ispconfig not reloading bind dns changes

yvespires · Aug 2, 2018

Hey

I noticed this after upgrading ispconfig to 3.1.6, any changes to dns zone are not applied automatic, i needed to restart bind by hand

now with acme.sh automated ssl cert renew i need to make it work again, any idea where i should start to fix ispconfig not reloading bind?

web
ispconfig version 3.1.6
Ubuntu 12.04.5 LTS
--------
dns server
Ubuntu 14.04.5 LTS

yvespires · Aug 2, 2018

i have this exactly same problem: https://www.howtoforge.com/community/threads/bind9-need-to-restart-to-propagate.76026/

yvespires · Aug 2, 2018

enabled debugg log on dns master
ouput

02.08.2018-20:38 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
02.08.2018-20:39 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
02.08.2018-20:40 - DEBUG - Found 3 changes, starting update process.
02.08.2018-20:40 - DEBUG - Replicated from master: REPLACE INTO `dns_rr` (`id`,`sys_userid`,`sys_groupid`,`sys_perm_user`,`sys_perm_group`,`sys_perm_other`,`server_id`,`zone`,`name`,`type`,`data`,`aux`,`ttl`,`active`,`stamp`,`serial`) VALUES ('18141','1','2','riud','riud','','3','1','teste4','A','177.129.104.8','0','3600','Y','2018-08-02 20:39:31','2018080201')
02.08.2018-20:40 - DEBUG - Calling function 'rr_update' from plugin 'bind_plugin' raised by event 'dns_rr_update'.
02.08.2018-20:40 - DEBUG - Writing BIND domain file: /etc/bind/pri.yvespires.com.br
02.08.2018-20:40 - DEBUG - Writing BIND named.conf.local file: /etc/bind/named.conf.local
02.08.2018-20:40 - DEBUG - Processed datalog_id 156792
02.08.2018-20:40 - DEBUG - Replicated from master: REPLACE INTO `dns_soa` (`id`,`sys_userid`,`sys_groupid`,`sys_perm_user`,`sys_perm_group`,`sys_perm_other`,`server_id`,`origin`,`ns`,`mbox`,`serial`,`refresh`,`retry`,`expire`,`minimum`,`ttl`,`active`,`xfer`,`also_notify`,`update_acl`,`dnssec_initialized`,`dnssec_wanted`,`dnssec_last_signed`,`dnssec_info`) VALUES ('1','2','2','riud','ru','','3','yvespires.com.br.','ns1.hbinfo.com.br.','postmaster.hbinfo.com.br.','2018080214','7200','3600','604800','10800','3600','Y','177.129.104.2','','','N','N','0','')
02.08.2018-20:40 - DEBUG - Calling function 'soa_update' from plugin 'bind_plugin' raised by event 'dns_soa_update'.
02.08.2018-20:40 - DEBUG - Writing BIND domain file: /etc/bind/pri.yvespires.com.br
02.08.2018-20:40 - DEBUG - Writing BIND named.conf.local file: /etc/bind/named.conf.local
02.08.2018-20:40 - DEBUG - Processed datalog_id 156793
02.08.2018-20:40 - DEBUG - Replicated from master: REPLACE INTO `dns_rr` (`id`,`sys_userid`,`sys_groupid`,`sys_perm_user`,`sys_perm_group`,`sys_perm_other`,`server_id`,`zone`,`name`,`type`,`data`,`aux`,`ttl`,`active`,`stamp`,`serial`) VALUES ('18141','1','2','riud','riud','','3','1','teste4','A','177.129.104.8','0','3600','Y','2018-08-02 20:39:31','2018080201')
02.08.2018-20:40 - DEBUG - Calling function 'rr_insert' from plugin 'bind_plugin' raised by event 'dns_rr_insert'.
02.08.2018-20:40 - DEBUG - Writing BIND domain file: /etc/bind/pri.yvespires.com.br
02.08.2018-20:40 - DEBUG - Writing BIND named.conf.local file: /etc/bind/named.conf.local
02.08.2018-20:40 - DEBUG - Processed datalog_id 156794
02.08.2018-20:40 - DEBUG - Calling function 'restartBind' from module 'dns_module'.
02.08.2018-20:40 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
Click to expand...

checked, the changes are added to /etc/bind/pri.yvespires.com.br

seems 02.08.2018-20:40 - DEBUG - Calling function 'restartBind' from module 'dns_module'. is not working...

yvespires · Aug 2, 2018

/usr/local/ispconfig/server/mods-enabled/dns_module.inc.php

<?php

/*
Copyright (c) 2009, Till Brehm, projektfarm Gmbh
All rights reserved.

Redistribution and use in source and binary forms, with or without modification,
are permitted provided that the following conditions are met:

* Redistributions of source code must retain the above copyright notice,
this list of conditions and the following disclaimer.
* Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
* Neither the name of ISPConfig nor the names of its contributors
may be used to endorse or promote products derived from this software without
specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/

class dns_module {

var $module_name = 'dns_module';
var $class_name = 'dns_module';
var $actions_available = array( 'dns_soa_insert',
'dns_soa_update',
'dns_soa_delete',
'dns_slave_insert',
'dns_slave_update',
'dns_slave_delete',
'dns_rr_insert',
'dns_rr_update',
'dns_rr_delete');

//* This function is called during ispconfig installation to determine
// if a symlink shall be created for this plugin.
function onInstall() {
global $conf;

if($conf['services']['dns'] == true) {
return true;
} else {
return false;
}

}

/*
This function is called when the module is loaded
*/

function onLoad() {
global $app;

/*
Annonce the actions that where provided by this module, so plugins
can register on them.
*/

$app->plugins->announceEvents($this->module_name, $this->actions_available);

/*
As we want to get notified of any changes on several database tables,
we register for them.

