',
|
|
'os', 'insist', 'maintenance', 'load', 'response-checks');
|
|
}
|
|
|
|
@syslog_levels = ( 'kern', 'user', 'mail', 'daemon', 'auth', 'syslog',
|
|
'lpr', 'news', 'uucp', 'cron', 'authpriv', 'ftp',
|
|
'local0', 'local1', 'local2', 'local3',
|
|
'local4', 'local5', 'local6', 'local7' );
|
|
|
|
@severities = ( 'critical', 'error', 'warning', 'notice', 'info',
|
|
'debug', 'dynamic' );
|
|
|
|
# can_edit_view(&view | &viewcache)
|
|
# Returns 1 if some view can be edited
|
|
sub can_edit_view
|
|
{
|
|
local %vcan;
|
|
local $vn = $_[0]->{'members'} ? $_[0]->{'value'} : $_[0]->{'name'};
|
|
|
|
if ($access{'vlist'} eq '*') {
|
|
return 1;
|
|
}
|
|
elsif ($access{'vlist'} =~ /^\!/) {
|
|
foreach (split(/\s+/, $access{'vlist'})) {
|
|
return 0 if ($_ eq $vn);
|
|
}
|
|
return 1;
|
|
}
|
|
else {
|
|
foreach (split(/\s+/, $access{'vlist'})) {
|
|
return 1 if ($_ eq $vn);
|
|
}
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
# wrap_lines(text, width)
|
|
# Given a multi-line string, return an array of lines wrapped to
|
|
# the given width
|
|
sub wrap_lines
|
|
{
|
|
local $rest = $_[0];
|
|
local @rv;
|
|
while(length($rest) > $_[1]) {
|
|
push(@rv, substr($rest, 0, $_[1]));
|
|
$rest = substr($rest, $_[1]);
|
|
}
|
|
push(@rv, $rest) if ($rest ne '');
|
|
return @rv;
|
|
}
|
|
|
|
# add_zone_access(domain)
|
|
# Add a new zone to the current user's access list
|
|
sub add_zone_access
|
|
{
|
|
if ($access{'zones'} ne '*' && $access{'zones'} !~ /^\!/) {
|
|
$access{'zones'} = join(" ", &unique(
|
|
split(/\s+/, $access{'zones'}), $_[0]));
|
|
&save_module_acl(\%access);
|
|
}
|
|
}
|
|
|
|
# is_config_valid()
|
|
sub is_config_valid
|
|
{
|
|
local $conf = &get_config();
|
|
local ($opts, $dir);
|
|
if (($opts = &find("options", $conf)) &&
|
|
($dir = &find("directory", $opts->{'members'})) &&
|
|
!(-d &make_chroot($dir->{'value'}))) {
|
|
return 0;
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
# check_bind_8()
|
|
# Returns the --help output if non BIND 8/9, or undef if is
|
|
sub check_bind_8
|
|
{
|
|
local $fflag = $gconfig{'os_type'} eq 'windows' ? '-f' : '';
|
|
local $out = `$config{'named_path'} -help $fflag 2>&1`;
|
|
return $out !~ /\[-f\]/ && $out !~ /\[-f\|/ ? $out : undef;
|
|
}
|
|
|
|
# get_chroot()
|
|
# Returns the chroot directory BIND is running under
|
|
sub get_chroot
|
|
{
|
|
if (!defined($get_chroot_cache)) {
|
|
if ($config{'auto_chroot'}) {
|
|
local $out = `$config{'auto_chroot'} 2>/dev/null`;
|
|
if (!$?) {
|
|
$out =~ s/\r|\n//g;
|
|
$get_chroot_cache = $out;
|
|
}
|
|
}
|
|
$get_chroot_cache ||= $config{'chroot'};
|
|
}
|
|
return $get_chroot_cache;
|
|
}
|
|
|
|
# make_chroot(file, [is-pid])
|
|
sub make_chroot
|
|
{
|
|
local $chroot = &get_chroot();
|
|
return $_[0] if (!$chroot);
|
|
return $_[0] if ($_[0] eq $config{'named_conf'} && $config{'no_chroot'});
|
|
return $_[0] if ($_[0] eq $config{'rndc_conf'}); # don't chroot rndc.conf
|
|
if ($config{'no_pid_chroot'} && $_[1]) {
|
|
return $_[0];
|
|
}
|
|
return $chroot.$_[0];
|
|
}
|
|
|
|
# has_ndc(exclude-mode)
|
|
# Returns 2 if rndc is installed, 1 if ndc is instaled, or 0
|
|
sub has_ndc
|
|
{
|
|
if ($config{'rndc_cmd'} =~ /^(\S+)/ && &has_command("$1") && $_[0] != 2) {
|
|
return 2;
|
|
}
|
|
if ($config{'ndc_cmd'} =~ /^(\S+)/ && &has_command("$1") && $_[0] != 1) {
|
|
return 1;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
# get_pid_file([no-cache])
|
|
# Returns the BIND pid file path, relative to any chroot
|
|
sub get_pid_file
|
|
{
|
|
if ($_[0] || !-r $zone_names_cache) {
|
|
# Read real config
|
|
local $conf = &get_config();
|
|
local ($opts, $pidopt);
|
|
if (($opts = &find("options", $conf)) &&
|
|
($pidopt = &find("pid-file", $opts->{'members'}))) {
|
|
# read from PID file
|
|
local $pidfile = $pidopt->{'value'};
|
|
if ($pidfile !~ /^\//) {
|
|
local $dir = &find("directory", $opts->{'members'});
|
|
$pidfile = $dir->{'value'}."/".$pidfile;
|
|
}
|
|
return $pidfile;
|
|
}
|
|
|
|
# use default file
|
|
local $p;
|
|
foreach $p (split(/\s+/, $config{'pid_file'})) {
|
|
