Home

DHCP Web Services - Jason Rupard

1. identified as SRV lt SIP gt SN lt NIP gt IPR lt BIP gt lt EIP gt where BIP is the beginning IP address in the range and ETP is the end IP address in the range Each scope was designed to consist of three roles Owner Manager and Auditor and will be created on demand when the first user account is assigned to one of the three roles In AzMan these roles are assigned application operations that represent privileged actions Four operations were created generally representing the operations that can occur when managing a DHCP server Create Read Update and Delete The Owner role is assigned all operations The Manager role is assigned Read and Update The Auditor role is assigned only the Read operation A scheme was created to assign privileged actions to DHCP operations based on obvious associations For example a user must be assigned a role having the ability to execute the Create operation when that user calls the CreateReservation DHCP operations There is also a special internal role called Limited assigned a special internal Traverse operation This role is automatically assigned at the parent subnet level to a user of an IP range scope assignment This is analogous to the traverse permission on a file system The user needs to be able to traverse the subnet in order to read the IP range within that subnet Table 1 shows the list of DHCP operations with the minimum access role and scope assig
2. sInfo ReservedScopeInfo ReservedIpSubnetAddress this SubnetIp GetUIntAddress sInfo ReservedScopeInfo ReservedIpAddress this ReservationIp GetUIntAddress break return sInfo region OptionData 54 public abstract class DhcpOptionData public DhcpOptionDataType Type public DhcpOptionData public DhcpOptionData DhcpOptionDataType type this Type type internal abstract DHCP_OPTION_DATA ConvertToNative MemManager Mem internal static DhcpOptionData CovertFromNative DHCP_OPTION_DATA NativeOptData if NativeOptData NumElements 0 NativeOptData Elements IntPtr Zero throw new ArgumentException DHCP_OPTION_DATA not valid grab first element for type test DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure NativeOptData Elements typeof DHCP_OPTION_DATA_ELEMENT switch element OptionType case DHCP_OPTION_DATA_TYPE DhcpByteOption return new DhcpOptionDataByte NativeOptData case DHCP_OPTION_DATA_TYPE DhcpDWordDWordOption return new DhcpOptionDataDwordDword NativeOptData case DHCP_OPTION_DATA_TYPE DhcpDWordOption return new DhcpOptionDataDword NativeOptData case DHCP_OPTION_DATA_TYPE DhcpIpAddressOption return new DhcpOptionDatalIp NativeOptData case DHCP_OPTION_DATA_TYPE DhcpStringDataOption return new DhcpOptionDataString NativeOptData case DHCP_OPTION_DATA_TYPE DhcpWordOption return new Dh
3. if this Data Length 0 throw new InvalidOperationException OptionValue No data to convert DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA data new DHCP_OPTION_DATA data NumElements UInt32 this Data Length data Elements Mem AllocArray typeof DHCP_OPTION_DATA_ELEMENT data NumElements IntPtr iptr for int i 0 i lt data NumElements i element new DHCP_OPTION_DATA_ELEMENT element OptionType DHCP_OPTION_DATA_TYPE DhcpByteOption element ByteOption this Data i iptr IntPtr data Elements ToInt32 i Marshal SizeOf typeof DHCP_OPTION_DATA_ELEMENT Marshal StructureToPtr element iptr false return data public class DhcpOptionDataIp DhcpOptionData public DhcpIpAddress Data public DhcpOptionDataIp this Type DhcpOptionDataType IpAddressType public DhcpOptionDataIp DhcpIpAddress ips base DhcpOptionDataType IpAddressType this Data ips internal DhcpOptionDatalIp DHCP_OPTION_DATA NativeOptData if NativeOptData NumElements 0 NativeOptData Elements IntPtr Zero throw new ArgumentException DHCP_OPTION_DATA not valid this Type DhcpOptionDataType IpAddressType grab first element for type test DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure NativeOptData Elements typeof DHCP_OPTION_DATA_ELEMENT 56 if element OptionType DHCP_OPTION_DATA_TYPE D
4. public DhcpAzAccount String accountName DhcpAzRole role this AccountName accountName this Role role public class DhcpAzGlobalAccount public String AccountName public DhcpAzGlobalRole GlobalRole public DhcpAzGlobalAccount public DhcpAzGlobalAccount String accountName DhcpAzGlobalRole role this AccountName accountName this GlobalRole role public enum DhcpAzGlobalRole GlobalAuditor 0 GlobalAdministrator 1 public enum DhcpAzRole Auditor 1 Manager 2 Owner 3 NS DHCP Server Management Objects File DhcpAzScope cs Namespace Unf Dhcp Smo WebServices c Jason Rupard School of Computing University of North Florida 7 using System using System Text RegularExpressions 37 using Microsoft Interop Security AzRoles namespace Unf Dhcp Smo WebServices public abstract class DhcpAzScope public DhcpAzScopeType ScopeType public DhcpAzScope public abstract String GenerateAzScopeName public abstract Boolean AccessCheck String opDesc IAzClientContext2 azClient DhcpAzOps operation public class DhcpAzServerScope DhcpAzScope public DhcpIpAddress Server public DhcpAzServerScope this ScopeType DhcpAzScopeType Server public override string GenerateAzScopeName if this Server null throw new InvalidOperationException return SRV this Server ToString protected stat
5. ERROR_DDS_TOO_MANY_ERRORS 20073 Description A DHCP service could not be found ERROR_DDS_DHCP_SERVER_NOT_FOUND 20074 Description The specified DHCP options are already present in Active Directory ERROR_DDS_OPTION_ALREADY_EXISTS 20075 Description The specified DHCP options are not present in Active Directory ERROR_DDS_OPTION_DOES_NOT_EXIST 20076 Description The specified DHCP classes are already present in Active Directory pe Directory Directory Directory ERROR_DDS_CLASS_EXISTS 20077 Description The specified DHCP classes are not present in Active ERROR_DDS_CLASS_DOES_NOT_EXIST 20078 Description The specified DHCP servers are already present in Active ERROR_DDS_SERVER_ALREADY_EXISTS 20079 Description The specified DHCP servers are not present in Active ERROR_DDS_SERVER_DOES_NOT_EXIST 20080 Description The specified DHCP server address does not correspond to the identified DHCP server name Directory present in Act present in Act Directory ERROR_DDS_SERVER_ADDRESS_MISMATCH 20081 Description The specified subnets are already present in Active ERROR_ Descr ERROR Descr DDS_SUBNET_EXISTS 20082 iption The specified subnet belongs to a different superscope DDS_SUBNET_HAS_DIFF_SUPER_SCOPE 20083 iption The specified subnet is not present in Active Directory ERROR_DDS_SUBNET_NOT_PRES
6. s sIPR s d d foreach String clientScope in clientScopes Match m filter Match clientScope if m Success DhcpIpAddress startIp new DhcpIpAddress m Groups 1 Value DhcpIpAddress endIp new DhcpIpAddress m Groups 2 Value Trim isbetween if so check this scope to see if operation allowed if startIp GetUIntAddress lt this StartIp GetUIntAddress amp amp this StartIp GetUIntAddress lt endIp GetUIntAddress try result Object azClient AccessCheck opDesc new Object clientScope azOp null null null null null if int result 0 0 return true catch return false public enum DhcpAzScopeType IpRange 0 Subnet Ty Server 2 NS w DHCP Server Management Objects File DhcpClient cs Namespace Unf Dhcp Smo c Jason Rupard School of Computing University of North Florida 7 using System using System Collections Generic using System Text using System Runtime InteropServices using Unf Dhcp Smo Interop namespace Unf Dhcp Smo public class DhcpClient public DhcpIpAddress IpAddress public DhcpIpAddress SubnetMask public DhcpMacAddress MacAddress public String Name public String Comment public DateTime LeaseExpires public DhcpClient 40 public void Create DhcpIpAddress server using MemManager mem new MemManager DHCP_CLIENT_INFO info this ConvertToNative
7. azClient AccessCheck opDesc new Object scope azOp null null null null null if int result 0 0 return true catch return false public class DhcpAzIpRangeScope DhcpAzSubnetScope public DhcpIpAddress StartIp public DhcpIpAddress EndIp public DhcpAzIpRangeScope this ScopeType DhcpAzScopeType IpRange public override string GenerateAzScopeName if this Server null this Subnet null this StartIp null this EndIp null throw new InvalidOperationException return SRV this Server ToString SN this Subnet ToString y t TPR this Startip 2 this EndIp public override Boolean AccessCheck String opDesc IAzClientContext2 azClient DhcpAzOps operation Object result Object azOp new Object operation String scopes new String DhcpAzServerScope GenerateAzScopeName this Server DhcpAzSubnet Scope GenerateAzScopeName this Server this Subnet this GenerateAzScopeName check scope hierarchy foreach String scope in scopes try result Object azClient AccessCheck opDesc new Object scope azOp null null null null null if int result 0 0 return true catch 39 find all scope this user belongs to Object cursor null Object clientScopes Object azClient GetAssignedScopesPage 0 2000 ref cursor Regex filter new Regex scopes 2
8. clients Add DhcpClient ConvertFromNative nativeClient free on last successful call if Response 0 NativeMethods DhcpRpcFreeMemory retPtr break return clients internal DHCP_CLIENT_INFO ConvertToNative MemManager Mem if this IpAddress null this SubnetMask null this MacAddress this LeaseExpires null throw new InvalidOperationException Client invalid DHCP_CLIENT_INFO info new DHCP_CLIENT_INFO info ClientIpAddress this IpAddress GetUIntAddress info SubnetMask this SubnetMask GetUIntAddress info ClientName this Name info ClientComment this Comment 42 Byte mac this MacAddress GetByteArray DHCP_CLIENT_UID uid new DHCP_CLIENT_UID uid DataLength uint mac Length uid Data Mem AllocByteArray this MacAddress GetByteArray info ClientHardwareAddress uid info ClientLeaseExpires new DATE_TIME this LeaseExpires return info internal static DhcpClient ConvertFromNative DHCP_CLIENT_INFO nativeClient DhecpClient client new DhcpClient client IpAddress new DhcpIpAddress nativeClient ClientIpAddress client SubnetMask new DhcpIpAddress nativeClient SubnetMask client Name nativeClient ClientName client Comment nativeClient ClientComment client LeaseExpires nativeClient ClientLeaseExpires Convert Console WriteLine client LeaseExpires ToString byte mac new byte nativeCli
9. EnumPools DhcpIpAddress server DhcpIpAddress network return AzServerOperations EnumPools server network 2A secured WebMethod Description Search subnet for client leases matching terms public DhcpClient SubnetFindAl1Clients DhcpIpAddress server DhcpIpAddress network DhcpClientFilter terms return AzServerOperations SubnetFindAllClients server network terms secured WebMethod Description Search subnet for first client lease matching terms public DhcpClient SubnetFindOneClient DhcpIpAddress server DhcpIpAddress network DhcpClientFilter terms return AzServerOperations SubnetFindOneClient server network terms secured WebMethod Description Search lt b gt all lt b gt subnets on server looking for client leases matching terms public DhcpClient ServerFindAl1lClients DhcpIpAddress server DhcepClientFilter terms return AzServerOperations ServerFindAllClients server terms secured WebMethod Description Search lt b gt all lt b gt subnets on server looking for first client lease matching terms J public DhcpClient ServerFindOneClient DhcpIpAddress server DhcpClientFilter terms return AzServerOperations ServerFindOneClient server terms endregion region Lease Ops WebMethod Description Enumerate all client leases on subnet public DhcpClient EnumLeases DhcpIpAddress server DhcpIpAddress network return AzServerOperat
10. MacBytes this mac InMac ToString private String mac public String Mac get return this mac set String InMac value ToUpper InMac InMac Replace this mac PhysicalAddress Parse InMac ToString public override String ToString return Mac public Byte GetByteArray return PhysicalAddress Parse this mac GetAddressBytes NS DHCP Server Management Objects File DhcpOperations asmx cs Namespace Unf Dhcp Smo WebServices c Jason Rupard School of Computing University of North Florida 7 using System using System Data using System Web using System Collections using System Collections Generic using System Web Services using System Web Services Protocols using System ComponentModel using System Xml Serialization using Unf Dhcp Smo 46 using Unf Dhcp Smo Operations namespace Unf Dhcp Smo WebServices WebService Namespace http www unf edu jrupard dws WebServiceBinding ConformsTo WsiProfiles BasicProfilel_1 public class DhcpOperations System Web Services WebService region Subnet Ops WebMethod Description Enumerate subnets on DHCP server J public DhcpSubnet EnumSubnets DhcpIpAddress server return AzServerOperations EnumSubnets server secured WebMethod Description Create a DHCP subnet on server J XmlInclude typeof DhcpIpRange XmlInclude typ
11. NativeOptData NumElements i iPtr IntPtr NativeOptData Elements ToInt32 i Marshal SizeOf typeof DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure iPtr typeof DHCP_OPTION_DATA_ELEMENT this Data i Marshal PtrToStringAuto element StringOption internal override DHCP_OPTION_DATA ConvertToNative MemManager Mem if this Data Length 0 throw new InvalidOperationException OptionValue No data to convert DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA data new DHCP_OPTION_DATA data NumElements UInt32 this Data Length data Elements Mem AllocArray typeof DHCP_OPTION_DATA_ELEMENT data NumElements IntPtr i per for int i 0 i lt data NumElements i element new DHCP_OPTION_DATA_ELEMENT element OptionType DHCP_OPTION_DATA_TYPE DhcpStringDataOption element StringOption Mem AllocString this Data i iptr IntPtr data Elements ToInt32 i Marshal SizeOf typeof DHCP_OPTION_DATA_ELEMENT Marshal StructureToPtr element iptr false return data endregion static internal class DhcpOptionClassHash public static Hashtable ht new Hashtable static DhcpOptionClassHash ht Add DhcpOptionClassType Dhcp null ht Add DhcpOptionClassType Bootp Default BOOTP Class 61 ht Add DhcpOptionClassType Routing Class NS FF F x7 region Enu
12. R Dynamic Host Configuration Protocol RFC 2132 http tools ietf org html rfc2131 1997 last accessed March 29 2008 Alexander97 Alexander S and R Droms DHCP Options and BOOTP Vendor Extensions RFC 2132 http tools ietf org html rfc2132 1997 last accessed March 29 2008 McPherson06 McPherson D and D Crawford Developing Applications Using Windows Authorization Manager http msdn2 microsoft com en us library aa480244 aspx 2006 last accessed March 29 2008 McPherson04 McPherson D Role Based Access Control for Multi tier Applications Using Authorization Manager http technet2 microsoft com WindowsServer en library 72b55950 86cc 4c7f 8fbf 3063276cd0b61033 mspx 2004 last accessed March 29 2008 Mice amp Men07 Mice and Men DHCP Management Module http www menandmice com solutions modules dhcpmgmt 2007 last access March 29 2008 MSDNO8A MSDN Net Framework http msdn2 microsoft com en us netframework 2008 last accessed March 29 2008 EOF MSDNO8B MSDN ASP NET http msdn2 microsoft com en us netframework aa336522 aspx 2008 last accessed March 29 2008 MSDNO8C MSDN Building WS I Basic Profile Compliant Web Services Using ASP NET 2 0 http msdn2 microsoft com en us library ms230196 VS 80 aspx 2008 last accessed March 29 2008 MSDNO8D MSDN DHCP Server Management API http msdn2 microsoft com en us library aa363376 VS 85 aspx
13. azServer Server server if azServer AccessCheck ServerFindOneClient DhcpSecurityOps GetClientContext DhcpAzOps Read return oneClient else throw new UnauthorizedAccessException ServerFindAl1lClients Access Denied Requires Read on Server cequires read on subnet public static DhcpIpRange EnumPools DhcpIpAddress server DhcpIpAddress network DhcpAzSubnetScope azSubnet new DhcpAzSubnetScope azSubnet Server server azSubnet Subnet network if azSubnet AccessCheck EnumPools DhcpSecurityOps GetClientContext DhcpAzOps Read return ServerOperations EnumPools server network else return null endregion region Lease Ops cequries ipt read public static DhcpClient EnumLeases DhcpIpAddress server DhcpIpAddress network List lt DhcpClient gt allClients ServerOperations EnumLeases server network List lt DhcpClient gt trimedClients new List lt DhcpClient gt TAzClientContext2 ctx DhcpSecurityOps GetClientContext DhcpAzIpRangeScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet network foreach DhcpClient client in allClients azIpRange StartIp client IpAddress if azIpRange AccessCheck EnumLeases ctx DhcpAzOps Read trimedClients Add client return trimedClients ToArray cequires ipt create public static void CreateLease DhcpIpAddress server DhcpClient lease 332 DhcpAzIpRan
14. based on its hardware address to receive the same IP address each time it renews its lease This allows DHCP servers to assign static IP addresses to clients However clients with static IP addresses must still check back with the DHCP server because the options of the lease may require changes DHCP options are network parameters passed from the server to the client devices Alexander97 Option 6 is an example of a DHCP option which refers to an array of DNS server addresses This option will let the client know what the network s DNS addresses are allowing domain name resolution to occur The remainder of this paper will refer to the DHCP subnets leases reservations and options as DHCP objects 1 2 Research Given the deficiencies of the DHCP server there is potential for improvement which led to this research First it needed to be ascertained if anyone else had already produced a remedy for the DHCP server s shortcomings Initial research confirmed the lack of management options The current tools provided by Microsoft include a management console GUI and CLI Technet05 While both fully manage the DHCP server they are not very open which means they do not have standardized interfaces with which potential consumers could manage the server In addition the provided GUI and CLI do not provide any search or authorization capabilities Management tools from the open source community were non existent However there are a couple o
