proc_securing-the-dhcp-api.adoc

Securing the dhcpd API

{SmartProxy} interacts with DHCP daemon using the dhcpd API to manage DHCP. By default, the dhcpd API listens to any host without access control. You can add an omapi_key to provide basic security.

Procedure

1. Install the required packages:

   # {project-package-install} {bind-package}

2. Generate a key:

   # dnssec-keygen -r /dev/urandom -a HMAC-MD5 -b 512 -n HOST omapi_key
   # cat Komapi_key.+*.private | grep ^Key|cut -d ' ' -f2-

3. Use {foreman-installer} to secure the dhcpd API:

   # {foreman-installer} \
   --foreman-proxy-dhcp-key-name "My_Name" \
   --foreman-proxy-dhcp-key-secret "My_Secret"