42 |
sub client_mac_ip { |
sub client_mac_ip { |
43 |
my ( $mac, $request_ip ) = @_; |
my ( $mac, $request_ip ) = @_; |
44 |
|
|
45 |
|
if ( ! $mac ) { |
46 |
|
warn "W: no mac in requiest\n"; |
47 |
|
return; |
48 |
|
} |
49 |
|
|
50 |
my $conf = $server::conf; |
my $conf = $server::conf; |
51 |
mkdir $conf unless -e $conf; |
mkdir $conf unless -e $conf; |
52 |
|
|
54 |
|
|
55 |
if ( $ip = client::ip_from_mac( $mac ) ) { |
if ( $ip = client::ip_from_mac( $mac ) ) { |
56 |
print "RENEW $mac $ip\n"; |
print "RENEW $mac $ip\n"; |
57 |
|
client::save_ip_mac( $ip, $mac ); |
58 |
return $ip; |
return $ip; |
59 |
} elsif ( in_our_range( $request_ip ) ) { |
} elsif ( ip::in_dhcp_range( $request_ip ) || $request_ip eq '0.0.0.0' ) { |
60 |
$ip = client::next_ip( $mac ); |
$ip = client::next_ip( $mac ); |
61 |
print "NEW $mac $ip\n"; |
print "NEW $mac $ip\n"; |
62 |
} else { |
} else { |
63 |
$ip = $request_ip; |
$ip = $request_ip; |
64 |
client::save_ip_mac( $ip, $mac ); |
client::save_ip_mac( $ip, $mac ); |
65 |
warn "W: $ip our of server range $server::ip $server::netmask\n"; |
warn "W: $ip out of server range $server::ip/$server::netmask\n"; |
66 |
} |
} |
67 |
|
|
68 |
return $ip; |
return $ip; |
76 |
our $file; |
our $file; |
77 |
our $transaction = 0; # FIXME predictible transaction numbers |
our $transaction = 0; # FIXME predictible transaction numbers |
78 |
|
|
|
sub ip2bin { pack('C*', split(/\./, $_[0])) }; |
|
|
sub in_our_range { |
|
|
my $ip = shift; |
|
|
return 1 if $ip eq '0.0.0.0'; |
|
|
return 1 if ( |
|
|
( ip2bin($ip) & ip2bin($server::netmask) ) |
|
|
eq |
|
|
( ip2bin($server::ip) & ip2bin($server::netmask) ) |
|
|
); |
|
|
} |
|
|
|
|
79 |
sub process_packet { |
sub process_packet { |
80 |
my $sock = shift; |
my $sock = shift; |
81 |
|
|
|
server->refresh; |
|
|
|
|
82 |
my $buf; |
my $buf; |
83 |
$sock->recv($buf, 1024); |
$sock->recv($buf, 1024); |
84 |
my $size = 'empty'; |
my $size = 'empty'; |
93 |
|
|
94 |
$dhcp->comment( $transaction++ ); |
$dhcp->comment( $transaction++ ); |
95 |
|
|
96 |
my $mac = substr($dhcp->chaddr(),0,$dhcp->hlen()*2); |
my $mac = format::mac( substr($dhcp->chaddr(),0,$dhcp->hlen()*2) ); |
97 |
my $ip = client_mac_ip($mac, $dhcp->ciaddr); |
my $ip = client_mac_ip($mac, $dhcp->ciaddr); |
98 |
|
|
99 |
my $hostname = $dhcp->getOptionValue(DHO_HOST_NAME); |
my $hostname = $dhcp->getOptionValue(DHO_HOST_NAME); |
100 |
print "$ip ", client::conf( $ip => 'hostname', default => $hostname ), " >> /etc/hosts\n"; |
print "$ip ", client::conf( $ip => 'hostname', default => $hostname ), " >> /etc/hosts\n" if $hostname; |
101 |
|
|
102 |
my $audit = { mac => format::mac($mac), ip => $ip, hostname => $hostname, |
my $audit = { mac => $mac, ip => $ip, hostname => $hostname, |
103 |
options => { |
options => { |
104 |
map { |
map { |
105 |
( $_ => $dhcp->getOptionValue( $_ ) ) |
( $_ => $dhcp->getOptionValue( $_ ) ) |
