View previous topic :: View next topic |
Author |
Message |
fraterm n00b
Joined: 23 Apr 2002 Posts: 54 Location: Pflugerville, TX
|
Posted: Mon Aug 27, 2007 11:01 pm Post subject: Gentoo and dynamic dns updating dhcp environments |
|
|
At my job in real life, the network is administered by rabid microsoft early adopters (well not really, just run of the mill MCSE folks) and of course trying to run a linux box in the infrastructure is fraught with peril. Oddly enough, gentoos live cd at one time played well (or at least played) with their automatic dns update system.
Here's how things used to work:
Client Boots,
dhcp request sent,
dhcp information is given to client,
client is then expected to update DNS (PTR?) records with the hostname assigned. this is the sticky point
you are happily on the network like a first class client, and your requested hostname is accessible from other machines as DNS updates fairly quickly.
Before a windows server 2003 rollout all worked somewhat peachily, with odd side effects occasionally, now there appears to be no way to get dhcpcd to update the records. The Microsofties here seem to think I may need to be added to the domain for things to behave normally. Does anyone know of a good modern account of how one would get this working again? Is this just the short time before someone reverse-engineers how M$ has managed to break their DHCP so as to be incompatible with anything non-microsoft? _________________ What, me hurry?
Sitey sites:
http://fraterm.deviantart.com
http://www.approachzero.net |
|
Back to top |
|
|
steveb Advocate
Joined: 18 Sep 2002 Posts: 4564
|
Posted: Tue Aug 28, 2007 1:10 am Post subject: |
|
|
You need to enable "DHCP BROADCAST" on your client and/or your DHCP needs to know how to handle "DHCP BROADCAST". Look at this KB entry.
// SteveB |
|
Back to top |
|
|
fraterm n00b
Joined: 23 Apr 2002 Posts: 54 Location: Pflugerville, TX
|
Posted: Sat Sep 15, 2007 6:12 pm Post subject: |
|
|
steveb wrote: | You need to enable "DHCP BROADCAST" on your client and/or your DHCP needs to know how to handle "DHCP BROADCAST". Look at this KB entry.
// SteveB |
This is a linux client pointing at a Microsoft DHCP Server, the KB article seems to apply to Microsoft clients with Microsoft Servers.
Did you give me the right link? _________________ What, me hurry?
Sitey sites:
http://fraterm.deviantart.com
http://www.approachzero.net |
|
Back to top |
|
|
steveb Advocate
Joined: 18 Sep 2002 Posts: 4564
|
Posted: Sat Sep 15, 2007 6:27 pm Post subject: |
|
|
fraterm wrote: | Did you give me the right link? | No. I was thinking you had Vista pointing to Linux DHCP server. Sorry for that.
// SteveB |
|
Back to top |
|
|
UberLord Retired Dev
Joined: 18 Sep 2003 Posts: 6835 Location: Blighty
|
Posted: Sat Sep 15, 2007 9:53 pm Post subject: Re: Gentoo and dynamic dns updating dhcp environments |
|
|
fraterm wrote: | client is then expected to update DNS (PTR?) records with the hostname assigned. this is the sticky point |
Yes, and no open source dhcp client does that. Why you ask? Because it's a security nightmare! Clients updating DNS? Meh!
The correct solution is for the DHCP server to update the DNS. Much more secure as they normally sit on the same box. _________________ Use dhcpcd for all your automated network configuration needs
Use dhcpcd-ui (GTK+/Qt) as your System Tray Network tool |
|
Back to top |
|
|
fraterm n00b
Joined: 23 Apr 2002 Posts: 54 Location: Pflugerville, TX
|
Posted: Tue Oct 02, 2007 3:24 am Post subject: Re: Gentoo and dynamic dns updating dhcp environments |
|
|
UberLord wrote: | fraterm wrote: | client is then expected to update DNS (PTR?) records with the hostname assigned. this is the sticky point |
Yes, and no open source dhcp client does that. Why you ask? Because it's a security nightmare! Clients updating DNS? Meh!
The correct solution is for the DHCP server to update the DNS. Much more secure as they normally sit on the same box. |
Hate to break it to you, but gentoos Dhcpcd *did* do it, with last years live CD. Not that it did it entirely correctly (because the DHCP implementation was probably not quite exactly matching what the earlier stew of Microsoft slop our IT department uses then either I suspect) but It did work. Oddly enough the way in which it failed exposed a flaw in the mechanism, as I'd snarf up an address that would belong to someone elses hostname, that hadn't gotten around to being auto-updated in the "infrastructure", but that's neither here nor there. It did work.
I have railed against the silliness of the system as well, but operational inertia is strong with Microsoft shops, IT doesn't listen to my critique of their design because it works just fine for them, and minimizes their need to update dns for managed AD clients themselves. It's not entirely a security nightmare either, all users are traceable (provided they are running windows) and managed strictly from a central location with AD. Linux (along with HPUX AIX and Solaris) is the red headed stepchild in this environment. I just want the stepchild to get a chance to eat at the dinner table by hook or by crook rather than being left in the cold.
I've gotten around this with a Static IP for the time being anyway, hopefully someone will get something to work again, or Microsoft will be forced to publish their specs for their technologies to the extent that interoperability is possible without running SuSe or something silly like that. I'd help if I knew what to look for or where to start. _________________ What, me hurry?
Sitey sites:
http://fraterm.deviantart.com
http://www.approachzero.net |
|
Back to top |
|
|
Speen Tux's lil' helper
Joined: 27 Apr 2006 Posts: 118 Location: Herzogenrath, NRW, Germany
|
Posted: Thu Nov 15, 2007 10:26 pm Post subject: Re: Gentoo and dynamic dns updating dhcp environments |
|
|
Hi there,
sorry to ask, but was there ANY result?
I fully agree with UberLord. Clients should not be able to change any records.
I have a similar problem at work. (Windows Server some BSD & Linux Clients). I administrate the servers there. The non Windows clients are not submitting their hostname. The DHCP-server passes an empty record to the DNS-server, which causes the trouble (imho).
kind regards |
|
Back to top |
|
|
UberLord Retired Dev
Joined: 18 Sep 2003 Posts: 6835 Location: Blighty
|
|
Back to top |
|
|
|