LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 09-28-2007, 07:32 AM   #1
suhas!
Member
 
Registered: Mar 2007
Posts: 100

Rep: Reputation: 17
Prevent User from being able to change Dynamic IP


Hi all,

We have dhcpd server running on RHEL AS 4. If on a client, user sets a static IP and then sets it to be a dynamic, his machine gets the same IP from the DHCP server rather than what it was given before by the DHCP server.

e.g.

Step 1 :

Machine set to Dynamic, IP Obtained: 192.168.0.100

Step 2 :

Machine assigned a static IP : 192.168.0.200

Step 3:

Machine set back to Dynamic, Obtained IP : 192.168.0.200


In this scenario, in the third step a machine should have got the old one IP i.e. 192.168.0.100 but it didnt get that one. Why is it so? This allows user to have whatever IP he wants. (It is very serious issue when Internet access is given on the IP addresses )

What setting can I do on this, as users having administrative rights can easily change their dynamic IP.

(I am not looking for the solution through Group Policy in Windows Domain Environment.)

Please suggest.......
 
Old 09-28-2007, 08:03 AM   #2
oskar
Senior Member
 
Registered: Feb 2006
Location: Austria
Distribution: Ubuntu 12.10
Posts: 1,142

Rep: Reputation: 49
You could disable dhcp and tell the router to assign IP's according to the MAC address. That's the best I got. But they can still spoof the mac address rather easily.
Bottom line: Users should not have administrative privileges.

Last edited by oskar; 09-28-2007 at 08:05 AM.
 
Old 09-29-2007, 12:48 AM   #3
suhas!
Member
 
Registered: Mar 2007
Posts: 100

Original Poster
Rep: Reputation: 17
Thanx for reply OSKAR,

I'm very disappointed to know that being a DHCP Sever Administrator, I cant do any thing to prevent users, I have to depend on either Network Administrator or Domain Administrator. Hope dhcpd server developers do something to solve this issue.
 
Old 09-29-2007, 04:58 AM   #4
oskar
Senior Member
 
Registered: Feb 2006
Location: Austria
Distribution: Ubuntu 12.10
Posts: 1,142

Rep: Reputation: 49
Well, if you want that everyone has his own IP, it defeats the purpose of DHCP, no? I know next to nothing about networks, but DHCP is just for dynamic... IP... something, right?. In my router I can just switch off dhcp, and assign computers manually.
But, as I said, there are still workarounds. The last resort would be to assign the computer per input (where it is connected to the router) and have every Computer have his Ethernet cable chained to the desk

But the mac-address thing should be good enough. If someone does spoof it, you will find out rather quickly, and have the employee removed.

Last edited by oskar; 09-29-2007 at 05:01 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
how do i prevent a user from sending mail onyangoliech Linux - Software 4 12-15-2006 11:24 AM
How to prevent user from using other apps!?? FreakboY Linux - Security 4 09-08-2005 04:22 AM
Together problem: How to prevent change from operation to propery Guest1234 Programming 1 07-14-2005 01:30 PM
prevent password change rgiggs Mandriva 13 06-29-2004 05:53 PM
Prevent a user from logging into X? sorrodos Linux - Security 6 06-26-2004 03:30 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 11:58 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration