|
|
|
@ -14,207 +14,207 @@ Author: Stefan Riegel |
|
|
|
|
|
|
|
#Usage: dns_infoblox_uddi_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|
|
|
dns_infoblox_uddi_add() { |
|
|
|
fulldomain=$1 |
|
|
|
txtvalue=$2 |
|
|
|
|
|
|
|
Infoblox_UDDI_Key="${Infoblox_UDDI_Key:-$(_readaccountconf_mutable Infoblox_UDDI_Key)}" |
|
|
|
Infoblox_Portal="${Infoblox_Portal:-$(_readaccountconf_mutable Infoblox_Portal)}" |
|
|
|
|
|
|
|
_info "Using Infoblox UDDI API" |
|
|
|
_debug fulldomain "$fulldomain" |
|
|
|
_debug txtvalue "$txtvalue" |
|
|
|
|
|
|
|
if [ -z "$Infoblox_UDDI_Key" ] || [ -z "$Infoblox_Portal" ]; then |
|
|
|
Infoblox_UDDI_Key="" |
|
|
|
Infoblox_Portal="" |
|
|
|
_err "You didn't specify the Infoblox UDDI key or server (Infoblox_UDDI_Key; Infoblox_Portal)." |
|
|
|
_err "Please set them via EXPORT Infoblox_UDDI_Key=your_key, EXPORT Infoblox_Portal=csp.infoblox.com and try again." |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
_saveaccountconf_mutable Infoblox_UDDI_Key "$Infoblox_UDDI_Key" |
|
|
|
_saveaccountconf_mutable Infoblox_Portal "$Infoblox_Portal" |
|
|
|
|
|
|
|
export _H1="Authorization: token $Infoblox_UDDI_Key" |
|
|
|
export _H2="Content-Type: application/json" |
|
|
|
|
|
|
|
zone_url="https://$Infoblox_Portal/api/ddi/v1/dns/auth_zone" |
|
|
|
_debug "Fetching zones from: $zone_url" |
|
|
|
zone_result="$(_get "$zone_url")" |
|
|
|
_debug2 "zone_result: $zone_result" |
|
|
|
|
|
|
|
if [ "$?" != "0" ]; then |
|
|
|
_err "Error fetching zones from Infoblox API" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
fulldomain_no_acme=$(echo "$fulldomain" | sed 's/^_acme-challenge\.//') |
|
|
|
_debug "Looking for zone matching domain: $fulldomain_no_acme" |
|
|
|
|
|
|
|
zone_fqdn="" |
|
|
|
temp_domain="$fulldomain_no_acme" |
|
|
|
|
|
|
|
while [ -n "$temp_domain" ]; do |
|
|
|
_debug "Checking if '$temp_domain' is a zone..." |
|
|
|
if echo "$zone_result" | grep -q "\"fqdn\":\"$temp_domain\"" || echo "$zone_result" | grep -q "\"fqdn\":\"$temp_domain\.\""; then |
|
|
|
zone_fqdn="$temp_domain" |
|
|
|
_debug "Found matching zone: $zone_fqdn" |
|
|
|
break |
|
|
|
fi |
|
|
|
temp_domain=$(echo "$temp_domain" | sed 's/^[^.]*\.//') |
|
|
|
if ! echo "$temp_domain" | grep -q '\.'; then |
|
|
|
break |
|
|
|
fi |
|
|
|
done |
|
|
|
|
|
|
|
if [ -z "$zone_fqdn" ]; then |
|
|
|
_err "Could not determine zone for domain $fulldomain" |
|
|
|
_err "Available zones: $(echo "$zone_result" | _egrep_o '"fqdn":"[^"]*"' | sed 's/"fqdn":"//;s/"//')" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
zone_id=$(echo "$zone_result" | jq -r '(.results // .)[] | select(.fqdn == "'"$zone_fqdn"'" or .fqdn == "'"$zone_fqdn"'.") | .id' | head -1) |
|
|
|
|
|
|
|
_debug "zone_id: $zone_id" |
|
|
|
|
|
|
|
if [ -z "$zone_id" ]; then |
|
|
|
_err "Could not find zone ID for $zone_fqdn" |
|
|
|
_debug "Zone result: $zone_result" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
_debug "Extracting name_in_zone from fulldomain='$fulldomain' with zone_fqdn='$zone_fqdn'" |
|
|
|
name_in_zone=$(echo "$fulldomain" | sed "s/\.$zone_fqdn\$//") |
|
|
|
_debug "name_in_zone after removing zone: '$name_in_zone'" |
|
|
|
name_in_zone=$(echo "$name_in_zone" | sed 's/\.$//') |
|
|
|
_debug "name_in_zone final: '$name_in_zone'" |
|
|
|
|
|
|
|