if (-r &make_chroot($p, 1)) {
|
|
return $p;
|
|
}
|
|
}
|
|
return "/var/run/named.pid";
|
|
}
|
|
else {
|
|
# Use cache if possible
|
|
local %znc;
|
|
&read_file_cached($zone_names_cache, \%znc);
|
|
if ($znc{'pidfile'} && -r $znc{'pidfile'}) {
|
|
return $znc{'pidfile'};
|
|
}
|
|
else {
|
|
return &get_pid_file(1);
|
|
}
|
|
}
|
|
}
|
|
|
|
# can_edit_type(record-type)
|
|
sub can_edit_type
|
|
{
|
|
return 1 if (!$access{'types'});
|
|
local $t;
|
|
foreach $t (split(/\s+/, $access{'types'})) {
|
|
return 1 if (lc($t) eq lc($_[0]));
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
# add_to_file()
|
|
# Returns the filename to which new zones should be added (possibly relative to
|
|
# a chroot directory)
|
|
sub add_to_file
|
|
{
|
|
if ($config{'zones_file'}) {
|
|
local $conf = &get_config();
|
|
local $f;
|
|
foreach $f (&get_all_config_files($conf)) {
|
|
if (&same_file($f, $config{'zones_file'})) {
|
|
return $config{'zones_file'};
|
|
}
|
|
}
|
|
}
|
|
return $config{'named_conf'};
|
|
}
|
|
|
|
# get_all_config_files(&conf)
|
|
# Returns a list of all config files used by named.conf, including includes
|
|
sub get_all_config_files
|
|
{
|
|
local ($conf) = @_;
|
|
local @rv;
|
|
foreach my $c (@$conf) {
|
|
push(@rv, $c->{'file'});
|
|
if ($c->{'type'} == 1) {
|
|
push(@rv, &get_all_config_files($c->{'members'}));
|
|
}
|
|
}
|
|
return &unique(@rv);
|
|
}
|
|
|
|
# free_address_button(name, [form])
|
|
sub free_address_button
|
|
{
|
|
local $form = defined($_[2]) ? $_[2] : 0;
|
|
return "<input type=button onClick='ifield = document.forms[$form].$_[0]; chooser = window.open(\"free_chooser.cgi\", \"chooser\", \"toolbar=no,menubar=no,scrollbars=yes,width=150,height=500\"); chooser.ifield = ifield; window.ifield = ifield' value=\"...\">\n";
|
|
}
|
|
|
|
# create_slave_zone(name, master-ip, [view], [file], [&other-ips])
|
|
# A convenience function for creating a new slave zone, if it doesn't exist
|
|
# yet. Mainly useful for Virtualmin, to avoid excessive transfer of BIND
|
|
# configuration data.
|
|
# Returns 0 on success, 1 if BIND is not setup, 2 if the zone already exists,
|
|
# or 3 if the view doesn't exist, or 4 if the slave file couldn't be created
|
|
sub create_slave_zone
|
|
{
|
|
local $parent = &get_config_parent();
|
|
local $conf = $parent->{'members'};
|
|
local $opts = &find("options", $conf);
|
|
if (!$opts) {
|
|
return 1;
|
|
}
|
|
|
|
# Check if exists in the view
|
|
if ($_[2]) {
|
|
local ($v) = grep { $_->{'value'} eq $_[2] } &find("view", $conf);
|
|
@zones = &find("zone", $v->{'members'});
|
|
}
|
|
else {
|
|
@zones = &find("zone", $conf);
|
|
}
|
|
local ($z) = grep { $_->{'value'} eq $_[0] } @zones;
|
|
return 2 if ($z);
|
|
|
|
# Create it
|
|
local @mips = ( $_[1], @{$_[4]} );
|
|
local $masters = { 'name' => 'masters',
|
|
'type' => 1,
|
|
'members' => [ map { { 'name' => $_ } } @mips ] };
|
|
local $dir = { 'name' => 'zone',
|
|
'values' => [ $_[0] ],
|
|
'type' => 1,
|
|
'members' => [ { 'name' => 'type',
|
|
'values' => [ 'slave' ] },
|
|
$masters
|
|
]
|
|
};
|
|
local $base = $config{'slave_dir'} || &base_directory();
|
|
local $file;
|
|
if (!$_[3]) {
|
|
# File has default name and is under default directory
|
|
$file = &automatic_filename($_[0], $_[0] =~ /in-addr/i ? 1 : 0, $base,
|
|
$_[2]);
|
|
push(@{$dir->{'members'}}, { 'name' => 'file',
|
|
'values' => [ $file ] } );
|
|
}
|
|
elsif ($_[3] ne "none") {
|
|
# File was specified
|
|
$file = $_[3] =~ /^\// ? $_[3] : $base."/".$_[3];
|
|
push(@{$dir->{'members'}}, { 'name' => 'file',
|
|
'values' => [ $file ] } );
|
|
}
|
|
|
|
# Create the slave file, so that BIND can write to it
|
|
if ($file) {
|
|
&open_tempfile(ZONE, ">".&make_chroot($file), 1, 1) || return 4;
|
|
&close_tempfile(ZONE);
|
|
&set_ownership(&make_chroot($file));
|
|
}
|
|
|
|
local $view;
|
|
if ($_[2]) {
|
|
# Get and validate view
|
|
($view) = grep { $_->{'value'} eq $_[2] } &find("view", $conf);
|
|
return 3 if (!$view);
|
|
}
|
|
|
|
# Create the zone
|
|
&create_zone($dir, $conf, $view ? $view->{'index'} : undef);
|
|
|
|
return 0;
