Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-37669

Support changing the key-algorithm for locally deployed ISC DHCP

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Major Major
    • 6.19.0
    • None
    • Installation
    • None
    • 5
    • False
    • Satellite Rocket Sprint 6, Satellite Rocket Sprint 7
    • sat-rocket
    • Release Note Not Required
    • None
    • None
    • None

      We document the installer-managed DHCP service scenario. For upstream this is https://docs.theforeman.org/nightly/Integrating_Provisioning_Infrastructure_Services/index-katello.html#enabling-the-installer-managed-dhcp-service. In this scenario we need to support changing the DHCP key algorithm to something other than hmac-md5.

      More concrete, the installer gained -foreman-proxy-dhcp-key-algorithm. Currently in step 3.b. we tell the user to run tsig-keygen -a hmac-md5 _my_omapi_key but the value to parameter to -a becomes free to choose. See man tsig-keygen for the accepted values. Then that value needs to be passed in step 4 with the -foreman-proxy-dhcp-key-algorithm installer parameter.

      It's a good idea to also recommend users a better algorithm than hmac-md5. The current default is hmac-sha256.

      Acceptance criteria:

      • The installer supports this
      • The enhanced procedure is documented
      • This is tested

              Unassigned Unassigned
              ekohlvan@redhat.com Ewoud Kohl van Wijngaarden
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: