On 06/27/2012 01:50 AM, William Brown wrote:
Take a look at https://bitbucket.org/Firstyear/freeipa-dhcp/src/f63a7e505705/TODO.DHCP for my "todo" list, and at http://www.freeipa.org/page/DHCP_Integration_Design for some of my planning about this integration. Both are subject to change in the near future however.
Document "DHCP_Integration_Design" mentions GSSAPI support which is missing in ISC DHCP. I recommend to look into SASL rather than plain GSSAPI. Implementation should be simpler than with GSSAPI.
You can look into code from https://fedorahosted.org/bind-dyndb-ldap/ . File src/krb5_helper.c contains minimal code necessary to support Kerberos 5.
src/ldap_helper.c contains bits necessary for SASL setup. Interesting parts are mostly in new_ldap_instance() and ldap_sasl_interact() functions.
Petr^2 Spacek _______________________________________________ Freeipa-users mailing list Freeipaemail@example.com https://www.redhat.com/mailman/listinfo/freeipa-users