baseurl="https://$Infoblox_Portal/api/ddi/v1/dns/record" |
|
|
|
|
|
|
|
body="{\"type\":\"TXT\",\"name_in_zone\":\"$name_in_zone\",\"zone\":\"$zone_id\",\"ttl\":120,\"inheritance_sources\":{\"ttl\":{\"action\":\"override\"}},\"rdata\":{\"text\":\"$txtvalue\"}}" |
|
|
|
|
|
|
|
_debug "POST URL: $baseurl" |
|
|
|
_debug "POST body: $body" |
|
|
|
result="$(_post "$body" "$baseurl" "" "POST")" |
|
|
|
_debug "POST result: $result" |
|
|
|
|
|
|
|
if echo "$result" | grep -q '"id"'; then |
|
|
|
record_id=$(echo "$result" | _egrep_o '"id":"[^"]*"' | head -1 | sed 's/"id":"\([^"]*\)"/\1/') |
|
|
|
_info "Successfully created TXT record with ID: $record_id" |
|
|
|
return 0 |
|
|
|
else |
|
|
|
_err "Error encountered during record addition" |
|
|
|
_err "Response: $result" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
fulldomain=$1 |
|
|
|
txtvalue=$2 |
|
|
|
|
|
|
|
Infoblox_UDDI_Key="${Infoblox_UDDI_Key:-$(_readaccountconf_mutable Infoblox_UDDI_Key)}" |
|
|
|
Infoblox_Portal="${Infoblox_Portal:-$(_readaccountconf_mutable Infoblox_Portal)}" |
|
|
|
|
|
|
|
_info "Using Infoblox UDDI API" |
|
|
|
_debug fulldomain "$fulldomain" |
|
|
|
_debug txtvalue "$txtvalue" |
|
|
|
|
|
|
|
if [ -z "$Infoblox_UDDI_Key" ] || [ -z "$Infoblox_Portal" ]; then |
|
|
|
Infoblox_UDDI_Key="" |
|
|
|
Infoblox_Portal="" |
|
|
|
_err "You didn't specify the Infoblox UDDI key or server (Infoblox_UDDI_Key; Infoblox_Portal)." |
|
|
|
_err "Please set them via EXPORT Infoblox_UDDI_Key=your_key, EXPORT Infoblox_Portal=csp.infoblox.com and try again." |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
_saveaccountconf_mutable Infoblox_UDDI_Key "$Infoblox_UDDI_Key" |
|
|
|
_saveaccountconf_mutable Infoblox_Portal "$Infoblox_Portal" |
|
|
|
|
|
|
|
export _H1="Authorization: token $Infoblox_UDDI_Key" |
|
|
|
export _H2="Content-Type: application/json" |
|
|
|
|
|
|
|
zone_url="https://$Infoblox_Portal/api/ddi/v1/dns/auth_zone" |
|
|
|
_debug "Fetching zones from: $zone_url" |
|
|
|
zone_result="$(_get "$zone_url")" |
|
|
|
_debug2 "zone_result: $zone_result" |
|
|
|
|
|
|
|
if [ "$?" != "0" ]; then |
|
|
|
_err "Error fetching zones from Infoblox API" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
fulldomain_no_acme=$(echo "$fulldomain" | sed 's/^_acme-challenge\.//') |
|
|
|
_debug "Looking for zone matching domain: $fulldomain_no_acme" |
|
|
|
|
|
|
|
zone_fqdn="" |
|
|
|
temp_domain="$fulldomain_no_acme" |
|
|
|
|
|
|
|
while [ -n "$temp_domain" ]; do |
|
|
|
_debug "Checking if '$temp_domain' is a zone..." |
|
|
|
if echo "$zone_result" | grep -q "\"fqdn\":\"$temp_domain\"" || echo "$zone_result" | grep -q "\"fqdn\":\"$temp_domain\.\""; then |
|
|
|
zone_fqdn="$temp_domain" |
|
|
|
_debug "Found matching zone: $zone_fqdn" |
|
|
|
break |
|
|
|
fi |
|
|
|
temp_domain=$(echo "$temp_domain" | sed 's/^[^.]*\.//') |
|
|
|
if ! echo "$temp_domain" | grep -q '\.'; then |
|
|
|
break |
|
|
|
fi |
|
|
|
done |
|
|
|
|
|
|
|
if [ -z "$zone_fqdn" ]; then |
|
|
|
_err "Could not determine zone for domain $fulldomain" |
|
|
|
_err "Available zones: $(echo "$zone_result" | _egrep_o '"fqdn":"[^"]*"' | sed 's/"fqdn":"//;s/"//')" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
zone_id=$(echo "$zone_result" | jq -r '(.results // .)[] | select(.fqdn == "'"$zone_fqdn"'" or .fqdn == "'"$zone_fqdn"'.") | .id' | head -1) |