15. mem uint Response NativeMethods DhcpCreateClientInfo server ToString ref info if Response 0 throw new DhcpException Response public void Update DhcpIpAddress server using MemManager mem new MemManager DHCP_CLIENT_INFO info this ConvertToNative mem uint Response NativeMethods DhcpSetClientInfo server ToString ref info if Response 0 throw new DhcpException Response public static void Delete DhcpIpAddress server DhcpSearchInfo term using MemManager mem new MemManager DHCP_SEARCH_INFO sinfo term ConvertToNative mem uint Response NativeMethods DhcpDeleteClientInfo server ToString ref sinfo if Response 0 throw new DhcpException Response public static DhcpClient Get DhcpIpAddress server DhcpSearchInfo term IntPtr iPtr DhcpClient client new DhcpClient using MemManager mem new MemManager DHCP_SEARCH_INFO sinfo term ConvertToNative mem uint Response NativeMethods DhcpGetClientInfo server ToString ref sinfo out iPtr if Response 0 if iPtr IntPtr Zero NativeMethods DhcpRpcFreeMemory iPtr throw new DhcpException Response DHCP_CLIENT_INFO cinfo DHCP_CLIENT_INFO Marshal PtrToStructure iPtr typeof DHCP_CLIENT_INFO client IpAddress new DhcpIpAddress cinfo ClientIpAddress client SubnetMask new DhcpIpAddress cinfo SubnetMask client Name cinfo ClientName c
16. operations that return a set of DHCP objects are trimmed to exclude objects to which the user does not have access For example if a user has read access to a range of IP addresses within a subnet and executes the EnumClients operation the operation would normally return all client leases within that subnet However with security trimming the caller will only receive client leases within the range of IP addresses to which he has been granted read access Furthermore the set of client leases could be empty if the user does not have access to read any leases within a subnet 3 4 1 AzMan The authorization layer of DHCP Web Services uses the Authorization Manager framework AzMan to help implement the unique authorization model developed for the DHCP server When the DHCP Web Services application starts up it loads an authorization data store in the form of an XML file This store contains data describing authorization scopes roles and operations which are created updated and deleted by DHCP Web Services using the AzMan NET classes Scopes are implemented through AzMan with unique string identifiers that give them context Server scope identifier strings were created in the form SRV lt SIP gt where SIP is the DHCP server s IP address Subnet scopes are identified as SRV lt SIP gt SN 18 lt NIP gt where NIP is the network IP address of the subnet IP range scopes are
17. DHCP server DHCP options can be assigned values at three levels of the DHCP server and are hierarchic The three levels are server subnet and reservation If an option s value is set at the server level then subnets and reservations under that server will receive the same option value Option values can be set via the Options node under the server or subnet nodes in the MMC To set a reservation s options right click the reservation select properties and chose the Options tab Some common option and values type are 104 DHCP Option Data Type Example values 003 Router Array of IP addresses 192 168 0 1 006 DNS Servers Array of IP addresses 192 168 0 5 192 168 0 6 015 DNS Domain Name String unf edu See http www faqs org rfcs rfc2132 html for more information on DHCP options There is also a concept of option classes which includes three types DHCP BOOTP and Routing and Remote clients An option can be assigned a value for a specific type of client class For example if the router option was set within the BOOTP class Then only BOOTP client types would receive that router option value when receiving a lease from DHCP server Permissions and Security Trimming Users whom have been granted global administrator rights within DWS will see permission nodes throughout the DWS MMC tree Permission nodes allow administrators to assign various authorizations to sections of the DHCP server to us
18. DHCP_OPTION_DATA_ELEMENT element OptionType DHCP_OPTION_DATA_TYPE DhcpDWordDWordOption element DWordDWordOption LowerWord2 UInt32 this Data i amp OxFFFFFFFF element DWordDWordOption UpperWordl UInt32 this Data i amp OxFFFFFFFF00000000 gt gt 32 iptr IntPtr data Elements ToInt32 i Marshal SizeOf typeof DHCP_OPTION_DATA_ELEMENT Marshal StructureToPtr element iptr false return data public class DhcpOptionDataString DhcpOptionData public String Data public DhcpOptionDataString this Type DhcpOptionDataType StringDataType public DhcpOptionDataString String strings base DhcpOptionDataType StringDataType this Data strings 60 internal DhcpOptionDataString DHCP_OPTION_DATA NativeOptData if NativeOptData NumElements 0 NativeOptData Elements IntPtr Zero throw new ArgumentException DHCP_OPTION_DATA not valid this Type DhcpOptionDataType StringDataType grab first element for type test DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure NativeOptData Elements typeof DHCP_OPTION_DATA_ELEMENT if element OptionType DHCP_OPTION_DATA_TYPE DhcpStringDataOption throw new ArgumentException NativeOptData type not String this Data new String NativeOptData NumElements this Data 0 Marshal PtrToStringAuto element StringOption IntPtr iPtr for int i 1 i lt
19. DHCP_SUBNET_ELEMENT_DATA_V5 element new DHCP_SUBNET_ELEMENT_DATA_V5 switch this Type case DhcpSubnetElementDataType DhcpIpRanges lement ElementType DHCP_SUBNET_ELEMENT_TYPE_V5 DhcpIpRanges reak case DhcpSubnetElementDataType DhcpExcludedIpRanges element ElementType DHCP_SUBNET_ELEMENT_TYPE_V5 DhcpExcludedIpRanges break case DhcpSubnetElementDataType DhcpIpRangesDhcpOnly element ElementType DHCP_SUBNET_ELEMENT_TYPE_V5 DhcpIpRangesDhcpOnly break default throw new DhcpException 1629 oO O element Data Mem AllocStruct dipr return element public class BootpIpRange DhcpIpRange public UInt32 BootpAllocated public UInt32 MaxBootpAllowed public BootpIpRange this MaxBootpAllowed UInt32 MaxValue public BootpIpRange DhcpSubnetElementDataType type base type this MaxBootpAllowed UInt32 MaxValue 78 internal BootpIpRange DHCP_SUBNET_ELEMENT_DATA_V5 nativeElement this Type DhcpSubnetElementDataType nativeElement ElementType HCP_BOOTP_IP_RANGE ipr P_RANGE Marshal PtrToStructure nativeElement Data OOTP_IP_RANGE D DHCP_BOOTP_I B this StartAddress new DhcplIpAddress ipr StartAddress E t see typeof DHCP_ his EndAddress new DhcplIpAddress ipr EndAddress his BootpAllocated ipr BootpAllocated his MaxBootpAllowed ipr MaxBootpAllowed internal override DHCP_SUBNET_ELEMENT_DATA_V5 Conver
20. DWS location outlined in next steps Create Virtual Directory IIS MMC Right click website gt New gt Virtual Directory Alias dws Path dwsroot Access Permissions skip Configure IIS setting for DWS directory right client DWS folder in website tree gt properties Virtual Directory Tab Application Settings Select Create button Execute Permissions Scripts and Executables Application Pool DWSAppPool ASP NET Tab Version 2 0 x Directory Security Tab Configure SSL Certificate Authentication and Access Disable Anonymous Enable Basic Auth Configure Authorization Store Path Edit web config in DWS directory Change AZ_STORE_PATH value to FULL path of dwsroot App_Data DWSAzRoles xml Optional Constrained DWS access Access to DWS can be constrained beyond the built in application authorization model by editing the web config and changing the lt authorization gt tags This can limit accounts from accessing DWS altogether 101 Assign Authorize DWS application global administrator DWS will automatically assign global administrator role to builtin administrators group of the webserver To assign another account this access so they can begin to use DWS follow On webserver start gt run gt azman msc Right click Authorization Manager gt Open Authorization Store Browser to dwsroot App_Data DWSAzRoles xml open DWSAzRoles xml gt DWS gt Role Assignment gt GlobalAdministrator Right click add new account This accoun
21. Data gt name bAllowedClientTypes gt Dhcp SOAP Data gt name Name gt SclientName SOAP Data gt name Comment gt Made via SOAP LITE a my res Sdws gt CreateReservation SserverXML SsubnetXML SrezXML die Sres gt faultstring n if Sres gt fault sub SOAP Transport HTTP Client get_basic_credentials return Suser gt Spass usr bin perl DHCP Web Services Client using SOAP Lite Creates a DHCP Subnet and sets DHCP Option 51 Lease Time 106 BOG c Jason Rupard School of Computing University of North Florida use SOAP Lite trace gt debug use SOAP Lite my dws SOAP Lite gt uri http www unf edu jrupard dws gt proxy https jr1 x DhcpOperations asmx gt on_action sub join http www unf edu jrupard dws S _ 1 my SserverIp 192 168 0 5 my SnetworkIp 192 168 200 64 my S networkMask 255 255 255 192 my S startIp 192 168 200 65 my SendIp 192 168 200 126 Server Info my S serverXML SOAP Data gt name server gt SOAP Data gt value SOAP Data gt name Ip gt SserverlIp i Subnet Info my subnetXML SOAP Data gt name network gt SOAP Data gt value SOAP Data gt name Address gt SOAP Data gt value SOAP Data gt name Ip gt SnetworkIp SOAP Data gt name Mask gt SOAP Data gt value SOAP Data gt name Ip gt SnetworkMask SOA
22. DeleteScope scope null azApp Submit 0 null catch private static Boolean areRolesEmpty IAzScope azScope Boolean flag true foreach IAzRole azRole in azScope Roles if Object azRole MembersName Length 0 flag false FreeCom azRole false if flag break return flag private static void FreeCom object o bool forceGCwait try Tos cat fin Marshal FinalReleaseComOb ject o ch ally o null if forceGCwait GC Collect GC WaitForPendingFinalizers public enum DhcpAzOps Traverse 1 Re Cr Up De NS a Rae Namesp using Syst ad eate date lete Dhcps ace em 2 4 DHCP Server Management Objects ubnet cs Unf Dhcp Smo c Jason Rupard School of Computing University of North Florida using System Collections Generic using System Text using System Runtime InteropServices using Unf namespace public Dhcp Unf D clas blic blic blic blic blic blic blic DHC uin Smo Interop hcp Smo s DhcpSubnet DhcpIpAddress Address DhcpIpAddress Mask String Name String Comment DhcpSubnetState State DhcpSubnet this State DhcpSubnetState Disabled void Create DhcpIpAddress server P_SUBNET_INFO info this ConvertToNative t Response NativeMethods DhcpCreateSubnet server ToString this Addres
23. NET interface to the above software layers Consumers of this layer need not worry about memory management or type specific details of the DHCP server API Instead developers can concentrate on using the SMO for flexible DHCP management at the INET managed code level This layer contains an almost one to one mapping of DHCPSAPI native types and function calls to SMO classes and methods For example the native type DHCP_CLIENT_INFO is mapped to the DhcpClient class in the Unf Dhcp Smo namespace and the DhcpClient Set method maps to the native function DhncpSetClientInfo This technique is extended to all native types and functions in the DHCP server API library The SMO layer is a set of NET classes used to manage a DHCP server The next layer will use these classes to form a set of static DHCP operations suitable for web service consumption afse 3 3 DHCP Server Operations The DHCP Server Operations layer or the Unf Dhcp Smo Operations namespace in the code base is a set of static DHCP operations that facilitate full management of the DHCP server These operations usually combine two or more SMO method calls to complete their task ultimately providing an abstraction to the details of the SMO layer For example the CreateSubnet operation makes three SMO calls one to create the subnet s information in the DHCP database one to create the default address pool of that subnet and one to set
24. ReservediIp resIp r ReservedMac new DhcpMacAddress DhcpSubnetElement se new DhcpSubnetElement se SubnetAddress network 97 DhcpIpAddress DhcpIpAddress se Data DhcpSubnetElementData r se Remove server true public static List lt DhcpReservation gt EnumReservations DhcpIpAddress server DhcpIpAddress network DhcpSubnetElement se new DhcpSubnetElement se SubnetAddress network se Data new DhcpIpReservation DhcpSubnetElementData resArray se EnumAll server List lt DhcpReservation gt ResList new List lt DhcpReservation gt resArray Length DhepClient c DhcpSearchInfo term new DhcpSearchInfo term Type DhcpSearchInfoType IpAddress foreach DhcpIpReservation res in resArray term IpAddress res ReservedIp c DhcpClient Get server term DhcpReservation resinfo new DhcpReservation resinfo Name c Name resinfo Comment c Comment resinfo ReservedIp res ReservedIp resinfo ReservedMac res ReservedMac resinfo bAllowedClientTypes res bAllowedClientTypes ResList Add resinfo return ResList endregion region Option Ops public static void SetOptionValue DhcpIpAddress server DhcpOptionValue value value Set server public static DhcpOptionValue GetOptionValue DhcpIpAddress server UInt32 optionId DhcpOptionClassType classType DhcpOptionScope scope DhcpOptionValue value new DhcpOptionValu
25. SMO Unf Dhcp Smo Interop Platform Invoke Unf Dhcp Smo Interop Figure 1 DHCP Web Services Software Layers In addition to the software layers two web service clients were developed meant to demonstrate the DHCP Web Services The first client written in C NET fully consumes the functionality of DHCP Web Services The second sample client was f De written in PERL on a Linux platform to exhibit the interoperability of DHCP Web Services 3 1 Interop The Interop software layer known in the code base as the namespace Unf Dhcp Smo Interop is the foundation of DHCP Web Services The DHCP server API defines functions structures and enumerations used to manage a DHCP server Because the DHCP server API is in C and this project was written in C NET this layer was created as an interoperability interface between the two This layer can also be referred to as a p invoke wrapper This wrapper defines C prototypes structures and enumerations to mimic its C library counterpart using a NET utility namespace called System Runtime InteropServices Classes within this namespace allow NET managed code to make external calls to C functions which are exported in Dynamic Link Libraries DLLs The namespace contains a Marshal class that facilitates data type conversions to and from both C platform dependent types and NET Framework types This process is known as marshalling The Marshal class als
26. Server server contextScope azServer break case DhcpOptionScopeType Subnet DhcpAzSubnetScope azSubnet new DhcpAzSubnetScope azSubnet Server server azSubnet Subnet scope SubnetIp contextScope azSubnet break case DhcpOptionScopeType Reservation DhcpAzIpRangeScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet scope SubnetIp azIpRange StartIp scope ReservationIp contextScope azIpRange break if contextScope AccessCheck GetOptionValue DhcpSecurityOps GetClientContext DhcpAzOps Read return ServerOperations GetOptionValue server optionId classType scope else return null only requires access to DWS itself public static DhcpOption EnumOptions DhcpIpAddress server DhcpOptionClassType classType DhcpAzServerScope azServer new DhcpAzServerScope azServer Server server if azServer AccessCheck EnumOption DhcpSecurityOps GetClientContext DhcpAzOps Read return ServerOperations EnumOptions server classType else return null 66 endregion NS DHCP Server Management Objects File DhcpAzAccount cs Namespace Unf Dhcp Smo WebServices c Jason Rupard School of Computing University of North Florida y using System namespace Unf Dhcp Smo WebServices public class DhcpAzAccount public String AccountName public DhcpAzRole Role public DhcpAzAccount
27. Server wide Dynamic DNS configurations can be changed by right clicking a server node and selecting properties 103 Search the DHCP server s client lease database right click a server node and select Search DHCP servers added to the DWS MMC will be saved to the MSC file allowing servers to be saved across console shutdowns Subnets DHCP subnets are networks in which connected network devices DHCP clients are served IP and network configurations from DHCP server To create a new subnet Right click server node Create Subnet Name A name for subnet Description A description of subnet Range The range of IP address belonging to subnet will be served IP and network configurations Start IP Start IP address of range that the DHCP server will manage End IP End IP address of range that the DHCP server will manage Mask Network mask of subnet Lease Time Lease time duration of dynamic clients State Refers to state of service for subnet Enabled Subnet is serving client Disabled Subnet is not serving clients DHCP subnets can be changed by right clicking the subnet node and selecting properties Within properties Dynamic DNS DNS tab and BOOTP Advanced tab can be changed Search the subnet s client lease database right click a subnet node and select Search Address Pools Address pools node contains a pool that makes up the subnet s default IP range and zero or more exclusion pools The default pool
28. System Text using System Runtime InteropServices namespace Unf Dhcp Smo Interop internal class MemManager IDisposable public IntPtr AllocStruct Object structure if isDisposed throw new ObjectDisposedException this ToString IntPtr iptr Marshal AllocHGlobal Marshal SizeOf structure Marshal StructureToPtr structure iptr false allocations Add iptr return iptr public IntPtr AllocByteArray Byte bytes if isDisposed throw new ObjectDisposedException this ToString IntPtr iptr Marshal AllocHGlobal bytes Length Marshal Copy bytes 0 iptr bytes Length allocations Add iptr return iptr 81 public IntPtr AllocArray Type type uint arraysize if isDisposed throw new ObjectDisposedException this ToString IntPtr iptr Marshal AllocHGlobal int arraysize Marshal SizeOf type allocations Add iptr return iptr public IntPtr AllocString String str if isDisposed throw new ObjectDisposedException this ToString IntPtr iptr Marshal StringToHGlobalAuto str allocations Add iptr return iptr public void Dispose Dispose true GC SuppressFinalize this protected virtual void Dispose bool disposing if isDisposed clean managed if disposing clean unmanaged Console WriteLine Disposing allocations Count foreach IntPtr i in this allocations Marshal FreeHGlobal i
