1 |
#!/usr/bin/perl |
package dhcpd; |
2 |
|
|
3 |
# based on http://www.perlmonks.org/index.pl?node_id=325248 |
=head1 dhcpd |
4 |
|
|
5 |
|
start with: |
6 |
|
|
7 |
|
perl -Ilib/PXElator -Ilib -Mdhcpd -e start |
8 |
|
|
9 |
|
based on L<http://www.perlmonks.org/index.pl?node_id=325248> |
10 |
|
|
11 |
|
=cut |
12 |
|
|
13 |
use strict; |
use strict; |
14 |
use warnings; |
use warnings; |
15 |
|
|
16 |
|
use autodie; |
17 |
|
|
18 |
use IO::Socket::INET; |
use IO::Socket::INET; |
19 |
use Net::DHCP::Packet; |
use File::Slurp; |
|
use Net::DHCP::Constants; |
|
20 |
use Data::Dump qw/dump/; |
use Data::Dump qw/dump/; |
21 |
|
|
22 |
die "need to run $0 as root like this\nsudo $0\n" unless $< == 0; |
use lib '..'; |
23 |
|
use Net::DHCP::Packet; |
24 |
|
use Net::DHCP::Constants 0.67; |
25 |
|
|
26 |
|
use CouchDB; |
27 |
|
use format; |
28 |
|
|
29 |
|
use server; |
30 |
|
my $debug = server::debug; |
31 |
|
|
32 |
|
if ( ! $server::ip ) { |
33 |
|
my $server_ip = `/sbin/ifconfig`; |
34 |
|
$server_ip =~ s/^.+?addr:([\d\.]+).*$/$1/gs; |
35 |
|
$server::ip = $server_ip; |
36 |
|
} |
37 |
|
|
38 |
|
warn "server ip $server::ip range: $server::ip_from - $server::ip_to\n"; |
39 |
|
|
40 |
|
use client; |
41 |
|
|
42 |
my $debug = shift @ARGV; |
sub client_mac_ip { |
43 |
|
my ( $mac, $request_ip ) = @_; |
44 |
|
|
45 |
our ( $server_ip, $next_file ); |
my $conf = $server::conf; |
46 |
require "config.pl"; |
mkdir $conf unless -e $conf; |
47 |
|
|
48 |
my $sock = IO::Socket::INET->new( |
my $ip; |
49 |
LocalPort => 67, |
|
50 |
# LocalAddr => 'localhost', |
if ( $ip = client::ip_from_mac( $mac ) ) { |
51 |
# LocalAddr => '10.0.0.100', |
print "RENEW $mac $ip\n"; |
52 |
LocalAddr => '0.0.0.0', |
return $ip; |
53 |
Proto => 'udp', |
} elsif ( in_our_range( $request_ip ) ) { |
54 |
ReuseAddr => 1, |
$ip = client::next_ip( $mac ); |
55 |
# PeerPort => getservbyname('bootpc', 'udp'), |
print "NEW $mac $ip\n"; |
56 |
Broadcast => 1, |
} else { |
57 |
Type => SOCK_DGRAM, |
$ip = $request_ip; |
58 |
) or die "Failed to bind to socket: $@"; |
client::save_ip_mac( $ip, $mac ); |
59 |
|
warn "W: $ip our of server range $server::ip $server::netmask\n"; |
|
my $_ip = 10; |
|
|
my $_mac2ip; |
|
|
my $_ip_file; |
|
|
|
|
|
sub client_ip { |
|
|
my ( $mac ) = @_; |
|
|
|
|
|
my $ip = $_mac2ip->{$mac}; |
|
|
return $ip if $ip; |
|
|
|
|
|
$ip = "10.0.0.$_ip"; |
|
|
$_mac2ip->{$mac} = $ip; |
|
|
|
|
|
$_ip++; |
|
|
if ( $_ip == 100 ) { |
|
|
warn "IP roll-over to 10\n"; |
|
|
$_ip = 10; |
|
60 |
} |
} |
61 |
|
|
62 |
return $ip; |
return $ip; |
