288 lines
7.1 KiB
Bash
Executable File
288 lines
7.1 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# named This shell script takes care of starting and stopping
|
|
# named (BIND DNS server).
|
|
#
|
|
# chkconfig: - 13 87
|
|
# description: named (BIND) is a Domain Name Server (DNS) \
|
|
# that is used to resolve host names to IP addresses.
|
|
# probe: true
|
|
|
|
### BEGIN INIT INFO
|
|
# Provides: $named
|
|
# Required-Start: $local_fs $network $syslog
|
|
# Required-Stop: $local_fs $network $syslog
|
|
# Default-Start:
|
|
# Default-Stop: 0 1 2 3 4 5 6
|
|
# Short-Description: start|stop|status|restart|try-restart|reload|force-reload DNS server
|
|
# Description: control ISC BIND implementation of DNS server
|
|
### END INIT INFO
|
|
|
|
# Source function library.
|
|
. /etc/rc.d/init.d/functions
|
|
|
|
[ -r /etc/sysconfig/named ] && . /etc/sysconfig/named
|
|
[ -r /etc/sysconfig/dnssec ] && . /etc/sysconfig/dnssec
|
|
|
|
RETVAL=0
|
|
export KRB5_KTNAME=${KEYTAB_FILE:-/etc/named.keytab}
|
|
|
|
named='named'
|
|
if [ -x /usr/sbin/named-sdb ]; then
|
|
named='named-sdb'
|
|
fi
|
|
|
|
# Don't kill named during clean-up
|
|
NAMED_SHUTDOWN_TIMEOUT=${NAMED_SHUTDOWN_TIMEOUT:-25}
|
|
|
|
if [ -n "$ROOTDIR" ]; then
|
|
ROOTDIR=`echo $ROOTDIR | sed 's#//*#/#g;s#/$##'`;
|
|
rdl=`/usr/bin/readlink $ROOTDIR`;
|
|
if [ -n "$rdl" ]; then
|
|
ROOTDIR="$rdl";
|
|
fi;
|
|
fi
|
|
|
|
[ -x /usr/sbin/dnssec-configure ] && [ -r /etc/named.conf ] && \
|
|
[ /etc/sysconfig/dnssec -nt /etc/named.conf ] && \
|
|
/usr/sbin/dnssec-configure -b --norestart --dnssec="$DNSSEC" --dlv="$DLV"
|
|
|
|
# Enable/disable debugging
|
|
if [ "x$DEBUG" = 'xyes' ]; then
|
|
chown named.named /var/named
|
|
if [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled &&
|
|
[ `getsebool named_write_master_zones | awk '{ print $3; }'` = 'off' ]; then
|
|
setsebool named_write_master_zones 1
|
|
fi;
|
|
else
|
|
chown root.named /var/named
|
|
if [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled &&
|
|
[ `getsebool named_write_master_zones | awk '{ print $3; }'` = 'on' ]; then
|
|
setsebool named_write_master_zones 0
|
|
fi;
|
|
fi
|
|
|
|
ROOTDIR_MOUNT='/etc/named /etc/pki/dnssec-keys /var/named /etc/named.conf
|
|
/etc/named.dnssec.keys /etc/named.rfc1912.zones /etc/rndc.conf /etc/rndc.key
|
|
/usr/lib64/bind /usr/lib/bind'
|
|
|
|
mount_chroot_conf()
|
|
{
|
|
if [ -n "$ROOTDIR" ]; then
|
|
for all in $ROOTDIR_MOUNT; do
|
|
# Skip nonexistant files
|
|
[ -e "$all" ] || continue
|
|
|
|
# If mount source is a file
|
|
if ! [ -d "$all" ]; then
|
|
# mount it only if it is not present in chroot or it is empty
|
|
if ! [ -e "$ROOTDIR$all" ] || [ `stat -c'%s' "$ROOTDIR$all"` -eq 0 ]; then
|
|
touch "$ROOTDIR$all"
|
|
mount --bind "$all" "$ROOTDIR$all"
