ISC EOL'ed dhcpd a few years ago. We have been using it for DHCP, with LDAP as 
a data source. The advantage of LDAP is that it's a replicated database. 
Setting up a replicated SQL is non-trivial. We don't use dynamic DHCP, because 
wireless is handled by the University for us. So LDAP is a great source.

Unfortunately ISC's replacement, KEA, aside from being complex and not entirely 
open source, doesn't support LDAP. 

So we're moving to Freeradius, which has a reasonable DHCP implementation.

The following has our implementation: 
https://github.com/clhedrick/kerberos/tree/master/freeradius-dhcp. Getting 
freeradius to do DHCP against LDAP is quite straightforward, but took a lot of 
work to figure out, in part because of sketchy documentation. This is for the 
current production version of freeradius, 3. I'll modify it for version 4 when 
that is released.

It's a few configuration files for freeradius, and dhcp.py, which goes into 
ipaserver/plugins to enable IPA to manage DHCP information. I should note that 
while dhcp.py has the whole DHCP schema, it's not clear that anything other 
than the main config, subnets and hosts actually work, since that's all we use.

I need a new objectclass with integer versions of IP addresses for subnets and 
hosts. Those are set up by the IPA commands and used by the DHCP 
implementation. The ldif subdirectory has them.

The problem is that when a request comes in I need to find the subnet it's part 
of. LDAP can't compare IP addresses, so I need the integer version to use in a 
search filter. That's the reason for the new objectclass.
-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://forge.fedoraproject.org/infra/tickets/issues/new

Reply via email to