Changeset 187

Timestamp:

Sep 28, 2010, 2:54:48 PM (14 years ago)

Author:

Rick van der Zwet

Message:

CGI details included

File:

• dyndns/dyndns.sh (modified) (3 diffs)

dyndns/dyndns.sh

@@ -6 +6 @@
 # = INSTALL - SSH =
 # 1) Make sure to allow rndc reload in your sudoers file
-#    sudo_user  ALL=(ALL) NOPASSWD: /usr/sbin/rndc reload
+#      ssh_user  ALL=(ALL) NOPASSWD: /usr/sbin/rndc reload
 # 2) prefix your ssh authorized key to allow only this script
-#    command="/home/rvdzwet/dyndns.sh" 
-# 3) Call for the remote host like this
-#    ssh -a -p 1022 -i id_rsa zweot.vanderzwet.net `hostname`
+#      command="/home/ssh_user/dyndns/dyndns.sh" 
+# 3) Call for the remote host from crontab:
+#      ssh -a -p 1022 -i id_rsa dnsserver.example.net `hostname -s`
 #
 # = INSTALL - CGI =
-# XXX:TODO
+# 1) Put your secret password in ``.cgi_secret''
+# 2) Alter your apache configuration to allow executing the script
+#      ScriptAlias /dyndns /path/to/dyndns/dyndns.sh
+# 1) Make sure to allow rndc reload in your sudoers file
+#      www_user  ALL=(ALL) NOPASSWD: /usr/sbin/rndc reload
+# 3) Call from the remote host from crontab:
+#      fetch -q -o - "http://dnsserver.example.net/dyndns/`hostname -s`/SECRET/"
 #
 # = USAGE =
@@ -24 +30 @@
 ZONE='vanderzwet.net'
 ZONEFILE="/etc/namedb/master/$ZONE"
-
+CGI_SECRET_FILE="`dirname $0`/.cgi_secret"
 
 ### NO USER EDITABLE PARTS BELOW HERE ###
-# SSH specific details
-HOSTNAME=`echo $SSH_ORIGINAL_COMMAND | tr -c -d '[a-zA-Z0-9\-_\.]' | cut -d ' ' -f 1 | cut -d '.' -f 1`
-REMOTEIP=`echo $SSH_CLIENT | cut -d ' ' -f 1`
+exec 2>&1
+if [ -n "$SSH_ORIGINAL_COMMAND" ]; then
+  # SSH specific details
+  HOSTNAME=`echo $SSH_ORIGINAL_COMMAND | tr -c -d '[a-zA-Z0-9\-_\.]' | cut -d ' ' -f 1 | cut -d '.' -f 1`
+  REMOTEIP=`echo $SSH_CLIENT | cut -d ' ' -f 1`
+else
+  # CGI specific details
+  HOSTNAME=`echo $REQUEST_URI | tr -c -d '[a-zA-Z0-9\-_\./]' | awk -F/ '{print $3}'`
+  SECRET=`echo $REQUEST_URI | tr -c -d '[a-zA-Z0-9\-_\./\!_]' | awk -F/ '{print $4}'`
+  REMOTEIP=$REMOTE_ADDR
+  echo "Content-Type: text/plain"
+  echo ""
+  CGI_SECRET=`cat $CGI_SECRET_FILE`
+  if [ -z "$CGI_SECRET" ]; then
+    echo "Secret not readable from $CGI_SECRET_FILE"
+    exit 1
+  fi
+  if [ "$SECRET" != "$CGI_SECRET" ]; then
+    echo "Secret invalid"
+    exit 1
+  fi
+fi
 
 # Tmpfile creation for editing 'in between'
@@ -76 +101 @@
 
 # Install and activate
-if \! `/usr/sbin/named-checkzone -q $TMPFILE $ZONE`; then
+if `/usr/sbin/named-checkzone -q $TMPFILE $ZONE`; then
   echo "New zone failed to validate"
   exit 1
 fi
-cp $TMPFILE $ZONEFILE
-sudo /usr/sbin/rndc reload
+cp  $TMPFILE $ZONEFILE || exit 1
+sudo /usr/sbin/rndc reload || exit 1
 echo "Entry updated"