# -*- coding: utf-8 -*-
#
# Copyright 2004-2022 Univention GmbH
#
# https://www.univention.de/
#
# All rights reserved.
#
# The source code of this program is made available
# under the terms of the GNU Affero General Public License version 3
# (GNU AGPL V3) as published by the Free Software Foundation.
#
# Binary versions of this program provided by Univention to you as
# well as other copyrighted, protected or trademarked materials like
# Logos, graphics, fonts, specific documentations and configurations,
# cryptographic keys etc. are subject to a license agreement between
# you and Univention and not subject to the GNU AGPL V3.
#
# In the case you use this program under the terms of the GNU AGPL V3,
# the program is provided in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public
# License with the Debian GNU/Linux or Univention distribution in file
# /usr/share/common-licenses/AGPL-3; if not, see
# <https://www.gnu.org/licenses/>.
"""
|UDM| module for |DNS| aliases (CNAME)
"""
import re
import six
from ldap.filter import filter_format
from univention.admin.layout import Tab, Group
import univention.admin.filter
import univention.admin.handlers
import univention.admin.handlers.dns.forward_zone
import univention.admin.localization
from univention.admin.handlers.dns import stripDot, ARPA_IP4, ARPA_IP6
translation = univention.admin.localization.translation('univention.admin.handlers.dns')
_ = translation.translate
module = 'dns/alias'
operations = ['add', 'edit', 'remove', 'search']
columns = ['cname']
superordinate = 'dns/forward_zone'
childs = False
short_description = _('DNS: Alias record')
object_name = _('Alias record')
object_name_plural = _('Alias records')
long_description = _('Assign additional names to a host.')
options = {
'default': univention.admin.option(
short_description=short_description,
default=True,
objectClasses=['top', 'dNSZone'],
),
}
property_descriptions = {
'name': univention.admin.property(
short_description=_('Alias'),
long_description=_('The name of the entry relative to the domain.'),
syntax=univention.admin.syntax.dnsName,
include_in_default_search=True,
required=True,
identifies=True
),
'zonettl': univention.admin.property(
short_description=_('Time to live'),
long_description=_('The time this entry may be cached.'),
syntax=univention.admin.syntax.UNIX_TimeInterval,
default=(('3', 'hours'), []),
dontsearch=True,
),
'cname': univention.admin.property(
short_description=_('Canonical name'),
long_description=_("The name this alias points to. A FQDN must end with a dot."),
syntax=univention.admin.syntax.dnsName,
include_in_default_search=True,
required=True,
)
}
layout = [
Tab(_('General'), _('Basic settings'), layout=[
Group(_('General alias record settings'), layout=[
'name',
'zonettl',
'cname'
]),
])
]
mapping = univention.admin.mapping.mapping()
mapping.register('name', 'relativeDomainName', stripDot, univention.admin.mapping.ListToString, encoding='ASCII')
mapping.register('cname', 'cNAMERecord', None, univention.admin.mapping.ListToString, encoding='ASCII')
mapping.register('zonettl', 'dNSTTL', univention.admin.mapping.mapUNIX_TimeInterval, univention.admin.mapping.unmapUNIX_TimeInterval)
[docs]class object(univention.admin.handlers.simpleLdap):
module = module
def _updateZone(self):
if self.update_zone:
self.superordinate.open()
self.superordinate.modify()
def __init__(self, co, lo, position, dn='', superordinate=None, attributes=[], update_zone=True):
self.update_zone = update_zone
univention.admin.handlers.simpleLdap.__init__(self, co, lo, position, dn, superordinate, attributes=attributes)
def _ldap_addlist(self):
al = super(object, self)._ldap_addlist()
return al + [
(self.superordinate.mapping.mapName('zone'), self.superordinate.mapping.mapValue('zone', self.superordinate['zone'])),
]
def _ldap_post_create(self):
super(object, self)._ldap_post_create()
self._updateZone()
def _ldap_post_modify(self):
super(object, self)._ldap_post_modify()
if self.hasChanged(self.descriptions.keys()):
self._updateZone()
def _ldap_post_remove(self):
super(object, self)._ldap_post_remove()
self._updateZone()
[docs] @classmethod
def unmapped_lookup_filter(cls):
return univention.admin.filter.conjunction('&', [
univention.admin.filter.expression('objectClass', 'dNSZone'),
univention.admin.filter.conjunction('!', [univention.admin.filter.expression('relativeDomainName', '@')]),
univention.admin.filter.conjunction('!', [univention.admin.filter.expression('zoneName', '*.in-addr.arpa', escape=False)]),
univention.admin.filter.conjunction('!', [univention.admin.filter.expression('aRecord', '*', escape=False)]),
univention.admin.filter.conjunction('!', [univention.admin.filter.expression('zoneName', '*.ip6.arpa', escape=False)]),
univention.admin.filter.conjunction('!', [univention.admin.filter.expression('aAAARecord', '*', escape=False)]),
univention.admin.filter.expression('cNAMERecord', '*', escape=False)
])
[docs] @classmethod
def lookup_filter_superordinate(cls, filter, superordinate):
filter.expressions.append(univention.admin.filter.expression('zoneName', superordinate.mapping.mapValueDecoded('zone', superordinate['zone']), escape=True))
return filter
lookup = object.lookup
lookup_filter = object.lookup_filter
[docs]def identify(dn, attr, canonical=False):
return b'dNSZone' in attr.get('objectClass', []) and b'@' not in attr.get('relativeDomainName', []) and \
not attr['zoneName'][0].decode('ASCII').endswith(ARPA_IP4) and not attr['zoneName'][0].decode('ASCII').endswith(ARPA_IP6) and attr.get('cNAMERecord', []) and not attr.get('aRecord', []) and not attr.get('aAAARecord', [])
[docs]def lookup_alias_filter(lo, filter_s):
alias_pattern = re.compile(r'(?:^|\()dnsAlias=([^)]+)($|\))', flags=re.I)
def _replace_alias_filter(match):
alias_filter = object.lookup_filter('name=%s' % match.group(1), lo)
alias_filter_s = six.text_type(alias_filter)
alias_base = six.text_type(lo.base) # standard dns container might be a better choice
unmatchable_filter = '(&(objectClass=top)(!(objectClass=top)))' # if no computers for aliases found, return an impossible filter!
alias_replaced = ''.join({filter_format('(cn=%s)', [attrs['cNAMERecord'][0].split('.', 1)[0]]) for dn, attrs in lo.search(base=alias_base, scope='sub', filter=alias_filter_s, attr=['cNAMERecord'])})
return '(|%s)' % (alias_replaced,) if alias_replaced else unmatchable_filter
return alias_pattern.sub(_replace_alias_filter, str(filter_s))
