FREERADIUS + MYSQL +DHCP3
Tomas Eduardo Lotina Ramos wrote:
i have a problem, i need to create two dynamic ip pools, one for users of a group A and one for users of the group B the problem is that i dont have any idea how can i use the radcheck table for auth the users and in the same time use dhcp3 to recognize those users and assing the ip from the ip pool A or B depending if the user belongs to the group A or B
how can work mysql and dhcp3 together????
That's a pretty difficult thing to do. There's no in-built solution, you would have to manufacture something. Possibly you could use a FreeRadius Exec-Program to call the dhcp "omshell" program to dynamically update the DHCP server. The "normal" way of doing this would be to put the two sets of clients on different VLANs in the radius reply, but the Cisco access points have some caveats with that. It's not easy.
Phil Mayers wrote:
how can work mysql and dhcp3 together????
That's a pretty difficult thing to do. There's no in-built solution, you would have to manufacture something.
DHCP is UDP. RADIUS is UDP. Both use packed attribute-value pairs. The main question is, is there any interest in adding another protocol to the server? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Alan DeKok wrote:
Phil Mayers wrote:
how can work mysql and dhcp3 together???? That's a pretty difficult thing to do. There's no in-built solution, you would have to manufacture something.
DHCP is UDP. RADIUS is UDP. Both use packed attribute-value pairs.
The main question is, is there any interest in adding another protocol to the server?
True. And you've already got the parser for hierarchical configs as well as an SQL and logging infrastructure. It's not something I'd use but I can imagine it being very very useful in smaller and/or simpler deployments (which is not to say trivial). Then again, given the (ahem) variable level of questions asked here, do you want to double the pain with DHCP-related mailing list posts? "My WangRouter 1000 doesn't add the correct foobar attribute and thus can't possibly do DHCP. How do I make it do DHCP?" "Erm..."
Phil Mayers wrote:
True. And you've already got the parser for hierarchical configs as well as an SQL and logging infrastructure.
Exactly.
It's not something I'd use but I can imagine it being very very useful in smaller and/or simpler deployments (which is not to say trivial).
There are already small DHCP servers (dnsmasq, udhcp), but there is no supported open source server that can do leases from a DB, and no open source server that scales to 10M records.
Then again, given the (ahem) variable level of questions asked here, do you want to double the pain with DHCP-related mailing list posts?
The questions on the ISC DHCP list aren't too bad. :) Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Hi,
There are already small DHCP servers (dnsmasq, udhcp), but there is no supported open source server that can do leases from a DB, and no open source server that scales to 10M records.
Sauron? http://sauron.jyu.fi/
The questions on the ISC DHCP list aren't too bad. :)
I'm awaiting their new versions patiently ;-) alan
A.L.M.Buxey@lboro.ac.uk wrote:
There are already small DHCP servers (dnsmasq, udhcp), but there is no supported open source server that can do leases from a DB, and no open source server that scales to 10M records.
Sauron? http://sauron.jyu.fi/
It's a front end, not a server. Try adding 10M records to SQL: not a problem. Try adding 10M records to ISC DHCPD: 10m startup time with an *empty* leases file. Sauron would be a fair bit easier if the DNS/DHCP protocol servers would read/write to SQL natively. Plus, the data in the GUI would be live, rather than stale. See a post to the sauron list describing this exact problem: http://lists.jyu.fi/pipermail/sauron-users/2006/000252.html
The questions on the ISC DHCP list aren't too bad. :)
I'm awaiting their new versions patiently ;-)
3.1, in which the failover protocol is incompatible with 3.0? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Phil Mayers -
Tomas Eduardo Lotina Ramos