#!/usr/bin/env python

# Contributed 2006 by Stephane Bortzmeyer.

# Changed 20070102 by Wouter to handle primary zones and file names.

# Converts a nsd 2 "nsd.zones" file to a nsd 3 "nsd.conf" file.

# Change at will

nsd_zones_name = "/etc/nsd.zones"

key_dir = "/etc/nsd/keys" # Directory holding the TSIG keys

import re

import os.path

primary_line_re = re.compile("^zone\s+([a-z0-9\.-]+)\s+([a-z0-9/\.-]+)\s*$", re.IGNORECASE)

secondary_line_re = re.compile("^zone\s+([a-z0-9\.-]+)\s+([a-z0-9/\.-]+)\s+masters\s+([0-9a-f:\. ]*)\s*$", re.IGNORECASE)

notify_line_re = re.compile("^zone\s+([a-z0-9\.-]+)\s+([a-z0-9/\.-]+)\s+notify\s+([0-9a-f:\. ]*)\s*$", re.IGNORECASE)

comment_re = re.compile("^\s*;")

empty_re = re.compile("^\s*$")

nsd_zones = open(nsd_zones_name)

keys = {}

for line in nsd_zones.xreadlines():

    if comment_re.search(line) or empty_re.search(line):

	pass

    elif secondary_line_re.search(line):

    	match = secondary_line_re.search(line)

        zone = match.group(1)

        zonefile = match.group(2)

        master_group = match.group(3)

        masters = re.split("\s+", master_group)

        print """zone:

        name: "%s"

        zonefile: "%s"

        # This is to allow "nsdc update" to work.

        allow-notify: 127.0.0.1 NOKEY

        # This is a slave zone. Masters are listed below.""" % (zone, zonefile)

        for master in masters:

            if re.search("^\s*$", master):

                continue

            key_filename = "%s/%s.tsiginfo" % (key_dir, master)

            if os.path.exists(key_filename):

                key_content = open(key_filename)

                peer_ip = key_content.readline()

                peer_ip = peer_ip[:-1]

                key_name = key_content.readline()

                key_name = key_name[:-1]

                algorithm = key_content.readline()

                algorithm = int(algorithm[:-1])

                if algorithm == 157:

                    algorithm_name = "hmac-md5"

                else:

                    raise Exception("Unsupported TSIG algorithm %i" % algorithm)

                secret = key_content.readline()

                secret = secret[:-1]

                key_content.close()

                key = key_name

                keys[key_name] = {

                    'algorithm': algorithm_name,

                    'secret': secret}

            else:

                key = "NOKEY"

            print """        allow-notify: %s %s

        request-xfr: %s %s""" % (master, key, master, key)

        print ""

    elif primary_line_re.search(line):

	match = primary_line_re.search(line)

	zone = match.group(1)

	zonefile = match.group(2)

	print """zone:

	name: "%s"

	zonefile: "%s"

	""" % (zone, zonefile)

    elif notify_line_re.search(line):

    	match = notify_line_re.search(line)

        zone = match.group(1)

        zonefile = match.group(2)

        notify_group = match.group(3)

        notifies = re.split("\s+", notify_group)

        print """zone:

        name: "%s"

        zonefile: "%s"

        # This is a master zone. Slaves are listed below.""" % (zone, zonefile)

        for notify in notifies:

            if re.search("^\s*$", notify):

                continue

            key = "NOKEY"

            print """        notify: %s %s""" % (notify, key)

        print ""

    else:

	raise Exception("Invalid line \"%s\"" % line)

nsd_zones.close()

for key in keys.keys():

    print """key:

        name: "%s"

        algorithm: %s

        secret: "%s" """ % (key, keys[key]['algorithm'], keys[key]['secret'])

    print ""

## Local Variables: ##

## mode:python ##

## End: ##