29. account null azRole Submit 0 null catch COMException ex ERROR User already exists in Role if uint ex ErrorCode 0x800700B7 throw finally FreeCom azRole false finally FreeCom azScope false public static void RemovePermission DhcpAzScope scope DhcpAzRole role String account role IAzScope azScope null Boolean forceGC false try lock _Lock Remove user or group from scope String scopeId scope GenerateAzScopeName azScope DhcpSecurityOps GetAzScope scopeld if azScope null return IAzRole azRole null try azRole azScope OpenRole Enum GetName typeof DhcpAzRole null azRole DeleteMemberName account null azRole Submit 0 null catch COMException ex ERROR element not found if uint ex ErrorCode 0x80070490 throw finally 69 FreeCom azRole false if scope roles now empty remove scope if areRolesEmpty azScope forceGC true DeleteCustomAzScope scopeld finally FreeCom azScope forceGC make limited role at subnet level for a new permission at ip level if scope ScopeType DhcpAzScopeType IpRange DhcpAzIpRangeScope azIpr DhcpAzIpRangeScope scope DhcpAzSubnetScope azSubnet new DhcpAzSubnetScope azSubnet Server azIpr Server azSubnet Subnet azIpr Subnet RemovePermission azSubnet Limited account priv
30. all DHCP options available on server global set of DHCP options public DhcpOption EnumOptions DhcpIpAddress server DhcpOptionClassType classType 49 return AzServerOperations EnumOptions server classType endregion NS DHCP Server Management Objects File DhcpOption cs Namespace Unf Dhcp Smo c Jason Rupard School of Computing University of North Florida y using System using System Collections using System Collections Generic using System Text using System Runtime InteropServices using Unf Dhcp Smo Interop namespace Unf Dhcp Smo public class DhcpOption public UInt32 OptionIld public String Name public String Comment public DhcpOptionDataType DataType public bool isArray public DhcpOption public static DhcpOption EnumAll DhcpIpAddress server DhcpOptionClassType OptionClass UInt32 Response 0 ResumeHandle 0 UInt32 nRead 0 nTotal 0 IntPtr retPtr iPtr List lt DhcpOption gt options new List lt DhcpOption gt DHCP_OPTION nativeOption DHCP_OPTION_ARRAY nativeArray String ClassId DhcpOptionClassHash ht OptionClass as String LOT po 724 Response NativeMethods DhcpEnumOptionsV5 server ToString 0 ClassId null ref ResumeHandle 65536 out retPtr out nRead out nTotal ERROR_NO_MORE_ITEMS if Response 259 break ERROR_MORE_DATA 234 if Response 0 amp amp Response 234 ret
31. allocations Clear isDisposed true MemManager Dispose false protected bool isDisposed false protected List lt IntPtr gt allocations new List lt IntPtr gt NS DHCP Server Management Objects File NativeMethods cs Namespace Unf Dhcp Smo Interop c Jason Rupard School of Computing University of North Florida using System using System Collections Generic using System Text using System Runtime InteropServices using System Net using System Net NetworkInformation namespace Unf Dhcp Smo Interop 82 internal static class NativeMethods region DhcpOptionFunctions DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpEnumOptionsvV5s string ServerlIpAddress UInt32 Flags string ClassName string VendorName ref UInt32 ResumeHandle UInt32 PreferredMaximum out IntPtr Options out UInt32 OptionsRead out UInt32 OptionsTotal DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpGetOptionInfoV5s string ServerlIpAddress UInt32 Flags UInt32 OptionID string ClassName string VendorName out IntPtr OptionInfo endregion region DhcpOptionValueFunctions DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpEnumOptionValuesV5 string ServerlIpAddress UInt32 Flags string ClassName string VendorName ref DHCP_O
32. can be type Dhcp Bootp or Both configured in the subnet properties advance tab Exclusion pools are address ranges within the subnet and mark exclusion IP addresses that should not be served leases by the DHCP server To create a new pool Right click Address Pools node select New Exclusion Range Start IP Start IP address of exclusion pool End IP End IP address of exclusion pool Leases Leases node is mostly a read only node showing information about client leases that have been established within the network via DHCP A client lease can be deleted by right clicking the client lease and selecting delete This node will also show reservations that have been made in the same DHCP subnet and whether the reservation is active or not Reservations The reservation node shows the current IP reservations made within the DHCP subnet To create a new reservation Right click Reservations node select Add Reservation Name Name identifier of client usually the client s hostname IP Address IP address that should be assigned to client MAC Address Hardware address that identifies client to DHCP server Description A description for client Client Type DHCP BOOTP or Both allowed client type for this reservation An IP reservation can be changed by right clicking the reservation and selecting properties DHCP Options DHCP options are network related configurations that are sent to a DHCP client upon receiving a lease from the
33. contextScope azSubnet break case DhcpOptionScopeType Reservation DhcpAzIpRangeScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet value OptionScope SubnetIp azIpRange StartIp value OptionScope ReservationIp contextScope azIpRange break if contextScope AccessCheck SetOptionValue DhcpSecurityOps GetClientContext DhcpAzOps Update ServerOperations SetOptionValue server value else throw new UnauthorizedAccessException SetOptionValue Access Denied cequires update on contexted based scope public static void RemoveOptionValue DhcpIpAddress server DhcpOptionValue value DhcpAzScope contextScope null switch value OptionScope type case DhcpOptionScopeType Server DhcpAzServerScope azServer new DhcpAzServerScope azServer Server server contextScope azServer break case DhcpOptionScopeType Subnet DhcpAzSubnetScope azSubnet new DhcpAzSubnetScope azSubnet Server server azSubnet Subnet value OptionScope SubnetIp contextScope azSubnet break case DhcpOptionScopeType Reservation DhcpAzIpRangeScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet value OptionScope SubnetIp azIpRange StartIp value OptionScope ReservationIp contextScope azIpRange break if contextScope AccessCheck RemoveOptionValue DhcpSecurityOps GetClientContext DhcpAzOps Update ServerOperations
34. filter foreach IAzScope scope in scopes try If DhcpAzIpRangeScope ipr scope Name Contains strSubnetScope new List lt DhcpAzIpRangeScope gt GetAzApplication Scopes azSubnetScope GenerateAzScopeName new Regex s sIPR s d d _ IPR new DhcpAzIpRangeScope ipr Server azSubnetScope Server ipr Subnet azSubnetScope Subnet Match m filter Match scope Name ipr StartIp new DhcpIpAddress m Groups 1 Value ipr EndIp new DhcpIpAddress m Groups 2 Value Trim j ranges Add ipr finally FreeCom scope false return ranges ToArray private static object _Lock new object private static void UpdateAzCache lock _Lock AzAuthorizationStoreClass HttpContext Current Application AZ_STORE_OBJ UpdateCac he null public static DhcpAzAccount IAzScope azScope null 67 GetPermissions DhcpAzScope scope List lt DhcpAzAccount gt accounts new List lt DhcpAzAccount gt j try get scope based on name null if does not exist azScope DhcpSecurityOps GetAzScope scope GenerateAzScopeName if scope doesn t exist create it if azScope null return null foreach IAzRole azRole in azScope Roles if azRole Name Limited continue try foreach String accountName in Object azRole MembersName accounts Add new Dh
35. gt IpAddress gt Ip _ gt MacAddress gt Mac S_ gt Name _ gt LeaseExpires printf 24s 3 1 printf 24s prink n 12s 10s n x24 x12 x12 x10 12s 10s n IpAddress Mac Name LeaseExpires 2s 2s sub SOAP Transport HTTP Client get_basic_credentials return Suser gt Spass 109 VITA Jason Rupard has a Bachelor of Science in Computer and Information Sciences from the University of North Florida 2002 and expects to receive a Master of Science in Computer and Information Sciences from the University of North Florida May 2008 Dr Yap S Chua of the University of North Florida is serving as Jason s project director Jason has been employed since 2005 by the University of North Florida as a systems engineer in the Information Technology Services department Jason s previous jobs included a graduate assistantship with the University of North Florida and a graduate fellowship with the Mayo Clinic While attending the University of North Florida Jason fulfilled several roles of the UNF Chapter of the Association for Computing Machinery ACM from president to web master Additionally he was inducted into the UNF chapters of the honor societies Pi Mu Epsilon and Upsilon Pi Epsilon Jason also worked five years while in college with Outback Steakhouse as a cook Jason s interests include system engineering and system development He has e
36. these features along with the ability to produce creative solutions for future problems making it especially flexible An authorization model which would ultimately add to the adaptability of the DHCP server by allowing delegation of server access and management to multiple users not solely administrators would also prove to be potentially beneficial 1 1 Background DHCP allows IP networked devices clients to obtain unique IP addresses and other network parameters from a DHCP server Droms97 Droms03 Among the most common network parameters are default gateway network mask and DNS server addresses DHCP created a centralized paradigm for IP address and network parameter management allowing administrators to configure and reconfigure these network parameters in one location where DHCP clients communicate to the server and receive new or updated network settings A DHCP server manages IP addresses and configurations for one or more subnets which means clients on those subnets will receive their IP addresses and configurations from that DHCP server IP addresses are allocated dynamically to clients through a lease which has an associated length of time before expiration The client device must check back with the DHCP server to renew its lease before the lease is up at which time the client could receive updated network configurations and a different IP address An IP reservation is a special type of lease that allows a client
37. this SubnetAddress GetUIntAddress ref element if Response 0 throw new DhcpException Response public void Remove DhcpIpAddress server bool force if this SubnetAddress null Data null throw new InvalidOperationException Invalid SubnetElement uint Response 0 using MemManager Mem new MemManager DHCP_SUBNET_ELEMENT_DATA_V5 element this Data ConvertToNative Mem Response NativeMethods DhcpRemoveSubnetElementV5 server ToString this SubnetAddress GetUIntAddress ref element force DHCP_FORCE_FLAG DhcpFullForce DHCP_FORCE_FLAG DhcpNoForce if Response 0 throw new DhcpException Response public DhcpSubnetElementData EnumAll DhcpIpAddress server if this SubnetAddress null Data null throw new InvalidOperationException Invalid SubnetElement DHCP_SUBNET_ELEMENT_INFO_ARRAY_V5 NativeArray List lt DhcpSubnetElementData gt elements new List lt DhcpSubnetElementData gt IntPtr retPtr iPtr UInt32 rHandle 0 OptionsRead 0 OptionsTotal 0 Response 0 for 7 76 Response NativeMethods DhcpEnumSubnetElementsV5 server ToString this SubnetAddress GetUIntAddress DHCP_SUBNET_ELEMENT_TYPE_V5 this Data Type ref rHandle UInt32 MaxValue out retPtr out OptionsRead out OptionsTotal ERROR_NO_MORE_ITEMS if Response 259 break ERROR_MORE_DATA 234 if Response 0 amp amp R
38. were the open framework authorization model and search function However the Interop and SMO layers are also breakthroughs since neither Microsoft another vendor nor the open source community has provided a NET DHCP server management library Extra steps were taken to document the DHCP SMO library so developers could use it in the future without the use of DHCP Web Services However the added authorization and search functions developed are far 94 2 more instrumental in improving the flexibility of Microsoft s DHCP server The authorization paradigm allows delegation of DHCP access rights potentially providing other technical individuals the opportunity to perform tasks in which they have a vested interest This ability could save clients time money and resources which obviously makes authorization a desirable addition to the minimal offerings of Microsoft s management options These options also lack any search operations that clients could use for information gathering security or troubleshooting situations The search function included in DHCP Web Services uses regular expression filters to help fill this gap Because it provides a powerful tool to query the DHCP server s client database this search function provides the flexibility needed by any comprehensive DHCP server management tool set These three innovations have transformed Microsoft s DHCP server from one more suited to a small network to one viable for a la
39. 5 DhcpExcludedIpRanges case DHCP_SUBNET_ELEMENT_TYPE_V5 DhcpIpRangesDhcpOnly return new DhcpIpRange nativeElement case DHCP_SUBNET_ELEMENT_TYPE_V5 DhcpIpRangesBootpOnly case DHCP_SUBNET_ELEMENT_TYPE_V5 DhcpIpRangesDhcpBootp return new BootpIpRange nativeElement default 71 throw new NotImplementedException SubnetElementData Type nativeElement ElementType public class DhcpIpRange DhcpSubnetElementData public DhcpIpAddress StartAddress public DhcpIpAddress EndAddress public DhcpIpRange public DhcpIpRange DhcpSubnetElementDataType type base type internal DhcpIpRange DHCP_SUBNET_ELEMENT_DATA_V5 nativeElement this Type DhcpSubnetElementDataType nativeElement ElementType DHCP_IP_RANGE ipr DHCP_IP_RANGE Marshal PtrToStructure nativeElement Data typeof DHCP_IP_RANGE this StartAddress new DhcpIpAddress ipr StartAddress this EndAddress new DhcpIpAddress ipr EndAddress internal override DHCP_SUBNET_ELEMENT_DATA_V5 ConvertToNative MemManager Mem if this StartAddress null throw new InvalidOperationException DhcpIpRange StartAddress is null if this EndAddress null throw new InvalidOperationException DhcpIpRange EndAddress is null DHCP_IP_RANGE dipr new DHCP_IP_RANGE dipr StartAddress this StartAddress GetUIntAddress dipr EndAddress this EndAddress GetUIntAddress
40. ANGE_EXTENDED 20024 iption The specified IP address range extension is too small The esses in the extension must be a multiple of 32 HCP_RANGE_EXTENSION_TOO_SMALL 20025 ption An attempt was made to extend the IP address range to a value pecified backward extension The number of addresses in the extension HCP_WARNING_RANGE_EXTENDED_LESS 20026 more informati ERROR Descri D i s iple of 32 D i ption The DHCP database needs to be upgraded to a newer format For on refer to the DHCP server event log DHCP_JET_CONV_REQUIRED 20027 Descr ERROR iption The format of the bootstrap protocol file table is incorrect DHCP_SERVER_INVALID_BOOT_FILE_TABLE 20028 Descr is unrecognize ERROR iption A boot file name specified in the bootstrap protocol file table d or invalid HCP_SERVER_UNKNOWN_BOOT_FILE_NAME 20029 ERROR Descri ption The specified superscope name is too long HCP_SUPER_SCOPE_NAME_TOO_LONG 20030 ERROR Descri ption The specified IP address is already in use HCP_IP_ADDRESS_IN_USE 20032 Descr ERROR HCP_LOG_FILE_PATH_TOO_LONG 20033 administered b ERROR interface list server ERROR Descr JET97 For m ERROR Descri Descri ption The DHCP server received a request for a valid IP address not the server HCP_UNSUPPORTED_CLIENT 20034 ption The DHCP server failed to receive a notification w
41. Address HardwareAddress Name NS DHCP Server Management Objects File DhcpException cs Namespace Unf Dhcp Smo c Jason Rupard School of Computing University of North Florida 7 using System using System Collections Generic using System Text using System ComponentModel using Unf Dhcp Smo Interop namespace Unf Dhcp Smo public class DhcpException ApplicationException private uint DhcpErrCode private bool isDhcpErr true public DhcpException uint code DhcpErrCode code if Enum IsDefined typeof DhcpsapiErrorType code isDhcpErr false public override string Message get if isDhcpErr return DhcpsapiError GetDesc DhcpsapiErrorType DhcpErrCode else Win32Exception ex new Win32Exception int DhcpErrCode return ex Message NS DHCP Server Management Objects File DhcplIpAddress cs Namespace Unf Dhcp Smo c Jason Rupard School of Computing University of North Florida using System using System Collections Generic using System Text using System Text RegularExpressions 44 using System Net namespace Unf Dhcp Smo public class DhcpIpAddress public DhcpIpAddress this ip IPAddress Any ToString public DhcpIpAddress String IpString this Ip IpString public DhcpIpAddress UInt32 IpUInt this Ip DhcpIpAddress UInt2Str IpUInt NS O String ip p
42. DYNAMIC HOST CONFIGURATION PROTOCOL WEB SERVICES by Jason Rupard A project submitted to the School of Computing in partial fulfillment of the requirements for the degree of Master of Science in Computer and Information Sciences UNIVERSITY OF NORTH FLORIDA SCHOOL OF COMPUTING April 2008 Copyright 2008 by Jason Rupard School of Computing University of North Florida All rights reserved Reproduction in whole or in part in any form requires the prior written permission of Jason Rupard or designated representative Liis The project Dynamic Host Configuration Protocol Web Services submitted by Jason Rupard in partial fulfillment of the requirements for the degree of Master of Science in Computer and Information Sciences has been Approved by Date Yap S Chua Project Director Charles N Winton Graduate Director of the School of Computing Judith L Solano Director of the School of Computing iil ACKNOWLEDGEMENT I want to thank Dr Yap S Chua for all his extra time and commitment in helping me over the last several years I would also like to thank my family especially my wife Regeana whose support and encouragement have helped me complete my Masters work iv CONTENTS List f Tables aieia snae nadine N ea ERE E AE E needa vii List Of FIgUrE Snip n e E A EER EE E R ee ee viii PADS WCAC Uy EEEE ES A EE E ES ix Chapter 1 IMpetUS mennt nE da R TRR a R 1 EL Backgroundecn