|
|
}
|
|
|
|
# delete_zone(name, [view], [file-too])
|
|
# Delete one zone from named.conf
|
|
# Returns 0 on success, 1 if the zone was not found, or 2 if the view was not found.
|
|
sub delete_zone
|
|
{
|
|
local $parent = &get_config_parent();
|
|
local $conf = $parent->{'members'};
|
|
local @zones;
|
|
if ($_[1]) {
|
|
# Look in one view
|
|
local ($v) = grep { $_->{'value'} eq $_[1] } &find("view", $conf);
|
|
return 2 if (!$v);
|
|
@zones = &find("zone", $v->{'members'});
|
|
$parent = $v;
|
|
}
|
|
else {
|
|
# Look in all views
|
|
@zones = &find("zone", $conf);
|
|
local $v;
|
|
foreach $v (&find("view", $conf)) {
|
|
push(@zones, &find("zone", $v->{'members'}));
|
|
}
|
|
}
|
|
local ($z) = grep { $_->{'value'} eq $_[0] } @zones;
|
|
return 1 if (!$z);
|
|
|
|
# Remove from config file
|
|
&lock_file($z->{'file'});
|
|
&save_directive($parent, [ $z ], [ ]);
|
|
&unlock_file($z->{'file'});
|
|
&flush_file_lines();
|
|
|
|
if ($_[2]) {
|
|
# Remove file
|
|
local $f = &find("file", $z->{'members'});
|
|
if ($f) {
|
|
&lock_file(&make_chroot(&absolute_path($f->{'value'})));
|
|
unlink(&make_chroot(&absolute_path($f->{'value'})));
|
|
&unlock_file(&make_chroot(&absolute_path($f->{'value'})));
|
|
}
|
|
}
|
|
|
|
&flush_zone_names();
|
|
return 0;
|
|
}
|
|
|
|
# rename_zone(oldname, newname, [view])
|
|
# Changes the name of some zone, and perhaps it's file
|
|
# Returns 0 on success, 1 if the zone was not found, or 2 if the view was
|
|
# not found.
|
|
sub rename_zone
|
|
{
|
|
local $parent = &get_config_parent();
|
|
local $conf = $parent->{'members'};
|
|
local @zones;
|
|
if ($_[2]) {
|
|
# Look in one view
|
|
local ($v) = grep { $_->{'value'} eq $_[2] } &find("view", $conf);
|
|
return 2 if (!$v);
|
|
@zones = &find("zone", $v->{'members'});
|
|
$parent = $v;
|
|
}
|
|
else {
|
|
# Look in all views
|
|
@zones = &find("zone", $conf);
|
|
local $v;
|
|
foreach $v (&find("view", $conf)) {
|
|
push(@zones, &find("zone", $v->{'members'}));
|
|
}
|
|
}
|
|
local ($z) = grep { $_->{'value'} eq $_[0] } @zones;
|
|
return 1 if (!$z);
|
|
|
|
$z->{'values'} = [ $_[1] ];
|
|
local $file = &find("file", $z->{'members'});
|
|
if ($file) {
|
|
# Update the file too
|
|
local $newfile = $file->{'values'}->[0];
|
|
$newfile =~ s/$_[0]/$_[1]/g;
|
|
if ($newfile ne $file->{'values'}->[0]) {
|
|
rename(&make_chroot($file->{'values'}->[0]),
|
|
&make_chroot($newfile));
|
|
$file->{'values'}->[0] = $newfile;
|
|
}
|
|
}
|
|
|
|
&save_directive($parent, [ $z ], [ $z ]);
|
|
&flush_file_lines();
|
|
return 0;
