Greetings ISC team,
We did the following API test without specify the path at the 2.6.0 version in
previous test and it was successful.
{ "command": "config-write", "service": [ "dhcp6" ]}
However, I just tested it again on my home lab with 2.7.7 version, but it
failed this time due to lack of permission error. And received the following
error message:
[
{
"result": 1,
"text": "Error during config-write: Unable to open file /etc/kea/kea-dhcp6.conf
for writing"
}
]
I am wondering if you have made any changes related to this config. I didn’t
change the permission of the kea directory or the config file. Also, in
previous email, I see isc team confirmed 3.0 version will be released in
June/July.
Do you have a more specific date? Thank you.
[user@kea02 ~]$ ls -ltra /etc/kea/ ... -rw-r--r--. 1 root root 2784 Apr 8 22:18
kea-dhcp6.conf -rw-r--r--. 1 root root 4219 May 20 14:18 kea-ctrl-agent.conf
drwxr-xr-x. 3 root root 4096 May 20 14:18 .
Dhcp6 Config:
[
{
"arguments": {
"Dhcp6": {
"allocator": "iterative",
"calculate-tee-times": true,
"client-classes": [
{
"name": "XXX",
"option-data": [
{
"always-send": true,
"code": 34,
"csv-format": true,
"data": "3000::0:1",
"name": "syslog-servers",
"never-send": false,
"space": "vendor-4491"
},
{
"always-send": true,
"code": 37,
"csv-format": true,
"data": "3000::0:2",
"name": "time-servers",
"never-send": false,
"space": "vendor-4491"
},
{
"always-send": true,
"code": 38,
"csv-format": true,
"data": "0",
"name": "time-offset",
"never-send": false,
"space": "vendor-4491"
},
{
"always-send": true,
"code": 61,
"csv-format": true,
"data": "3000::0:3",
"name": "cores",
"never-send": false,
"space": "vendor-4491"
},
{
"always-send": true,
"code": 17,
"csv-format": false,
"data": "",
"name": "vendor-opts",
"never-send": false,
"space": "vendor-4491"
}
],
"test": "substring(option[17].option[2].hex,0,3) == 'XXX'"
}
],
"control-sockets": [
{
"socket-name": "/tmp/kea6-ctrl-socket",
"socket-type": "unix"
}
],
"ddns-conflict-resolution-mode": "check-with-dhcid",
"ddns-generated-prefix": "myhost",
"ddns-override-client-update": false,
"ddns-override-no-update": false,
"ddns-qualifying-suffix": "",
"ddns-replace-client-name": "never",
"ddns-send-updates": true,
"ddns-update-on-renew": false,
"decline-probation-period": 86400,
"dhcp-ddns": {
"enable-updates": false,
"max-queue-size": 1024,
"ncr-format": "JSON",
"ncr-protocol": "UDP",
"sender-ip": "0.0.0.0",
"sender-port": 0,
"server-ip": "127.0.0.1",
"server-port": 53001
},
"dhcp-queue-control": {
"capacity": 64,
"enable-queue": false,
"queue-type": "kea-ring6"
},
"dhcp4o6-port": 0,
"early-global-reservations-lookup": false,
"expired-leases-processing": {
"flush-reclaimed-timer-wait-time": 25,
"hold-reclaimed-time": 3600,
"max-reclaim-leases": 100,
"max-reclaim-time": 250,
"reclaim-timer-wait-time": 10,
"unwarned-reclaim-cycles": 5
},
"hooks-libraries": [
{
"library": "/usr/lib64/kea/hooks/libdhcp_lease_cmds.so",
"parameters": {}
},
{
"library": "/usr/lib64/kea/hooks/libdhcp_subnet_cmds.so",
"parameters": {}
},
{
"library": "/usr/lib64/kea/hooks/libdhcp_ha.so",
"parameters": {
"high-availability": [
{
"cert-file": "/etc/pki/ca-trust/source/anchors/cert.pem",
"delayed-updates-limit": 0,
"heartbeat-delay": 10000,
"key-file": "/etc/pki/ca-trust/source/anchors/cert-key.pem",
"max-ack-delay": 30000,
"max-rejected-lease-updates": 10,
"max-response-delay": 20000,
"max-unacked-clients": 2,
"mode": "hot-standby",
"multi-threading": {
"enable-multi-threading": true,
"http-client-threads": 0,
"http-dedicated-listener": true,
"http-listener-threads": 0
},
"peers": [
{
"auto-failover": true,
"name": "kea01",
"role": "primary",
"url": "http://192.168.100.1:8001/";
},
{
"auto-failover": true,
"name": "kea02",
"role": "standby",
"url": "http://192.168.100.2:8001/";
}
],
"require-client-certs": true,
"restrict-commands": false,
"send-lease-updates": true,
"sync-leases": true,
"sync-page-limit": 10000,
"sync-timeout": 60000,
"this-server-name": "kea02",
"trust-anchor": "/etc/pki/ca-trust/source/anchors/ca.pem",
"wait-backup-ack": false
}
]
}
}
],
"host-reservation-identifiers": [