43. Dhcp Smo WebServices x c Jason Rupard School of Computing University of North Florida 7 using System using System Configuration using System Collections Generic using System Web using System Web Security using System Text RegularExpressions using System Runtime InteropServices using Microsoft Interop Security AzRoles using System Security Principal namespace Unf Dhcp Smo WebServices public class DhcpSecurityOps public static void Init IAzApplication2 AzManApp AzAuthorizationStoreClass AzManStore AzManStore new AzAuthorizationStoreClass j 65 AzManStore Initialize 0 ConfigurationManager AppSettings AZ_STORE_PATH null AzManApp AzManStore OpenApplication2 ConfigurationManager AppSettings AZ_APP_NAME null HttpContext Current Application AZ_STORE_OBJ AzManStore HttpContext Current Application AZ_APP_OBJ AzManApp private static IAzApplication2 GetAzApplication return IAzApplication2 HttpContext Current Application AZ_APP_OBJ public static IAzClientContext2 GetClientContext WindowsIdentity wid WindowsIdentity HttpContext Current User Identity IntPtr tokenPtr wid Token return IAzClientContext2 GetAzApplication InitializeClientContextFromToken ulong tokenPtr 0 public static Boolean isAdmin return HttpContext Current User IsInRole BUILTIN Administrators isAzGlobalAdmin private static Boo
44. E ScopeType FieldOffset 4 public UInt32 SubnetScopelInfo FieldOffset 4 public DHCP_RESERVED_SCOPE ReservedScopelInfo FieldOffset 4 public IntPtr GlobalScopelInfo endregion 87 region DhcpSearchIinfo StructLayout LayoutKind Explicit Size 12 internal struct DHCP_SEARCH_INFO FieldOffset 0 public DHCP_SEARCH_INFO_TYPE SearchType FieldOffset 4 public DHCP_CLIENT_UID ClientHardwareAddress FieldOffset 4 public UInt32 ClientIpAddress FieldOffset 4 public IntPtr ClientName endregion region DhcpStructs StructLayout LayoutKind Sequential CharSet CharSet Unicode internal struct DHCP_SUBNET_INFO public UInt32 SubnetAddress public UInt32 SubnetMask public String SubnetName public String SubnetComment public DHCP_HOST_INFO PrimaryHost public DHCP_SUBNET_STATE SubnetState StructLayout LayoutKind Sequential internal struct DHCP_IP_RESERVATION_V4 public UInt32 ReservedIpAddress public IntPtr ReservedForClient DHCP_CLIENT_UID public byte bAllowedClientTypes StructLayout LayoutKind Sequential internal struct DHCP_BOOTP_IP_RANGE public UInt32 StartAddress public UInt32 EndAddress public UInt32 BootpAllocated public UInt32 MaxBootpAllowed A ULONG is a unsigned long in win32 a long is 32bits A ulong in c is 64bits StructLayout LayoutKind Sequential internal struct DHCP_IP_RANGE pub
45. ENT 20084 Description The specified reservation is not present in Active Directory ERROR_DDS_RESERVATION_NOT_PRESENT 20085 i i D i i D a Description The specified reservation conflicts with another reservation ve Directory J DS_RESERVATION_CONFLICT 20086 ption The specified IP address range conflicts with another IP range ve Directory J DS_POSSIBLE_RANGE_CONFLICT 20087 ption The specified IP address range is not present in Active ERROR_ Descr ERROR_ Descr ERROR_DDS_RANGE_DOES_NOT_EXIST 20088 internal static class DhcpsapiError public static String GetDesc DhcpsapiErrorType e System Reflection FieldInfo EnumInfo e GetType GetField e ToString System ComponentModel DescriptionAttribute EnumAttributes System ComponentModel DescriptionAttribute EnumInfo GetCustomAttributes typeof Syst em ComponentModel DescriptionAttribute false NS t HF OF if EnumAttributes Length gt 0 return EnumAttributes 0 Description return DHCPSAPI Error Unknown endregion DHCP Server Management Objects File ServerOperations cs Namespace Unf Dhcp Smo Operations c Jason Rupard School of Computing University of North Florida using System using System Collections Generic using System Text using Unf Dhcp Smo namespace Unf Dhcp Smo Operations 93 public static class ServerOperations regi
46. IIS web server hosting DWS application dhcpserver Hostname of existing Windows 2003 DHCP server serviceaccount Local or Domain user account used as identity for the DWS application pool webserver and also authorized as a DHCP Administrator dhcpserver Examples domain user localhost user domain Active Directory Domain localhost In a non domain install scenario this is the server that hosts the DHCP _and_ the DWS application dwsroot Location of DHCP Web Services application Examples C dws C inetpub wwwroot dws Systems Architecture Web Server on DHCP Server Single Server Deployment The IIS web server and DHCP server are located on the same machine This scenario has its advantage when the machine is not deployed in an Active Directory domain Local accounts can be used as serviceaccount and end user client authorizations Separate Web and DHCP Server The IIS web server is deployed on a separate machine than the existing DHCP server Domain accounts must be used as the serviceaccount and end user client authorizations in this scenario Requirements Windows Server 2003 SP1 or greater Microsoft NET 2 0 IIS 6 0 with ASP NET 2 0 enabled Installation Installation begins by verifying ASP NET 2 0 is installed properly on webserver then setting up serviceaccount rights and creating an application pool for DWS Finally choose a location to copy DWS application dwsroot and configure IIS settings for DWS DWS will use ba
47. ION_DATA not valid 59 this Type DhcpOptionDataType DWordDWordType grab first element for type test DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure NativeOptData Elements typeof DHCP_OPTION_DATA_ELEMENT if element OptionType DHCP_OPTION_DATA_TYPE DhcpDWordDWordOption throw new ArgumentException NativeOptData type not DWORDDWORD this Data new UInt64 NativeOptData NumElements this Data 0 UInt64 element DWordDWordOption UpperWordl lt lt 32 element DWordDWordOption LowerWord2 IntPtr iPtr for int i 1 i lt NativeOptData NumElements i iPtr IntPtr NativeOptData Elements ToInt32 i Marshal SizeOf typeof DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure iPtr typeof DHCP_OPTION_DATA_ELEMENT this Data i UInt64 element DWordDWordOption UpperWordl lt lt 32 element DWordDWordOption LowerWord2 internal override DHCP_OPTION_DATA ConvertToNative MemManager Mem if this Data Length 0 throw new InvalidOperationException OptionValue No data to convert DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA data new DHCP_OPTION_DATA data NumElements UInt32 this Data Length data Elements Mem AllocArray typeof DHCP_OPTION_DATA_ELEMENT data NumElements IntPtr gtr for int i 0 i lt data NumElements i element new
48. MSC file When new profiles and servers are added the MMC will save the associated connection data within its MSC file The DWS MMC can manage any DHCP server accessible through DWS Profiles A profile contains a user account ID and a DHCP Web Services connection URL This allows DWS MMC the ability to support multiple user accounts within one console document Once a profile is created it will be saved to the MSC file when the DWS MMC is closed thus allowing profile data to be saved across console shutdowns To create a new DWS profile Right click the DWS root node and select Create Profile Profile Name Identifying name of profile DWS URL The directory URL of DHCP Web Services for example the value of URL would be https server dws if the URL path containing DhcpOperations asmx and DhcpSecurity asmx files Username User account authorized to use DWS Domain User s Active Directory domain DHCP Servers Once a profile is created management of one or more DHCP server can begin The set of DHCP servers DWS can manage depends on the installation and setup of DWS itself See DWS Install document Also the user account assigned in the profile must have some authorizations set for the DHCP Server See Permissions section otherwise the user may not see any subnets once they add a DHCP server to the MMC To add a DHCP server Right click profile node Manage DHCP Server DHCP Server IP IP address of DHCP server to manage
49. P Data gt name Name gt Made from Perl Lite SOAP Data gt name Comment gt w00t SOAP Data gt name State gt Disabled i Range Info my S rangeXML SOAP Data gt name ipRange gt SOAP Data gt value SOAP Data gt name Type gt DhcpIpRangesDhcpOnly SOAP Data gt name StartAddress gt SOAP Data gt value SOAP Data gt name Ip gt SstartIp SOAP Data gt name EndAddress gt SOAP Data gt value SOAP Data gt name Ip gt SendIp i Lease Time my SoptValue51XML SOAP Data gt name value gt SOAP Data gt value SOAP Data gt name OptionId gt 51 gt type unsignedInt SOAP Data gt name ClassType gt Dhcp SOAP Data gt name OptionData gt SOAP Data gt value SOAP Data gt name Type gt DWordType SOAP Data gt name Data gt SOAP Data gt value SOAP Data gt name unsignedInt gt 3660 gt attr xsi type gt DhcpOptionDataDword SOAP Data gt name OptionScope gt SOAP Data gt value SOAP Data gt name type gt Subnet SOAP Data gt name SubnetIp gt SOAP Data gt value SOAP Data gt name Ip gt S networkIp my res dws gt CreateSubnet serverXML subnetXML rangeXML die res gt faultstring n if res gt fault res dws gt SetOptionValue serverXxML SoptValue51XML 107 die Sres gt faultstring n if Sres gt fau
50. PTION_SCOPE_INFO ScopelInfo ref UInt32 ResumeHandle UInt32 PreferredMaximum out IntPtr OptionValues out UInt32 OptionsRead out UInt32 OptionsTotal DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpRemoveOptionValueV5 string ServerIpAddress UInt32 Flags UInt32 OptionID string ClassName string VendorName ref DHCP_OPTION_SCOPE_INFO ScopelInfo DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpSetOptionValueV5 string ServerlIpAddress UInt32 Flags UInt32 OptionID string ClassName string VendorName ref DHCP_OPTION_SCOPE_INFO ScopelInfo ref DHCP_OPTION_DATA OptionValue DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpGetOptionValueV5 string ServerlIpAddress UInt32 Flags UInt32 OptionID string ClassName string VendorName ref DHCP_OPTION_SCOPE_INFO ScopelInfo out IntPtr OptionValue 83 endregion region DhcpSubnetElementFunctions DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpRemoveSubnetElementV5 string ServerIpAddress UInt32 SubnetAddress ref DHCP_SUBNET_ELEMENT_DATA_V5 RemoveElementInfo DHCP_FORCE_FLAG ForceFlag DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpAddSubnetElementV5 string ServerlIpAddress UInt32 SubnetAddress ref DHCP_
51. Ptr IntPtr Zero if retPtr IntPtr Zero NativeMethods DhcpRpcFreeMemory retPtr throw new DhcpException Response work DhcpOption opt nativeArray DHCP_OPTION_ARRAY Marshal PtrToStructure retPtr typeof DHCP_OPTION_ARRAY 50 for int i 0 i lt nativeArray NumElements i iPtr IntPtr nativeArray Elements ToInt32 i Marshal SizeOf typeof DHCP_OPTION nativeOption DHCP_OPTION Marshal PtrToStructure iPtr typeof DHCP_OPTION opt DhcpOption ConvertFromNative nativeOption if opt null options Add opt free on last successful call if Response 0 NativeMethods DhcpRpcFreeMemory retPtr return options ToArray internal static DhcpOption ConvertFromNative DHCP_OPTION nativeOption DhcpOption option new DhcpOption ansupported options DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure nativeOption DefaultValue Elements typeof DHCP_OPTION_DATA_ELEMENT if element OptionType DHCP_OPTION_DATA_TYPE DhcpBinaryDataOption element OptionType DHCP_OPTION_DATA_TYPE DhcpEncapsulatedDataOption I element OptionType DHCP_OPTION_DATA_TYPE DhcpIpv6AddressOption return null option DataType DhcpOptionDataType element OptionType option OptionId nativeOption OptionID option Name nativeOption OptionName option Comment nativeOption OptionComment option
52. Ptr typeof DHCP_OPTION_VALUBE this OptionData DhcpOptionData CovertFromNative NativeOptVal Value public static DhcpOptionValue EnumAll DhcpIpAddress Server DhcpOptionClassType OptionClass DhcpOptionScope Scope DHCP_OPTION_VALUE NativeOptionValue IntPtr retPtr iPtr DHCP_OPTION_VALUE_ARRAY NativeOptVArray List lt DhcpOptionValue gt ovList new List lt DhcpOptionValue gt DhcpOptionValue ov Get Scope Setting DHCP_OPTION_SCOPE_INFO NativeScopeInfo Scope ConvertToNative j String ClassId DhcpOptionClassHash ht OptionClass as String UInt32 rHandle 0 OptionsRead 0 OptionsTotal 0 Response 0 for 7 7 Response NativeMethods DhcpEnumOptionValuesV5 Server ToString 0 ClassId null ref NativeScopeInfo ref rHandle 65536 out retPtr out OptionsRead out OptionsTotal ERROR_NO_MORE_ITEMS if Response 259 break ERROR_MORE_DATA 234 if Response 0 amp amp Response 234 retPtr IntPtr Zero if retPtr IntPtr Zero NativeMethods DhcpRpcFreeMemory retPtr throw new DhcpException Response NativeOptVArray DHCP_OPTION_VALUE_ARRAY Marshal PtrToStructure retPtr typeof DHCP_OPTION_VALUE_ARRAY for int i 0 i lt NativeOptVArray NumElements i iPtr IntPtr NativeOptVArray Elements ToInt32 i Marshal SizeOf typeof DHCP_OPTION_VALUE 53 NativeOptionValue DHCP_OPTION_VALUE Marshal PtrToStructure iPtr typ
53. RegEx get return macRegEx ToString set if String IsNullOrEmpty value macRegEx null else macRegEx new Regex value RegexOptions IgnoreCase RegexOptions Compiled private Regex nameRegEx public String NameRegEx get return nameRegEx ToString set if String IsNullOrEmpty value nameRegEx null else nameRegEx new Regex value RegexOptions IgnoreCase RegexOptions Compiled public DhcpClientFilter public bool Filter DhcpClient c if nameRegEx null amp amp ipRegEx null amp amp macRegEx null return false if nameRegEx null nameRegEx IsMatch c Name amp amp ipRegEx null ipRegEx IsMatch c IpAddress ToString amp amp macRegEx null macRegEx IsMatch c MacAddress ToString return true return false NS O DHCP Server Management Objects File DhcpSecurity asmx cs Namespace Unf Dhcp Smo WebServices 263 c Jason Rupard School of Computing University of North Florida using System using System Data using System Web using System Collections using System Web Services using System Web Services Protocols using System ComponentModel using System Xml Serialization using Microsoft Interop Security AzRoles namespace Unf Dhcp Smo WebServices WebService Namespace http www unf edu jrupard dws WebServiceBinding ConformsTo WsiProfiles BasicPro
54. RemoveOptionValue server value else throw new UnauthorizedAccessException RemoveOptionValue Access Denied cequires read on contexted based scope public static DhcpOptionValue EnumOptionValues DhcpIpAddress server DhcpOptionClassType classType DhcpOptionScope scope DhcpAzScope contextScope null switch scope type case DhcpOptionScopeType Server DhcpAzServerScope azServer new DhcpAzServerScope azServer Server server contextScope azServer break case DhcpOptionScopeType Subnet DhcpAzSubnetScope azSubnet new DhcpAzSubnetScope 335e azSubnet Server server azSubnet Subnet scope SubnetIp contextScope azSubnet break case DhcpOptionScopeType Reservation DhcpAzIpRangeScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet scope SubnetIp azIpRange StartIp scope ReservationIp contextScope azIpRange break if contextScope AccessCheck EnumOptionValues DhcpSecurityOps GetClientContext DhcpAzOps Read return ServerOperations EnumOptionValues server classType scope else return null cequires read on contexted based scope public static DhcpOptionValue GetOptionValue DhcpIpAddress server UInt32 optionId DhcpOptionClassType classType DhcpOptionScope scope DhcpAzScope contextScope null switch scope type case DhcpOptionScopeType Server DhcpAzServerScope azServer new DhcpAzServerScope azServer
55. SUBNET_ELEMENT_DATA_V5 AddElementInfo DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpEnumSubnetElementsvV5 string ServerlIpAddress UInt32 SubnetAddress DHCP_SUBNET_ELEMENT_TYPE_V5 EnumElementType ref UInt32 ResumeHandle UInt32 PreferredMaximum out IntPtr EnumElementinfo out UInt32 ElementsRead out UInt32 ElementsTotal endregion region DhcpClientFunctions DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpDeleteClientInfo string ServerlIpAddress ref DHCP_SEARCH_INFO SearchInfo DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpGetClientInfo String ServerlIpAddress ref DHCP_SEARCH_INFO SearchInfo out IntPtr ClientInfo DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpSetClient Info string ServerlIpAddress ref DHCP_CLIENT_INFO ClientInfo DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpCreateClientInfo string ServerIpAddress ref DHCP_CLIENT_INFO ClientInfo DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpEnumSubnetClients string ServerlIpAddress UInt32 SubnetAddress ref UInt32 ResumeHandle UInt32 PreferredMaximum out IntPtr ClientInfo out UInt32 ElementsRead out UInt32 ElementsTotal endregion region Dh
56. atabase For on about this error please look at the DHCP server event log ERROR_DHCP_JET_ERROR 20013 ption The specified client already exists in the database HCP_CLIENT_EXISTS 20014 ption The DHCP server received an invalid message HCP_INVALID_DHCP_MESSAGE 20015 Descr ERROR ption The DHCP server received an invalid message from the client HCP_INVALID_DHCP_CLIENT 20016 Descr Descr ERROR_ Descr ERROR_ Descr ERROR ption The DHCP server is currently paused J ption The specified DHCP client is not a reserved client HCP_NOT_RESERVED_CLIENT 20018 ption The specified DHCP client is a reserved client HCP_RESERVED_CLIENT 20019 ption The specified IP address range is too small J HCP_RANGE_TOO_SMALL 20020 Descr server Descr client Descr range or is in Descr range Descr number of addr ERROR Descri less than the must be a mult ERROR i D I D i D i ERROR_DHCP_SERVICE_PAUSED 20017 a D a D i D F ption The specified IP address range is already defined on the DHCP ERROR_DHCP_IPRANGE_EXISTS 20021 iption The specified Reservation is currently taken by another ERROR_DHCP_RESERVEDIP_EXISTS 20022 iption The specified IP address range either overlaps with an existing valid ERROR_DHCP_INVALID_RANGE 20023 iption The specified IP address range is an extension of an existing ERROR_DHCP_R