|
|
fi
|
|
else
|
|
# Mount source is a directory. Mount it only if directory in chroot is
|
|
# empty.
|
|
if [ -e "$all" ] && [ `ls -1A $ROOTDIR$all | wc -l` -eq 0 ]; then
|
|
mount --bind "$all" "$ROOTDIR$all"
|
|
fi
|
|
fi
|
|
done
|
|
fi
|
|
}
|
|
|
|
umount_chroot_conf()
|
|
{
|
|
for all in $ROOTDIR_MOUNT; do
|
|
# Check if file is mount target. Do not use /proc/mounts because detecting
|
|
# of modified mounted files can fail.
|
|
if mount | grep -q '.* on '"$ROOTDIR$all"' .*'; then
|
|
umount "$ROOTDIR$all"
|
|
# Remove temporary created files
|
|
[ -f "$all" ] && rm -f "$ROOTDIR$all"
|
|
fi
|
|
done
|
|
}
|
|
|
|
# Check if all what named needs running
|
|
start()
|
|
{
|
|
# Source networking configuration.
|
|
[ -r /etc/sysconfig/network ] && . /etc/sysconfig/network
|
|
|
|
# Check that networking is up
|
|
[ "${NETWORKING}" = "no" ] && exit 1
|
|
|
|
|
|
[ -x /usr/sbin/"$named" ] || exit 5
|
|
|
|
# Handle -c option
|
|
previous_option='unspecified';
|
|
for a in $OPTIONS; do
|
|
if [ $previous_option = '-c' ]; then
|
|
named_conf=$a;
|
|
fi;
|
|
previous_option=$a;
|
|
done;
|
|
|
|
named_conf=${named_conf:-/etc/named.conf};
|
|
|
|
mount_chroot_conf
|
|
|
|
if [ ! -r $ROOTDIR$named_conf ]; then
|
|
echo 'Cannot find configuration file. You could create it by system-config-bind'
|
|
exit 6;
|
|
fi;
|
|
|
|
# all pre-start is done, lets start named
|
|
echo -n $"Starting named: "
|
|
if [ -n "`/sbin/pidof -o %PPID "$named"`" ]; then
|
|
echo -n $"named: already running"
|
|
failure
|
|
echo
|
|
exit 1;
|
|
fi;
|
|
|
|
ckcf_options='-z'; # enable named-checkzone for each zone (9.3.1+) !
|
|
if [ -n "${ROOTDIR}" -a "x${ROOTDIR}" != "x/" ]; then
|
|
OPTIONS="${OPTIONS} -t ${ROOTDIR}"
|
|
ckcf_options="$ckcf_options -t ${ROOTDIR}";
|
|
[ -s /etc/localtime ] && cp -fp /etc/localtime ${ROOTDIR}/etc/localtime;
|
|
fi
|
|
|
|
RETVAL=0
|
|
# check if configuration is correct
|
|
if [ -x /usr/sbin/named-checkconf ] && [ -x /usr/sbin/named-checkzone ] && /usr/sbin/named-checkconf $ckcf_options ${named_conf} >/dev/null 2>&1; then
|
|
|
|
daemon /usr/sbin/"$named" -u named ${OPTIONS};
|
|
RETVAL=$?
