# -*- coding: utf-8 -*-
#
# Copyright 2004-2022 Univention GmbH
#
# https://www.univention.de/
#
# All rights reserved.
#
# The source code of this program is made available
# under the terms of the GNU Affero General Public License version 3
# (GNU AGPL V3) as published by the Free Software Foundation.
#
# Binary versions of this program provided by Univention to you as
# well as other copyrighted, protected or trademarked materials like
# Logos, graphics, fonts, specific documentations and configurations,
# cryptographic keys etc. are subject to a license agreement between
# you and Univention and not subject to the GNU AGPL V3.
#
# In the case you use this program under the terms of the GNU AGPL V3,
# the program is provided in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public
# License with the Debian GNU/Linux or Univention distribution in file
# /usr/share/common-licenses/AGPL-3; if not, see
# <https://www.gnu.org/licenses/>.
"""
|UDM| module for |DHCP| scope policies
"""
from univention.admin.layout import Tab, Group
import univention.admin.syntax
import univention.admin.filter
import univention.admin.handlers
import univention.admin.localization
from univention.admin.policy import (
register_policy_mapping, policy_object_tab,
requiredObjectClassesProperty, prohibitedObjectClassesProperty,
fixedAttributesProperty, emptyAttributesProperty, ldapFilterProperty
)
translation = univention.admin.localization.translation('univention.admin.handlers.policies')
_ = translation.translate
[docs]class dhcp_scopeFixedAttributes(univention.admin.syntax.select):
name = 'dhcp_scopeFixedAttributes'
choices = [
('univentionDhcpUnknownClients', _('Unknown clients')),
('univentionDhcpBootp', _('BOOTP')),
('univentionDhcpBooting', _('Booting')),
('univentionDhcpDuplicates', _('Duplicates')),
('univentionDhcpDeclines', _('Declines'))
]
module = 'policies/dhcp_scope'
operations = ['add', 'edit', 'remove', 'search']
policy_oc = "univentionPolicyDhcpScope"
policy_apply_to = ["dhcp/service", "dhcp/subnet", "dhcp/host", "dhcp/sharedsubnet", "dhcp/shared"]
policy_position_dn_prefix = "cn=scope,cn=dhcp"
policies_group = "dhcp"
childs = False
short_description = _('Policy: DHCP Allow/Deny')
object_name = _('DHCP Allow/Deny policy')
object_name_plural = _('DHCP Allow/Deny policies')
policy_short_description = _('Allow/Deny')
long_description = ''
options = {
'default': univention.admin.option(
short_description=short_description,
default=True,
objectClasses=['top', 'univentionPolicy', 'univentionPolicyDhcpScope'],
),
}
property_descriptions = {
'name': univention.admin.property(
short_description=_('Name'),
long_description='',
syntax=univention.admin.syntax.policyName,
include_in_default_search=True,
required=True,
may_change=False,
identifies=True,
),
'scopeUnknownClients': univention.admin.property(
short_description=_('Unknown clients'),
long_description=_('Dynamically assign addresses to unknown clients. Allowed by default. This option should not be used anymore.'),
syntax=univention.admin.syntax.AllowDenyIgnore,
),
'bootp': univention.admin.property(
short_description=_('BOOTP'),
long_description=_('Respond to BOOTP queries. Allowed by default.'),
syntax=univention.admin.syntax.AllowDenyIgnore,
),
'booting': univention.admin.property(
short_description=_('Booting'),
long_description=_('Respond to queries from a particular client. Has meaning only when it appears in a host declaration. Allowed by default.'),
syntax=univention.admin.syntax.AllowDenyIgnore,
),
'duplicates': univention.admin.property(
short_description=_('Duplicates'),
long_description=_('If a request is received from a client that matches the MAC address of a host declaration, any other leases matching that MAC address will be discarded by the server, if this is set to deny. Allowed by default. Setting this to deny violates the DHCP protocol.'),
syntax=univention.admin.syntax.AllowDeny,
),
'declines': univention.admin.property(
short_description=_('Declines'),
long_description=_("Honor DHCPDECLINE messages. deny/ignore will prevent malicious or buggy clients from completely exhausting the DHCP server's allocation pool."),
syntax=univention.admin.syntax.AllowDenyIgnore,
),
}
property_descriptions.update(dict([
requiredObjectClassesProperty(),
prohibitedObjectClassesProperty(),
fixedAttributesProperty(syntax=dhcp_scopeFixedAttributes),
emptyAttributesProperty(syntax=dhcp_scopeFixedAttributes),
ldapFilterProperty(),
]))
layout = [
Tab(_('Allow/Deny'), _('Allow/Deny/Ignore statements'), layout=[
Group(_('General DHCP allow/deny settings'), layout=[
'name',
['scopeUnknownClients', 'bootp'],
['booting', 'duplicates'],
'declines'
]),
]),
policy_object_tab()
]
mapping = univention.admin.mapping.mapping()
mapping.register('name', 'cn', None, univention.admin.mapping.ListToString)
mapping.register('scopeUnknownClients', 'univentionDhcpUnknownClients', None, univention.admin.mapping.ListToString)
mapping.register('bootp', 'univentionDhcpBootp', None, univention.admin.mapping.ListToString)
mapping.register('booting', 'univentionDhcpBooting', None, univention.admin.mapping.ListToString)
mapping.register('duplicates', 'univentionDhcpDuplicates', None, univention.admin.mapping.ListToString)
mapping.register('declines', 'univentionDhcpDeclines', None, univention.admin.mapping.ListToString)
register_policy_mapping(mapping)
[docs]class object(univention.admin.handlers.simplePolicy):
module = module
lookup = object.lookup
lookup_filter = object.lookup_filter
identify = object.identify
