Differences between revisions 1 and 4 (spanning 3 versions)
Revision 1 as of 2009-03-23 12:35:08
Size: 2459
Editor: ?jredrejo
Comment: Changes needed in lwat to use DHCP and DNS with ldap
Revision 4 as of 2009-03-28 17:57:12
Size: 2802
Editor: ?jredrejo
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
{{attachment:ldaptree.png|New LDAP tree|align="left"}}This page tries to document the changes needed in lwat to use the new features available in [[DebianEdu|Debian Edu]] after "[[DebianEdu/LdapifyServices|ldapifying]]" DHCP and DNS services. This page tries to document the changes needed in lwat to use the new features available in [[DebianEdu|Debian Edu]] after "[[DebianEdu/LdapifyServices|ldapifying]]" DHCP and DNS services.
Line 3: Line 3:

{{attachment:instituto.ldif.gz|This attached file has the slapcat dump}} of a server that has being in production using this setup since May 2008. Most of the user accounts have been removed for confidentially reasons. There still a couple of them left (with messed data) in case its setup can be useful. The hosts setup hasn't been altered.
Line 10: Line 13:

<<BR>>
{{attachment:dhcp_internal.png|DHCP setup}}
<<BR>>
Line 11: Line 18:
{{attachment:dhcp_internal.png|DHCP setup|align="right"}}
This is the ldif for the needed new entry:
Line 13: Line 21:
dn: cn=host_name,cn=group1,cn=INTERNAL,cn=DHCP Config,dc=....
dn: cn=host_name,cn=group1,cn=INTERNAL,cn=DHCP ....
Line 19: Line 28:
Line 27: Line 37:
{{attachment:dns-ldap.png|PowerDNS setup|align="right"}} <<BR>>
{{attachment:dns-ldap.png|PowerDNS setup}}
Line 29: Line 40:
<<BR>>
Line 49: Line 61:
{{attachment:negroups.png|NetGroups view|align="right"}} <<BR>>
{{attachment:negroups.png|NetGroups view}}
<<BR>>
Line 52: Line 66:
== Adding thin client machines ==
Line 53: Line 68:
== Adding thin client machines ==
Line 63: Line 77:
{{attachment:dhcp-thinclient.png|DHCP setup for thinclients|align="right"}} <<BR>>
{{attachment:dhcp-thinclient.png|DHCP setup for thinclients}}
<<BR>>

This page tries to document the changes needed in lwat to use the new features available in Debian Edu after "ldapifying" DHCP and DNS services. These changes don't affect at the way the users are managed, but to the way machines must be added for the network to work properly.

This attached file has the slapcat dump of a server that has being in production using this setup since May 2008. Most of the user accounts have been removed for confidentially reasons. There still a couple of them left (with messed data) in case its setup can be useful. The hosts setup hasn't been altered.

Adding non-thin client machines

Currently, when adding a new machine, lwat asks for its host_name, MAC_address, IP_address and domain_name. Then, it adds the machine to the ou=hosts branch in the ldap tree. With the new setup, this is useless.

These are the ldap branches where the machine must be added:


DHCP setup

DHCP setup

This is the ldif for the needed new entry:

dn: cn=host_name,cn=group1,cn=INTERNAL,cn=DHCP ....
cn: host_name
objectClass: top
objectClass: dhcpHost
dhcpHWAddress: ethernet MAC_address
dhcpStatements: fixed-address host_name

Where group1 must be increased to group2, group3, etc. as the current ldap containing no more than 250 machines in every group. This is a limitation of the current use of ldap as a DHCP3 server backend. The group where the machine is added don't mind.

Obviously, this setup is not needed if the machine doesn't need a fixed hostname and address

DNS setup

Both, inverse and direct resolution must be configured. Using, as example, an ip address p.q.r.s:
PowerDNS setup

<<BR>>
dn: dc=s,dc=r,dc=q,dc=p,dc=in-addr,dc=arpa,ou=hosts,dc=...
changetype: add
objectclass: dnsdomain2
objectclass: domainrelatedobject
dc: s
associateddomain: s.r.q.p.in-addr.arpa
PTRRecord: host_name.domain_name


dn: dc=host_name,dc=domain_name,ou=hosts,dc=...
changetype: add
objectclass: dnsdomain2
objectclass: domainrelatedobject
dc: host_name
associateddomain: host_name.domain name
ARecord: p.q.r.s

Netgroup


NetGroups view
The machine has to be added to its Netgroup too.

Adding thin client machines

Only the DHCP config is needed:

dn: cn=host_name,cn=group1,cn=THINCLIENTS,cn=DHCP Config,dc=...
cn: host_name
objectClass: top
objectClass: dhcpHost
dhcpHWAddress: ethernet MAC_address
dhcpStatements: filename "/var/lib/tftpboot/ltsp/i386/pxelinux.0"


DHCP setup for thinclients