|
|
|
|
|
|
|
_debug "zone_id: $zone_id" |
|
|
|
|
|
|
|
if [ -z "$zone_id" ]; then |
|
|
|
_err "Could not find zone ID for $zone_fqdn" |
|
|
|
_debug "Zone result: $zone_result" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
_debug "Extracting name_in_zone from fulldomain='$fulldomain' with zone_fqdn='$zone_fqdn'" |
|
|
|
name_in_zone=$(echo "$fulldomain" | sed "s/\.$zone_fqdn\$//") |
|
|
|
_debug "name_in_zone after removing zone: '$name_in_zone'" |
|
|
|
name_in_zone=$(echo "$name_in_zone" | sed 's/\.$//') |
|
|
|
_debug "name_in_zone final: '$name_in_zone'" |
|
|
|
|
|
|
|
baseurl="https://$Infoblox_Portal/api/ddi/v1/dns/record" |
|
|
|
|
|
|
|
body="{\"type\":\"TXT\",\"name_in_zone\":\"$name_in_zone\",\"zone\":\"$zone_id\",\"ttl\":120,\"inheritance_sources\":{\"ttl\":{\"action\":\"override\"}},\"rdata\":{\"text\":\"$txtvalue\"}}" |
|
|
|
|
|
|
|
_debug "POST URL: $baseurl" |
|
|
|
_debug "POST body: $body" |
|
|
|
result="$(_post "$body" "$baseurl" "" "POST")" |
|
|
|
_debug "POST result: $result" |
|
|
|
|
|
|
|
if echo "$result" | grep -q '"id"'; then |
|
|
|
record_id=$(echo "$result" | _egrep_o '"id":"[^"]*"' | head -1 | sed 's/"id":"\([^"]*\)"/\1/') |
|
|
|
_info "Successfully created TXT record with ID: $record_id" |
|
|
|
return 0 |
|
|
|
else |
|
|
|
_err "Error encountered during record addition" |
|
|
|
_err "Response: $result" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
} |
|
|
|
|
|
|
|
#Usage: dns_infoblox_uddi_rm _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|
|
|
dns_infoblox_uddi_rm() { |
|
|
|
fulldomain=$1 |
|
|
|
txtvalue=$2 |
|
|
|
|
|
|
|
Infoblox_UDDI_Key="${Infoblox_UDDI_Key:-$(_readaccountconf_mutable Infoblox_UDDI_Key)}" |
|
|
|
Infoblox_Portal="${Infoblox_Portal:-$(_readaccountconf_mutable Infoblox_Portal)}" |
|
|
|
|
|
|
|
if [ -z "$Infoblox_UDDI_Key" ] || [ -z "$Infoblox_Portal" ]; then |
|
|
|
_err "Credentials not found" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
_info "Using Infoblox UDDI API" |
|
|
|
_debug fulldomain "$fulldomain" |
|
|
|
_debug txtvalue "$txtvalue" |
|
|
|
|
|
|
|
export _H1="Authorization: token $Infoblox_UDDI_Key" |
|
|
|
export _H2="Content-Type: application/json" |
|
|
|
|
|
|
|
zone_url="https://$Infoblox_Portal/api/ddi/v1/dns/auth_zone" |
|
|
|
_debug "Fetching zones from: $zone_url" |
|
|
|
zone_result="$(_get "$zone_url")" |
|
|
|
_debug2 "zone_result: $zone_result" |
|
|
|
|
|
|
|
if [ "$?" != "0" ]; then |
|
|
|
_err "Error fetching zones from Infoblox API" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
fulldomain_no_acme=$(echo "$fulldomain" | sed 's/^_acme-challenge\.//') |
|
|
|
_debug "Looking for zone matching domain: $fulldomain_no_acme" |
|
|
|
|
|
|
|
zone_fqdn="" |
|
|
|
temp_domain="$fulldomain_no_acme" |
|
|
|
|
|
|
|
while [ -n "$temp_domain" ]; do |
|
|
|
_debug "Checking if '$temp_domain' is a zone..." |
|
|
|
if echo "$zone_result" | grep -q "\"fqdn\":\"$temp_domain\"" || echo "$zone_result" | grep -q "\"fqdn\":\"$temp_domain\.\""; then |
|
|
|
zone_fqdn="$temp_domain" |
|
|
|
_debug "Found matching zone: $zone_fqdn" |
|
|
|
break |
|
|
|
fi |
|
|
|
temp_domain=$(echo "$temp_domain" | sed 's/^[^.]*\.//') |
|
|
|
if ! echo "$temp_domain" | grep -q '\.'; then |
|
|
|
