DNSSEC

WORLINPROGRESS

keys

...

zone "bla-portal.de"   IN   { type master; file "bla-portal.de.db"; key-directory "/etc/namedb/dnssec-keys"; auto-dnssec maintain; inline-signing yes ; };

Monitoring

Monitoring Scripte generieren

#!/bin/sh
#SAVEIFS=$IFS
#IFS=$(echo -en "\n\b")
rm /usr/local/lib/check_mk_agent/local/21600/dnssec_*

for FILE in $(ls /etc/namedb/zones/*.signed); do
        FILE=$(echo $FILE | sed -e s/.db.signed$// | sed -e s/\\/etc\\/namedb\\/zones\\/// )
        touch /usr/local/lib/check_mk_agent/local/21600/dnssec_${FILE}
        echo "#!/bin/sh" >> /usr/local/lib/check_mk_agent/local/21600/dnssec_${FILE}
        echo "/usr/local/bin/check_dnssec_expiration -D ${FILE} -w 10 -c 5" >> /usr/local/lib/check_mk_agent/local/21600/dnssec_${FILE}

done

chmod +x /usr/local/lib/check_mk_agent/local/21600/dnssec_*
#IFS=$SAVEIFS

Z.B. generiertes Script

#!/bin/sh
/usr/local/bin/check_dnssec_expiration -D blafasel.de -w 10 -c 5