18 |
use IO::Socket::INET; |
use IO::Socket::INET; |
19 |
use File::Slurp; |
use File::Slurp; |
20 |
use Data::Dump qw/dump/; |
use Data::Dump qw/dump/; |
|
use Net::Ping; |
|
21 |
|
|
22 |
use lib '..'; |
use lib '..'; |
23 |
use Net::DHCP::Packet; |
use Net::DHCP::Packet; |
24 |
use Net::DHCP::Constants 0.67; |
use Net::DHCP::Constants 0.67; |
25 |
|
|
26 |
|
use CouchDB; |
27 |
|
use format; |
28 |
|
|
29 |
use server; |
use server; |
30 |
my $debug = server::debug; |
my $debug = server::debug; |
31 |
|
|
37 |
|
|
38 |
warn "server ip $server::ip range: $server::ip_from - $server::ip_to\n"; |
warn "server ip $server::ip range: $server::ip_from - $server::ip_to\n"; |
39 |
|
|
40 |
my $addr = $server::ip_from; |
use client; |
41 |
|
|
42 |
sub client_ip { |
sub client_mac_ip { |
43 |
my ( $mac ) = @_; |
my ( $mac, $request_ip ) = @_; |
44 |
|
|
45 |
my $conf = $server::conf; |
my $conf = $server::conf; |
46 |
mkdir $conf unless -e $conf; |
mkdir $conf unless -e $conf; |
47 |
|
|
48 |
if ( -e "$conf/mac/$mac" ) { |
my $ip; |
49 |
my $ip = read_file "$conf/mac/$mac"; |
|
50 |
|
if ( $ip = client::ip_from_mac( $mac ) ) { |
51 |
print "RENEW $mac $ip\n"; |
print "RENEW $mac $ip\n"; |
52 |
return $ip; |
return $ip; |
53 |
|
} elsif ( in_our_range( $request_ip ) ) { |
54 |
|
$ip = client::next_ip( $mac ); |
55 |
|
print "NEW $mac $ip\n"; |
56 |
|
} else { |
57 |
|
$ip = $request_ip; |
58 |
|
client::save_ip_mac( $ip, $mac ); |
59 |
|
warn "W: $ip our of server range $server::ip $server::netmask\n"; |
60 |
} |
} |
61 |
|
|
|
my $p = Net::Ping->new; |
|
|
|
|
|
my $prefix = $server::ip; |
|
|
$prefix =~ s{\.\d+$}{.}; |
|
|
my $ip = $prefix . $addr; |
|
|
|
|
|
while ( -e "$conf/ip/$ip" || $p->ping( $ip ) ) { |
|
|
$ip = $prefix . $addr++; |
|
|
die "all addresses allocated!" if $addr == $server::ip_to; |
|
|
} |
|
|
|
|
|
write_file "$conf/mac/$mac", $ip; |
|
|
|
|
|
my $ip_path = "$conf/ip/$ip"; |
|
|
mkdir $ip_path unless -e $ip_path; |
|
|
|
|
|
if ( -l "$ip_path/mac" && readlink "$ip_path/mac" ne "$conf/mac/$mac" ) { |
|
|
warn "$mac IP changed from ", readlink "$ip_path/mac", " to $ip"; |
|
|
unlink "$ip_path/mac"; |
|
|
}; |
|
|
symlink "$conf/mac/$mac", "$ip_path/mac"; |
|
|
|
|
|
print "$mac NEW $ip\n"; |
|
|
|
|
62 |
return $ip; |
return $ip; |
63 |
} |
} |
64 |
|
|
70 |
our $file; |
our $file; |
71 |
our $transaction = 0; # FIXME predictible transaction numbers |
our $transaction = 0; # FIXME predictible transaction numbers |
72 |
|
|
73 |
|
sub ip2bin { pack('C*', split(/\./, $_[0])) }; |
74 |
|
sub in_our_range { |
75 |
|
my $ip = shift; |
76 |
|
return 1 if $ip eq '0.0.0.0'; |