121 |
|
|
122 |
config::for_ip( $ip ); |
config::for_ip( $ip ); |
123 |
|
|
124 |
|
my $server = server::as_hash_for $ip; |
125 |
|
|
126 |
my $packet = { |
my $packet = { |
127 |
Op => BOOTREPLY(), |
Op => BOOTREPLY(), |
128 |
Hops => $dhcp->hops(), |
Hops => $dhcp->hops(), |
130 |
Flags => $dhcp->flags(), |
Flags => $dhcp->flags(), |
131 |
Ciaddr => $dhcp->ciaddr(), |
Ciaddr => $dhcp->ciaddr(), |
132 |
Yiaddr => $ip, |
Yiaddr => $ip, |
133 |
Siaddr => $server::ip, |
Siaddr => $server->{ip}, |
134 |
Giaddr => $dhcp->giaddr(), |
Giaddr => $dhcp->giaddr(), |
135 |
Chaddr => $dhcp->chaddr(), |
Chaddr => $dhcp->chaddr(), |
136 |
File => $file, |
File => $file, |
137 |
DHO_DHCP_SERVER_IDENTIFIER() => $server::ip, # busybox/udhcpc needs it but doesn't request |
DHO_DHCP_SERVER_IDENTIFIER() => $server->{ip}, # busybox/udhcpc needs it but doesn't request |
138 |
}; |
}; |
139 |
|
|
140 |
my $options = { |
my $options = { |
141 |
DHO_SUBNET_MASK() => $server::netmask, |
DHO_SUBNET_MASK() => $server->{netmask}, |
142 |
DHO_ROUTERS() => $server::ip, |
DHO_ROUTERS() => ( $server->{gw} || $server->{ip} ), |
143 |
DHO_DOMAIN_NAME() => $server::domain_name, |
DHO_DOMAIN_NAME() => $server->{domain}, |
144 |
DHO_NAME_SERVERS() => $server::ip, |
DHO_NAME_SERVERS() => $server->{ip}, |
145 |
DHO_DOMAIN_NAME_SERVERS() => $server::ip, |
DHO_DOMAIN_NAME_SERVERS() => ( $server->{dns} || $server->{ip} ), |
146 |
DHO_HOST_NAME() => client::conf( $ip, 'hostname' ), |
DHO_HOST_NAME() => client::conf( $ip, 'hostname' ), |
147 |
DHO_BROADCAST_ADDRESS() => $server::bcast, |
DHO_BROADCAST_ADDRESS() => $server->{bcast}, |
148 |
# DHO_NTP_SERVERS() => '', |
# DHO_NTP_SERVERS() => '', |
149 |
}; |
}; |
150 |
|
|
176 |
|
|
177 |
my $messagetype = $dhcp->getOptionValue(DHO_DHCP_MESSAGE_TYPE()); |
my $messagetype = $dhcp->getOptionValue(DHO_DHCP_MESSAGE_TYPE()); |
178 |
|
|
179 |
|
my @type; |
180 |
|
|
181 |
if ($messagetype eq DHCPDISCOVER()) { |
if ($messagetype eq DHCPDISCOVER()) { |
|
$audit->{type} = 'discover'; |
|
182 |
$packet->{Comment} = $dhcp->comment(); |
$packet->{Comment} = $dhcp->comment(); |
183 |
$packet->{DHO_DHCP_MESSAGE_TYPE()} = DHCPOFFER(); |
$packet->{DHO_DHCP_MESSAGE_TYPE()} = DHCPOFFER(); |
184 |
|
@type = qw( discover offer ); |
185 |
} elsif ($messagetype eq DHCPREQUEST()) { |
} elsif ($messagetype eq DHCPREQUEST()) { |
186 |
my $requested_ip = $dhcp->getOptionValue(DHO_DHCP_REQUESTED_ADDRESS()); |
@type = qw( request ); |
187 |
$audit->{type} = 'request'; |
my $requested_ip = $dhcp->getOptionValue(DHO_DHCP_REQUESTED_ADDRESS()) || $dhcp->ciaddr(); |
188 |
if ( $ip eq $requested_ip ) { |
if ( $ip eq $requested_ip ) { |
189 |
$packet->{DHO_DHCP_MESSAGE_TYPE()} = DHCPACK(); |
$packet->{DHO_DHCP_MESSAGE_TYPE()} = DHCPACK(); |
190 |
$packet->{DHO_DHCP_LEASE_TIME()} = 5 * 60; # 5 min |
$packet->{DHO_DHCP_LEASE_TIME()} = 5 * 60; # 5 min |