63 |
} |
} |
64 |
|
|
65 |
while (1) { |
use log; |
66 |
|
use config; |
67 |
|
use pxelinux; |
68 |
|
use client; |
69 |
|
|
70 |
|
our $file; |
71 |
|
our $transaction = 0; # FIXME predictible transaction numbers |
72 |
|
|
73 |
|
sub ip2bin { pack('C*', split(/\./, $_[0])) }; |
74 |
|
sub in_our_range { |
75 |
|
my $ip = shift; |
76 |
|
return 1 if $ip eq '0.0.0.0'; |
77 |
|
return 1 if ( |
78 |
|
( ip2bin($ip) & ip2bin($server::netmask) ) |
79 |
|
eq |
80 |
|
( ip2bin($server::ip) & ip2bin($server::netmask) ) |
81 |
|
); |
82 |
|
} |
83 |
|
|
84 |
|
sub process_packet { |
85 |
|
my $sock = shift; |
86 |
|
|
87 |
print "waiting for DHCP requests on ",$sock->sockhost,":",$sock->sockport,"\n"; |
server->refresh; |
88 |
|
|
89 |
my $buf; |
my $buf; |
90 |
$sock->recv($buf, 1024); |
$sock->recv($buf, 1024); |
91 |
print "<< peer:",$sock->peerhost,":",$sock->peerport,"\n"; |
my $size = 'empty'; |
92 |
|
$size = length($buf) . ' bytes' if defined $buf; |
93 |
|
|
94 |
|
print "packet from ",$sock->peerhost,":",$sock->peerport," $size\n" if $debug; |
95 |
|
return unless $buf; |
96 |
|
|
97 |
|
my $dhcp = Net::DHCP::Packet->new($buf); |
98 |
|
$dhcp->comment( $transaction++ ); |
99 |
|
|
100 |
|
warn "recv: ", $dhcp->toString if $debug; |
101 |
|
|
102 |
|
my $mac = substr($dhcp->chaddr(),0,$dhcp->hlen()*2); |
103 |
|
my $ip = client_mac_ip($mac, $dhcp->ciaddr); |
104 |
|
|
105 |
|
my $hostname = $dhcp->getOptionValue(DHO_HOST_NAME); |
106 |
|
print "$ip ", client::conf( $ip => 'hostname', default => $hostname ), " >> /etc/hosts\n"; |
107 |
|
|
108 |
|
my $audit = { mac => format::mac($mac), ip => $ip, hostname => $hostname }; |
109 |
|
|
110 |
|
=for later |
111 |
|
|
112 |
|
my $user_class = $dhcp->getOptionValue(DHO_USER_CLASS()); |
113 |
|
|
114 |
if (defined $buf) { |
if ( $user_class eq 'gPXE' ) { |
115 |
|
$file = $gpxe_file; |
116 |
|
} elsif ( ! $file ) { |
117 |
|
$file = 'undionly.kpxe'; |
118 |
|
} |
119 |
|
|
120 |
my $dhcp; |
=cut |
121 |
|
|
122 |
eval { $dhcp = Net::DHCP::Packet->new($buf); }; |
config::for_ip( $ip ); |
|
die "can't use request", dump( $buf ) if $@; |
|
123 |
|
|
124 |
if ( $debug ) { |
my $packet = { |
125 |
warn "recv: ", $dhcp->toString, "\n\n"; |
Op => BOOTREPLY(), |
126 |
|
Hops => $dhcp->hops(), |
127 |
|
Xid => $dhcp->xid(), |
128 |
|
Flags => $dhcp->flags(), |
129 |
|
Ciaddr => $dhcp->ciaddr(), |
130 |
|
Yiaddr => $ip, |
131 |
|
Siaddr => $server::ip, |
132 |
|
Giaddr => $dhcp->giaddr(), |
133 |
|
Chaddr => $dhcp->chaddr(), |
134 |
|
File => $file, |
135 |
|
