namedmanager dns 搭建

• NamedManager 基于web的dns服务
  • nm-dns 软件部署及配置
  • web 页面相关解析配置
  • https 访问,正常配置解析使用

环境

系统版本	主机名	IP地址	备注
centos 7.9	nm-dns01	10.10.10.21	域名: ink8s.com

1.0 数据库及所需软件安装

mysql 5.7

# yum -y remove mariadb-libs						# 移除cnetos7 系统自带的mariadb库
# wget https://repo.mysql.com//mysql80-community-release-el7-3.noarch.rpm
# rpm -ivh mysql80-community-release-el7-3.noarch.rpm
# sed -i '28c enabled=0' /etc/yum.repos.d/mysql-community.repo
# sed -i '21c enabled=1' /etc/yum.repos.d/mysql-community.repo
# sed -i '22c gpgcheck=0' /etc/yum.repos.d/mysql-community.repo
# yum clean all && yum repolist
# yum -y install mysql-server

修改数据库密码

# systemctl start mysqld && systemctl enable mysqld
# grep "password" /var/log/mysqld.log
# mysql -uroot -p
mysql> alter user user() identified by 'Zd6Uv.8QJiLKj';
mysql> set global validate_password_policy=0;
mysql> set global validate_password_length=6;
mysql> grant all privileges on *.* to 'root'@'10.10.10.%' identified by 'Zd6Uv.8QJiLKj' with grant option;     # 赋予远程登录权限
mysql> flush privileges;

2.0 安装 httpd php-msyql php namedmanager-www namedmanager-bind

named主程序安装

# wget -O /etc/yum.repos.d/jethrocarr-c7-public.repo http://repos.jethrocarr.com/config/centos/7/jethrocarr-c7-public.repo --no-check-certificate
# yum -y install namedmanager-www namedmanager-bind php-mysql httpd php

3.0 安装bind bind-chroot

dns包安装

# yum -y install bind bind-chroot

初始化chroot环境

# /usr/libexec/setup-named-chroot.sh /var/named/chroot on		# setup-named-chroot.sh会自动挂载到chroot目录
# systemctl start named-chroot && systemctl enable named-chroot
# ll /var/named/chroot/etc					# 检查目录是否挂载成功
# ll /var/named/chroot/var/named

4.0 主配置文件设置

创建主配置文件中的所需文件及赋权

# touch /var/named/chroot/var/named/data/cache_dump.db
# touch /var/named/chroot/var/named/data/named_stats.txt
# touch /var/named/chroot/var/named/data/named_mem_stats.txt

# chmod -R 777 /var/named/chroot/var/named/data
# chmod -R 777 /var/named/chroot/var/named/dynamic
# ln /etc/named.namedmanager.conf /var/named/chroot/named.namedmanager.conf
# chown named:named /etc/named.namedmanager.conf

配置文件修改

# cat /var/named/chroot/etc/named.conf
options {
        listen-on port 53        { any; };
        directory               "/var/named";
        dump-file               "/var/named/data/cache_dump.db";
        statistics-file         "/var/named/data/named_stats.txt";
        memstatistics-file      "/var/named/data/named_mem_stats.txt";
        recursing-file          "/var/named/data/named.recursing";
        secroots-file           "/var/named/data/named.secroots";
        allow-query             { any; };
        recursion yes;

        bindkeys-file           "/etc/named.iscdlv.key";
        managed-keys-directory  "/var/named/dynamic";
        pid-file                "/run/named/named.pid";
        session-keyfile         "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
include "/etc/named.namedmanager.conf";

php连接配置

# cat /etc/namedmanager/config-bind.php
...
$config["api_url"]              = "http://10.10.10.21/namedmanager";
$config["api_server_name"]      = "dns.ink8s.com";				# api_server_name字段必须与httpd主配置文件中的ServerName一致
$config["api_auth_key"]         = "cbdamxidn";					# 自定义密钥
# chroot环境还需配置如下2行
$config["bind"]["config"]               = "/var/named/chroot/etc/named.namedmanager.conf";
$config["bind"]["zonefiledir"]          = "/var/named/chroot/var/named/";
...

http配置文件修改并配置https证书

# cat /etc/httpd/conf/httpd.conf
...
95 ServerName dns.ink8s.com:443							# 修改此行
104 #   Require all denied							# 注释此行
...

# mkdir -p /etc/httpd/conf/ssl/
# cat /etc/httpd/conf.d/ssl.conf
...
59 DocumentRoot "/usr/share/namedmanager/htdocs/"
60 ServerName dns.ink8s.com:443
69 SSLEngine on
74 SSLProtocol all -SSLv2 -SSLv3
79 SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM
91 SSLHonorCipherOrder on
99 SSLCertificateFile /etc/httpd/conf/ssl/dns.inadm.com_public.crt
105 SSLCertificateKeyFile /etc/httpd/conf/ssl/dns.inadm.com.key
114 SSLCertificateChainFile /etc/httpd/conf/ssl/dns.inadm.com_chain.crt
...

# sed -i '119c DocumentRoot "/usr/share/namedmanager/htdocs/"' /etc/httpd/conf/httpd.conf

5.0 导入namedmanager到MySQL

# cd /usr/share/namedmanager/resources/
# ./autoinstall.pl
Please enter MySQL root password (if any): Zd6Uv.8QJiLKj	

6.0 重启服务

重启服务

# systemctl start httpd && systemctl enable httpd
# systemctl restart mysqld
# systemctl restart named-chroot

7.0 web 页面配置

登陆

https://10.10.10.21/namedmanager
    user: setup
    pass: setup123

7.1 添加正向解析

• 添加Name Server FQDN
  • “Name Server FQDN”字段要与httpd的ServerName字段一致
  • “API Authentication Key”字段要与php配置文件”api_auth_key”字段一致

重启使配置生效

# systemctl restart mysqld && systemctl restart named-chroot

7.2 添加A记录

7.3 添加反向解析

7.4 验证部署成功

• 反向解析添加完成后,查看状态为绿色即表示NamedManager DNS搭建成功(保存后,秒钟过12后刷新确认)

8.0 使用域名访问

// 由于上面已经配置 ssl 证书,并完成了域名解析配置
https://dns.ink8s.com
    Username: setup
    Password: setup123

微信

加微信,入技术群

微信

• 本文作者： [email protected]
• 本文链接： https://www.ink8s.com/2023/01/06/namedmanager-dns-搭建/
• 版权声明： 本博客所有文章除特别声明外，均采用 MIT 许可协议。转载请注明出处！