57. ate static void RemovePermission DhcpAzScope scope String role String account IAzScope azScope null Boolean forceGC false try lock _Lock Remove user or group from scope String scopeId scope GenerateAzScopeName azScope DhcpSecurityOps GetAzScope scopeld if azScope null return IAzRole azRole null EY azRole azScope OpenRole role null azRole DeleteMemberName account null azRole Submit 0 null catch COMException ex ERROR element not found if uint ex ErrorCode 0x80070490 throw finally FreeCom azRole false if scope roles now empty remove scope if areRolesEmpty azScope forceGC true DeleteCustomAzScope scopeld 70 finally FreeCom azScope forceGC public static void RemoveAzSubnetAzIpRanges DhcpAzSubnetScope azSubnetScope DhcpAzIpRangeScope childrenScopes EnumAzIpRanges azSubnetScope lock _Lock delete subnet az DeleteCustomAzScope azSubnetScope GenerateAzScopeName delete child ipr az foreach DhcpAzIpRangeScope scope in childrenScopes DeleteCustomAzScope scope GenerateAzScopeName public static void AddGlobalPermission DhcpAzGlobalRole globalRole String account lock _Lock IAzRole azRole null try add account to role if account already exists COMException is throw ErrorCode 0x800700B7 Add members to roles in sc
58. az24scfc VS 80 aspx Examples Terms Patterns Results IP 4192 168 2 Client leases that contain Mac D8 first 3 bytes 192 168 2 AND Name their MAC address ends with byte D8 IP Client leases containing Mac hostnames ending in unf edu Name A unf edu 105 APPENDIX D Perl Client Samples usr bin perl DHCP Web Services Client using SOAP Lite Creates a DHCP Reservation c Jason Rupard School of Computing University of North Florida use SOAP Lite trace gt debug use SOAP Lite my dws SOAP Lite gt uri http www unf edu jrupard dws gt proxy https jrl1 x DhcpOperations asmx gt on_action sub join http www unf edu jrupard dws _ 1 my SserverIp 192 168 0 5 my SnetworkIp 192 168 200 64 my SresIp 192 168 200 70 my S resMac 0000302010A0 my S clientName MyClientResHostName my S serverXML SOAP Data gt name server gt SOAP Data gt value SOAP Data gt name Ip gt SserverlIp i my S subnetXML SOAP Data gt name network gt SOAP Data gt value SOAP Data gt name Ip gt SnetworkIp i my rezXML SOAP Data gt name res gt SOAP Data gt value SOAP Data gt name ReservedIp gt SOAP Data gt value SOAP Data gt name Ip gt SresIp SOAP Data gt name ReservedMac gt SOAP Data gt value SOAP Data gt name Mac gt SresMac SOAP
59. ccessCheck DeleteReservation DhcpSecurityOps GetClientContext DhcpAzOps Delete ServerOperations DeleteReservation server network resIp else throw new UnauthorizedAccessException DeleteReservation Access Denied requires ip read public static DhcpReservation EnumReservations DhcpIpAddress server DhcpIpAddress network List lt DhcpReservation gt allRezz ServerOperations EnumReservations server network List lt DhcpReservation gt trimedRezz new List lt DhcpReservation gt TAzClientContext2 ctx DhcpSecurityOps GetClientContext DhcpAzIpRangeScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet network foreach DhcpReservation rez in allRezz azIpRange StartIp rez ReservedIp if azIpRange AccessCheck EnumReservations ctx DhcpAzOps Read trimedRezz Add rez return trimedRezz ToArray endregion region Option Ops cequires update on contexted based scope public static void SetOptionValue DhcpIpAddress server DhcpOptionValue value DhcpAzScope contextScope null switch value OptionScope type case DhcpOptionScopeType Server DhcpAzServerScope azServer new DhcpAzServerScope azServer Server server contextScope azServer break case DhcpOptionScopeType Subnet DhcpAzSubnetScope azSubnet new DhcpAzSubnetScope 34 azSubnet Server server azSubnet Subnet value OptionScope SubnetIp
60. count GlobalRole account AccountName WebMethod Description Enumerate global accounts and their roles in DHCP authorization database public DhcpAzGlobalAccount GetGlobalPermissions if DhcpSecurityOps isAdmin throw new UnauthorizedAccessException AdminAccessErr return DhcpSecurityOps GetGlobalPermissions 64 WebMethod Description Remove account with global role from DHCP authorization database public void RemoveGlobalPermission DhcpAzGlobalAccount account if DhcpSecurityOps isAdmin throw new UnauthorizedAccessException AdminAccessErr DhcpSecurityOps RemoveGlobalPermission account GlobalRole account AccountName WebMethod Description Enumerate authorization IP ranges in DHCP authorization database public DhcpAzIpRangeScope EnumAzIpRanges DhcpAzSubnetScope scope if DhcpSecurityOps isAdmin throw new UnauthorizedAccessException AdminAccessErr return DhcpSecurityOps EnumAzIpRanges scope WebMethod Description Check if current user belongs to global administrator role in DHCP authorization database public Boolean isAdmin return DhcpSecurityOps isAdmin endregion region Const private const String AdminAccessErr Must be in the Global Administrator Role or BUILTIN Administrators Local Server Group endregion NS DHCP Server Management Objects File DhcpSecurityOps cs Namespace Unf
61. cpAzAccount accountName DhcpAzRole Enum Parse typeof DhcpAzRole azRole Name true finally FreeCom azRole false finally FreeCom azScope false if accounts Count 0 return null return accounts ToArray public static void AddPermission DhcpAzScope scope DhcpAzRole role String account make limited role at subnet level for a new permission at ip level if scope ScopeType DhcpAzScopeType IpRange DhcpAzIpRangeScope azIpr DhcpAzIpRangeScope scope DhcpAzSubnetScope azSubnet new DhcpAzSubnetScope azSubnet Server azIpr Server azSubnet Subnet azIpr Subnet AddPermission azSubnet Limited account String strRole Enum GetName typeof DhcpAzRole role AddPermission scope strRole account private static void AddPermission DhcpAzScope scope String role String account IAzScope azScope null try lock _Lock does scope exist if not create check to see if real String scopeId scope GenerateAzScopeName get scope based on name null if does not exist azScope DhcpSecurityOps GetAzScope scopeld 68 if scope doesn t exist create it if azScope null azScope DhcpSecurityOps CreateCustomAzScope scopeld IAzRole azRole null try add account to role if account already exists COMException is throw ErrorCode 0x800700B7 azRole azScope OpenRole role null azRole AddMemberName
62. cpAzOps Read trimedClients Add client return trimedClients ToArray cequires read on iprt public static DhcpClient SubnetFindOneClient DhcpIpAddress server DhcpIpAddress network DhcpClientFilter terms DhcpClient oneClient ServerOperations SubnetFindOneClient server network terms DhcpAzIpRangeScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet network azIpRange StartIp oneClient IpAddress if azIpRange AccessCheck SubnetFindOneClient DhcpSecurityOps GetClientContext DhcpAzOps Read return oneClient else return null crequires read on server public static DhcpClient ServerFindAl1lClients DhcpIpAddress server DhepClientFilter terms List lt DhcpClient gt allClients ServerOperations ServerFindAllClients server terms TAzClientContext2 ctx DhcpSecurityOps GetClientContext DhcpAzServerScope azServer new DhcpAzServerScope azServer Server server z3 if azServer AccessCheck ServerFindAllClients ctx DhcpAzOps Read return allClients ToArray j else throw new UnauthorizedAccessException ServerFindAl1lClients Access Denied Requires Read on Server cequires read on server public static DhcpClient ServerFindOneClient DhcpIpAddress server DhepClientFilter terms DhcpClient oneClient ServerOperations ServerFindOneClient server terms DhcpAzServerScope azServer new DhcpAzServerScope
63. cpOptionDataType WordType public DhcpOptionDataWord UInt16 words base DhcpOptionDataType WordType this Data words internal DhcpOptionDataWord DHCP_OPTION_DATA NativeOptData if NativeOptData NumElements 0 NativeOptData Elements IntPtr Zero throw new ArgumentException DHCP_OPTION_DATA not valid this Type DhcpOptionDataType WordType grab first element for type test 57 DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure NativeOptData Elements typeof DHCP_OPTION_DATA_ELEMENT if element OptionType DHCP_OPTION_DATA_TYPE DhcpWordOption throw new ArgumentException NativeOptData type not WORD this Data new UInt16 NativeOptData NumElements this Data 0 element WordOption IntPtr iPtr for int i 1 i lt NativeOptData NumElements i iPtr IntPtr NativeOptData Elements ToInt32 i Marshal SizeOf typeof DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure iPtr typeof DHCP_OPTION_DATA_ELEMENT this Data i element WordOption internal override DHCP_OPTION_DATA ConvertToNative MemManager Mem if this Data Length 0 throw new InvalidOperationException OptionValue No data to convert DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA data new DHCP_OPTION_DATA data NumElements UInt32 this Data Length data Elements Mem AllocArray typ
64. cpOptionDataWord NativeOptData default throw new NotImplementedException OptionData Type element OptionType public class DhcpOptionDataByte DhcpOptionData public Byte Data public DhcpOptionDataByte this Type DhcpOptionDataType ByteType public DhcpOptionDataByte Byte bytes base DhcpOptionDataType ByteType this Data bytes internal DhcpOptionDataByte DHCP_OPTION_DATA NativeOptData if NativeOptData NumElements 0 NativeOptData Elements IntPtr Zero throw new ArgumentException DHCP_OPTION_DATA not valid this Type DhcpOptionDataType ByteType grab first element for type test DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure NativeOptData Elements typeof DHCP_OPTION_DATA_ELEMENT 55 if element OptionType DHCP_OPTION_DATA_TYPE DhcpByteOption throw new ArgumentException NativeOptData type not Byte this Data new Byte NativeOptData NumElements this Data 0 element ByteOption IntPtr iPtr for int i 1 i lt NativeOptData NumElements i iPtr IntPtr NativeOptData Elements ToInt32 i Marshal SizeOf typeof DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure iPtr typeof DHCP_OPTION_DATA_ELEMENT this Data i element ByteOption internal override DHCP_OPTION_DATA ConvertToNative MemManager Mem
65. cpSubnetFunctions DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpSetSubnet Info string ServerlIpAddress UInt32 SubnetAddress ref DHCP_SUBNET_INFO SubnetInfo 84 DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpDeleteSubnet string ServerlIpAddress UInt32 SubnetAddress DHCP_FORCE_FLAG ForceFlag DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpCreateSubnet string ServerlIpAddress UInt32 SubnetAddress ref DHCP_SUBNET_INFO SubnetInfo DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpEnumSubnets string ServerlIpAddress ref UInt32 ResumeHandle UInt32 PreferredMaximum out IntPtr EnumInfo out UInt32 ElementsRead out UInt32 ElementsTotal DllImport dhcpsapi dll CharSet CharSet Unicode internal static extern UInt32 DhcpGetSubnet Info string ServerlIpAddress UInt32 SubnetAddress out IntPtr SubnetInfo endregion region DhcpMisc DllImport dhcpsapi dll internal static extern void DhcpRpcFreeMemory IntPtr BuffPtr endregion NS 4 FF DHCP Server Management Objects NativeStructs cs Unf Dhcp Smo Interop File Namespace School of Computing c Jason Rupard ay using using using using using System System Collections Generic Syste
66. daseindnt 110 Vi TABLES Table 1 DHCP Operations with Minimum Access Roles and Scopes Vii FIGURES Figure 1 DHCP Web Services Software Layers viii ABSTRACT Dynamic Host Configuration Protocol DHCP Web Services offer significant improvements to the management of Microsoft s DHCP server The web services utilize Simple Object Access Protocol SOAP providing an open and standardized interface for DHCP server management and implement the Web Service Interoperability WS I Basic Profile 1 1 a set of non proprietary web service specifications This standardized communication protocol allows network administrators and developers to manage Microsoft s DHCP server in ways not achievable with previous management tools provided by Microsoft or other outside sources chiefly because the malleable nature of the open framework allows users to form their own management tools as they see fit The DHCP Web Services include two features innovative to Microsoft s DHCP Server an authorization model to control access of DHCP server objects and a search to query the DHCP server for client lease information using regular expressions Open management authorization and search create a flexible and adaptable tool set for managing a DHCP server thus making it more appealing to large network environments with complex needs ix Chapter 1 IMPETUS In a professional IT environment a lack of management flexibility wit
67. dated user account to DHCP Web Services DHCP Web Services then checks authorization access controls to validate the user has permission to execute an operation Next if the user is permitted DHCP Web Services uses a trusted subsystem approach to execute operations on the DHCP server MSDNO8G which means it uses a privileged service account to execute the operation on the users behalf This service account has full administrative privileges to the DHCP servers managed by DHCP Web Services If the user does not have proper access to execute an operation the service account will do nothing and the web 292 services will send back a SOAP fault The service account is configured during the installation steps of the DHCP Web Services application These steps are outlined as part of the installation documentation included in Appendix B 3 7 Clients 3 7 1 NET Client Known as the DWS Management Console this NET client fully utilizes the capability of the DHCP Web Services Implemented using C NET and Microsoft s Management Console MMC 3 0 API the GUI based management tool allows administrators to manage multiple DHCP servers in their network environments Installation and user manual documentation for the DHCP Web Services MMC can be found in Appendix C 3 7 2 Perl Samples A set of Perl 5 8 code samples were created These can be executed from a Linux platform These samples demonstrate the interoperability achieved in t
68. dress ref info if Response 0 throw new DhcpException Response public static List lt DhcpSubnet gt EnumAl1l DhcpIpAddress server UInt32 Response 0 ResumeHandle 0 UInt32 nRead 0 nTotal 0 IntPtr retPtr List lt DhcpSubnet gt subnets new List lt DhcpSubnet gt DhcpSubnet current for 7 Response NativeMethods DhcpEnumSubnets server ToString ref ResumeHandle 1024 out retPtr out nRead out nTotal ERROR_NO_MORE_ITEMS if Response 259 break 74 if Response 0 throw new DhcpException Response work DHCP_IP_ARRAY NativelIps DHCP_IP_ARRAY Marshal PtrToStructure retPtr typeof DHCP_IP_ARRAY for int i 0 i lt NativeIps NumElements i current new DhcpSubnet current Address new DhcpIpAddress UInt32 Marshal ReadInt32 NativeIps Elements i Marshal SizeOf typeof UInt32 current Get server subnets Add current free on last successful call if Response 0 NativeMethods DhcpRpcFreeMemory retPtr return subnets private DHCP_SUBNET_INFO ConvertToNative if this Address null this Mask null String IsNullOrEmpty this Name throw new InvalidOperationException Subnet invalid DHCP_SUBNET_INFO nativeSubnet new DHCP_SUBNET_INFO nativeSubnet SubnetAddress this Address GetUIntAddress nativeSubnet SubnetMask this Mask GetUIntAddress nativeSubnet SubnetName this Nam
69. e value OptionId optionId value ClassType classType value OptionScope scope value Get server return value public static void RemoveOptionValue DhcpIpAddress server DhcpOptionValue value value Remove server public static DhcpOptionValue EnumOptionValues DhcpIpAddress server DhcpOptionClassType classType DhcpOptionScope scope return DhcpOptionValue EnumAll server classType scope public static DhcpOption EnumOptions DhcpIpAddress server DhcpOptionClassType classType 98 return DhcpOption EnumAll server classType endregion 99 APPENDIX B DHPC Web Services Installation Overview DHCP Web Services DWS contains two sets of ASP NET 2 0 web services DhcpOperations asmx and DhcpSecurity asmx Both sets of web services implement SOAP messages based on the WS I standard Basic Profile 1 1 DhcpOperations provides a set of operations to manage a Microsoft DHCP server While DhcpSecurity provides operations to manage the authorization layer within the DhcpOperations web services DWS employs a trusted subsystem application model The connecting client account to a web service must be authenticated via IIS and authorized via DWS itself to perform a DHCP operation Once a client is authorized a service account with access to the DHCP server will perform the operation on the client s behalf Terms Term Description webserver Hostname of
70. e nativeSubnet SubnetComment this Comment nativeSubnet SubnetState DHCP_SUBNET_STATE this State return nativeSubnet private static DhcpSubnet ConvertFromNative DHCP_SUBNET_INFO info DhcpSubnet subnet new DhcpSubnet subnet Address new DhcpIpAddress info SubnetAddress subnet Mask new DhcpIpAddress info SubnetMask subnet Name info SubnetName subnet Comment info SubnetComment subnet State DhcpSubnetState info SubnetState return subnet public enum DhcpSubnetState Enabled Disabled EnabledSwitched DisabledSwitched InvalidState NS FF DHCP Server Management Objects File DhcpSubnetElement cs Namespace Unf Dhcp Smo c Jason Rupard School of Computing University of North Florida 75 RZ using System using System Collections Generic using System Text using System Runtime InteropServices using Unf Dhcp Smo Interop namespace Unf Dhcp Smo public class DhcpSubnetElement public DhcpIpAddress SubnetAddress public DhcpSubnetElementData Data public DhcpSubnetElement public void Add DhcpIpAddress server if this SubnetAddress null Data null throw new InvalidOperationException Invalid SubnetElement uint Response 0 using MemManager Mem new MemManager DHCP_SUBNET_ELEMENT_DATA_V5 element this Data ConvertToNative Mem Response NativeMethods DhcpAddSubnetElementV5 server ToString
