[Freeipa-users] rfe: ldap for dhcp

[Petr Spacek]

Hello,


On 06/27/2012 01:50 AM, William Brown wrote:
> Take a look at
> https://bitbucket.org/Firstyear/freeipa-dhcp/src/f63a7e505705/TODO.DHCP
> for my "todo" list, and at
> http://www.freeipa.org/page/DHCP_Integration_Design  for some of my
> planning about this integration. Both are subject to change in the near
> future however.

Document "DHCP_Integration_Design" mentions GSSAPI support which is missing in 
ISC DHCP. I recommend to look into SASL rather than plain GSSAPI. 
Implementation should be simpler than with GSSAPI.

You can look into code from https://fedorahosted.org/bind-dyndb-ldap/ . File 
src/krb5_helper.c contains minimal code necessary to support Kerberos 5.

src/ldap_helper.c contains bits necessary for SASL setup. Interesting parts 
are mostly in new_ldap_instance() and ldap_sasl_interact() functions.

Petr^2 Spacek