Project

General

Profile

Tâche #18644

Scénario #18639: implémenter la redondance dhcp

intégrer une clé d'échange entre les serveurs dhcp

Added by Thierry Bertrand over 4 years ago. Updated over 4 years ago.

Status:
Fermé
Priority:
Normal
Assigned To:
Start date:
01/13/2017
Due date:
% Done:

100%

Estimated time:
3.00 h
Spent time:
Remaining (hours):
0.0

Description

Créer la clé

You can generate good random OMAPI keys using the dnssec-keygen utility, distributed with BIND.

e.g.:  dnssec‐keygen ‐a HMAC‐MD5 ‐b 512 ‐n USER DHCP_OMAPI

et l'intégrer sur les 2 serveurs

omapi-port 7911;
omapi-key omapi_key;

key omapi_key {
     algorithm hmac-md5;
     secret Ofakekeyfakekeyfakekey==;
}

Associated revisions

Revision af094589 (diff)
Added by Benjamin Bohard over 4 years ago

Permettre de configurer OMAPI pour DHCP.

Ref #18644

History

#1 Updated by Thierry Bertrand over 4 years ago

  • Estimated time set to 3.00 h

#2 Updated by Thierry Bertrand over 4 years ago

  • Tracker changed from Demande to Tâche
  • Remaining (hours) set to 3.0

#3 Updated by Benjamin Bohard over 4 years ago

  • Status changed from Nouveau to En cours
  • Assigned To set to Benjamin Bohard
  • % Done changed from 0 to 60
  • Remaining (hours) changed from 3.0 to 1.5

#4 Updated by Benjamin Bohard over 4 years ago

  • % Done changed from 60 to 90
  • Remaining (hours) changed from 1.5 to 0.5

Le format de la clé partagée fournie dans les divers exemples (taille fixe encodée en base 64) ne semble pas être une contrainte forte. Tests effectués avec une clé aléatoire plus longue : la connexion reste possible.

#5 Updated by Benjamin Bohard over 4 years ago

  • Remaining (hours) changed from 0.5 to 0.25

#6 Updated by Benjamin Bohard over 4 years ago

  • Status changed from En cours to Résolu
  • % Done changed from 90 to 100

#7 Updated by Emmanuel IHRY over 4 years ago

  • Status changed from Résolu to Fermé
  • Remaining (hours) changed from 0.25 to 0.0

sera testé dans le cadre du sprint 23-25

Also available in: Atom PDF