break |
|
|
|
fi |
|
|
|
done |
|
|
|
|
|
|
|
if [ -z "$zone_fqdn" ]; then |
|
|
|
_err "Could not determine zone for domain $fulldomain" |
|
|
|
_err "Available zones: $(echo "$zone_result" | _egrep_o '"fqdn":"[^"]*"' | sed 's/"fqdn":"//;s/"//')" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
zone_id=$(echo "$zone_result" | jq -r '(.results // .)[] | select(.fqdn == "'"$zone_fqdn"'" or .fqdn == "'"$zone_fqdn"'.") | .id' | head -1) |
|
|
|
|
|
|
|
_debug "zone_id: $zone_id" |
|
|
|
|
|
|
|
if [ -z "$zone_id" ]; then |
|
|
|
_err "Could not find zone ID for $zone_fqdn" |
|
|
|
_debug "Zone result: $zone_result" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
name_in_zone=$(echo "$fulldomain" | sed "s/\.$zone_fqdn\$//" | sed 's/\.$//') |
|
|
|
_debug "name_in_zone: $name_in_zone" |
|
|
|
|
|
|
|
filter="type eq 'TXT' and name_in_zone eq '$name_in_zone' and zone eq '$zone_id'" |
|
|
|
filter_encoded=$(_url_encode "$filter") |
|
|
|
geturl="https://$Infoblox_Portal/api/ddi/v1/dns/record?_filter=$filter_encoded" |
|
|
|
_debug "GET URL: $geturl" |
|
|
|
|
|
|
|
result="$(_get "$geturl")" |
|
|
|
_debug "GET result: $result" |
|
|
|
|
|
|
|
if echo "$result" | grep -q '"results":'; then |
|
|
|
record_count=$(echo "$result" | jq -r '.results | length') |
|
|
|
_debug "Found $record_count result(s)" |
|
|
|
|
|
|
|
record_id=$(echo "$result" | jq -r '.results[] | select(.rdata.text == "'"$txtvalue"'") | .id' | head -1) |
|
|
|
|
|
|
|
if [ -n "$record_id" ]; then |
|
|
|
record_uuid=$(echo "$record_id" | sed 's/.*\/\([a-f0-9-]*\)$/\1/') |
|
|
|
_debug "Found record UUID: $record_uuid" |
|
|
|
|
|
|
|
delurl="https://$Infoblox_Portal/api/ddi/v1/dns/record/$record_uuid" |
|
|
|
_debug "DELETE URL: $delurl" |
|
|
|
rmResult="$(_post "" "$delurl" "" "DELETE")" |
|
|
|
|
|
|
|
if [ -z "$rmResult" ] || [ "$rmResult" = "{}" ]; then |
|
|
|
_info "Successfully deleted the txt record" |
|
|
|
return 0 |
|
|
|
else |
|
|
|
_err "Error occurred during txt record delete" |
|
|
|
_err "Response: $rmResult" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
else |
|
|
|
_err "Record to delete didn't match an existing record (no matching txtvalue found)" |
|
|
|
_debug "Looking for txtvalue: $txtvalue" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
else |
|
|
|
_err "Record to delete didn't match an existing record (no results found)" |
|
|
|
_debug "Response: $result" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
fulldomain=$1 |
|
|
|
txtvalue=$2 |
|
|
|
|
|
|
|
Infoblox_UDDI_Key="${Infoblox_UDDI_Key:-$(_readaccountconf_mutable Infoblox_UDDI_Key)}" |
|
|
|
Infoblox_Portal="${Infoblox_Portal:-$(_readaccountconf_mutable Infoblox_Portal)}" |
|
|
|
|
|
|
|
if [ -z "$Infoblox_UDDI_Key" ] || [ -z "$Infoblox_Portal" ]; then |
|
|
|
_err "Credentials not found" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
_info "Using Infoblox UDDI API" |
|
|
|
_debug fulldomain "$fulldomain" |
|
|
|
_debug txtvalue "$txtvalue" |
|
|
|
|
|
|
|
export _H1="Authorization: token $Infoblox_UDDI_Key" |
|
|
|
export _H2="Content-Type: application/json" |
|
|
|
|
|
|
|
zone_url="https://$Infoblox_Portal/api/ddi/v1/dns/auth_zone" |
|
|
|
_debug "Fetching zones from: $zone_url" |
|
|
|
zone_result="$(_get "$zone_url")" |
|
|
|
_debug2 "zone_result: $zone_result" |