|
|
}
|
|
|
|
# restart_bind()
|
|
# A convenience function for re-starting BIND. Returns undef on success, or
|
|
# an error message on failure.
|
|
sub restart_bind
|
|
{
|
|
if ($config{'restart_cmd'} eq 'restart') {
|
|
# Stop and start again
|
|
&stop_bind();
|
|
return &start_bind();
|
|
}
|
|
elsif ($config{'restart_cmd'}) {
|
|
# Custom command
|
|
local $out = &backquote_logged("$config{'restart_cmd'} 2>&1 </dev/null");
|
|
if ($?) {
|
|
return &text('restart_ecmd', "<pre>$out</pre>");
|
|
}
|
|
}
|
|
else {
|
|
# Use signal
|
|
local $pidfile = &get_pid_file();
|
|
local $pid = &check_pid_file(&make_chroot($pidfile, 1));
|
|
if (!$pid) {
|
|
return &text('restart_epidfile', $pidfile);
|
|
}
|
|
elsif (!&kill_logged('HUP', $pid)) {
|
|
return &text('restart_esig', $pid, $!);
|
|
}
|
|
}
|
|
return undef;
|
|
}
|
|
|
|
# start_bind()
|
|
# Attempts to start the BIND DNS server, and returns undef on success or an
|
|
# error message on failure
|
|
sub start_bind
|
|
{
|
|
local $chroot = &get_chroot();
|
|
local $user;
|
|
local $cmd;
|
|
if ($config{'named_user'}) {
|
|
$user = "-u $config{'named_user'}";
|
|
if ($config{'named_group'}) {
|
|
$user .= " -g $config{'named_group'}";
|
|
}
|
|
else {
|
|
local @u = getpwnam($config{'named_user'});
|
|
local @g = getgrgid($u[3]);
|
|
$user .= " -g $g[0]";
|
|
}
|
|
}
|
|
if ($config{'start_cmd'}) {
|
|
$cmd = $config{'start_cmd'};
|
|
}
|
|
elsif (!$chroot) {
|
|
$cmd = "$config{'named_path'} -c $config{'named_conf'} $user </dev/null 2>&1";
|
|
}
|
|
elsif (`$config{'named_path'} -help 2>&1` =~ /\[-t/) {
|
|
# use named's chroot option
|
|
$cmd = "$config{'named_path'} -c $config{'named_conf'} -t $chroot $user </dev/null 2>&1";
|
|
}
|
|
else {
|
|
# use the chroot command
|
|
$cmd = "chroot $chroot $config{'named_path'} -c $config{'named_conf'} $user </dev/null 2>&1";
|
|
}
|
|
|
|
local $temp = &transname();
|
|
local $rv = &system_logged("$cmd </dev/null >$temp 2>&1");
|
|
local $out = `cat $temp`;
|
|
unlink($temp);
|
|
if ($rv || $out =~ /chroot.*not available/i) {
|
|
return &text('start_error', $out ? "<tt>$out</tt>" : "Unknown error");
|
|
}
|
|
return undef;
|
|
}
|
|
|
|
# stop_bind()
|
|
# Kills the running DNS server, and returns undef on success or an error message
|
|
# upon failure
|
|
sub stop_bind
|
|
{
|
|
if ($config{'stop_cmd'}) {
|
|
# Just use a command
|
|
local $out = &backquote_logged("($config{'stop_cmd'}) 2>&1");
|
|
if ($?) {
|
|
return "<pre>$out</pre>";
|
|
}
|
|
}
|
|
else {
|
|
# Kill the process
|
|
local $pidfile = &get_pid_file();
|
|
local $pid = &check_pid_file(&make_chroot($pidfile, 1));
|
|
if (!$pid || !&kill_logged('TERM', $pid)) {
|
|
return $text{'stop_epid'};
|
|
}
|
|
}
|
|
return undef;
|
|
}
|
|
|
|
# is_bind_running()
|
|
# Returns the PID if BIND is running
|
|
sub is_bind_running
|
|
{
|
|
local $pidfile = &get_pid_file();
|
|
local $rv = &check_pid_file(&make_chroot($pidfile, 1));
|
|
if (!$rv && $gconfig{'os_type'} eq 'windows') {
|
|
# Fall back to checking for process
|
|
$rv = &find_byname("named");
|
|
}
|
|
return $rv;
|
|
}
|
|
|
|
# version_atleast(v1, v2, v3)
|
|
sub version_atleast
|
|
{
|
|
local @vsp = split(/\./, $bind_version);
|
|
local $i;
|
|
for($i=0; $i<@vsp || $i<@_; $i++) {
|
|
return 0 if ($vsp[$i] < $_[$i]);
|
|
return 1 if ($vsp[$i] > $_[$i]);
|
|
}
|
|
return 1; # same!
|
|
}
|
|
|
|
# get_zone_index(name, [view])
|
|
# Returns the index of some zone in the real on-disk configuration
|
|
sub get_zone_index
|
|
{
|
|
undef(@get_config_cache);
|
|
local $conf = &get_config();
|
|
local $vconf = $_[1] ne '' ? $conf->[$in{'view'}]->{'members'} : $conf;
|
|
local $c;
|
|
foreach $c (@$vconf) {
|
|
if ($c->{'name'} eq 'zone' && $c->{'value'} eq $_[0]) {
|
|
return $c->{'index'};
|
|
}
|
|
}
|
|
return undef;
|
|
}
|
|
|
|
# create_zone(&zone, &conf, [view-idx])
|
|
# Convenience function for adding a new zone
|
|
sub create_zone
|
|
{
|
|
local ($dir, $conf, $viewidx) = @_;
|
|
if ($viewidx ne "") {
|
|
# Adding inside a view
|
|
local $view = $conf->[$viewidx];
|
|
&lock_file(&make_chroot($view->{'file'}));
|
|
&save_directive($view, undef, [ $dir ], 1);
|
|
&flush_file_lines();
|
|
&unlock_file(&make_chroot($view->{'file'}));
|
|
}
|
|
else {
|
|
# Adding at top level
|
|
$dir->{'file'} = &add_to_file();
|
|
local $pconf = &get_config_parent($dir->{'file'});
|
|
&lock_file(&make_chroot($dir->{'file'}));
|
|
&save_directive($pconf, undef, [ $dir ], 0);
|
|
&flush_file_lines();
|
|
&unlock_file(&make_chroot($dir->{'file'}));
|
|
}
|
|
&flush_zone_names();
|
|
}
|
|
|
|
$heiropen_file = "$module_config_directory/heiropen";
|
|
|
|
# get_heiropen()
|
|
# Returns an array of open categories
|
|
sub get_heiropen
|
|
{
|
|
open(HEIROPEN, $heiropen_file);
|
|
local @heiropen = <HEIROPEN>;
|
|
chop(@heiropen);
|
|
close(HEIROPEN);
|
|
return @heiropen;
|
|
}
|
|
|
|
# save_heiropen(&heir)
|
|
sub save_heiropen
|
|
{
|
|
&open_tempfile(HEIR, ">$heiropen_file");
|
|
foreach $h (@{$_[0]}) {
|
|
&print_tempfile(HEIR, $h,"\n");
|
|
}
|
|
&close_tempfile(HEIR);