77 |
|
return 1 if ( |
78 |
|
( ip2bin($ip) & ip2bin($server::netmask) ) |
79 |
|
eq |
80 |
|
( ip2bin($server::ip) & ip2bin($server::netmask) ) |
81 |
|
); |
82 |
|
} |
83 |
|
|
84 |
sub process_packet { |
sub process_packet { |
85 |
my $sock = shift; |
my $sock = shift; |
86 |
|
|
95 |
return unless $buf; |
return unless $buf; |
96 |
|
|
97 |
my $dhcp = Net::DHCP::Packet->new($buf); |
my $dhcp = Net::DHCP::Packet->new($buf); |
|
$dhcp->comment( $transaction++ ); |
|
98 |
|
|
99 |
warn "recv: ", $dhcp->toString if $debug; |
warn "recv: ", $dhcp->toString if $debug; |
100 |
|
|
101 |
|
$dhcp->comment( $transaction++ ); |
102 |
|
|
103 |
my $mac = substr($dhcp->chaddr(),0,$dhcp->hlen()*2); |
my $mac = substr($dhcp->chaddr(),0,$dhcp->hlen()*2); |
104 |
my $ip = client_ip($mac); |
my $ip = client_mac_ip($mac, $dhcp->ciaddr); |
105 |
|
|
106 |
|
my $hostname = $dhcp->getOptionValue(DHO_HOST_NAME); |
107 |
|
print "$ip ", client::conf( $ip => 'hostname', default => $hostname ), " >> /etc/hosts\n"; |
108 |
|
|
109 |
|
my $audit = { mac => format::mac($mac), ip => $ip, hostname => $hostname, |
110 |
|
options => { |
111 |
|
map { |
112 |
|
( $_ => $dhcp->getOptionValue( $_ ) ) |
113 |
|
} @{ $dhcp->{options_order} } |
114 |
|
}, |
115 |
|
}; |
116 |
|
|
117 |
=for later |
=for later |
118 |
|
|
165 |
} |
} |
166 |
} |
} |
167 |
|
|
168 |
warn "W: options requested but missing: ",dump( @missing ); |
warn "W: options requested but missing: ",dump( @missing ),$/; |
169 |
|
$audit->{requested} = [ @requested ]; |
170 |
|
$audit->{missing} = [ @missing ]; |
171 |
|
|
172 |
foreach my $opt ( 'magic', 'config_file', 'path_prefix', 'reboot_time' ) { |
foreach my $opt ( 'magic', 'config_file', 'path_prefix', 'reboot_time' ) { |
173 |
my $DH0 = eval 'DHO_PXELINUX_' . uc $opt; |
my $DH0 = eval 'DHO_PXELINUX_' . uc $opt; |
182 |
my $messagetype = $dhcp->getOptionValue(DHO_DHCP_MESSAGE_TYPE()); |
my $messagetype = $dhcp->getOptionValue(DHO_DHCP_MESSAGE_TYPE()); |
183 |
|
|
184 |
if ($messagetype eq DHCPDISCOVER()) { |
if ($messagetype eq DHCPDISCOVER()) { |
185 |
log::mac $mac, "DHCP DISCOVER"; |
$audit->{type} = 'discover'; |
186 |
$packet->{Comment} = $dhcp->comment(); |
$packet->{Comment} = $dhcp->comment(); |
187 |
$packet->{DHO_DHCP_MESSAGE_TYPE()} = DHCPOFFER(); |
$packet->{DHO_DHCP_MESSAGE_TYPE()} = DHCPOFFER(); |
188 |
} elsif ($messagetype eq DHCPREQUEST()) { |
} elsif ($messagetype eq DHCPREQUEST()) { |
189 |
my $requested_ip = $dhcp->getOptionValue(DHO_DHCP_REQUESTED_ADDRESS()); |
my $requested_ip = $dhcp->getOptionValue(DHO_DHCP_REQUESTED_ADDRESS()); |
190 |
