Recent posts

#71

NicTool / Re: XML login

Last post by velgames - July 31, 2014, 03:06:56 AM

This problem solved. Just in request was error in ContentType in xml.

Now i have new problem. NicTool server says that my tags not registered. So i want ask you for:

1) Example of right request in xml form . I use C# and have some difficulties with making new requests.
2) Have nictool WSDL file? It would very helpful.

#72

NicTool / Question about nsd export

Last post by rainer_d - July 20, 2014, 11:51:13 AM

Hi,

I intend to use the nsd export, with nsd4.
So, I have three nameservers: dns1 dns2 and dns3 and the nictool-server as a fourth server independent of those three.

As the Makefile says to config the nsd.conf to the current export-dir, I assume I have to have three different nsd.conf files, pointing to the three different export-dirs, right?
The Makefile would have to reflect that by forcing nsd-control to use the appropriate config-file.
But when I run nsd-control rebuild on the NicTool-Server, it seems nsd-control wants to connect to an actual nsd-server.
Does nsd-control actually provide a "rebuild" keyword anymore?

Code Select Expand


Usage: nsd-control [options] command
Remote control utility for nsd server.
Version 4.0.3. Report bugs to <nsd-bugs@nlnetlabs.nl>.
Options:
  -c file config file, default is /usr/local/etc/nsd/nsd.conf
  -s ip[@port] server address, if omitted config is used.
  -h show this usage help.
Commands:
  start start server; runs nsd(8)
  stop stops the server
  reload [<zone>] reload modified zonefiles from disk
  reconfig reload the config file
  repattern the same as reconfig
  log_reopen reopen logfile (for log rotate)
  status display status of server
  stats print statistics
  stats_noreset peek at statistics
  addzone <name> <pattern> add a new zone
  delzone <name> remove a zone
  write [<zone>] write changed zonefiles to disk
  notify [<zone>] send NOTIFY messages to slave servers
  transfer [<zone>] try to update slave zones to newer serial
  force_transfer [<zone>] update slave zones with AXFR, no serial check
  zonestatus [<zone>] print state, serial, activity
  serverpid get pid of server process
  verbosity <number> change logging detail



The nsd-documentation says, the db-file is created the first time nsd is started.

Can anyone who is using nsd share how exactly (s)he is doing so?


Thanks in advance.

#73

NicTool / Re: XML login

Last post by velgames - July 16, 2014, 04:18:38 AM

Hello, Matt

Now I am using CentOS 6.5 and NicTool v2.23 and all of it running on VM VirtualBox.
Apache error logs nothing about this problem. Its look like apache does not see error. But in apache config i create new error log file for SOAP virtual host, in this file all time repeating error :

[Wed Jul 16 05:54:14 2014] [error] [client 192.168.1.35] Handler for perl-script returned invalid result code 1
 
config virtual host apache for nictool :

Listen 8082

PerlRequire /usr/local/nictool/server/lib/nictoolserver.conf

<VirtualHost 127.0.0.1:8082>
    KeepAlive Off
    <Location />
        SetHandler perl-script
        PerlResponseHandler NicToolServer
    </Location>
    <Location /soap>
        SetHandler perl-script
        PerlResponseHandler Apache::SOAP
        #PerlResponseHandler Apache2::SOAP
        PerlSetVar dispatch_to "/usr/local/nictool/server, NicToolServer::SOAP"
    </Location>
</VirtualHost>

<VirtualHost 192.168.1.43:8082>
    KeepAlive Off
    <Location />
        SetHandler perl-script
        PerlResponseHandler NicToolServer
    </Location>
    <Location /soap>
        SetHandler perl-script
        PerlResponseHandler Apache::SOAP
        #PerlResponseHandler Apache2::SOAP
        PerlSetVar dispatch_to "/usr/local/nictool/server, NicToolServer::SOAP"
    </Location>
   ErrorLog logs/SOAP-error_log
#       CustomLog logs/SOAP-access_log common
</VirtualHost>

I dont know what version of nictool worked before, i only know that it worked, and it was old version. Current OS and NicTool I installed for test my programm i developed for convert export MS DNS server zones to NicTool. Our company want replace Windows to CentOS. My programm developed on .Net Framework 4, thats why i need remote access to NicTool.

#74

NicTool / Re: XML login

Last post by matt - July 14, 2014, 11:52:08 AM

Hello velgames,

What version of NicTool are you running now (that doesn't work)?  Did you also run the sql/upgrade script after updating?

Also, check in your Apache logs (/var/log/[httpd|apache].error.log) for more precise error messages. The errors there should tell more precisely what the problem is.