|
|
}
|
|
|
|
# list_zone_names()
|
|
# Returns a list of zone names, types, files and views based on a cache
|
|
# built from the primary configuration.
|
|
sub list_zone_names
|
|
{
|
|
local @st = stat($zone_names_cache);
|
|
local %znc;
|
|
&read_file_cached($zone_names_cache, \%znc);
|
|
|
|
# Check if any files have changed, or if the master config has changed, or
|
|
# the PID file.
|
|
local @files;
|
|
local ($k, $changed, $filecount, %donefile);
|
|
foreach $k (keys %znc) {
|
|
if ($k =~ /^file_(.*)$/) {
|
|
$filecount++;
|
|
$donefile{$1}++;
|
|
local @fst = stat($1);
|
|
if ($fst[9] > $st[9]) {
|
|
$changed = 1;
|
|
}
|
|
}
|
|
}
|
|
if ($changed || !$filecount || $znc{'version'} != $zone_names_version ||
|
|
!$donefile{$config{'named_conf'}} ||
|
|
$config{'pid_file'} ne $znc{'pidfile_config'}) {
|
|
# Yes .. need to rebuild
|
|
%znc = ( );
|
|
local $conf = &get_config();
|
|
local @views = &find("view", $conf);
|
|
local ($v, $z);
|
|
local $n = 0;
|
|
foreach $v (@views) {
|
|
local @vz = &find("zone", $v->{'members'});
|
|
foreach $z (@vz) {
|
|
local $type = &find_value("type", $z->{'members'});
|
|
local $file = &find_value("file", $z->{'members'});
|
|
$znc{"zone_".($n++)} = "$z->{'value'} $z->{'index'} $type $v->{'value'} $file";
|
|
$files{$z->{'file'}}++;
|
|
}
|
|
$znc{"view_".($n++)} = "$v->{'value'} $v->{'index'}";
|
|
$files{$v->{'file'}}++;
|
|
}
|
|
foreach $z (&find("zone", $conf)) {
|
|
local $type = &find_value("type", $z->{'members'});
|
|
local $file = &find_value("file", $z->{'members'});
|
|
$znc{"zone_".($n++)} = "$z->{'value'} $z->{'index'} $type * $file";
|
|
$files{$z->{'file'}}++;
|
|
}
|
|
|
|
# Store the base directory and PID file
|
|
$znc{'base'} = &base_directory($conf, 1);
|
|
$znc{'pidfile'} = &get_pid_file(1);
|
|
$znc{'pidfile_config'} = $config{'pid_file'};
|
|
|
|
# Store source files
|
|
foreach $f (keys %files) {
|
|
local $realf = &make_chroot(&absolute_path($f));
|
|
local @st = stat($realf);
|
|
$znc{"file_".$realf} = $st[9];
|
|
}
|
|
|
|
$znc{'version'} = $zone_names_version;
|
|
&write_file($zone_names_cache, \%znc);
|
|
undef(@list_zone_names_cache);
|
|
}
|
|
|
|
# Use in-memory cache
|
|
if (defined(@list_zone_names_cache)) {
|
|
return @list_zone_names_cache;
|
|
}
|
|
|
|
# Construct the return value from the hash
|
|
local (@rv, %viewidx);
|
|
foreach $k (keys %znc) {
|
|
if ($k =~ /^zone_(\d+)$/) {
|
|
local ($name, $index, $type, $view, $file) =
|
|
split(/\s+/, $znc{$k}, 5);
|
|
push(@rv, { 'name' => $name,
|
|
'type' => $type,
|
|
'index' => $index,
|
|
'view' => $view eq '*' ? undef : $view,
|
|
'file' => $file });
|
|
}
|
|
elsif ($k =~ /^view_(\d+)$/) {
|
|
local ($name, $index) = split(/\s+/, $znc{$k}, 2);
|
|
push(@rv, { 'name' => $name,
|
|
'index' => $index,
|
|
'type' => 'view' });
|
|
$viewidx{$name} = $index;
|
|
}
|
|
}
|
|
local $z;
|
|
foreach $z (@rv) {
|
|
if ($z->{'type'} ne 'view' && $z->{'view'} ne '*') {
|
|
$z->{'viewindex'} = $viewidx{$z->{'view'}};
|
|
}
|
|
}
|
|
@list_zone_names_cache = @rv;
|
|
return @rv;
|
|
}
|
|
|
|
# flush_zone_names()
|
|
# Clears the in-memory and on-disk zone name caches
|
|
sub flush_zone_names
|
|
{
|
|
undef(@list_zone_names_cache);
|
|
unlink($zone_names_cache);
|
|
}
|
|
|
|
# get_zone_name(index|name, [viewindex|"any"])
|
|
# Returns a zone cache object, looked up by name or index
|
|
sub get_zone_name
|
|
{
|
|
local @zones = &list_zone_names();
|
|
local $field = $_[0] =~ /^\d+$/ ? "index" : "name";
|
|
local $z;
|
|
foreach $z (@zones) {
|
|
if ($z->{$field} eq $_[0] &&
|
|
($_[1] eq 'any' ||
|
|
$_[1] eq '' && !defined($z->{'viewindex'}) ||
|
|
$_[1] ne '' && $z->{'viewindex'} == $_[1])) {
|
|
return $z;
|
|
}
|
|
}
|
|
return undef;
|
|
}
|
|
|
|
# list_slave_servers()
|
|
# Returns a list of Webmin servers on which slave zones are created / deleted
|
|
sub list_slave_servers
|
|
{
|
|
&foreign_require("servers", "servers-lib.pl");
|
|
local %ids = map { $_, 1 } split(/\s+/, $config{'servers'});
|
|
local %secids = map { $_, 1 } split(/\s+/, $config{'secservers'});
|
|