DHO_DHCP_SERVER_IDENTIFIER() => $server::ip, # busybox/udhcpc needs it but doesn't request |
136 |
|
}; |
137 |
|
|
138 |
|
my $options = { |
139 |
|
DHO_SUBNET_MASK() => $server::netmask, |
140 |
|
DHO_ROUTERS() => $server::ip, |
141 |
|
DHO_DOMAIN_NAME() => $server::domain_name, |
142 |
|
DHO_NAME_SERVERS() => $server::ip, |
143 |
|
DHO_DOMAIN_NAME_SERVERS() => $server::ip, |
144 |
|
DHO_HOST_NAME() => client::conf( $ip, 'hostname' ), |
145 |
|
DHO_BROADCAST_ADDRESS() => $server::bcast, |
146 |
|
# DHO_NTP_SERVERS() => '', |
147 |
|
}; |
148 |
|
|
149 |
|
my @requested = split(/\s/, $dhcp->getOptionValue(DHO_DHCP_PARAMETER_REQUEST_LIST)); |
150 |
|
warn "options ",dump( $options ), ' requested: ',dump( @requested ) if $debug; |
151 |
|
|
152 |
|
my @missing; |
153 |
|
foreach ( @requested ) { |
154 |
|
if ( defined $options->{$_} ) { |
155 |
|
$packet->{$_} = $options->{$_}; |
156 |
|
} else { |
157 |
|
push @missing, $_; |
158 |
} |
} |
159 |
|
} |
160 |
|
|
161 |
|
warn "W: options requested but missing: ",dump( @missing ),$/; |
162 |
|
$audit->{requested} = [ @requested ]; |
163 |
|
$audit->{missing} = [ @missing ]; |
164 |
|
|
165 |
|
foreach my $opt ( 'magic', 'config_file', 'path_prefix', 'reboot_time' ) { |
166 |
|
my $DH0 = eval 'DHO_PXELINUX_' . uc $opt; |
167 |
|
warn "DH0: $@" if $@; |
168 |
|
my $v = eval "\$pxelinux::$opt"; |
169 |
|
warn "v: $@" if $@; |
170 |
|
next unless defined $v; |
171 |
|
warn "pxelinux dhcp option $opt = $DH0 = $v\n" if $debug; |
172 |
|
$packet->{ $DH0 } = $v; |
173 |
|
} |
174 |
|
|
175 |
my $mac = substr($dhcp->chaddr(),0,$dhcp->hlen()*2); |
my $messagetype = $dhcp->getOptionValue(DHO_DHCP_MESSAGE_TYPE()); |
|
my $ip = client_ip($mac); |
|
176 |
|
|
177 |
my $packet = new Net::DHCP::Packet( |
if ($messagetype eq DHCPDISCOVER()) { |
178 |
Op => BOOTREPLY(), |
$audit->{type} = 'discover'; |
179 |
Hops => $dhcp->hops(), |
$packet->{Comment} = $dhcp->comment(); |
180 |
Xid => $dhcp->xid(), |
$packet->{DHO_DHCP_MESSAGE_TYPE()} = DHCPOFFER(); |
181 |
Flags => $dhcp->flags(), |
} elsif ($messagetype eq DHCPREQUEST()) { |
182 |
Ciaddr => $dhcp->ciaddr(), |
my $requested_ip = $dhcp->getOptionValue(DHO_DHCP_REQUESTED_ADDRESS()); |
183 |
Yiaddr => $ip, |
$audit->{type} = 'request'; |
184 |
Siaddr => $server_ip, |
if ( $ip eq $requested_ip ) { |
185 |
Giaddr => $dhcp->giaddr(), |
$packet->{DHO_DHCP_MESSAGE_TYPE()} = DHCPACK(); |
186 |
Chaddr => $dhcp->chaddr(), |
$packet->{DHO_DHCP_LEASE_TIME()} = 5 * 60; # 5 min |
187 |
File => $_ip_file->{$ip} || 'undionly.kpxe', |
# $packet->{DHO_ROOT_PATH()} = '/exports/foobar'; |
188 |
