DHCP Server Tasks

How to Grant User Access to DHCP Commands

By default, only the root user can execute svcadm and other commands that are required to configure the DHCP service. If you want users who do not have root privileges to use the DHCP commands, you can set up role-based access control (RBAC) to allow access to those commands. The following procedure explains how to assign the DHCP Management profile, which enables the user to execute the DHCP commands.

You might also find the following man pages helpful: rbac(5), exec_attr(4), and user_attr(4).

1. Assume the root role.

   Roles contain authorizations and privileged commands. For more information about roles, see Initially Configuring RBAC (Task Map) in Oracle Solaris 11.1 Administration: Security Services.

2. Add a user or role to the /etc/user_attr file.

   Edit the /etc/user_attr file to add an entry of the following form. Add one entry for each user or role that should manage the DHCP service.

   username::::type=normal;profiles=DHCP Management

   For example, for user ram, you would add the following entry:

   ram::::type=normal;profiles=DHCP Management

How to Configure an ISC DHCP Server

You can use these steps to initially configure an ISC DHCP server.

1. Assume the root role.

   Roles contain authorizations and privileged commands. For more information about roles, see Initially Configuring RBAC (Task Map) in Oracle Solaris 11.1 Administration: Security Services.

2. Edit the DHCP configuration files for the appropriate services.

   For IPv4 edit /etc/inet/dhcpd4.conf and for IPV6 edit /etc/inet/dhcpd6.conf. For more information, see the dhcpd.conf(5) man page.

3. Enable the required service.

   # svcadm enable service

   service can be one of the following values:

   svc:/network/dhcp/server:ipv4

   Provides DHCP and BOOTP requests from IPv4 clients

   svc:/network/dhcp/server:ipv6

   Provides DHCP and BOOTP requests from IPv6 clients

   svc:/network/dhcp/relay:ipv4

   Relays DHCP and BOOTP requests from IPv4 clients to a network with a DHCP server

   svc:/network/dhcp/relay:ipv6

   Relays DHCP and BOOTP requests from IPv6 clients to a network with a DHCP server

How to Modify the Configuration of the DHCP Service

1. Assume the root role or a role or user name that has been assigned to the DHCP Management profile.

   Roles contain authorizations and privileged commands. For more information about roles, see Initially Configuring RBAC (Task Map) in Oracle Solaris 11.1 Administration: Security Services. For more information about the DHCP Management profile, see How to Grant User Access to DHCP Commands

2. Edit the DHCP configuration file.

   For IPv4 edit the /etc/inet/dhcpd4.conf and for IPv6 edit /etc/inet/dhcpd6.conf. For more information, see the dhcpd.conf(5) man page.

3. Refresh the SMF data.

   # svcadm refresh service