local @servers = &servers::list_servers();
|
|
if (%ids) {
|
|
local @rv = grep { $ids{$_->{'id'}} } @servers;
|
|
foreach my $s (@rv) {
|
|
$s->{'sec'} = $secids{$s->{'id'}};
|
|
}
|
|
return @rv;
|
|
}
|
|
elsif ($config{'default_slave'} && !defined($config{'servers'})) {
|
|
# Migrate old-style setting of single slave
|
|
local ($serv) = grep { $_->{'host'} eq $config{'default_slave'} }
|
|
@servers;
|
|
if ($serv) {
|
|
&add_slave_server($serv);
|
|
return ($serv);
|
|
}
|
|
}
|
|
return ( );
|
|
}
|
|
|
|
# add_slave_server(&server)
|
|
sub add_slave_server
|
|
{
|
|
&lock_file($module_config);
|
|
&foreign_require("servers", "servers-lib.pl");
|
|
local @sids = split(/\s+/, $config{'servers'});
|
|
$config{'servers'} = join(" ", @sids, $_[0]->{'id'});
|
|
if ($_[0]->{'sec'}) {
|
|
local @secsids = split(/\s+/, $config{'secservers'});
|
|
$config{'secservers'} = join(" ", @secsids, $_[0]->{'id'});
|
|
}
|
|
&sync_default_slave();
|
|
&save_module_config();
|
|
&unlock_file($module_config);
|
|
&servers::save_server($_[0]);
|
|
}
|
|
|
|
# delete_slave_server(&server)
|
|
sub delete_slave_server
|
|
{
|
|
&lock_file($module_config);
|
|
local @sids = split(/\s+/, $config{'servers'});
|
|
$config{'servers'} = join(" ", grep { $_ != $_[0]->{'id'} } @sids);
|
|
local @secsids = split(/\s+/, $config{'secservers'});
|
|
$config{'secservers'} = join(" ", grep { $_ != $_[0]->{'id'} } @secsids);
|
|
&sync_default_slave();
|
|
&save_module_config();
|
|
&unlock_file($module_config);
|
|
}
|
|
|
|
sub sync_default_slave
|
|
{
|
|
local @servers = &list_slave_servers();
|
|
if (@servers) {
|
|
$config{'default_slave'} = $servers[0]->{'host'};
|
|
}
|
|
else {
|
|
$config{'default_slave'} = '';
|
|
}
|
|
}
|
|
|
|
# server_name(&server)
|
|
sub server_name
|
|
{
|
|
return $_[0]->{'desc'} ? $_[0]->{'desc'} : $_[0]->{'host'};
|
|
}
|
|
|
|
# create_master_records(file, zone, master, email, refresh, retry, expiry, min,
|
|
# add-master-ns, add-slaves-ns, add-template, tmpl-ip,
|
|
# add-template-reverse)
|
|
# Creates the records file for a new master zone. Returns undef on success, or
|
|
# an error message on failure.
|
|
sub create_master_records
|
|
{
|
|
local ($file, $zone, $master, $email, $refresh, $retry, $expiry, $min,
|
|
$add_master, $add_slaves, $add_tmpl, $ip, $addrev) = @_;
|
|
|
|
# Create the zone file
|
|
&lock_file(&make_chroot($file));
|
|
&open_tempfile(ZONE, ">".&make_chroot($file), 1) ||
|
|
return &text('create_efile3', $file, $!);
|
|
&print_tempfile(ZONE, "\$ttl $min\n")
|
|
if ($config{'master_ttl'});
|
|
&close_tempfile(ZONE);
|
|
|
|
# create the SOA and NS records
|
|
local $serial;
|
|
if ($config{'soa_style'} == 1) {
|
|
$serial = &date_serial().sprintf("%2.2d", $config{'soa_start'});
|
|
}
|
|
else {
|
|
# Use Unix time for date and running number serials
|
|
$serial = time();
|
|
}
|
|
local $vals = "$master $email (\n".
|
|
"\t\t\t$serial\n".
|
|
"\t\t\t$refresh\n".
|
|
"\t\t\t$retry\n".
|
|
"\t\t\t$expiry\n".
|
|
"\t\t\t$min )";
|
|
&create_record($file, "$zone.", undef, "IN", "SOA", $vals);
|
|
&create_record($file, "$zone.", undef, "IN", "NS", $master)
|
|
if ($add_master);
|
|
if ($add_slaves) {
|
|
local $slave;
|
|
foreach $slave (&list_slave_servers()) {
|
|
local @bn = $slave->{'nsname'} ||
|
|
gethostbyname($slave->{'host'});
|
|
local $full = "$bn[0].";
|
|
&create_record($file, "$zone.", undef, "IN", "NS", $full);
|
|
}
|
|
}
|
|
|
|
if ($add_tmpl) {
|
|
# Create template records
|
|
local %bumped;
|
|
for(my $i=0; $config{"tmpl_$i"}; $i++) {
|
|
local @c = split(/\s+/, $config{"tmpl_$i"}, 3);
|
|
local $name = $c[0] eq '.' ? "$zone." : $c[0];
|
|
local $fullname = $name =~ /\.$/ ? $name : "$name.$zone.";
|
|
local $recip = $c[2] || $ip;
|
|
&create_record($file, $name, undef, "IN", $c[1], $recip);
|
|
if ($addrev && ($c[1] eq "A" || $c[1] eq "AAAA")) {
|
|
# Consider adding reverse record
|
|
local ($revconf, $revfile, $revrec) = &find_reverse(
|
|
$recip, $view);
|
|
if ($revconf && &can_edit_reverse($revconf) &&
|
|
!$revrec) {
|
|
# Yes, add one
|
|
local $rname = $c[1] eq "A" ?