"hw-address",
"duid"
],
"hostname-char-replacement": "",
"hostname-char-set": "[^A-Za-z0-9.-]",
"interfaces-config": {
"interfaces": [
"ens1"
],
"re-detect": true,
"service-sockets-require-all": true
},
"ip-reservations-unique": true,
"lease-database": {
"name": "/var/lib/kea/dhcp6.leases",
"persist": true,
"type": "memfile"
},
"loggers": [
{
"debuglevel": 99,
"name": "kea-dhcp6",
"output-options": [
{
"flush": true,
"maxsize": 40480000,
"maxver": 8,
"output": "/tmp/kea-debug.log",
"pattern": ""
}
],
"severity": "DEBUG"
}
],
"mac-sources": [
"any"
],
"multi-threading": {
"enable-multi-threading": true,
"packet-queue-size": 64,
"thread-pool-size": 0
},
"option-data": [],
"option-def": [
{
"array": false,
"code": 17,
"encapsulate": "",
"name": "vendor-opts",
"record-types": "",
"space": "vendor-4491",
"type": "empty"
},
{
"array": false,
"code": 2,
"encapsulate": "",
"name": "device-type",
"record-types": "",
"space": "vendor-4491",
"type": "string"
},
{
"array": true,
"code": 32,
"encapsulate": "",
"name": "tftp-servers",
"record-types": "",
"space": "vendor-4491",
"type": "ipv6-address"
},
{
"array": false,
"code": 33,
"encapsulate": "",
"name": "config-file",
"record-types": "",
"space": "vendor-4491",
"type": "string"
},
{
"array": true,
"code": 34,
"encapsulate": "",
"name": "syslog-servers",
"record-types": "",
"space": "vendor-4491",
"type": "ipv6-address"
},
{
"array": true,
"code": 37,
"encapsulate": "",
"name": "time-servers",
"record-types": "",
"space": "vendor-4491",
"type": "ipv6-address"
},
{
"array": false,
"code": 38,
"encapsulate": "",
"name": "time-offset",
"record-types": "",
"space": "vendor-4491",
"type": "int32"
},
{
"array": true,
"code": 61,
"encapsulate": "",
"name": "cores",
"record-types": "",
"space": "vendor-4491",
"type": "ipv6-address"
}
],
"parked-packet-limit": 256,
"pd-allocator": "iterative",
"preferred-lifetime": 300,
"rebind-timer": 200,
"relay-supplied-options": [
"65"
],
"renew-timer": 100,
"reservations-global": false,
"reservations-in-subnet": true,
"reservations-lookup-first": false,
"reservations-out-of-pool": false,
"sanity-checks": {
"extended-info-checks": "fix",
"lease-checks": "warn"
},
"server-id": {
"enterprise-id": 0,
"htype": 0,
"identifier": "",
"persist": true,
"time": 0,
"type": "LLT"
},
"server-tag": "",
"shared-networks": [],
"statistic-default-sample-age": 0,
"statistic-default-sample-count": 20,
"store-extended-info": false,
"subnet6": [
{
"allocator": "iterative",
"calculate-tee-times": true,
"client-classes": [
"XXX"
],
"id": 1,
"interface": "ens1",
"max-preferred-lifetime": 300,
"max-valid-lifetime": 400,
"min-preferred-lifetime": 300,
"min-valid-lifetime": 400,
"option-data": [],
"pd-allocator": "iterative",
"pd-pools": [],
"pools": [
{
"option-data": [],
"pool": "fd74:5656:15e2:10::200-fd74:5656:15e2:10::9999"
}
],
"preferred-lifetime": 300,
"rapid-commit": false,
"rebind-timer": 200,
"relay": {
"ip-addresses": []
},
"renew-timer": 100,
"reservations": [],
"store-extended-info": false,
"subnet": "fd74:5656:15e2:10::/64",
"t1-percent": 0.5,
"t2-percent": 0.8,
"valid-lifetime": 400
}
],
"t1-percent": 0.5,
"t2-percent": 0.8,
"valid-lifetime": 400
},
"hash": "BD549A38F8E1A01017957E6B36C8BFEFD7B0009D591C40D0A2C0580B41AAE0B6"
},
"result": 0
}
]
Control agent config:
[
{
"arguments": {
"Control-agent": {
"cert-file": "/etc/pki/ca-trust/source/anchors/cert.pem",
"cert-required": false,
"control-sockets": {
"dhcp6": {
"socket-name": "/tmp/kea6-ctrl-socket",
"socket-type": "unix"
}
},
"hooks-libraries": [],
"http-host": "192.168.100.2",
"http-port": 8000,
"key-file": "/etc/pki/ca-trust/source/anchors/cert-key.pem",
"loggers": [
{
"debuglevel": 0,
"name": "kea-ctrl-agent",
"output-options": [
{
"flush": true,
"output": "stdout",
"pattern": "%-5p %m\n"
}
],
"severity": "INFO"
}
],
"trust-anchor": "/etc/pki/ca-trust/source/anchors/ca.pem"
},
"hash": "B0233538F666B078153D565FE618ECEBACA68D00DCC8D5EF460E1F11BD216DB4"
},
"result": 0
}
]
--
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
Kea-users mailing list
Kea-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/kea-users