71. e than one occasion in the Interop layer since the DHCP server API defines a couple of structures containing unions By using the previously described techniques of p invoke a C wrapper class was created It contains all known and documented functions exported by the DHCP server API DLL thus allowing an exchange of data between C and C C extern prototypes of the DHCPSAPI functions were created in the Nat iveMethods class within the Unf Dhcp Smo Interop namespace For example the NativeMethods DhcpSetOptionValueV5 method directly references its counterpart in the external DHCPSAPI DLL When a call to this method occurs the system marshals the C parameters to C data types pushes them onto the call stack and then executes the DHCPSAPI DLL C function C structures located in the 14 NativeStructs cs source file were created to mimic the C function parameters used by DHCPSAPI NativeMethods MemManager and native structures make up the Unf Dhcp Smo Interop namespace These are used by the next layer DHCP Server Management Objects which abstracts low level details of the C like types and functions 3 2 DHCP Server Management Objects SMO Server Management Objects were created to interface directly with the Interop layer forming the NET DHCP management classes of DHCP Web Services This layer hides implementation details of the archaic p invoke code of the Interop layer presenting a well organized
72. echanisms were placed in the web services source code This allows first runtime access to DHCP Web Services so an administrator can start to delegate access controls to other user accounts as needed 20 The authorization structures just described were implemented in the DhcpSecurityOps class within the Unf Dhcp Smo WebServices namespace In addition this class contains static methods to add and remove authorizations It also contains other utilities such as the isAdmin method that returns a Boolean value based on whether the current user is in the GlobalAdministrator role DHCP Web Services uses the DhcpSecurityOps class to manage DHCP authorizations thus allowing access to the authorization framework through the DHCP Web Services open framework 3 5 Web Services The open management framework becomes operational in the web services layer As the fifth and final software layer it implements SOAP web services via ASP NET This layer contains two sets of web services that are both defined in the Unf Dhcp Smo WebServices namespace The first set of services known as DhcpSecurity web services maps to the static methods created in the DhcepSecurityOps class of the authorization layer The second set of web services named DhcpOperations is used to manage a DHCP server This set of services maps directly to static functions defined in the AzServerOperations class within the authorizat
73. ent ClientHardwareAddress DataLength Marshal Copy nativeClient ClientHardwareAddress Data mac 0 mac Length client MacAddress new DhcpMacAddress mac return client public class DhcpSearchInfo public DhcpSearchInfoType Type public DhcpMacAddress MacAddress public DhcpIpAddress IpAddress public String Name internal DHCP_SEARCH_INFO ConvertToNative MemManager Mem DHCP_SEARCH_INFO info new DHCP_SEARCH_INFO j switch this Type case DhcpSearchInfoType IpAddress if this IpAddress null throw new InvalidOperationException SearchInfo invalid info SearchType DHCP_SEARCH_INFO_TYPE DhcpClientIpAddress info ClientIpAddress this IpAddress GetUIntAddress return info case DhcpSearchInfoType HardwareAddress if this MacAddress null throw new InvalidOperationException SearchInfo invalid info SearchType DHCP_SEARCH_INFO_TYPE DhcpClientHardwareAddress Byte mac this MacAddress GetByteArray DHCP_CLIENT_UID uid new DHCP_CLIENT_UID uid DataLength uint mac Length uid Data Mem AllocByteArray this MacAddress GetByteArray info ClientHardwareAddress uid return info case DhcpSearchInfoType Name if this Name null throw new InvalidOperationException SearchInfo invalid info SearchType DHCP_SEARCH_INFO_TYPE DhcpClientName info ClientName Mem AllocString this Name return info return info sss public enum DhcpSearchInfoType Ip
74. eof BootpIpRange public void CreateSubnet DhcpIpAddress server DhcpSubnet network DhcpIpRange ipRange AzServerOperations CreateSubnet server network ipRange secured WebMethod Description Update DHCP subnet on server public void UpdateSubnet DhcpIpAddress server DhcpSubnet network AzServerOperations UpdateSubnet server network secured WebMethod Description Update default DHCP subnet address pool range public void UpdateSubnetRange DhcpIpAddress server DhcpIpAddress network DhcpIpRange ipRange AzServerOperations UpdateSubnetRange server network ipRange secured WebMethod Description Delete DHCP subnet on server public void DeleteSubnet DhcpIpAddress server DhcplIpAddress network AzServerOperations DeleteSubnet server network secured WebMethod Description Create a subnet exclusion address pool public void CreateSubnetExclusion DhcpIpAddress server DhcpIpAddress network DhcpIpRange ipExRange AzServerOperations CreateSubnetExclusion server network ipExRange secured WebMethod Description Delete a subnet exclusion address pool public void DeleteSubnetExclusion DhcpIpAddress server DhcpIpAddress network DhcpIpRange ipExRange AzServerOperations DeleteSubnetExclusion server network ipExRange WebMethod Description Enumerate all address pools belonging to subnet public DhcpIpRange
75. eof DHCP_OPTION_DATA_ELEMENT data NumElements THER EE PEE for int i 0 i lt data NumElements i element new DHCP_OPTION_DATA_ELEMENT element OptionType DHCP_OPTION_DATA_TYPE DhcpWordOption element WordOption this Data i iptr IntPtr data Elements ToInt32 i Marshal SizeOf typeof DHCP_OPTION_DATA_ELEMENT Marshal StructureToPtr element iptr false return data public class DhcpOptionDataDword DhcpOptionData public UInt32 Data public DhcpOptionDataDword this Type DhcpOptionDataType DWordType public DhcpOptionDataDword UInt32 dwords base DhcpOptionDataType DWordType this Data dwords internal DhcpOptionDataDword DHCP_OPTION_DATA NativeOptData if NativeOptData NumElements 0 NativeOptData Elements IntPtr Zero throw new ArgumentException DHCP_OPTION_DATA not valid this Type DhcpOptionDataType DWordType 58 grab first element for type test DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure NativeOptData Elements typeof DHCP_OPTION_DATA_ELEMENT if element OptionType DHCP_OPTION_DATA_TYPE DhcpDWordOption throw new ArgumentException NativeOptData type not DWORD this Data new UInt32 NativeOptData NumElements this Data 0 element DWordOption IntPtr iPtr for int i 1 i lt NativeOptData NumElements i iPtr IntPtr NativeOptData Elements ToIn
76. eof DHCP_OPTION_VALUE ov new DhcpOptionValue ov ClassType OptionClass ov OptionScope Scope ov OptionId NativeOptionValue OptionID ov OptionData DhcpOptionData CovertFromNative NativeOptionValue Value ovList Add ov free on last successful call if Response 0 NativeMethods DhcpRpcFreeMemory retPtr return ovList ToArray public class DhcpOptionScope public DhcpOptionScopeType type public DhcpIpAddress SubnetIp public DhcpIpAddress ReservationIp public DhcpOptionScope SubnetIp null ReservationIp null internal DHCP_OPTION_SCOPE_INFO ConvertToNative DHCP_OPTION_SCOPE_INFO sInfo new DHCP_OPTION_SCOPE_INFO switch this type case DhcpOptionScopeType Server sInfo ScopeType DHCP_OPTION_SCOPE_TYPE DhcpGlobalOptions sInfo GlobalScopeInfo IntPtr Zero break case DhcpOptionScopeType Subnet sInfo ScopeType DHCP_OPTION_SCOPE_TYPE DhcpSubnetOptions if this SubnetIp null throw new InvalidOperationException Subnet IP not assigned sInfo SubnetScopeInfo this SubnetIp GetUIntAddress j break case DhcpOptionScopeType Reservation sInfo ScopeType DHCP_OPTION_SCOPE_TYPE DhcpReservedOptions if this SubnetIp null throw new InvalidOperationException Subnet IP not assigned if this ReservationIp null throw new InvalidOperationException Reservation IP not assigned sInfo ReservedScopeInfo new DHCP_RESERVED_SCOPE
77. ers Those users can then manage that section or scope of the DHCP server Authorizations are enforced using two methods The first is a direct allow deny method If a user does not have sufficient authorization access to complete an operation like CreateSubnet the operation will throw an unauthorized exception Otherwise the operation will allow the creation to occur The second method is security trimming In this approach DHCP operations that return a set of DHCP objects are trimmed to exclude objects to which the user does not have access For example if a user has read access to a range of IP addresses within a subnet and executes the EnumClients operation the operation would normally return all client leases within that subnet With security trimming however the caller will only receive client leases within the range of IP addresses to which he has been granted read access Furthermore the set of client leases could be empty if the user does not have access to read any leases within a subnet Searching Searching allow users to query a DHCP server for client leases based on regular expression patterns The search filter allows three terms to be used in a query client hostname client IP address and client MAC address The search filter matches based on a logical AND condition of non empty terms The regular expression patterns should follow the NET regular expression language definition http msdn2 microsoft com en us library
78. ervations DhcpIpAddress server DhcpIpAddress network return AzServerOperations EnumReservations server network endregion region Option Ops WebMethod Description Set a DHCP option s value based on a particular scope J XmlInclude typeof DhcpOptionDataByte XmlInclude typeof DhcpOptionDataWord XmlInclude typeof DhcpOptionDataDword XmlInclude typeof DhcpOptionDataDwordDword XmlInclude typeof DhcpOptionDataIp XmlInclude typeof DhcpOptionDataString public void SetOptionValue DhcpIpAddress server DhcpOptionValue value AzServerOperations SetOptionValue server value WebMethod Description Remove a DHCP option s value from a particular scope J public void RemoveOptionValue DhcpIpAddress server DhcpOptionValue value AzServerOperations RemoveOptionValue server value WebMethod Description Retrieve a DHCP option s value from a particular scope J public DhcpOptionValue GetOptionValue DhcpIpAddress server UInt32 optionld DhcpOptionClassType classType DhcpOptionScope scope return AzServerOperations GetOptionValue server optionId classType scope WebMethod Description Enumerate all DHCP option values set in particular scope J public DhcpOptionValue EnumOptionValues DhcpIpAddress server DhcpOptionClassType classType DhcpOptionScope scope return AzServerOperations EnumOptionValues server classType scope WebMethod Description Enumerate
79. esponse 234 retPtr IntPtr Zero if retPtr IntPtr Zero NativeMethods DhcpRpcFreeMemory retPtr throw new DhcpException Response work NativeArray DHCP_SUBNET_ELEMENT_INFO_ARRAY_V5 Marshal PtrToStructure retPtr typeof DHCP_SUBNET_ELEMENT_INFO_ARRAY_V5 for int i 0 i lt NativeArray NumElements i iPtr IntPtr NativeArray Elements ToInt32 i Marshal SizeOf typeof DHCP_SUBNET_ELEMENT_DATA_V5 DHCP_SUBNET_ELEMENT_DATA_V5 element DHCP_SUBNET_ELEMENT_DATA_V5 Marshal PtrToStructure iPtr typeof DHCP_SUBNET_ELEMENT_DATA_V5 elements Add DhcpSubnetElementData CovertFromNative element free on last successful call if Response 0 NativeMethods DhcpRpcFreeMemory retPtr return elements ToArray region SubnetElementData public abstract class DhcpSubnetElementData public DhcpSubnetElementDataType Type public DhcpSubnetElementData public DhcpSubnetElementData DhcpSubnetElementDataType type this Type type internal abstract DHCP_SUBNET_ELEMENT_DATA_V5 ConvertToNative MemManager Mem internal static DhcpSubnetElementData CovertFromNative DHCP_SUBNET_ELEMENT_DATA_V5 nativeElement switch nativeElement ElementType case DHCP_SUBNET_ELEMENT_TYPE_V5 DhcpReservedIps return new DhcpIpReservation nativeElement case DHCP_SUBNET_ELEMENT_TYPE_V5 DhcpIpRanges case DHCP_SUBNET_ELEMENT_TYPE_V
80. ete those objects Moreover because this authorization layer is scope sensitive if that same user is authorized to manage only one subnet he can only read and update objects on that specific subnet It is important to mention these authorization scopes are hierarchical in nature which means the user can manage all DHCP objects underneath the highest layer for which he has authorization Using the previous example the user authorized to manage only a subnet also has access to the lower IP range level In addition to the previously mentioned authorization scopes is one specialized scope that contains two special Global roles Global Administrator and Global Auditor These roles have full control or read only access respectively over all servers managed through DHCP Web Services Users in the Global Administrator role are the only ones who can manage authorizations making them the users who actually delegate access rights to DHCP objects Authorization is important because it allows network administrators the ability to delegate DHCP objects to organizational subunits or individual users saving time and money on tedious tasks subunits may want to manage themselves Giving subunits power allows network administrators to focus on other important operations Allowing a user the rights to manage a set of IP addresses for printers is an example application The user could then set reservations based on the printer s MAC address without contacting t
81. f vendor tools the most viable of which belongs to Mice and Men who provide the standard functionality of a DHCP management tool along with an authorization model that allows non administrative users to manage different objects within a DHCP server Mice amp Men07 The Mice and Men product is still not as flexible as desired since it lacks the openness a standardized communication method could provide For open management of the DHCP server SOAP HTTP web services W3C00 was examined and chosen to provide a standardized and open interface Use of the INET framework MSDNO8A specifically ASP NET MSDNO8B was also decided upon since it is the preferred Microsoft development platform Another reason for choosing this technology was research showed ASP NET could implement the Web Service Interoperability standard WS I Basic Profile 1 1 MSDNO8C WS I defines web services in such a way that different development platforms can interface in a standardized manner a requirement for any open framework WS I06 Another aspect of this research focused on how to interface directly with the DHCP server itself Microsoft provides a C library DHCP Server API DHCPSAPI MSDNO8D to manage their DHCP server The DHCP server can be totally configured through this API meaning configurations are stored in a database and can be manipulated in real time A means to bridge the language gap between Microsoft s C library and the NET framework was
82. filel_1 public class DhcpSecurity System Web Services WebService region Perms WebMethod Description Add account with role to DHCP authorization database XmlInclude typeof DhcpAzServerScope XmlInclude typeof DhcpAzSubnetScope XmlInclude typeof DhcpAzIpRangeScope public void AddPermission DhcpAzScope scope DhcpAzAccount account if DhcpSecurityOps isAdmin throw new UnauthorizedAccessException AdminAccessErr DhcpSecurityOps AddPermission scope account Role account AccountName WebMethod Description Remove account with role from DHCP authorization database public void RemovePermission DhcpAzScope scope DhcpAzAccount account if DhcpSecurityOps isAdmin throw new UnauthorizedAccessException AdminAccessErr DhcpSecurityOps RemovePermission scope account Role account AccountName WebMethod Description Enumerate accounts and their roles in DHCP authorization database public DhcpAzAccount GetPermissions DhcpAzScope scope if DhcpSecurityOps isAdmin throw new UnauthorizedAccessException AdminAccessErr return DhcpSecurityOps GetPermissions scope WebMethod Description Add account with global role to DHCP authorization database public void AddGlobalPermission DhcpAzGlobalAccount account if DhcpSecurityOps isAdmin throw new UnauthorizedAccessException AdminAccessErr DhcpSecurityOps AddGlobalPermission ac
83. found in Platform Invoke p invoke which allows NET classes to consume unmanaged code DLLs in this case DHCPSAPI MSDNOS8E Though most of this research focused on facilitating an open management framework an API needed to be found that would help in the implementation of the authorization paradigm that needed to be created from scratch Microsoft s Authorization Manager AzMan McPherson04 McPherson06 fit nicely because it is accessible through the NET framework and uses an XML file to store authorization data AzMan can also take advantage of existing user authentication stores such as Active Directory by mapping those users to role based authorizations created by a developer Reimer03 Another appealing reason for using AzMan was that it provides a scope construct which makes possible hierarchically based access control over objects within the DHCP server For all of these reasons AzMan together was chosen as the model to help implement authorization with DHCP Web Services Chapter 2 CONTEXT Three innovations to Microsoft s DHCP Server management suite were developed open management via SOAP a search capability that would grant information access and an authorization layer for access control While all three concepts deserve special attention the open management paradigm is the largest and most significant of the three the latter two are important functions within it These three new capabilities should significan
84. geScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet new DhcpIpAddress lease IpAddress GetUIntAddress amp lease SubnetMask GetUIntAddress j azIpRange StartIp lease IpAddress if azIpRange AccessCheck CreateLease DhcpSecurityOps GetClientContext DhcpAzOps Create ServerOperations CreateLease server lease else throw new UnauthorizedAccessException CreateLease Access Denied requires ipt update public static void UpdateLease DhcpIpAddress server DhcpClient lease DhcpAzIpRangeScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet new DhcpIpAddress lease IpAddress GetUIntAddress amp lease SubnetMask GetUIntAddress azIpRange StartIp lease IpAddress if azIpRange AccessCheck UpdateLease DhcpSecurityOps GetClientContext DhcpAzOps Update ServerOperations UpdateLease server lease else throw new UnauthorizedAccessException UpdateLease Access Denied crequires ipt delete public static void DeleteLease DhcpIpAddress server DhcpIpAddress network DhcpIpAddress leaselIp DhcpAzIpRangeScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet network azIpRange StartIp leaselIp if azIpRange AccessCheck DeleteLease DhcpSecurityOps GetClientContext DhcpAzOps Delete ServerOperations DeleteLease server leaselIp else throw new Una