# DHO_DHCP_MESSAGE_TYPE() => DHCPACK(), |
} else { |
189 |
DHO_SUBNET_MASK() => '255.0.0.0', |
$packet->{DHO_DHCP_MESSAGE_TYPE()} = DHCPNAK(); |
190 |
); |
$packet->{DHO_DHCP_MESSAGE()} = "Bad request, expected $ip"; |
191 |
|
} |
192 |
$_ip_file->{$ip} = $next_file; |
} elsif ($messagetype eq DHCPINFORM()) { |
193 |
|
$audit->{type} = 'inform'; |
194 |
warn ">> $mac == $ip server $server_ip\n"; |
} else { |
195 |
|
$audit->{type} = sprintf('ignored %x', $messagetype); |
196 |
warn "## ",$packet->toString(),"\n" if $debug; |
} |
197 |
|
|
198 |
|
warn ">> $mac == $ip server: $server::ip", $file ? " file: $file\n" : "\n" if $debug; |
199 |
|
$audit->{response} = $packet; |
200 |
|
|
201 |
|
$packet = new Net::DHCP::Packet( %$packet ); |
202 |
|
warn "send ",$packet->toString() if $debug; |
203 |
|
|
204 |
|
if ( in_our_range( $ip ) ) { |
205 |
|
my $buff = $packet->serialize(); |
206 |
|
|
207 |
my $reply = IO::Socket::INET->new( |
my $reply = IO::Socket::INET->new( |
208 |
LocalAddr => $server_ip, |
LocalAddr => $server::ip, |
209 |
LocalPort => 67, |
LocalPort => 67, |
210 |
Proto => "udp", |
Proto => "udp", |
211 |
Broadcast => 1, |
Broadcast => 1, |
214 |
Reuse => 1, |
Reuse => 1, |
215 |
) or die "socket: $@"; |
) or die "socket: $@"; |
216 |
|
|
|
my $buff = $packet->serialize(); |
|
217 |
$reply->send( $buff, 0 ) or die "Error sending: $!\n"; |
$reply->send( $buff, 0 ) or die "Error sending: $!\n"; |
|
|
|
|
# system("arp -s $ip $mac"), |
|
|
|
|
218 |
} else { |
} else { |
219 |
print "No bootp request.\n"; |
$audit->{error} = "$ip our of our range $server::ip $server::netmask"; |
220 |
} |
} |
221 |
|
|
222 |
|
CouchDB::audit( $audit->{type}, $audit ); |
223 |
|
|
224 |
|
# system("arp -s $ip $mac"), |
225 |
|
|
226 |
|
} |
227 |
|
|
228 |
|
sub start { |
229 |
|
|
230 |
|
my $sock = IO::Socket::INET->new( |
231 |
|
LocalPort => 67, |
232 |
|
# LocalAddr => 'localhost', |
233 |
|
# LocalAddr => '10.0.0.100', |
234 |
|
LocalAddr => '0.0.0.0', |
235 |
|
Proto => 'udp', |
236 |
|
ReuseAddr => 1, |
237 |
|
# PeerPort => getservbyname('bootpc', 'udp'), |
238 |
|
Broadcast => 1, |
239 |
|
Type => SOCK_DGRAM, |
240 |
|
) or die "Failed to bind to socket: $@"; |
241 |
|
|
242 |
|
print "DHCP listen on ",$sock->sockhost,":",$sock->sockport,"\n"; |
243 |
|
|
244 |
|
CouchDB::audit( 'start', { addr => $sock->sockhost, port => $sock->sockport } ); |
245 |
|
|
246 |
|
while (1) { |
247 |
|
process_packet $sock; |
248 |
|
} |
249 |
} |
} |
250 |
|
|
251 |
|
warn "loaded"; |
252 |
|
|
253 |
|
1; |