|
|
|
|
|
|
|
if [ "$?" != "0" ]; then |
|
|
|
_err "Error fetching zones from Infoblox API" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
fulldomain_no_acme=$(echo "$fulldomain" | sed 's/^_acme-challenge\.//') |
|
|
|
_debug "Looking for zone matching domain: $fulldomain_no_acme" |
|
|
|
|
|
|
|
zone_fqdn="" |
|
|
|
temp_domain="$fulldomain_no_acme" |
|
|
|
|
|
|
|
while [ -n "$temp_domain" ]; do |
|
|
|
_debug "Checking if '$temp_domain' is a zone..." |
|
|
|
if echo "$zone_result" | grep -q "\"fqdn\":\"$temp_domain\"" || echo "$zone_result" | grep -q "\"fqdn\":\"$temp_domain\.\""; then |
|
|
|
zone_fqdn="$temp_domain" |
|
|
|
_debug "Found matching zone: $zone_fqdn" |
|
|
|
break |
|
|
|
fi |
|
|
|
temp_domain=$(echo "$temp_domain" | sed 's/^[^.]*\.//') |
|
|
|
if ! echo "$temp_domain" | grep -q '\.'; then |
|
|
|
break |
|
|
|
fi |
|
|
|
done |
|
|
|
|
|
|
|
if [ -z "$zone_fqdn" ]; then |
|
|
|
_err "Could not determine zone for domain $fulldomain" |
|
|
|
_err "Available zones: $(echo "$zone_result" | _egrep_o '"fqdn":"[^"]*"' | sed 's/"fqdn":"//;s/"//')" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
zone_id=$(echo "$zone_result" | jq -r '(.results // .)[] | select(.fqdn == "'"$zone_fqdn"'" or .fqdn == "'"$zone_fqdn"'.") | .id' | head -1) |
|
|
|
|
|
|
|
_debug "zone_id: $zone_id" |
|
|
|
|
|
|
|
if [ -z "$zone_id" ]; then |
|
|
|
_err "Could not find zone ID for $zone_fqdn" |
|
|
|
_debug "Zone result: $zone_result" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
|
|
|
|
name_in_zone=$(echo "$fulldomain" | sed "s/\.$zone_fqdn\$//" | sed 's/\.$//') |
|
|
|
_debug "name_in_zone: $name_in_zone" |
|
|
|
|
|
|
|
filter="type eq 'TXT' and name_in_zone eq '$name_in_zone' and zone eq '$zone_id'" |
|
|
|
filter_encoded=$(_url_encode "$filter") |
|
|
|
geturl="https://$Infoblox_Portal/api/ddi/v1/dns/record?_filter=$filter_encoded" |
|
|
|
_debug "GET URL: $geturl" |
|
|
|
|
|
|
|
result="$(_get "$geturl")" |
|
|
|
_debug "GET result: $result" |
|
|
|
|
|
|
|
if echo "$result" | grep -q '"results":'; then |
|
|
|
record_count=$(echo "$result" | jq -r '.results | length') |
|
|
|
_debug "Found $record_count result(s)" |
|
|
|
|
|
|
|
record_id=$(echo "$result" | jq -r '.results[] | select(.rdata.text == "'"$txtvalue"'") | .id' | head -1) |
|
|
|
|
|
|
|
if [ -n "$record_id" ]; then |
|
|
|
record_uuid=$(echo "$record_id" | sed 's/.*\/\([a-f0-9-]*\)$/\1/') |
|
|
|
_debug "Found record UUID: $record_uuid" |
|
|
|
|
|
|
|
delurl="https://$Infoblox_Portal/api/ddi/v1/dns/record/$record_uuid" |
|
|
|
_debug "DELETE URL: $delurl" |
|
|
|
rmResult="$(_post "" "$delurl" "" "DELETE")" |
|
|
|
|
|
|
|
if [ -z "$rmResult" ] || [ "$rmResult" = "{}" ]; then |
|
|
|
_info "Successfully deleted the txt record" |
|
|
|
return 0 |
|
|
|
else |
|
|
|
_err "Error occurred during txt record delete" |
|
|
|
_err "Response: $rmResult" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
else |
|
|
|
_err "Record to delete didn't match an existing record (no matching txtvalue found)" |
|
|
|
_debug "Looking for txtvalue: $txtvalue" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
else |
|
|
|
_err "Record to delete didn't match an existing record (no results found)" |
|
|
|
_debug "Response: $result" |
|
|
|
return 1 |
|
|
|
fi |
|
|
|
} |