85. gt m lt MAC regex pattern gt n lt Name regex pattern gt regex is a NET regular express format and case insensitive http msdn2 microsoft com en us library az24scfc VS 80 aspx c Jason Rupard School of Computing University of North Florida 108 use SOAP Lite trace gt debug use SOAP Lite use Getopt Std my dws SOAP Lite gt uri http www unf edu jrupard dws gt proxy https jr1 x DhcpOperations asmx gt on_action sub join http www unf edu jrupard dws _ 1 my SserverIp SOAP Data gt name server gt SOAP Data gt value SOAP Data gt name Ip gt 192 168 0 5 i getopts i m n my opts my terms SOAP Data gt name terms gt SOAP Data gt value SOAP Data gt name IpRegEx gt Sopts i SOAP Data gt name MacRegEx gt Sopts m SOAP Data gt name NameRegEx gt Sopts n a my res Sdws gt ServerFindAllClients SserverIp Sterms die Sres gt faultstring n if Sres gt fault my clients if Sres gt result gt DhcpClient ARRAY clients Sres gt result gt DhcpClient else clients Sres gt result gt DhcpClient printf n 24s 12s 12s 10s n IpAddress Mac Name LeaseExpires printf s 24s s l2s 3 128 s l0sin e24 lt el2 el2 x10 foreach clients printf 24s 12s 12s 10s n _
86. hcpIpAddressOption throw new ArgumentException NativeOptData type not IP this Data new DhcpIpAddress NativeOptData NumElements this Data 0 new DhcpIpAddress element DWordOption IntPtr iPtr for int i 1 i lt NativeOptData NumElements i iPtr IntPtr NativeOptData Elements ToInt32 i Marshal SizeOf typeof DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure iPtr typeof DHCP_OPTION_DATA_ELEMENT this Data i new DhcpIpAddress element DWordOption internal override DHCP_OPTION_DATA ConvertToNative MemManager Mem if this Data Length 0 throw new InvalidOperationException OptionValue No data to convert DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA data new DHCP_OPTION_DATA data NumElements UInt32 this Data Length data Elements Mem AllocArray typeof DHCP_OPTION_DATA_ELEMENT data NumElements IntPtr ipti for int i 0 i lt data NumElements i element new DHCP_OPTION_DATA_ELEMENT element OptionType DHCP_OPTION_DATA_TYPE DhcpIpAddressOption element DWordOption this Data i GetUIntAddress iptr IntPtr data Elements ToInt32 i Marshal SizeOf typeof DHCP_OPTION_DATA_ELEMENT Marshal StructureToPtr element iptr false return data public class DhcpOptionDataWord DhcpOptionData public UInt16 Data public DhcpOptionDataWord this Type Dh
87. hcpSecondaryHosts 1 DhcpReservedIps 2 DhcpExcludedIpRanges 3 value 4 is missing from documentation I figured this out because enumsubnetelements for enums below was cause invalid parameter errors DhcpIpRangesDhcpOnly 5 DhcpIpRangesDhcpBootp 6 DhcpIpRangesBootpOnly 7 86 internal enum DHCP_FORCE_FLAG DhcpFullForce DhcpNoForce internal enum DHCP_OPTION_SCOPE_TYPE DhcpDefaultOptions DhcpGlobalOptions DhcpSubnetOptions DhcpReservedOptions DhcpMScopeOptions internal enum DHCP_OPTION_DATA_TYPE hcpByteOption hcpWordOption hcpDWordOption hcpDWordDWordOption hcpIpAddressOption hepStringDataOption hcpBinaryDataOption hcpEncapsulatedDataOption hcpIpv 6 AddressOption UOT OUUUVUUS endregion region DhcpOptionDataElement StructLayout LayoutKind Explicit Size 12 internal struct DHCP_OPTION_DATA_ELEMENT FieldOffset 0 public DHCP_OPTION_DATA_TYPE OptionType FieldOffset 4 public byte ByteOption FieldOffset 4 public UInt16 W FieldOffset 4 public UInt32 D FieldOffset 4 public DWORD_DWORD DWordDWordOption FieldOffset 4 public IntPtr StringOption FieldOffset 4 public DHCP_BINARY_DATA BinDataOption ordOption WordOption endregion region DhcpOptionScopelInfo StructLayout LayoutKind Explicit Size 12 internal struct DHCP_OPTION_SCOPE_INFO FieldOffset 0 public DHCP_OPTION_SCOPE_TYP
88. he network administrator saving time and eliminating a possible bottleneck in the process Allowing a user to manage an entire subnet of a DHCP server is another example Before this ability network administrators might consider installing an additional DHCP server just to let that user manage that subnet Now the administrator can save resources and money by just allowing the user to manage only that subnet within the same DHCP server This idea can be extrapolated to multiple subnets with different users managing each Adding an authorization layer to DHCP Web Services increased the functionality of the DHCP server thus making it far more appealing to potential clients The authorization layer the search function and the open architecture show the flexibility that has been achieved with DHCP Web Services The combination of these three functions allows network administrators to carry out more complex tasks and gives them a multitude of options on how to do so thus giving the Microsoft DHCP server the adaptability needed to thrive in large complex network environments 10 Chapter 3 SOFTWARE DEVELOPMENT To create DHCP Web Services five hierarchical layers of software coding were designed as well as two supplemental sample clients to display its functionality The five layers of DHCP Web Services use C and the NET Framework Each software layer builds upon the last with each of the five levels interfacing with the neighbor
89. hen the changed therefore some of the interfaces will not be enabled on the D D i D iption The specified path to the DHCP audit log file is too long D i Y D i DHCP_SERVER_INTERFACE_NOTIFICATION_EVENT 20035 iption The DHCP database needs to be upgraded to a newer format ore information refer to the DHCP server event log J DHCP_JET97_CONV_REQUIRED 20036 Descr and is not ser problems or in ERROR iption The DHCP server cannot determine if it has the authority to run vicing clients on the network This rogue status may be due to network sufficient server resources DHCP_ROGUE_INIT_FAILED 20037 Descr active on the ERROR Descr servicing clie iption The DHCP service is shutting down because another DHCP server is network DHCP_ROGUE_SAMSHUTDOWN 20038 iption The DHCP server does not have the authority to run and is not nts on the network 9 ERROR_D CP_ROGUE_NOT_AUTHORIZED 20039 Descri this domain Th service During ERROR_D ption The DHCP server is unable to contact the directory service for e DHCP server will continue to attempt to contact the directory this time no clients on the network will be serviced CP_ROGUE_DS_UNREACHABLE 20040 Descri of another DHCP ERROR_D ption The CP server s authorization information conflicts with that server on the network CP_ROGUE_DS_CONFLICT 20041 Descri beca
90. hin Microsoft s Dynamic Host Configuration Protocol DHCP server product is noticeable The DHCP server is a crucial part of any IP based network Therefore its management is crucial to the operation of that network One could say the management of a DHCP server is the management of client devices on an IP based network The lack of adaptability of Microsoft s DHCP server stems from a deficiency in its management options or tools produced by Microsoft or other outside sources This inadequacy makes it unappealing for IT professionals to choose Microsoft s DHCP server for their large and complex network environments In these environments real world problems require administrators have several alternatives to manage such an important piece of networking infrastructure The ability to produce immediate functionality is sometimes needed to help manage these complex networks providing administrators the ability to take a problem and solve it quickly with additional methods not native to the DHCP server In this regard Microsoft s DHCP server has definite room for improvement when it comes to large networks The DHCP server needs an open management framework to provide administrators the freedom to develop new functionalities as well as design new integration points for other network or non network applications while also granting accessibility to information housed in the DHCP server itself An open management framework could offer
91. his project The sample Perl scripts use the module SOAP Lite which is a Perl API for consuming SOAP web services These scripts exhibit the functionality of DHCP server operations CreateSubnet SetOptionValue CreateReservation DeleteSubnet DeleteReservation and ServerFindAl1lClients These functions cover the combinations of input and output types used in DHCP Web Services The Perl samples have been included in Appendix D 293 Chapter 4 CONCLUSION As the DHCP server is crucial to an IP based network a deficient management system for it could severely stifle the productivity of that network Such a deficiency in Microsoft s DHCP server product was found and eliminated by creating DHCP Web Services an open management framework including both authorization and search functionality By using SOAP and conforming to the WS I interoperability standards when creating the DHCP Web Services a standardized integration point was provided allowing open communication between the DHCP server and potential users Administrators and developers can now interface with this integration point in many creative and dynamic ways to fit their specific needs as opposed to being limited to the minimal management options previously offered To create DHCP Web Services five hierarchical software layers were designed Interop SMO DHCP Server Operations Authorization and Web Services The main innovations of this project
92. ic string GenerateAzScopeName DhcpIpAddress server return SRV server ToString public override Boolean AccessCheck String opDesc IAzClientContext2 azClient DhcpAzOps operation Object result Object azOp new Object operation String scopes new String this GenerateAzScopeName foreach String scope in scopes try result Object azClient AccessCheck opDesc new Object scope azOp null null null null null if int result 0 0 return true catch return false public class DhcpAzSubnetScope DhcpAzServerScope public DhcpIpAddress Subnet public DhcpAzSubnetScope this ScopeType DhcpAzScopeType Subnet public override string GenerateAzScopeName if this Server null this Subnet null throw new InvalidOperationException retirn SRV lt this s rver Tostring SN T this Subnet ToString 38 protected static string GenerateAzScopeName DhcpIpAddress server DhcpIpAddress subnet return SRV server ToString SN subnet ToString public override Boolean AccessCheck String opDesc IAzClientContext2 azClient DhcpAzOps operation Object result Object azOp new Object operation String scopes new String DhcpAzServerScope GenerateAzScopeName this Server this GenerateAzScopeName foreach String scope in scopes try result Object
93. ing layers above and below Beginning with a foundation of unmanaged code interoperability called the Interop layer each successive layer was built ending with the final layer SOAP Web Services The Interop is thus titled because it uses the p invoke technique to exchange and utilize data with the DHPC server API DHCPSAPI which is a C API library DHCP Server Management Objects SMO is the second layer of the Web Services It provides a set of friendly NET classes that manage a DHCP server and interface directly with the Interop s C like structures and functions The third layer named DHCP Server Operations uses the SMO layer to create a set of static DHCP operations The forth layer Authorized DHCP Server Operations maps directly to functions in the DHCP Server Operations layer with the addition of access controls for the unique authorization paradigm of DHCP Web Services Again these operations are static which will complement the final layer SOAP Web Services This layer presents the Authorized Server Operations of the previous layer as SOAP 11 web services using ASP NET Figure 1 provides a diagram of the software layers of DHCP Web Services Web Services Unf Dhcp Smo WebServices DhcpSecurity DhcpOperations Authorization Unf Dhcp Smo WebServices Authorization Management j a S DhcpSecurityOps AzServerOperations DHCP Server Operations Unf Dhcp Smo Operations DHCP Server Management Objects
94. ion layer Both sets of web services DhcpSecurity and DhcpOperations implement SOAP messages based on the WS I standard In addition each set provides a browser based set of HTML pages that developers can visit to learn more about the services The documentation included in these pages contains example SOAP messages that can be passed to and from the web services lt 9 This documentation is a built in function of ASP NET web services and can be very useful to developers The ASP NET web services also generate a Web Services Description Language file WSDL which defines standardized SOAP XML objects operations and service endpoints Most development platforms can read WSDL files and generate corresponding stub classes used to consume the web services A properly formatted WSDL file is a requirement of the WS I standard The source code for DHCP Web Services is included in Appendix A 3 6 Runtime Environment The DHCP Web Services runtime environment is ASP NET 2 0 on a Windows Server 2003 IIS 6 0 web server The IIS web server performs authentication of user accounts to the web services To authenticate users IIS was configured to use the basic authentication standard of HTTP in conjunction with SSL to encrypt communication of usernames and passwords over the network The HS web server checks a username and password against the server s local authentication store or Active Directory domain then finally passes the vali
95. ions EnumLeases server network WebMethod Description Create a client lease on server J public void CreateLease DhcpIpAddress server DhcpClient lease AzServerOperations CreateLease server lease WebMethod Description Update a client lease on server J public void UpdateLease DhcpIpAddress server DhcpClient lease AzServerOperations UpdateLease server lease WebMethod Description Delete client lease from server J public void DeleteLease DhcpIpAddress server DhcpIpAddress network DhcpIpAddress leaselIp AzServerOperations DeleteLease server network leaselIp endregion region Rez Ops cequires ipt create WebMethod Description Create a DHCP IP reservation on server J public void CreateReservation DhcpIpAddress server DhcpIpAddress network DhcpReservation res 48 AzServerOperations CreateReservation server network res WebMethod Description Update a DHCP IP reservation on server J public void UpdateReservation DhcpIpAddress server DhcpIpAddress network DhcpReservation res AzServerOperations UpdateReservation server network res WebMethod Description Delete a DHCP IP reservation on server J public void DeleteReservation DhcpIpAddress server DhcpIpAddress network DhcpIpAddress resIp AzServerOperations DeleteReservation server network resIp WebMethod Description Enumerate IP Reservations owned by subnet on server public DhcpReservation EnumRes
96. isArray nativeOption OptionType DHCP_OPTION_TYPE DhcpArrayTypeOption true false return option public enum DhcpOptionClassType Dhcp Bootp Routing NS DHCP Server Management Objects File DhcpOptionValue cs Namespace Unf Dhcp Smo c Jason Rupard School of Computing University of North Florida 7 using System using System Collections using System Collections Generic using System Text using System Runtime InteropServices 51 using Unf Dhcp Smo Interop namespace Unf Dhcp Smo public class DhcpOptionValue public UInt32 OptionId public DhcpOptionClassType ClassType public DhcpOptionData OptionData public DhcpOptionScope OptionScope public DhcpOptionValue this OptionId UInt32 MaxValue this ClassType DhcpOptionClassType Dhcp public void Set DhcpIpAddress Server if this OptionId UInt32 MaxValue this OptionScope null throw new InvalidOperationException Invalid Option Data Run Check to make sure Id exist and types data isArray are correct DhcpOption ValidateOptionValue Server this Get Option Class String ClassId DhcpOptionClassHash ht this ClassType as String Get Scope Setting DHCP_OPTION_SCOPE_INFO NativeScopelInfo this OptionScope ConvertToNative uint Response 0 using MemManager Mem new MemManager DHCP_OPTION_DATA NativeOptionData this OptionData ConvertToNative Mem Res
97. isndnn a nn R R R 2 1 2 Rese feh cna E R E eae eae 3 Chapter 2 Contexto sinine ena a na a E E a R a 6 21 Open Managementin inie a E SEEE AE Rah 6 2 2 Searches n ja Fa usph sain sedate ata a RE E R ais 7 2 3 Authorization esa eae nied E E Sa eee i 8 Chapter 3 Software Development ssssssesssesessseesseesseesseeesseeesstessesseesseeessseesssees 11 Sal Interop i i E RE E A uaa eee ede se 13 3 2 DHCP Server Management Objects sccssssiccessscocassassnacacssccoaseadesecedensseadens 15 3 3 DHCP Server Operations is ssiciad ysieciaanicasessgegatssuadaacids E i e a Eaa 16 SA Authorization sssini a R ea a a as 17 SA AZMahe ana aa E Ta Eas 18 3 5 Web SetyiCeSnanenonnunneunnn nn i a a is 21 3 6 Runtime Environment eesessesseseeeseeeeesresrrsriestesreserssseserssresseseresressesererees 22 Sih Chentipsi ias e EE E E R R ie aeeteagenlene 23 Sef NET Clrentcctactcgicssnchyve e E EAE E EEE OANE 23 3 e2 GPCL CS AMPICS aya ra a E a oar ean 23 Chapters Concl ston care aa E E phen e E T EAEE S 24 References na E a EE E A A eee E E E E E ee 27 Appendix A DHCP Web Services Code Listing ce cee ceeceseeeereeenseceneetseeeenees 29 Appendix B DHPC Web Services Installation 0 0 eee ceeeeeeeeeneecneecnneeteeeeenees 100 Appendix C DHCP Web Services MMC Documentation eee eeeeeeeeeeeeeeee 103 Appendix D Perl Client Samiples ccy2 2 ie dace neato desta eo eviee eae es 106 ALE EE E E E E ET EEEE eng aaumn Muanea