191 |
# $packet->{DHO_ROOT_PATH()} = '/exports/foobar'; |
# $packet->{DHO_ROOT_PATH()} = '/exports/foobar'; |
192 |
|
$type[1] = 'ack'; |
193 |
} else { |
} else { |
194 |
$packet->{DHO_DHCP_MESSAGE_TYPE()} = DHCPNAK(); |
$packet->{DHO_DHCP_MESSAGE_TYPE()} = DHCPNAK(); |
195 |
$packet->{DHO_DHCP_MESSAGE()} = "Bad request, expected $ip"; |
$packet->{DHO_DHCP_MESSAGE()} = "Bad request, expected $ip got $requested_ip"; |
196 |
|
$type[1] = 'nak'; |
197 |
} |
} |
198 |
} elsif ($messagetype eq DHCPINFORM()) { |
} elsif ($messagetype eq DHCPINFORM()) { |
199 |
$audit->{type} = 'inform'; |
@type = qw( inform ignored ); |
200 |
} else { |
} else { |
201 |
$audit->{type} = sprintf('ignored %x', $messagetype); |
@type = ( $messagetype, 'ignored' ); |
202 |
} |
} |
203 |
|
|
204 |
warn ">> $mac == $ip server: $server::ip", $file ? " file: $file\n" : "\n" if $debug; |
warn "# type ",dump @type; |
205 |
|
$audit->{type} = [ @type ]; |
206 |
|
|
207 |
$audit->{response} = $packet; |
$audit->{response} = $packet; |
208 |
|
|
209 |
$packet = new Net::DHCP::Packet( %$packet ); |
$packet = new Net::DHCP::Packet( %$packet ); |
210 |
warn "send ",$packet->toString() if $debug; |
warn "send ",$packet->toString() if $debug; |
211 |
|
|
212 |
if ( in_our_range( $ip ) ) { |
if ( ip::in_dhcp_range( $ip ) ) { |
213 |
my $buff = $packet->serialize(); |
my $buff = $packet->serialize(); |
214 |
|
|
215 |
my $reply = IO::Socket::INET->new( |
my $reply = IO::Socket::INET->new( |
216 |
LocalAddr => $server::ip, |
LocalAddr => $server->{ip}, |
217 |
LocalPort => 67, |
LocalPort => 67, |
218 |
Proto => "udp", |
Proto => "udp", |
219 |
Broadcast => 1, |
Broadcast => 1, |
220 |
PeerAddr => '255.255.255.255', |
# PeerAddr => '255.255.255.255', |
221 |
|
PeerAddr => $server->{bcast}, |
222 |
PeerPort => 68, |
PeerPort => 68, |
223 |
Reuse => 1, |
Reuse => 1, |
224 |
) or die "socket: $@"; |
) or die "socket: $@"; |
225 |
|
|
226 |
$reply->send( $buff, 0 ) or die "Error sending: $!\n"; |
$reply->send( $buff, 0 ) or die "Error sending: $!\n"; |
227 |
|
warn ">> $mac == $ip server: $server->{ip}", $file ? " file: $file\n" : "\n"; |
228 |
} else { |
} else { |
229 |
$audit->{error} = "$ip our of our range $server::ip $server::netmask"; |
$audit->{error} = "$ip not in server range $server::ip $server::netmask - no packet sent"; |
230 |
|
warn $audit->{error}; |
231 |
} |
} |
232 |
|
|
233 |
CouchDB::audit( $audit->{type}, $audit ); |
CouchDB::audit( @type, $audit ); |
234 |
|
|
235 |
# system("arp -s $ip $mac"), |
# system("arp -s $ip $mac"), |
236 |
|
|
255 |
CouchDB::audit( 'start', { addr => $sock->sockhost, port => $sock->sockport } ); |
CouchDB::audit( 'start', { addr => $sock->sockhost, port => $sock->sockport } ); |
256 |
|
|
257 |
while (1) { |
while (1) { |
258 |
|
server->refresh; |
259 |
process_packet $sock; |
process_packet $sock; |
260 |
} |
} |
261 |
} |
} |