|
|
&ip_to_arpa($recip) :
|
|
&net_to_ip6int($recip);
|
|
&lock_file(&make_chroot($revfile));
|
|
&create_record($revfile, $rname,
|
|
undef, "IN", "PTR", $fullname);
|
|
if (!$bumped{$revfile}++) {
|
|
local @rrecs = &read_zone_file(
|
|
$revfile, $revconf->{'name'});
|
|
&bump_soa_record($revfile, \@rrecs);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
if ($config{'tmpl_include'}) {
|
|
# Add whatever is in the template file
|
|
local $tmpl = &read_file_contents($config{'tmpl_include'});
|
|
local %hash = ( 'ip' => $ip,
|
|
'dom' => $zone );
|
|
$tmpl = &substitute_template($tmpl, \%hash);
|
|
&open_tempfile(FILE, ">>".&make_chroot($file));
|
|
&print_tempfile(FILE, $tmpl);
|
|
&close_tempfile(FILE);
|
|
}
|
|
}
|
|
&unlock_file(&make_chroot($file));
|
|
&set_ownership(&make_chroot($file));
|
|
return undef;
|
|
}
|
|
|
|
# automatic_filename(domain, is-reverse, base, [viewname])
|
|
# Returns a filename for a new zone
|
|
sub automatic_filename
|
|
{
|
|
local ($zone, $rev, $base, $viewname) = @_;
|
|
local ($subs, $format);
|
|
if ($rev) {
|
|
# create filename for reverse zone
|
|
$subs = &ip6int_to_net(&arpa_to_ip($zone));
|
|
$subs =~ s/\//_/;
|
|
$format = $config{'reversezonefilename_format'};
|
|
}
|
|
else {
|
|
# create filename for forward zone
|
|
$format = $config{'forwardzonefilename_format'};
|
|
$subs = $zone;
|
|
}
|
|
if ($viewname) {
|
|
$subs .= ".".$viewname;
|
|
}
|
|
$format =~ s/ZONE/$subs/g;
|
|
return $file = $base."/".$format;
|
|
}
|
|
|
|
# create_on_slaves(zone, master-ip, file, [&hostnames])
|
|
# Creates the given zone on all configured slave servers, and returns a list
|
|
# of errors
|
|
sub create_on_slaves
|
|
{
|
|
local ($zone, $master, $file, $hosts) = @_;
|
|
local %on = map { $_, 1 } @$hosts;
|
|
&remote_error_setup(\&slave_error_handler);
|
|
local $slave;
|
|
local @slaveerrs;
|
|
local @slaves = &list_slave_servers();
|
|
foreach $slave (@slaves) {
|
|
next if (%on && !$on{$slave->{'host'}});
|
|
|
|
# Connect to server
|
|
$slave_error = undef;
|
|
&remote_foreign_require($slave, "bind8", "bind8-lib.pl");
|
|
if ($slave_error) {
|
|
push(@slaveerrs, [ $slave, $slave_error ]);
|
|
next;
|
|
}
|
|
|
|
# Work out other slave IPs
|
|
local @otherslaves = grep { $_ ne '' }
|
|
map { &to_ipaddress($_->{'host'}) }
|
|
grep { $_ ne $slave } @slaves;
|
|
|
|
# Create the zone
|
|
local $err = &remote_foreign_call($slave, "bind8",
|
|
"create_slave_zone", $zone, $master,
|
|
$slave->{'bind8_view'}, $file, \@otherslaves);
|
|
if ($err == 1) {
|
|
push(@slaveerrs, [ $slave, $text{'master_esetup'} ]);
|
|
}
|
|
elsif ($err == 2) {
|
|
push(@slaveerrs, [ $slave, $text{'master_etaken'} ]);
|
|
}
|
|
elsif ($err == 3) {
|
|
push(@slaveerrs, [ $slave, &text('master_eview',
|
|
$slave->{'bind8_view'}) ]);
|
|
}
|
|
}
|
|
&remote_error_setup();
|
|
return @slaveerrs;
|
|
}
|
|
|
|
# delete_on_slaves(domain, [&slave-hostnames])
|
|
# Delete some domain or all or listed slave servers
|
|
sub delete_on_slaves
|
|
{
|
|
local $dom = $_[0];
|
|
local %on = map { $_, 1 } @{$_[1]};
|
|
&remote_error_setup(\&slave_error_handler);
|
|
local $slave;
|
|
local @slaveerrs;
|
|
foreach $slave (&list_slave_servers()) {
|
|
next if (%on && !$on{$slave->{'host'}});
|
|
|
|
# Connect to server
|
|
$slave_error = undef;
|
|
&remote_foreign_require($slave, "bind8", "bind8-lib.pl");
|
|
if ($slave_error) {
|
|
push(@slaveerrs, [ $slave, $slave_error ]);
|
|
next;
|
|
}
|
|
|
|
# Delete the zone
|
|
$err = &remote_foreign_call($slave, "bind8", "delete_zone",
|
|
$dom, $slave->{'bind8_view'}, 1);
|
|
if ($err == 1) {
|
|
push(@slaveerrs, [ $slave, $text{'delete_ezone'} ]);
|
|
}
|
|
elsif ($err == 2) {
|
|
