]>
Commit | Line | Data |
---|---|---|
dee2110b | 1 | gsql_master() |
c7c3a8d6 KM |
2 | { |
3 | backend=$1 | |
4 | skipreasons=$2 | |
5 | ||
4f983d1b PD |
6 | real_backend=$backend |
7 | if `echo $backend | grep -q '_'`; then | |
8 | real_backend=$(echo $backend | awk -F '_' '{print $1}') | |
9 | fi | |
10 | ||
c7c3a8d6 KM |
11 | if [ $context != ${backend}-nodnssec ] |
12 | then | |
4f983d1b | 13 | echo "${real_backend}-dnssec" >> pdns-${backend}.conf |
c7c3a8d6 KM |
14 | fi |
15 | ||
16 | for zone in $(grep 'zone ' named.conf | cut -f2 -d\") | |
17 | do | |
15a35f44 | 18 | if [ $context != ${backend}-nodnssec ] && [ $zone != insecure.dnssec-parent.com ] |
c7c3a8d6 | 19 | then |
c7c3a8d6 KM |
20 | if [ $context = ${backend}-nsec3 ] || [ $context = ${backend}-nsec3-optout ] |
21 | then | |
fd5076c8 | 22 | $PDNSUTIL --config-dir=. --config-name=$backend set-nsec3 $zone "1 $optout 1 abcd" 2>&1 |
c7c3a8d6 KM |
23 | elif [ $context = ${backend}-nsec3-narrow ] |
24 | then | |
fd5076c8 | 25 | $PDNSUTIL --config-dir=. --config-name=$backend set-nsec3 $zone '1 1 1 abcd' narrow 2>&1 |
c7c3a8d6 | 26 | fi |
7649cd71 | 27 | securezone $zone ${backend} |
c7c3a8d6 | 28 | else |
fd5076c8 | 29 | $PDNSUTIL --config-dir=. --config-name=$backend rectify-zone $zone 2>&1 |
c7c3a8d6 | 30 | fi |
690cc189 PL |
31 | if [ "$zone" = "tsig.com" ]; then |
32 | $PDNSUTIL --config-dir=. --config-name=$backend import-tsig-key test $ALGORITHM $KEY | |
33 | $PDNSUTIL --config-dir=. --config-name=$backend activate-tsig-key tsig.com test master | |
34 | fi | |
c7c3a8d6 KM |
35 | done |
36 | ||
c7c3a8d6 | 37 | |
98e8981c | 38 | $RUNWRAPPER $PDNS --daemon=no --local-address=$address --local-port=$port --config-dir=. \ |
c7c3a8d6 | 39 | --config-name=$backend --socket-dir=./ --no-shuffle \ |
869c68a4 | 40 | --dnsupdate=yes --resolver=$RESOLVERIP --outgoing-axfr-expand-alias=yes \ |
389b7a05 | 41 | --expand-alias=yes \ |
4dfe94ae | 42 | --cache-ttl=$cachettl --dname-processing \ |
5633a4af | 43 | --disable-axfr-rectify=yes $lua_prequery & |
c7c3a8d6 KM |
44 | |
45 | if [ $context = ${backend}-nsec3 ] | |
46 | then | |
47 | extracontexts="dnssec nsec3" | |
48 | skipreasons="$skipreasons nsec3" | |
49 | elif [ $context = ${backend}-nsec3-optout ] | |
50 | then | |
51 | extracontexts="dnssec nsec3 nsec3-optout" | |
52 | skipreasons="$skipreasons optout" | |
53 | elif [ $context = ${backend}-nsec3-narrow ] | |
54 | then | |
55 | extracontexts="dnssec narrow" | |
56 | skipreasons="$skipreasons narrow" | |
57 | elif [ $context = ${backend}-nodnssec ] | |
58 | then | |
59 | skipreasons="$skipreasons nodnssec" | |
60 | else | |
61 | extracontexts="dnssec" | |
b6072c01 | 62 | skipreasons="$skipreasons nsec" |
c7c3a8d6 KM |
63 | fi |
64 | } |