Multi-tenant configuration for smart-proxy and ISC DHCP

Yes and no. You could probably use smart-proxy to configure DNS and DHCP
on remote machines (does not work for puppetmaster).
However, I don't think it will suit your needs. As smart-proxy can only
do authentication, but not authorization. So if you're allowed to talk
to smart-proxy, it will do whatever you want.

So yes, you can use smart-proxy that way and no, you probably don't want
to do it in a multi-tenant enviroment.

Regards,
Andreas

··· Am 28.01.2013 21:55, schrieb ryan wallner: > *(VM)* <--> *(Foreman Smart-proxy)* <-->*(DHCP, DNS , Puppet) *<-- these > services are running on multiple instances > > Can I use smart-proxy in this way?


Solvention Ltd. & Co. KG
St.-Sebastianus-Str. 5
51147 K�ln

Tel: +49 2203 989967-0
Fax: +49 2203 989967-9

http://www.solvention.de
mailto:info@solvention.de

Thanks andreas,

I may be looking for something other than the administrative tasks, while
this is a part of what I am after and will most likely deploy in this
fashion, the real service I may be after is that of what Dominic
Mentioned, something that can "handle the dhcp traffic itself"

Thanks for your response.
Ryan Wallner
Ryan.wallner@emc.com
EMC OCTO | NGDC

··· On Tuesday, January 29, 2013 3:14:54 AM UTC-5, Andreas Rogge wrote: > > Am 28.01.2013 21:55, schrieb ryan wallner: > > *(VM)* <--> *(Foreman Smart-proxy)* <-->*(DHCP, DNS , Puppet) *<-- these > > services are running on multiple instances > > > > Can I use smart-proxy in this way? > > Yes and no. You could probably use smart-proxy to configure DNS and DHCP > on remote machines (does not work for puppetmaster). > However, I don't think it will suit your needs. As smart-proxy can only > do authentication, but not authorization. So if you're allowed to talk > to smart-proxy, it will do whatever you want. > > So yes, you can use smart-proxy that way and no, you probably don't want > to do it in a multi-tenant enviroment. > > Regards, > Andreas > > -- > Solvention Ltd. & Co. KG > St.-Sebastianus-Str. 5 > 51147 K�ln > > Tel: +49 2203 989967-0 > Fax: +49 2203 989967-9 > > http://www.solvention.de > mailto:in...@solvention.de >

As a starting point, look at dhcrelay or the DHCP helper/delay functions
of most routers.

··· -- Dominic Cleal Red Hat Engineering

On 29/01/13 19:06, ryan wallner wrote:

Thanks andreas,

I may be looking for something other than the administrative tasks,
while this is a part of what I am after and will most likely deploy in
this fashion, the real service I may be after is that of what Dominic
Mentioned, something that can “handle the dhcp traffic itself”

Thanks for your response.
Ryan Wallner
Ryan.wallner@emc.com
EMC OCTO | NGDC

On Tuesday, January 29, 2013 3:14:54 AM UTC-5, Andreas Rogge wrote:

Am 28.01.2013 21:55, schrieb ryan wallner:
> *(VM)* <--> *(Foreman Smart-proxy)* <-->*(DHCP, DNS , Puppet) *<--
these
> services are running on multiple instances
>
> Can I use smart-proxy in this way?

Yes and no. You could probably use smart-proxy to configure DNS and
DHCP
on remote machines (does not work for puppetmaster).
However, I don't think it will suit your needs. As smart-proxy can only
do authentication, but not authorization. So if you're allowed to talk
to smart-proxy, it will do whatever you want.

So yes, you can use smart-proxy that way and no, you probably don't
want
to do it in a multi-tenant enviroment.

Regards,
Andreas

-- 
Solvention Ltd. & Co. KG
St.-Sebastianus-Str. 5
51147 K�ln

Tel: +49 2203 989967-0
Fax: +49 2203 989967-9

http://www.solvention.de
mailto:in...@solvention.de <javascript:>


You received this message because you are subscribed to the Google
Groups “foreman-dev” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to foreman-dev+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Thanks,

Just posted again right before you mentioned this.

··· On Tuesday, January 29, 2013 2:10:33 PM UTC-5, Dominic Cleal wrote: > > As a starting point, look at dhcrelay or the DHCP helper/delay functions > of most routers. > > -- > Dominic Cleal > Red Hat Engineering > > On 29/01/13 19:06, ryan wallner wrote: > > Thanks andreas, > > > > I may be looking for something other than the administrative tasks, > > while this is a part of what I am after and will most likely deploy in > > this fashion, the real service I may be after is that of what Dominic > > Mentioned, something that can "handle the dhcp traffic itself" > > > > Thanks for your response. > > Ryan Wallner > > Ryan.w...@emc.com > > EMC OCTO | NGDC > > > > On Tuesday, January 29, 2013 3:14:54 AM UTC-5, Andreas Rogge wrote: > > > > Am 28.01.2013 21:55, schrieb ryan wallner: > > > *(VM)* <--> *(Foreman Smart-proxy)* <-->*(DHCP, DNS , Puppet) *<-- > > these > > > services are running on multiple instances > > > > > > Can I use smart-proxy in this way? > > > > Yes and no. You could probably use smart-proxy to configure DNS and > > DHCP > > on remote machines (does not work for puppetmaster). > > However, I don't think it will suit your needs. As smart-proxy can > only > > do authentication, but not authorization. So if you're allowed to > talk > > to smart-proxy, it will do whatever you want. > > > > So yes, you can use smart-proxy that way and no, you probably don't > > want > > to do it in a multi-tenant enviroment. > > > > Regards, > > Andreas > > > > -- > > Solvention Ltd. & Co. KG > > St.-Sebastianus-Str. 5 > > 51147 K�ln > > > > Tel: +49 2203 989967-0 > > Fax: +49 2203 989967-9 > > > > http://www.solvention.de > > mailto:in...@solvention.de > > > > -- > > You received this message because you are subscribed to the Google > > Groups "foreman-dev" group. > > To unsubscribe from this group and stop receiving emails from it, send > > an email to foreman-dev...@googlegroups.com . > > For more options, visit https://groups.google.com/groups/opt_out. > > > > > >