From 4f5791ebd03eaec1c7da0865a383175b05102712 Mon Sep 17 00:00:00 2001
From: Daniel Baumann <daniel.baumann@progress-linux.org>
Date: Sun, 5 May 2024 19:47:29 +0200
Subject: Adding upstream version 2:4.17.12+dfsg.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
---
 source4/scripting/devel/rebuild_zone.sh | 109 ++++++++++++++++++++++++++++++++
 1 file changed, 109 insertions(+)
 create mode 100755 source4/scripting/devel/rebuild_zone.sh

(limited to 'source4/scripting/devel/rebuild_zone.sh')

diff --git a/source4/scripting/devel/rebuild_zone.sh b/source4/scripting/devel/rebuild_zone.sh
new file mode 100755
index 0000000..94d1f9e
--- /dev/null
+++ b/source4/scripting/devel/rebuild_zone.sh
@@ -0,0 +1,109 @@
+#!/bin/sh
+# rebuild a zone file, adding all DCs
+
+[ $# -eq 2 ] || {
+	echo "rebuild_zone.sh <sam.ldb> <zonefile>"
+	exit 1
+}
+
+LDB="$1"
+ZFILE="$2"
+
+dnshostname=$(bin/ldbsearch -H $LDB --scope=base -b '' dnsHostname | grep ^dns | cut -d' ' -f2)
+host=$(echo $dnshostname | cut -d. -f1)
+realm=$(echo $dnshostname | cut -d. -f2-)
+GUIDs=$(bin/ldbsearch -H $LDB objectclass=ntdsdsa objectguid --cross-ncs | grep ^objectGUID | cut -d' ' -f2)
+DOMAINGUID=$(bin/ldbsearch -H $LDB --scope=base objectguid | grep ^objectGUID | cut -d' ' -f2)
+
+dcname()
+{
+	GUID=$1
+	echo $(bin/ldbsearch -H $LDB objectguid=$GUID dn --cross-ncs | grep CN=NTDS.Settings | cut -d, -f2 | cut -d= -f2)
+}
+
+getip()
+{
+	NAME=$1
+	ret=$(nmblookup $NAME | egrep '^[0-9]' | head -1 | cut -d' ' -f1)
+	test -n "$ret" || {
+		echo "Unable to find IP for $NAME. Using XX.XX.XX.XX. Please edit" 1>&2
+		echo "XX.XX.XX.XX"
+	}
+	echo $ret
+}
+
+echo "Generating header for host $host in realm $realm"
+cat <<EOF >$ZFILE
+; -*- zone -*-
+; generated by rebuild_zone.sh
+\$ORIGIN $realm.
+\$TTL 1W
+@               IN SOA  @   hostmaster (
+                                $(date +%Y%m%d%H)   ; serial
+                                2D              ; refresh
+                                4H              ; retry
+                                6W              ; expiry
+                                1W )            ; minimum
+			IN NS	$host
+
+EOF
+
+for GUID in $GUIDs; do
+	dc=$(dcname $GUID)
+	echo "Generating IP for DC $dc"
+	ip=$(getip $dc)
+	test -n "$ip" || exit 1
+	echo "	IN A $ip" >>$ZFILE
+done
+
+echo "; IP Addresses" >>$ZFILE
+for GUID in $GUIDs; do
+	dc=$(dcname $GUID)
+	ip=$(getip $dc)
+	test -n "$ip" || exit 1
+	echo "$dc	IN A $ip" >>$ZFILE
+done
+
+for GUID in $GUIDs; do
+	dc=$(dcname $GUID)
+	ip=$(getip $dc)
+	test -n "$ip" || exit 1
+	echo "Generating zone body for DC $dc with IP $ip"
+	cat <<EOF >>$ZFILE
+;
+; Entries for $dc
+gc._msdcs		IN A	$ip
+$GUID._msdcs	IN CNAME	$dc
+_gc._tcp		IN SRV 0 100 3268	$dc
+_gc._tcp.Default-First-Site-Name._sites	IN SRV 0 100 3268	$dc
+_ldap._tcp.gc._msdcs	IN SRV 0 100 389	$dc
+_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs	IN SRV 0 100 389 $dc
+_ldap._tcp		IN SRV 0 100 389	$dc
+_ldap._tcp.dc._msdcs	IN SRV 0 100 389	$dc
+_ldap._tcp.pdc._msdcs	IN SRV 0 100 389	$dc
+_ldap._tcp.$DOMAINGUID.domains._msdcs		IN SRV 0 100 389 $dc
+_ldap._tcp.Default-First-Site-Name._sites		IN SRV 0 100 389 $dc
+_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs	IN SRV 0 100 389 $dc
+_kerberos._tcp		IN SRV 0 100 88		$dc
+_kerberos._tcp.dc._msdcs	IN SRV 0 100 88	$dc
+_kerberos._tcp.Default-First-Site-Name._sites	IN SRV 0 100 88	$dc
+_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs	IN SRV 0 100 88 $dc
+_kerberos._udp		IN SRV 0 100 88		$dc
+_kerberos-master._tcp		IN SRV 0 100 88		$dc
+_kerberos-master._udp		IN SRV 0 100 88		$dc
+_kpasswd._tcp		IN SRV 0 100 464	$dc
+_kpasswd._udp		IN SRV 0 100 464 	$dc
+EOF
+done
+
+cat <<EOF >>$ZFILE
+
+; kerberos hack
+_kerberos		IN TXT	$(echo $realm | tr [a-z] [A-Z])
+EOF
+
+echo "Rebuilt zone file $ZFILE OK"
+
+echo "Reloading bind config"
+PATH="/usr/sbin:$PATH" rndc reload
+exit 0
-- 
cgit v1.2.3