Matt

#75

NicTool / XML login

Last post by velgames - July 14, 2014, 03:29:20 AM

Hi, i try to login via network to NicTool server using this xml code
       <?xml version="1.0" encoding="utf-8" ?>
- <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
- <soap:Body>
- <login xmlns="http://192.168.1.43:8082/SOAP">
- <struct>
  <username>root</username>
  <password>1234</password>
  </struct>
  </login>
  </soap:Body>
  </soap:Envelope>

but as answer receive that :

error_msgYour session has expired. Please login againerror_code403
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator, root@localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error.

More information about this error may be available in the server error log.



May be my xml bad? Or else? In old versions it worked, but now - no.
Using CentOS 6.5 nictool v2.23

#76

NicTool / Re: installing multiple instan...

Last post by jwest - June 26, 2014, 09:43:39 AM

Wish our internal DNS entries were "just a handful"

So I just blindly moved the PerlRequire lines from httpd.conf (general settings) to vh container(s), and it doesn't appear to have broken anything. So far so good.

Next will be to try and rename the MySQL database and just change nictoolserver.conf and nictoolclient.conf to reflect that and see if that introduces any brokenness. Then we could have different nictool databases per VH (one for external DNS, one for internal).

If THAT works ok, then I'll try to set up two different vhosts - one to manage external dns servers and one to manage internal dns servers. I suspect I can't use the same install and just different PerlRequire for each VH, so hopefully the software doesn't depend on ....www/nictool being called that and I can create .../www/nictool1 and .../www/nictool2 (two completely different installations).

If anyone knows that I'm heading down a "bad path", let me know!

Best,

Jay

#77

NicTool / Re: installing multiple instan...

Last post by matt - June 25, 2014, 05:16:02 PM

Haven't tried it. In every case I've considered using split horizon DNS, it was easier to put the handful of DNS entries into unbound.conf and call it done.

#78

NicTool / installing multiple instances ...

Last post by jwest - June 25, 2014, 05:11:34 PM

We have nictool running for public dns, but want to also have a separate private dns server (for internal ips).

I'd rather not install a completely separate webserver, so I was wondering if it was possible to have "separate" nictool installations on the same machine with the same instance of apache. Most of this I already know how to do with the exception of the PerlRequire lines that pull in the nictoolclient and nictoolserver conf's. The docs show these two directives being outside VH containers. If they can be put inside VH containers I can proceed the above direction. But if not... I'd guess I need two separate instances of apache? Thoughts?

#79

NicTool / Re: Has anyone installed NicTo...

Last post by matt - June 19, 2014, 10:59:11 AM

I'm thinking of moving everything to NSD.

I just *love* the fact that today we have choices. When tinydns was released, it was *the* alternative. PowerDNS came along and provided an alternative to BIND for the anti-djb crowd. It really wasn't until NSD, Knot, and Yadifa that there was a market of competitive choices. Six months ago I switched one tinydns to NSD and a few days ago I switched out BIND for Knot on another. So I'm running tinydns, NSD, and Knot.

Today, it's a horrible, unholy mess of a convoluted BIND-setup, with a 15-year legacy (yeah, we run an open resolver - on purpose).

I remember first separating auth from recursive in 2000, and it was "a little bumpy" then. It proved easiest to move auth servers to new IPs and leave the old servers as caches, because so many systems pointed at them. Having done so, you get a lot of new options you didn't have before.

Thankfully, management has finally agreed to move everything to NicTool (mostly, because nobody could come up with anything better in a short time, which is (IMO) no surprise to anyone who has been watching this place.
There are alternatives to NicTool (some are actually great), but each one comes with a different set of trade-offs and a different five- or six-figures price-tag....

I am aware of managed DNS providers who provide the equivalent of "NicTool + a cluster of DNS servers," but the cost for anything more than a handful of domains starts getting very pricey very fast. It only makes sense if you need "special" features like GeoDNS, or you don't have servers to deploy on. I have a number of clients that deployed several VPSes with NicTool because that saves them $1,000/month that it costed to use Managed DNS services.

#80

NicTool / Re: Has anyone installed NicTo...

Last post by rainer_d - June 19, 2014, 08:03:22 AM

I'm thinking of moving everything to NSD.
Today, it's a horrible, unholy mess of a convoluted BIND-setup, with a 15-year legacy (yeah, we run an open resolver - on purpose).
Thankfully, management has finally agreed to move everything to NicTool (mostly, because nobody could come up with anything better in a short time, which is (IMO) no surprise to anyone who has been watching this place.
There are alternatives to NicTool (some are actually great), but each one comes with a different set of trade-offs and a different five- or six-figures price-tag....