dhcp-users Digest, Vol 112, Issue 2
george Nopicture
mad-proffessor at hotmail.com
Wed Feb 7 14:24:44 UTC 2018
#/etc/dhcp/dhcpd.conf
deny declines;
deny bootp;
authoritative;
subnet 192.168.0.0 netmask 255.255.255.248 {
option domain-name-servers x.y.z.i;
option routers 192.168.0.1;
option broadcast-address 192.168.0.7;
ping-check false;
option subnet-mask 255.255.255.248;
option arp-cache-timeout 42700;
option ip-forwarding off;
default-lease-time 93000;
max-lease-time 93000;
deny unknown-clients;
boot-unknown-clients false;
host fedora {
hardware ethernet 00:fd:vc:c3:6m:qq;
fixed-address 192.168.0.2; }
}
thats my config even if i remove the option lines my pc named fedora
gets an ip from the dhcp. I want only static configuration (meaning to
not being able to see DHCPDISCOVER, DHCPREQUEST lines in journal) even
if i set automatic ip configuration in my desktop's NetworkManager.
Thx
On Wed, 2018-02-07 at 12:00 +0000, dhcp-users-request at lists.isc.org
wrote:
> Send dhcp-users mailing list submissions to
> dhcp-users at lists.isc.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://lists.isc.org/mailman/listinfo/dhcp-users
> or, via email, send a message with subject or body 'help' to
> dhcp-users-request at lists.isc.org
>
> You can reach the person managing the list at
> dhcp-users-owner at lists.isc.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of dhcp-users digest..."
>
>
> Today's Topics:
>
> 1. Re: Static only hosts, no dynamic/reserved leases. (Simon
> Hobson)
> 2. Re: dhclient process lifetime (Pavel Zhukov)
> 3. Re: dhclient process lifetime (Lukas Erlacher)
>
>
> -------------------------------------------------------------------
> ---
>
> Message: 1
> Date: Tue, 6 Feb 2018 12:54:33 +0000
> From: Simon Hobson <dhcp1 at thehobsons.co.uk>
> To: Users of ISC DHCP <dhcp-users at lists.isc.org>
> Subject: Re: Static only hosts, no dynamic/reserved leases.
> Message-ID: <7CDB2615-4A7E-4C93-8183-9B41BEADFC8B at thehobsons.co.uk>
> Content-Type: text/plain; charset=us-ascii
>
> george Nopicture <mad-proffessor at hotmail.com> wrote:
>
> > Hello, i have tried every possible combination to achieve an effect
> > of
> > static only configuration where no range is defined in a
> > subnet/pool
> > nor any options are sent to the clients. Only hosts stanzas are
> > defined
> > in dhcpd.conf under a subnet declaration, however if i set my
> > client
> > from my linux machine to boot via dhcp i get an ip from the server
> > and
> > see all the dhcp talking(DISCOVER,REQUEST etc) taking place in
> > journal
> > logs.
> > What i want to achieve is that dhcpd denies talking dhcp protocol
> > at
> > all to any client booting with automatic configuration.
> > Any hints, gotchas would be greatly appreciated.
>
> It should be sufficient to have something like this :
>
> <common options - eg dns servers>
> subnet a.b.c.0 ...
> router a.b.c.d;
> }
>
> host ....
> match ...
> fixed address a.b.c.x;
> }
>
> Any client not listed in a host statement will not get an address as
> there isn't a range to give it one. In the logs you'd see lots of "no
> leases" messages if there are such clients on the network - you can
> suppress these with an "ignore unknown-clients" statement in the
> subnet (or globally) as long as there really are no dynamic clients
> to be served.
>
> If this isn't working for you, then post your config file and example
> log entries.
>
>
>
> ------------------------------
>
> Message: 2
> Date: Tue, 06 Feb 2018 16:23:26 +0100
> From: Pavel Zhukov <pzhukov at redhat.com>
> To: Lukas Erlacher <erlacher at in.tum.de>
> Cc: dhcp-users at lists.isc.org
> Subject: Re: dhclient process lifetime
> Message-ID: <87d11ip2fl.fsf at pzhukov-workstation.usersys.redhat.com>
> Content-Type: text/plain
>
> Lukas Erlacher <erlacher at in.tum.de> writes:
> Hello,
>
> You have see something like
> # dhclient -v -4 -pf /run/dhclient.eth0.pid -lf
> /var/lib/dhcp/dhclient.eth0.leases client1
> dhclient(30189) is already running - exiting.
>
> the pid (30189) is stored in /run/dhclient.eth0.pid and it prevent
> second copy of dhclient to be started as it was been
> specified in your command line. Can you check/share content of this
> file?
>
> > Hallo,
> >
> > I hope this is the correct place for isc-dhcp-client (dhclient)
> > issues.
> >
> > I do not understand why dhclient behaves the way it does vis-a-vis
> > process lifetime and hope someone can explain it to me.
> >
> > I am running isc-dhcp-client 4.3.5-3 on Raspbian 9.3.
