:: Exporting NicTool to BIND

:: What is
+ NicTool
NicTool is a free DNS management suite that takes all the headaches out of managing DNS. It includes an attractive web interface for users, admins, and clients to access and update their DNS zone data as well as a rich API for provisioning systems to interact with. All zone data is stored in MySQL and is extracted by export scripts to the DNS server of choice (tinydns, BIND, PowerDNS). :: NicTool

+ BIND
BIND is the most widely used DNS software on the Internet. On Unix-like operating systems it is the de facto standard. :: wikipedia
 
:: Installing Requirement
+ Installing Bind on Linux Debian

aptitude install bind9

+ Installing NicTool
 
:: Create script for Export to BIND

mkdir /exportscript
cd /exportscript/
vi export_bind.php

add these line:

<?php

/* nictool bind export script  - created by Mihai Secasiu - //patchlog.com */

/* Version 1.3
BUGS FIXED:
1. SOA records were inverted
2. in-addr.arpa zones were not being generated correctly
3. Fixed a major bug where an empty zones.conf file was generated if the export script was unable to connect to MySQL (very bad as it means no zone data loaded or served!!)
*/


$db_name="nictool";
$db_user="nictool";
$db_pass="nictool";
$db_host="localhost";


$zones_dir="data/"; // directory used for storing the zone files, the script will delete the zone that are set as deleted from this folder.
$zone_template="{ZONE_NAME}.zone";  //  template used for zone filename. {ZONE_NAME} will be replaced by script with the domain name
$conf_file="data/zones.conf"; // file where the script will write the zone entries. The script will truncate the file on open



if($zones_dir[strlen($zones_dir)-1]!='/'){
	$zones_dir.='/';
}

if(!($cf=fopen("$conf_file.tmp",'w'))){
	die("cannot open configuration file: $conf_filen");
}

function get_ns($nsid)
{
	global $nameservers;
	if(isset($nameservers[$nsid]))return $nameservers[$nsid];
	$sql="SELECT name,ttl,description FROM nt_nameserver where nt_nameserver_id=".intval($nsid)." and deleted!='1'";
	if(!($res=mysql_query($sql))){
		die("query: $sql: failed with error: ".mysql_error()."n");
	}
	$nameservers[$nsid]=mysql_fetch_array($res);
	return $nameservers[$nsid];
}


if(!($dbl=mysql_connect($db_host,$db_user,$db_pass))){
	die("cound not connect to the database servern");
}

mysql_select_db($db_name, $dbl) or die("Could not select database: $db_namen");


if(count($argv)>1){
	if(get_ns($argv[1])){
		$ns=$argv[1];
		$nsq="AND (ns0 = $ns OR ns1 = $ns OR ns2 = $ns OR ns3 = $ns OR ns4 = $ns OR ns5 = $ns
			OR ns6 = $ns OR ns7 = $ns OR ns8 = $ns OR ns9 = $ns) ";
	}else{
		die("nameserver id invalid or nameserver deletedn");
	}

}else{
	$nsq="";
}


$c=0;
$sql="SELECT * FROM nt_zone $nsq";
if(!($res=mysql_query($sql))){
	die("query: $sql: failed with error: ".mysql_error()."n");
}
while($z=mysql_fetch_assoc($res)){

	$fn=$zones_dir.preg_replace('/{ZONE_NAME}/',$z['zone'],$zone_template);
	if($z['deleted']=="1"){
		if(is_file($fn)){
			unlink($fn);
			echo "Deleted zone file for zone ${z['zone']}n";
		}
		continue;
	}

	$nst=""; // nameserver text
	$fns=""; // first nameserver for SOA record
	for($i=0;$i<=9;$i++){
		if($z['ns'.$i] && ($ns=get_ns($z['ns'.$i])) ){
			$nst.="@	${ns['ttl']} IN NS	${ns['name']} ; ${ns['description']}n";
			if($fns=="")$fns=$ns['name'];
		}
	}

	echo "Generating zone file for domain: ".$z['zone']." -";
	$t="; ${z['description']}
$ttl ${z['ttl']}
@	IN	SOA	$fns	${z['mailaddr']} (
			${z['serial']}
			${z['refresh']}
			${z['retry']}
			${z['expire']}
			${z['minimum']} )
";
	$t.=$nst;


	$sql="SELECT * FROM nt_zone_record where nt_zone_id=".$z['nt_zone_id']. " and deleted!='1'";

	if(!($rres=mysql_query($sql))){
		die("query: $sql: failed with error: ".mysql_error()."n");
	}
	while($r=mysql_fetch_assoc($rres)){
		$t.="${r['name']} ${r['ttl']} IN ${r['type']}";
		if(in_array($r['type'],array('A','AAAA','NS','CNAME','PTR'))){
			$t.="	${r['address']}";
		}elseif($r['type']=='TXT'){
			$t.="	"${r['address']}"";
		}elseif($r['type']=='MX'){
			$t.="	${r['weight']} ${r['address']}";
		}elseif($r['type']=='SRV'){
			$t.="	${r['priority']} ${r['weight']} ${r['other']} ${r['address']}";
		}
		$t.="	; ${r['description']}n";
	}
	if(!file_put_contents($fn,$t)){
		die("error writing to file: $fnn");
	}
	$ze="
zone "${z['zone']}" IN {
	type master;
	file "$fn";
	allow-update {none; };
	notify no;
};
";

	if(!fwrite($cf,$ze)){
		die("error writing to zones configuration file: $conf_filen");
	}


	echo " file generated OKn";
	$c++;
}

fclose($cf);
rename("$conf_file.tmp",$conf_file);

echo "Successfully exported $c domains. Exiting..n";

 
:: Setup crontab for exporting zone file
+ Create zonecopy.sh

cd /exportscript/
vi zonecopy.sh

add these line:

#!/bin/bash

#######
# exporting
############
cd /exportscript/
/usr/bin/php export_bind.php

##########
# copy zone file
################

# local server
scp data/* /var/cache/bind/data

# remotely
scp data/* [email protected]:/var/cache/bind/data
scp data/* [email protected]:/var/cache/bind/data

#########
# reload
##########
# local
killall -HUP named

# remotely
ssh [email protected] killall -HUP named
ssh [email protected] killall -HUP named

sleep 5

+ Setup crontab

crontab -e

setup like this:

*/5 * * * * /bin/sh /exportscript/zonecopy.sh >/dev/null 1>/dev/null

 
:: Create sub folder in the directory that your script is located in called "data"

cd /exportscript
mkdir data
chown bind.bind data

 
:: Add zones.conf to named.conf

vi /etc/bind/named.conf

add this line:

include "/exportscript/data/zones.conf";

 
:: Setup working directory and users
+ Create directory for exporting

cd /var/cache/bind
mkdir data
chown bind.bind data

+ Modify shell on bind users

vi /etc/passwd

change on this line, like:

bind:x:111:119::/var/cache/bind:/bin/sh

 
:: Testing
Add some DNS zone on NicToolClient, and testing your zone record useing dig, nslookup, host or other domain tool checker.
 
:: Links
+ Google
+ LinuxPower
+ TNPI