The following function registers the function "functionname"
to be executed when a record for the table "dbtable" is
processed in the sys_datalog. "classname" is the name of the
class that contains the function functionname.
*/

$app->modules->registerTableHook('dns_soa', $this->module_name, 'process');
$app->modules->registerTableHook('dns_slave', $this->module_name, 'process');
$app->modules->registerTableHook('dns_rr', $this->module_name, 'process');

// Register service
$app->services->registerService('bind', 'dns_module', 'restartBind');
$app->services->registerService('powerdns', 'dns_module', 'restartPowerDNS');

}

/*
This function is called when a change in one of the registered tables is detected.
The function then raises the events for the plugins.
*/

function process($tablename, $action, $data) {
global $app;

switch ($tablename) {
case 'dns_soa':
if($action == 'i') $app->plugins->raiseEvent('dns_soa_insert', $data);
if($action == 'u') $app->plugins->raiseEvent('dns_soa_update', $data);
if($action == 'd') $app->plugins->raiseEvent('dns_soa_delete', $data);
break;
case 'dns_slave':
if($action == 'i') $app->plugins->raiseEvent('dns_slave_insert', $data);
if($action == 'u') $app->plugins->raiseEvent('dns_slave_update', $data);
if($action == 'd') $app->plugins->raiseEvent('dns_slave_delete', $data);
break;
case 'dns_rr':
if($action == 'i') $app->plugins->raiseEvent('dns_rr_insert', $data);
if($action == 'u') $app->plugins->raiseEvent('dns_rr_update', $data);
if($action == 'd') $app->plugins->raiseEvent('dns_rr_delete', $data);
break;
} // end switch
} // end function

function restartBind($action = 'restart') {
global $app, $conf;

$app->uses('system');

$daemon = '';
if(is_file($conf['init_scripts'] . '/' . 'bind9')) {
$daemon = 'bind9';
} else {
$daemon = 'named';
}

$retval = array('output' => '', 'retval' => 0);
if($action == 'restart') {
exec($app->system->getinitcommand($daemon, 'restart').' 2>&1', $retval['output'], $retval['retval']);
} else {
exec($app->system->getinitcommand($daemon, 'reload').' 2>&1', $retval['output'], $retval['retval']);
}
return $retval;
}

function restartPowerDNS($action = 'restart') {
global $app, $conf;

$app->uses('system');
$app->log("restartPDNS called.", LOGLEVEL_DEBUG);

/** Since PowerDNS does not currently allow to limit AXFR for specific zones to specific
* IP addresses, we create a list of IPs allowed of AXFR transfers from our PowerDNS,
* however any of these IPs is allowed to AXFR transfer any of the zones we are masters
* for.
*/

$tmps = $app->db->queryAllRecords("SELECT DISTINCT xfer FROM dns_soa WHERE active = 'Y' UNION SELECT DISTINCT xfer FROM dns_slave WHERE active = 'Y' ");

//* Make sure the list is never empty
$options='127.0.0.1';
foreach($tmps as $tmp) {
if (trim($tmp['xfer'])!='') {
if ($options=='') {
$options.=$tmp['xfer'];
} else {
$options=$options.",".$tmp['xfer'];
}
}
}

//* Remove duplicate IPs from the array
$options = "allow-axfr-ips=".implode(",", array_unique(explode(",", $options)));
$app->log("".$options, LOGLEVEL_DEBUG);

/** Not an ideal way to use a hardcoded path like that, but currently
* we have no way to find out where powerdns' configuration files are
* located, so we have to work on assumption.
*/
file_put_contents('/etc/powerdns/pdns.d/pdns.ispconfig-axfr', $options."\n");

$daemon= '';
if (is_file($conf['init_scripts'] . '/' . 'powerdns')) {
$daemon = 'powerdns';
} else {
$daemon = 'pdns';
}

$retval = array('output' => '', 'retval' => 0);
exec($app->system->getinitcommand($daemon, 'restart').' 2>&1', $retval['output'], $retval['retval']);

// unset $tmps;
return $retval;

}

} // end class

?>
Click to expand...

i use service bind restart

dns_module is calling system?

yvespires · Aug 3, 2018

solved

had this warning everytime i restarted bind

root@ns1:/usr# /etc/init.d/bind9 restart
* Stopping domain name service... bind9 WARNING: key file (/etc/bind/rndc.key) exists, but using default configuration file (/etc/bind/rndc.conf)
rndc: connect failed: serverip#953: connection refused
waiting for pid 11518 to die
[ OK ]
* Starting domain name service... bind9 [ OK ]
Click to expand...

removed /etc/bind/rndc.conf

all good now, ispconfig can restart bind properly

Log in or Sign up

ispconfig not reloading bind dns changes

yvespires New Member

yvespires New Member

yvespires New Member

yvespires New Member

yvespires New Member

Share This Page

Log in or Sign up

ispconfig not reloading bind dns changes

yvespires New Member

yvespires New Member

yvespires New Member

yvespires New Member

yvespires New Member

Share This Page

Useful Searches