log::mac $mac, "DHCP REQUEST $requested_ip $ip $file"; |
$audit->{type} = 'request'; |
191 |
if ( $ip eq $requested_ip ) { |
if ( $ip eq $requested_ip ) { |
192 |
$packet->{DHO_DHCP_MESSAGE_TYPE()} = DHCPACK(); |
$packet->{DHO_DHCP_MESSAGE_TYPE()} = DHCPACK(); |
193 |
$packet->{DHO_DHCP_LEASE_TIME()} = 5 * 60; # 5 min |
$packet->{DHO_DHCP_LEASE_TIME()} = 5 * 60; # 5 min |
197 |
$packet->{DHO_DHCP_MESSAGE()} = "Bad request, expected $ip"; |
$packet->{DHO_DHCP_MESSAGE()} = "Bad request, expected $ip"; |
198 |
} |
} |
199 |
} elsif ($messagetype eq DHCPINFORM()) { |
} elsif ($messagetype eq DHCPINFORM()) { |
200 |
log::mac $mac, "DHCP INFORM ignored"; |
$audit->{type} = 'inform'; |
201 |
} else { |
} else { |
202 |
log::mac $mac, "$messagetype igored (bootp?)"; |
$audit->{type} = sprintf('ignored %x', $messagetype); |
203 |
} |
} |
204 |
|
|
205 |
warn ">> $mac == $ip server: $server::ip", $file ? " file: $file\n" : "\n" if $debug; |
warn ">> $mac == $ip server: $server::ip", $file ? " file: $file\n" : "\n" if $debug; |
206 |
|
$audit->{response} = $packet; |
207 |
|
|
208 |
$packet = new Net::DHCP::Packet( %$packet ); |
$packet = new Net::DHCP::Packet( %$packet ); |
209 |
warn "send ",$packet->toString() if $debug; |
warn "send ",$packet->toString() if $debug; |
210 |
|
|
211 |
my $reply = IO::Socket::INET->new( |
if ( in_our_range( $ip ) ) { |
212 |
LocalAddr => $server::ip, |
my $buff = $packet->serialize(); |
213 |
LocalPort => 67, |
|
214 |
Proto => "udp", |
my $reply = IO::Socket::INET->new( |
215 |
Broadcast => 1, |
LocalAddr => $server::ip, |
216 |
PeerAddr => '255.255.255.255', |
LocalPort => 67, |
217 |
PeerPort => 68, |
Proto => "udp", |
218 |
Reuse => 1, |
Broadcast => 1, |
219 |
) or die "socket: $@"; |
PeerAddr => '255.255.255.255', |
220 |
|
PeerPort => 68, |
221 |
|
Reuse => 1, |
222 |
|
) or die "socket: $@"; |
223 |
|
|
224 |
|
$reply->send( $buff, 0 ) or die "Error sending: $!\n"; |
225 |
|
} else { |
226 |
|
$audit->{error} = "$ip our of our range $server::ip $server::netmask"; |
227 |
|
} |
228 |
|
|
229 |
my $buff = $packet->serialize(); |
CouchDB::audit( $audit->{type}, $audit ); |
|
$reply->send( $buff, 0 ) or die "Error sending: $!\n"; |
|
230 |
|
|
231 |
# system("arp -s $ip $mac"), |
# system("arp -s $ip $mac"), |
232 |
|
|
248 |
|
|
249 |
print "DHCP listen on ",$sock->sockhost,":",$sock->sockport,"\n"; |
print "DHCP listen on ",$sock->sockhost,":",$sock->sockport,"\n"; |
250 |
|
|
251 |
|
CouchDB::audit( 'start', { addr => $sock->sockhost, port => $sock->sockport } ); |
252 |
|
|
253 |
while (1) { |
while (1) { |
254 |
process_packet $sock; |
process_packet $sock; |
255 |
} |
} |