push(@slaveerrs, [ $slave, &text('master_eview',
|
|
$slave->{'bind8_view'}) ]);
|
|
}
|
|
}
|
|
&remote_error_setup();
|
|
return @slaveerrs;
|
|
}
|
|
|
|
# rename_on_slaves(olddomain, newdomain, [&slave-hostnames])
|
|
# Changes the name of some domain on all or listed slave servers
|
|
sub rename_on_slaves
|
|
{
|
|
local ($olddom, $newdom, $on) = @_;
|
|
local %on = map { $_, 1 } @$on;
|
|
&remote_error_setup(\&slave_error_handler);
|
|
local $slave;
|
|
local @slaveerrs;
|
|
foreach $slave (&list_slave_servers()) {
|
|
next if (%on && !$on{$slave->{'host'}});
|
|
|
|
# Connect to server
|
|
$slave_error = undef;
|
|
&remote_foreign_require($slave, "bind8", "bind8-lib.pl");
|
|
if ($slave_error) {
|
|
push(@slaveerrs, [ $slave, $slave_error ]);
|
|
next;
|
|
}
|
|
|
|
# Delete the zone
|
|
$err = &remote_foreign_call($slave, "bind8", "rename_zone",
|
|
$olddom, $newdom, $slave->{'bind8_view'});
|
|
if ($err == 1) {
|
|
push(@slaveerrs, [ $slave, $text{'delete_ezone'} ]);
|
|
}
|
|
elsif ($err == 2) {
|
|
push(@slaveerrs, [ $slave, &text('master_eview',
|
|
$slave->{'bind8_view'}) ]);
|
|
}
|
|
}
|
|
&remote_error_setup();
|
|
return @slaveerrs;
|
|
}
|
|
|
|
# restart_on_slaves([&slave-hostnames])
|
|
# Re-starts BIND on all or listed slave servers, and returns a list of errors
|
|
sub restart_on_slaves
|
|
{
|
|
local %on = map { $_, 1 } @{$_[0]};
|
|
&remote_error_setup(\&slave_error_handler);
|
|
local $slave;
|
|
local @slaveerrs;
|
|
foreach $slave (&list_slave_servers()) {
|
|
next if (%on && !$on{$slave->{'host'}});
|
|
|
|
# Find the PID file
|
|
$slave_error = undef;
|
|
&remote_foreign_require($slave, "bind8", "bind8-lib.pl");
|
|
if ($slave_error) {
|
|
push(@slaveerrs, [ $slave, $slave_error ]);
|
|
next;
|
|
}
|
|
local $sver = &remote_foreign_call($slave, "bind8",
|
|
"get_webmin_version");
|
|
local $pidfile;
|
|
if ($sver >= 1.140) {
|
|
# Call new function to get PID file from slave
|
|
$pidfile = &remote_foreign_call(
|
|
$slave, "bind8", "get_pid_file");
|
|
$pidfile = &remote_foreign_call(
|
|
$slave, "bind8", "make_chroot", $pidfile, 1);
|
|
}
|
|
else {
|
|
push(@slaveerrs, [ $slave, &text('restart_eversion',
|
|
$slave->{'host'}, 1.140) ]);
|
|
next;
|
|
}
|
|
|
|
# Read the PID and restart
|
|
local $pid = &remote_foreign_call($slave, "bind8",
|
|
"check_pid_file", $pidfile);
|
|
if (!$pid) {
|
|
push(@slaveerrs, [ $slave, &text('restart_erunning2',
|
|
$slave->{'host'}) ]);
|
|
next;
|
|
}
|
|
$err = &remote_foreign_call($slave, "bind8", "restart_bind");
|
|
if ($err) {
|
|
push(@slaveerrs, [ $slave, &text('restart_esig2',
|
|
$slave->{'host'}, $err) ]);
|
|
}
|
|
}
|
|
&remote_error_setup();
|
|
return @slaveerrs;
|
|
}
|
|
|
|
sub slave_error_handler
|
|
{
|
|
$slave_error = $_[0];
|
|
}
|
|
|
|
sub get_forward_record_types
|
|
{
|
|
return ("A", "NS", "CNAME", "MX", "HINFO", "TXT", "SPF", "WKS", "RP", "PTR", "LOC", "SRV", "KEY", $config{'support_aaaa'} ? ( "AAAA" ) : ( ), @extra_forward);
|
|
}
|
|
|
|
sub get_reverse_record_types
|
|
{
|
|
return ("PTR", "NS", "CNAME", @extra_reverse);
|
|
}
|
|
|
|
# try_cmd(args, [rndc-args])
|
|
# Try calling rndc and ndc with the same args, to see which one works
|
|
sub try_cmd
|
|
{
|
|
local $args = $_[0];
|
|
local $rndc_args = $_[1] || $_[0];
|
|
local $out;
|
|
if (&has_ndc() == 2) {
|
|
# Try with rndc
|
|
$out = &backquote_logged("$config{'rndc_cmd'} $rndc_args 2>&1 </dev/null");
|
|
}
|
|
if (&has_ndc() != 2 || $out =~ /connect\s+failed/i) {
|
|
if (&has_ndc(2)) {
|
|
# Try with rndc if rndc is not install or failed
|
|
$out = &backquote_logged("$config{'ndc_cmd'} $args 2>&1 </dev/null");
|
|
}
|
|
}
|
|
return $out;
|
|
}
|
|
|
|
1;
|
|
|