[ipxe-devel] iPXE: Authentification Problem
Sara Martínez
saramartinezlarriba at gmail.com
Tue Oct 22 21:03:34 UTC 2013
This is my dhcpd.conf:
option space ipxe;
option ipxe-encap-opts code 175 = encapsulate ipxe;
option ipxe.priority code 1 = signed integer 8;
option ipxe.keep-san code 8 = unsigned integer 8;
option ipxe.skip-san-boot code 9 = unsigned integer 8;
option ipxe.syslogs code 85 = string;
option ipxe.cert code 91 = string;
option ipxe.privkey code 92 = string;
option ipxe.crosscert code 93 = string;
option ipxe.no-pxedhcp code 176 = unsigned integer 8;
option ipxe.bus-id code 177 = string;
option ipxe.bios-drive code 189 = unsigned integer 8;
option ipxe.username code 190 = string;
option ipxe.password code 191 = string;
option ipxe.reverse-username code 192 = string;
option ipxe.reverse-password code 193 = string;
option ipxe.version code 235 = string;
option iscsi-initiator-iqn code 203 = string;
option ipxe.priority 1;
…
…
if (exists ipxe.username and exists ipxe.password) {
filename "/ltsp/i386/menu.ipxe";
} else if (exists user-class and option user-class = "iPXE") {
filename "/ltsp/i386/menu-login.ipxe";
} else {
filename "/ltsp/i386/undionly.kpxe";
}
And my menu-login.ipxe :
#!ipxe
login
ifopen net0
set net0/175.190:string ${username}
set net0/175.191:string ${password}
dhcp net0
chain ${net0.dhcp/filename}
I checked these packets with wireshark: DHCP discover and DHCP request.
They contain the Etherboot encapsulation (175) with the options:
ipxe.bus-id (177), ipxe.bzimage (24), ipxe.elf (34),
ipxe.multiboot (25), ipxe.pxe (33), ipxe.pxeext (16), ipxe.version (235) ,
ipxe.http (19), ipxe.iscsi (17), ipxe.dns (23), ipxe.tftp (21), ipxe.menu
(39), ipxe.aoe (18).
And the options ipxe.username and ipxe.password are not in the packet.
2013/10/21 Sara Martínez <saramartinezlarriba at gmail.com>
> Hello!
> I'm trying to authenticate my client to a dhcp server in linux and I'm
> trying to use the ipxe (dhcp) options username (190) and password (191) to
> carry the authentication credentials in the dhcp request after loading
> undionly.ipxe; but I cannot success. How can I do this authentification at
> booting time with ipxe?
> Thank you!
>
> --
> Sariña
>
--
Sariña
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ipxe.org/pipermail/ipxe-devel/attachments/20131022/1440a288/attachment.htm>
More information about the ipxe-devel
mailing list