Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 18 Jan 2008 08:38:24 -0800
From:      Jeremy Chadwick <koitsu@FreeBSD.org>
To:        Erik Van Benschoten <evanben@earthlink.net>
Cc:        Erik Van Benschoten <evanben@valleycomnet.com>, freebsd-ports@freebsd.org, Florent Thoumie <flz@xbsd.org>
Subject:   Re: ISC DHCP Server port UID/GID question
Message-ID:  <20080118163824.GA44214@eos.sc1.parodius.com>
In-Reply-To: <4790C318.2030303@earthlink.net>
References:  <4790952F.6070702@valleycomnet.com> <a01628140801180654y45d0a06fo4bc86ad72dce7a0@mail.gmail.com> <4790C318.2030303@earthlink.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jan 18, 2008 at 10:17:44AM -0500, Erik Van Benschoten wrote:
>  I noticed that, but I believe that that is a privilege separation account 
> that is used with the OpenBSD-version of the dhclient. Also, as I pointed 
> out, if this is usable, then why isn't the isc-dhcp-server port using it 
> instead of allocating a UID/GID for itself during the install?

You're correct on both accounts.  My home RELENG_7 box:

# pkg_info | grep dhcp
isc-dhcp3-server-3.0.5_2 The ISC Dynamic Host Configuration Protocol server
# grep dhcp /etc/group
_dhcp:*:65:
dhcpd:*:1502:
# grep dhcp /etc/passwd
_dhcp:*:65:65:dhcp programs:/var/empty:/usr/sbin/nologin
dhcpd:*:1502:1502:DHCP Daemon:/nonexistent:/usr/sbin/nologin
# ps -auxw | grep dhcp
dhcpd     699  0.0  0.1  3088  1756  ??  Ss   Thu06am   0:10.50 /usr/local/sbin/dhcpd -q -cf /conf/ME/dhcpd.conf -lf /var/db/dhcpd/
root    29418  0.0  0.0  3292   940  p2  S+    8:35am   0:00.00 grep dhcp
# grep dhcp /usr/src/etc/group
_dhcp:*:65:
# grep dhcp /usr/src/etc/master.passwd
_dhcp:*:65:65::0:0:dhcp programs:/var/empty:/usr/sbin/nologin

So, as you can see, isc-dhcp3-server adds a "dhcpd" user and group to
/etc/passwd and /etc/group, and the FreeBSD base system prefers one
called _dhcp which will get added (if deleted) via mergemaster.

-- 
| Jeremy Chadwick                                    jdc at parodius.com |
| Parodius Networking                           http://www.parodius.com/ |
| UNIX Systems Administrator                      Mountain View, CA, USA |
| Making life hard for others since 1977.                  PGP: 4BD6C0CB |




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080118163824.GA44214>