Udo, On Fri, 11 May 2018, Udo Rader via FreeIPA-users wrote: our IPA-Installation is completely separated from both our DHCP- and DNS-Servers, that are maintained using Netdot [1]. All I needed to do was to add a certain set of DNS-entries to our DNS zone files. Those entries can be displayed with --- ipa dns-update-system-records --dry-run --- [1] https://github.com/cvicente/Netdot Mit freundlichen Gruessen/With best regards, --Daniel.

On pe, 11 touko 2018, Udo Rader via FreeIPA-users wrote: It did not happen, indeed. Most time was spent on two things: - make other projects to implement features required, mostly around single sign-on with GSSAPI for ISC DHCP and similar - make sure we can design a better DHCP storage DIT and schema, an opportunity to refactor actual DHCP schema. The second part was unfinished. So yes, you could import DHCP DIT and manage it yourself but FreeIPA will not help you with that. You can start developing a management plugin for that too, following my examples att github[1] You can use an approach taken by OpenSUSE folks: https://discourse.nordisch.org/t/fun-with-freeipa-and-a-slightly-more-com... [1] See https://github.com/abbra/freeipa-desktop-profile, https://github.com/abbra/freeipa-userstatus-plugin and other freeipa-* plugins there. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland

Udo Rader via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org&gt; writes: ... ... I'm using dnsmasq for DHCP. My workflow is something like this: - A host gets added to FreeIPA, its IP address is stored in LDAP for IPA's DNS. - I manually add the MAC address to the server record: ipa host-mod <host> --macaddress=<mac> - A script pulls the hosts from IPA and generates a config fragment for dnsmasq. If there were changes, dnsmasq is reloaded. Jochen #!/bin/bash tmp=/etc/dnsmasq.d/dynamic-hosts.conf.tmp KRBPRINC=&#39;host/&lt;host&gt;.example.org(a)EXAMPLE.ORG&#39; kinit -k $KRBPRINC cat > $tmp <<EOF # This file has all hosts with their MAC and IP addresses. # It is created by the cron job /root/scripts/update-dhcp-hosts-from-ipa.sh # and reads host/mac/ip from freeipa. EOF cp ${tmp} ${tmp}.empty LC_ALL=C ipa host-find --all | awk ' /MAC address:/ { for(i=3;i<=NF;i++){mac_address=mac_address $i}; } /Class: vpnclient/ { tag="set:vpnclient," } /Class: efi/ { tag="set:efi," } /Class: pi-hole/ { tag="set:pi-hole," } /serverhostname:/ { if ( mac_address != "" ) print mac_address " " $2 " " tag ; tag=""; mac_address="" }' | \ while read -r mac_address host tag; do # shellcheck disable=SC2018,SC2019 mac_address=$(echo "$mac_address" | tr 'A-Z' 'a-z') ip=$(getent ahostsv4 "$host" | head -n 1 | cut -f1 -d ' ' ) echo "dhcp-host=$mac_address,id:*,$tag$ip,$host,24h" done >> ${tmp}.$$ LC_ALL=C.UTF-8 ipa host-find --all --raw | awk ' /fqdn:/ { ipstr=""; split($2,host,".") } # for multi-home hosts, description contains the interface-name. /iface:/ { "getent ahostsv4 " host[1] "-" $2 | getline ipstr; split(ipstr, ip, " "); if ( ip[1] != "" ) printf "dhcp-host=" $3 ",id:*," ip[1] "," host[1] "-" $2 ",24h\n" else printf "ERROR: no ip for host »%s« and interface »%s«.\n", host[1], $2 > "/dev/stderr" }' >> ${tmp}.$$ sort < ${tmp}.$$ > $tmp rm -f ${tmp}.$$ kdestroy -A if cmp -s $out $tmp; then rm -f $tmp ${tmp}.empty else if cmp -s ${tmp} ${tmp}.empty; then rm -f ${tmp} ${tmp}.empty else mv $tmp $out rm -f ${tmp}.empty systemctl restart dnsmasq.service fi fi -- This space is intentionally left blank.