> >
> > When I run this twice:
> >
> > > dhclient -v -4 -pf /run/dhclient.eth0.pid -lf
> > > /var/lib/dhcp/dhclient.eth0.leases eth0
> >
> > Two dhclient processes will be running. That seems very
> > undesirable,
> > especially since I've already observed a corrupted leasefile that
> > had
> > interleaved writes.
> >
> > If I want to make sure that only one dhclient process is running
> > for an
> > interface, it appears I first have to run dhclient -x to make sure
> > any
> > running process gets killed.
> >
> > Is this normal/intended behaviour?
> >
> > Thanks,
> > Luke
> >
> > _______________________________________________
> > dhcp-users mailing list
> > dhcp-users at lists.isc.org
> > https://lists.isc.org/mailman/listinfo/dhcp-users
>
>
> ------------------------------
>
> Message: 3
> Date: Wed, 7 Feb 2018 09:46:57 +1100
> From: Lukas Erlacher <erlacher at in.tum.de>
> To: Pavel Zhukov <pzhukov at redhat.com>
> Cc: dhcp-users at lists.isc.org
> Subject: Re: dhclient process lifetime
> Message-ID: <8aeb7d13-b99d-eeb2-52e9-eb238cce1509 at in.tum.de>
> Content-Type: text/plain; charset="utf-8"
>
> Hi Pavel,
>
> thanks for your reply.
>
> In fact, I see no such message. Here is what I see:
>
> > (testenv) root at manarati-two:~# pgrep -a
> > dhclient
> >
> >
> > (testenv) root at manarati-two:~# cat /run/dhclient.eth0.pid
> > 29121
> > (testenv) root at manarati-two:~# dhclient -v -w -4 -pf
> > /var/run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases
> > eth0
> > Internet Systems Consortium DHCP Client 4.3.5
> > Copyright 2004-2016 Internet Systems Consortium.
> > All rights reserved.
> > For info, please visit https://www.isc.org/software/dhcp/
> >
> > Listening on LPF/eth0/b8:27:eb:be:35:8a
> > Sending on LPF/eth0/b8:27:eb:be:35:8a
> > Sending on Socket/fallback
> > DHCPREQUEST of 192.168.13.151 on eth0 to 255.255.255.255 port 67
> > DHCPACK of 192.168.13.151 from 192.168.13.1
> > RTNETLINK answers: File exists
> > bound to 192.168.13.151 -- renewal in 789 seconds.
> > (testenv) root at manarati-two:~# pgrep -a dhclient
> > 10875 dhclient -v -w -4 -pf /var/run/dhclient.eth0.pid -lf
> > /var/lib/dhcp/dhclient.eth0.leases eth0
> > (testenv) root at manarati-two:~# cat /run/dhclient.eth0.pid
> > 10875
> > (testenv) root at manarati-two:~# dhclient -v -w -4 -pf
> > /var/run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases
> > eth0
> > Internet Systems Consortium DHCP Client 4.3.5
> > Copyright 2004-2016 Internet Systems Consortium.
> > All rights reserved.
> > For info, please visit https://www.isc.org/software/dhcp/
> >
> > Listening on LPF/eth0/b8:27:eb:be:35:8a
> > Sending on LPF/eth0/b8:27:eb:be:35:8a
> > Sending on Socket/fallback
> > DHCPREQUEST of 192.168.13.151 on eth0 to 255.255.255.255 port 67
> > DHCPACK of 192.168.13.151 from 192.168.13.1
> > RTNETLINK answers: File exists
> > bound to 192.168.13.151 -- renewal in 729 seconds.
> > (testenv) root at manarati-two:~# pgrep -a dhclient
> > 10875 dhclient -v -w -4 -pf /var/run/dhclient.eth0.pid -lf
> > /var/lib/dhcp/dhclient.eth0.leases eth0
> > 10902 dhclient -v -w -4 -pf /var/run/dhclient.eth0.pid -lf
> > /var/lib/dhcp/dhclient.eth0.leases eth0
> > (testenv) root at manarati-two:~# cat /run/dhclient.eth0.pid
> > 10902
> > (testenv) root at manarati-two:~#
>
> So for some reason dhclient is not performing the check for a running
> instance correctly.
>
> On 02/07/2018 02:23 AM, Pavel Zhukov wrote:
> > Lukas Erlacher <erlacher at in.tum.de> writes:
> > Hello,
> >
> > You have see something like
> > # dhclient -v -4 -pf /run/dhclient.eth0.pid -lf
> > /var/lib/dhcp/dhclient.eth0.leases client1
> > dhclient(30189) is already running - exiting.
> >
> > the pid (30189) is stored in /run/dhclient.eth0.pid and it prevent
> > second copy of dhclient to be started as it was been
> > specified in your command line. Can you check/share content of this
> > file?
> >
>
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: smime.p7s
> Type: application/pkcs7-signature
> Size: 5167 bytes
> Desc: S/MIME Cryptographic Signature
> URL: <https://lists.isc.org/pipermail/dhcp-users/attachments/20180207
> /87ddd090/attachment-0001.bin>
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> dhcp-users mailing list
> dhcp-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/dhcp-users
>
> ------------------------------
>
> End of dhcp-users Digest, Vol 112, Issue 2
> ******************************************
More information about the dhcp-users
mailing list