|
|
if [ $RETVAL -eq 0 ]; then
|
|
rm -f /var/run/{named,named-sdb}.pid;
|
|
ln -s $ROOTDIR/var/run/named/"$named".pid /var/run/"$named".pid;
|
|
fi;
|
|
|
|
if [ -n "`/sbin/pidof -o %PPID "$named"`" ]; then
|
|
# Verify that named actually started (JM 2006-10-04)
|
|
if [ ! -e $ROOTDIR/var/run/named/"$named".pid ]; then
|
|
# If there is not a file containing the PID of the now running named daemon then create it (JM 2006-10-04)
|
|
echo `/sbin/pidof -o %PPID "$named"` > $ROOTDIR/var/run/named/"$named".pid;
|
|
fi;
|
|
fi;
|
|
else
|
|
named_err="`/usr/sbin/named-checkconf $ckcf_options $named_conf 2>&1`";
|
|
echo
|
|
echo "Error in named configuration:";
|
|
echo "$named_err";
|
|
failure
|
|
echo
|
|
[ -x /usr/bin/logger ] && echo "$named_err" | /usr/bin/logger -pdaemon.error -tnamed;
|
|
umount_chroot_conf
|
|
exit 2;
|
|
fi;
|
|
echo
|
|
if [ $RETVAL -eq 0 ]; then
|
|
touch /var/lock/subsys/named;
|
|
else
|
|
umount_chroot_conf
|
|
exit 7;
|
|
fi
|
|
return 0;
|
|
}
|
|
|
|
stop() {
|
|
# Stop daemons.
|
|
echo -n $"Stopping named: "
|
|
[ -x /usr/sbin/rndc ] && /usr/sbin/rndc stop >/dev/null 2>&1;
|
|
RETVAL=$?
|
|
# was rndc successful?
|
|
[ "$RETVAL" -eq 0 ] || killproc "$named" -TERM >/dev/null 2>&1
|
|
|
|
timeout=0
|
|
RETVAL=0
|
|
while /sbin/pidof -o %PPID "$named" >/dev/null; do
|
|
if [ $timeout -ge $NAMED_SHUTDOWN_TIMEOUT ]; then
|
|
RETVAL=1
|
|
break
|
|
else
|
|
sleep 2 && echo -n "."
|
|
timeout=$((timeout+2))
|
|
fi;
|
|
done
|
|
|
|
umount_chroot_conf
|
|
|
|
# remove pid files
|
|
if [ $RETVAL -eq 0 ]; then
|
|
rm -f /var/lock/subsys/named
|
|
rm -f /var/run/{named,named-sdb}.pid
|
|
fi;
|
|
|
|
if [ $RETVAL -eq 0 ]; then
|
|
success
|
|
else
|
|
failure
|
|
RETVAL=1
|
|
fi;
|
|
echo
|
|
return $RETVAL
|
|
}
|
|
|
|
|
|
rhstatus() {
|
|
[ -x /usr/sbin/rndc ] && /usr/sbin/rndc status;
|
|
status /usr/sbin/"$named";
|
|
return $?
|
|
}
|
|
restart() {
|
|
stop
|
|
start
|
|
}
|
|
reload() {
|
|
echo -n $"Reloading "$named": "
|
|
p=`/sbin/pidof -o %PPID "$named"`
|
|
RETVAL=$?
|
|
if [ "$RETVAL" -eq 0 ]; then
|
|
/usr/sbin/rndc reload >/dev/null 2>&1 || /bin/kill -HUP $p;
|
|
RETVAL=$?
|
|
fi
|
|
[ "$RETVAL" -eq 0 ] && success $"$named reload" || failure $"$named reload"
|
|
echo
|
|
return $RETVAL
|
|
}
|
|
|
|
# See how we were called.
|
|
case "$1" in
|
|
start)
|
|
start
|
|
;;
|
|
stop)
|
|
stop
|
|
;;
|
|
status)
|
|
rhstatus;
|
|
RETVAL=$?
|
|
;;
|
|
restart)
|
|
restart
|
|
;;
|
|
condrestart)
|
|
echo "condrestart option is obsolete. Use try-restart instead"
|
|
if [ -e /var/lock/subsys/named ]; then restart; fi
|
|
;;
|
|
try-restart)
|
|
if [ -e /var/lock/subsys/named ]; then restart; fi
|
|
;;
|
|
reload)
|
|
reload
|
|
;;
|
|
force-reload)
|
|
if ! reload; then restart; fi
|
|
;;
|
|
*)
|
|
echo $"Usage: $0 {start|stop|status|restart|try-restart|reload|force-reload}"
|
|
exit 3
|
|
esac
|
|
|
|
exit $RETVAL
|
|
|