98. last revision February 2008 last accessed March 29 2008 MSDNO8E MSDN Consuming Unmanaged DLL Functions http msdn2 microsoft com en us library 26thfadc VS 80 aspx 2008 last accessed March 29 2008 MSDNO8F MSDN NET Framework Regular Expressions http msdn2 microsoft com en us library hs600312 aspx 2008 last accessed March 29 2008 MSDNO8G MSDN Trusted Subsystem http msdn2 microsoft com en us library aa480587 aspx 2005 last accessed March 29 2008 Technet05 TechNet DHCP tools http technet2 microsoft com windowsserver en library c780 1a5c 721e 4dff a917 28610296360e1033 mspx last revision January 2005 last accessed March 29 2008 W3C00 Box D et al Simple Object Access Protocol SOAP 1 1 http www w3 org TR 2000 NOTE SOAP 20000508 2000 last accessed March 29 2008 WS I06 Ballinger K et al Basic Profile Version 1 1 http www ws 1 org Profiles BasicProfile 1 1 html last revision April 2006 last accessed March 29 2008 28 FF F OF c 7 using using using using using File APPENDIX A DHCP Web Services Code Listing DHCP Server Management Objects AzServerOperations cs Namespace Unf Dhcp Smo WebServices Jason Rupard School of Computing University of North Florida System System Collections Generic Microsoft Interop Security AzRoles Unf Dhcp Smo Unf Dhcp Smo Operations namespace Unf Dhcp Smo WebSe
99. lean isAzGlobalAdmin TAzClientContext2 ctx GetClientContext Object objRoles Object ctx GetRoles String GlobalAdminRole Enum GetName typeof DhcpAzGlobalRole DhcpAzGlobalRole GlobalAdministrator foreach String role in objRoles if String Compare GlobalAdminRole role 0 return true return false private static IAzScope GetAzScope String scope try return GetAzApplication OpenScope scope null catch return null private static IAzScope CreateCustomAzScope String scope IAzApplication2 azApp GetAzApplication IAzScope azScope azApp CreateScope scope null azScope Submit 0 null IAzRole role null foreach String item in Enum GetNames typeof DhcpAzRole try create role in scope role azScope CreateRole item null 66 assign global role definition role AddTask item null role Submit 0 null finally FreeCom role false create special Limited role try role assign global role definition role AddTask Limited null role Submit 0 null finally FreeCom role false return azScope azScope CreateRole Limited role defs are task objects role defs are task objects null public static DhcpAzIpRangeScope EnumAzIpRanges DhcpAzSubnet Scope azSubnetScope List lt DhcpAzIpRangeScope gt ranges IAzScopes scopes String strSubnetScope Regex
100. lements SOAP and conforms to WS I This interface allows network and business processes the ability to interact share data and manage DHCP objects through a shared integration point Web service consumers could consist of administrative scripts management console tools or integrated network and business applications One example of an integrated network application would have the DHCP Web Service in a subordinate role of a larger IP Address Management IPAM system It could create an IP reservation while the IPAM makes other changes in DNS and possibly routers and or switches to complete its IPAM operations This example shows just one of the countless added functions the open management interface could facilitate 2 2 Search In addition to the open management interface a search feature within the DHCP Web Services was created to gather information easily from the DHCP server The search function queries client leases belonging to a DHCP server or subnet and matches those clients based on three possible attributes hostname IP address or MAC address To match an attribute within a client lease the search function uses NET regular expressions MSDNO8F The use of regular expressions allows complex search patterns to match client leases Searching is important because it allows information gathering and auditing processes to occur which alternately makes the DHCP server more functional Security could use this function to execu
101. lic UInt32 StartAddress public UInt32 EndAddress StructLayout LayoutKind Sequential internal struct DHCP_SUBNET_ELEMENT_DATA_V5 public DHCP_SUBNET_ELEMENT_TYPE_V5 ElementType public IntPtr Data StructLayout LayoutKind Sequential internal struct DHCP_RESERVED_SCOPE public UInt32 ReservedIpAddress public UInt32 ReservedIpSubnetAddress 88 StructLayout LayoutKind Sequential CharSet CharSet Unicode internal struct DHCP_OPTION public UInt32 OptionID public string OptionName public string OptionComment public DHCP_OPTION_DATA DefaultValue public DHCP_OPTION_TYPE OptionType StructLayout LayoutKind Sequential internal struct DHCP_OPTION_VALUE public UInt32 OptionID public DHCP_OPTION_DATA Value StructLayout LayoutKind Sequential CharSet CharSet Unicode internal struct DHCP_HOST_INFO public UInt32 IpAddress public string NetBiosName public string HostName StructLayout LayoutKind Sequential CharSet CharSet Unicode internal struct DHCP_CLIENT_INFO public UInt32 ClientIpAddress public UInt32 SubnetMask public DHCP_CLIENT_UID ClientHardwareAddress public string ClientName public string ClientComment public DATE_TIME ClientLeaseExpires public DHCP_HOST_INFO OwnerHost StructLayout LayoutKind Sequential internal struct DWORD_DWORD public UInt32 UpperWordl public UInt32 LowerWord2 StructLayout Layo
102. lient Comment cinfo ClientComment client LeaseExpires cinfo ClientLeaseExpires Convert 4 subnet byte mac new byte cinfo ClientHardwareAddress DataLength Marshal Copy cinfo ClientHardwareAddress Data mac 0 mac Length client MacAddress new DhcpMacAddress mac if iPtr IntPtr Zero NativeMethods DhcpRpcFreeMemory iPtr return client public static List lt DhcpClient gt EnumAll DhcpIpAddress server DhcpIpAddress UInt32 Response 0 ResumeHandle 0 UInt32 nRead 0 nTotal 0 IntPtr retPtr iPtr List lt DhcpClient gt clients new List lt DhcpClient gt DHCP_CLIENT_INFO nativeClient DHCP_CLIENT_INFO_ARRAY nativeArray for 7 Response NativeMethods DhcpEnumSubnetClients server ToString subnet GetUIntAddress typeof DHCP_CLIENT_INFO_ARRAY ref ResumeHandle 65536 out retPtr out nRead out nTotal ERROR_MORE_DATA 234 if Response 0 amp amp Response 234 retPtr IntPtr Zero if retPtr IntPtr Zero NativeMethods DhcpRpcFreeMemory retPtr throw new DhcpException Response work nativeArray DHCP_CLIENT_INFO_ARRAY Marshal PtrToStructure retPtr for int i 0 i lt nativeArray NumElements i iPtr Marshal ReadIntPtr nativeArray Elements i Marshal SizeOf typeof IntPtr nativeClient DHCP_CLIENT_INFO Marshal PtrToStructure iPtr typeof DHCP_CLIENT_INFO null
103. lt sub SOAP Transport HTTP Client get_basic_credentials return Suser gt Spass usr bin perl DHCP Web Services Client using SOAP Lite Enumerates Subnets on DHCP Server c Jason Rupard School of Computing University of North Florida use SOAP Lite trace gt debug use SOAP Lite my soap SOAP Lite gt uri http www unf edu jrupard dws gt proxy https jr1 x DhcpOperations asmx gt on_action sub join http www unf edu jrupard dws S _ 1 my S serverIp SOAP Data gt name server gt SOAP Data gt value SOAP Data gt name Ip gt 192 168 0 5 my res Ssoap gt EnumSubnets serverIp die Sres gt faultstring n if not res Sres gt fault if Sres gt result gt DhcpSubnet ARRAY subnets Sres gt result gt DhcpSubnet else subnets Sres gt result gt DhcpSubnet printf n 24s 12s 12s 10s n SubnetName Network Mask State printf Ss24 6 3 126 S126 S l0e n N e24 Vel2Z ValZ TXIO foreach subnets printf 24s 12s 12s 10s n _ gt Name _ gt Address gt Ip _ gt Mask gt Ip _ gt State print ANGT sub SOAP Transport HTTP Client get_basic_credentials return Suser gt Spass usr bin perl DHCP Web Services Client using SOAP Lite Search entire DHCP server Command Line i lt IP regex pattern
104. m Text System ComponentModel System Runtime InteropServices namespace Unf Dhcp Smo Interop region DHCPArrays StructLayout LayoutKind Sequential internal struct DHCP_IP_ARRAY public UInt32 NumElements public IntPtr Elements StructLayout LayoutKind Sequential University of North Florida internal struct DHCP_SUBNET_ELEMENT_INFO_ARRAY_V5 public UInt32 NumElements 85 public IntPtr Elements StructLayout LayoutKind Sequential internal struct DHCP_OPTION_ARRAY public UInt32 NumElements public IntPtr Elements StructLayout LayoutKind Sequential internal struct DHCP_OPTION_DATA public UInt32 NumElements public IntPtr Elements StructLayout LayoutKind Sequential internal struct DHCP_CLIENT_INFO_ARRAY public UInt32 NumElements public IntPtr Elements StructLayout LayoutKind Sequential internal struct DHCP_OPTION_VALUE_ARRAY public UInt32 NumElements public IntPtr Elements endregion region DHCPEnums internal enum DHCP_SEARCH_INFO_TYPE DhcpClientIpAddress DhcpClientHardwareAddress DhcpClientName internal enum DHCP_OPTION_TYPE DhcpUnaryElementTypeOption DhcpArrayTypeOption internal enum DHCP_SUBNET_STATE DhcpSubnetEnabled DhcpSubnetDisabled DhcpSubnetEnabledSwitched DhcpSubnetDisabledSwitched DhcpSubnetInvalidState internal enum DHCP_SUBNET_ELEMENT_TYPE_V5 DhcpIpRanges 0 D
105. mment res Comment create element reservation to subnet DhcpSubnetElement se new DhcpSubnetElement se SubnetAddress network se Data DhcpSubnetElementData r se Add server update lease data c Update server zero out DNS option DhcpOptionValue ov new DhcpOptionValue ov ClassType DhcpOptionClassType Dhcp ov OptionId 81 DhcpOptionScope os new DhcpOptionScope os type DhcpOptionScopeType Reservation os SubnetIp network os ReservationIp res ReservedIip ov OptionScope os ov OptionData new DhcpOptionDataDword new UInt32 0 ov Set server public static void UpdateReservation DhcpIpAddress server network DhcpReservation res get subnet object for mask DhcpSubnet snet new DhcpSubnet snet Address network snet Get server DhcpIpReservation r new DhcpIpReservation DhcpClient c new DhcpClient r ReservedIp c IpAddress res ReservedIp r ReservedMac c MacAddress res ReservedMac r bAllowedClientTypes res bAllowedClientTypes c SubnetMask snet Mask c Name res Name c Comment res Comment DhcpSubnetElement se new DhcpSubnetElement se SubnetAddress network se Data DhcpSubnetElementData r se Remove server false se Add server c Update server public static void DeleteReservation DhcpIpAddress server network DhcpIpAddress resIp DhcpIpReservation r new DhcpIpReservation r
106. ms public enum DhcpOptionDataType ByteType WordType DWordType DWordDWordType IpAddressType StringDataType BinaryDataType EncapsulatedDataType Ipv 6AddressType public enum DhcpOptionScopeType Server Subnet Reservation endregion DHCP Server Management Objects File Namespace DhcpReservation cs Unf Dhcp Smo c Jason Rupard School of Computing using System using System Collections Generic using System Text Default Routing and Remote Access University of North Florida namespace Unf Dhcp Smo public class DhcpReservation public DhcpIpAddress ReservedIp public DhcpMacAddress ReservedMac public DhcpSubnetClientType bAllowedClientTypes public String Name public String Comment public DhcpReservation DHCP Server Management Objects File DhcpSearch cs Namespace Unf Dhcp Smo x c Jason Rupard School of Computing a using using using using System System Collections Generic System Text System Text RegularExpressions namespace Unf Dhcp Smo 262 University of North Florida public class DhcpClientFilter private Regex ipRegEx public String IpRegEx get return ipRegEx ToString set if String IsNullOrEmpty value ipRegEx null else ipRegEx new Regex value RegexOptions IgnoreCase RegexOptions Compiled private Regex macRegEx public String Mac
107. nments needed to execute each operation 19 sae Role Scope Operation EnumSubnets Limited Subnet CreateSubnet Owner Subnet DeleteSubnet Owner Subnet UpdateSubnet Manager Subnet UpdateSubnetRange Manager Subnet CreateSubnetExclusion Manager Subnet DeleteSubnetExclusion Manager Subnet SubnetFindAl1lClients Auditor IP Range SubnetFindOneClient Auditor IP Range ServerFindAl1Clients Auditor Server ServerFindOneClient Auditor Server EnumPools Auditor Subnet EnumLeases Auditor IP Range CreateLease Owner IP Range UpdateLease Manager IP Range DeleteLease Owner IP Range CreateReservation Owner IP Range UpdateReservation Manager IP Range DeleteReservation Owner IP Range EnumReservations Auditor IP Range SetOptionValue Manager Scope Specific RemoveOptionValue Manager Scope Specific EnumOptionValues Auditor Scope Specific GetOptionValue Auditor Scope Specific Table 1 DHCP Operations with Minimum Access Roles and Scopes Finally the GLobalAdministrator role is assigned all operations and the Global Auditor role is assigned the read operation to all DHCP servers managed through DHCP Web Services To allow local administrators of the Windows Server hosting DHCP Web Services to manage fully DHCP servers and their authorizations bootstrap and failsafe m
108. nt ElementType DHCP_SUBNET_ELEMENT_TYPE_V5 DhcpReservedIps break default throw new DhcpException 1629 element Data Mem AllocStruct rip return element endregion region Enums public enum DhcpSubnetElementDataType DhcpIpRanges 0 DhncpSecondaryHosts 1 DhcpReservedips 2 DhcpExcludedIpRanges 3 enum 4 is missing from documentation DhcpIpRangesDhcpOnly 5 DhcpIpRangesDhcpBootp 6 DhcpIpRangesBootpOnly 7 public enum DhcpSubnetClientType byte Dhcp 1 Bootp 2 Both 3 endregion 80 DHCP Server Management Objects File 5 Global asax cs Namespace Unf Dhcp Smo WebServices c Jason Rupard School of Computing University of North Florida using System using System Data using System Configuration using System Collections using System Web using System Web Security using System Web SessionState using Microsoft Interop Security AzRoles namespace Unf Dhcp Smo WebServices public class Global System Web HttpApplication protected void Application_Start object sender EventArgs e NS 4 FF File Rep Application Lock DhcpSecurityOps Init Application UnLock DHCP Server Management Objects MemManager cs Namespace Unf Dhcp Smo c Jason Rupard School of Computing University of North Florida using System using System Collections Generic using
109. o contains functions that allocate unmanaged memory a normal operation when developing in C When using p invoke developers have to manage memory as if they were developing in C since NET does not provide a garbage collection system for this type of service This is why a memory management class was created called MemManager MemManager manages memory allocations for p invoke calls along with the proper release of that memory after use In addition the NET Marshal class automatically does some marshaling of data types so ie developers do not have to worry about memory allocations or type conversions in certain situations For example aC char is automatically converted to a NET String type by the Marshal class The Marshal class does not automatically handle structures unions and most pointer types Instead it provides helper functions to facilitate the marshaling of these types Unions are one of the more difficult structures with which to deal because C does not have a construct for a union However the Marshal class does define special attributes to help mimic a C union the most important of which is the FieldOffset attribute This attribute allows a developer to define the byte location where a structure member starts relative to the explicit size of that structure in memory With this mechanism a developer can make all union members start at the same byte offset thus mimicking a C union in C This technique was used on mor
110. on Subnet Ops public static List lt DhcpSubnet gt EnumSubnets DhcpIpAddress server return DhcpSubnet EnumAll server public static void CreateSubnet DhcpIpAddress server DhcpSubnet network DhcpIpRange ipRange if ipRange Type DhcpSubnetElementDataType DhcpExcludedIpRanges ipRange Type DhcpSubnetElementDataType DhcpReservedips throw new Exception SubnetElementData incorrect type create subnet network Create server assign default range DhcpSubnetElement se new DhcpSubnetElement se SubnetAddress network Address se Data ipRange se Add server zero out DNS option DhcpOptionValue ov new DhcpOptionValue ov ClassType DhcpOptionClassType Dhcp ov OptionId 81 DhcpOptionScope os new DhcpOptionScope os type DhcpOptionScopeType Subnet os SubnetIp network Address ov OptionScope os ov OptionData new DhcpOptionDataDword new UInt32 ov Set server 0 5 public static void UpdateSubnet DhcpIpAddress server DhcpSubnet network update subnet network Update server public static void UpdateSubnetRange DhcpIpAddress server DhcpIpAddress network DhcpIpRange ipRange if ipRange Type DhcpSubnetElementDataType DhcpExcludedIpRanges ipRange Type DhcpSubnetElementDataType DhcpReservedips throw new Exception SubnetElementData incorrect type Remove old ipRange DhcpSubnetElement se new DhcpSubnetElemen
111. ope azRole GetAzApplication OpenRole Enum GetName typeof DhcpAzGlobalRole globalRole null azRole AddMemberName account null azRole Submit 0 null catch COMException ex ERROR User already exists in Role if uint ex ErrorCode 0x800700B7 throw finally FreeCom azRole false public static DhcpAzGlobalAccount GetGlobalPermissions List lt DhcpAzGlobalAccount gt accounts new List lt DhcpAzGlobalAccount gt IAzApplication2 azApp GetAzApplication foreach IAzRole azRole in azApp Roles try foreach String accountName in Object azRole MembersName 71 accounts Add new DhcpAzGlobalAccount accountName DhcpAzGlobalRole Enum Parse typeof DhcpAzGlobalRole azRole Name true finally FreeCom azRole false if accounts Count 0 return null return accounts ToArray public static void RemoveGlobalPermission DhcpAzGlobalRole globalRole String account lock _Lock IAzRole azRole null try azRole GetAzApplication OpenRole Enum GetName typeof DhcpAzGlobalRole globalRole null azRole DeleteMemberName account null azRole Submit 0 null catch COMException ex ERROR element not found if uint ex ErrorCode 0x80070490 throw finally FreeCom azRole false private static void DeleteCustomAzScope String scope IAzApplication2 azApp GetAzApplication try azApp
112. ould be specifically deleted before converting the her type ERROR_DHCP_IPRANGE_CONV_ILLEGAL 20049 Description The network has changed Retry this operation after checking for network changes Network changes may be caused by interfaces that are new or invalid or by IP addresses that are new or invalid ERROR_DHCP_NETWORK_CHANGED 20050 Description The bindings to internal IP addresses cannot be modified ERROR_DHCP_CANNOT_MODIFY_BINDINGS 20051 Description The DHCP scope parameters are incorrect Either the scope already exists or its properties are inconsistent with the subnet address and mask of an existing scope J ERROR_DHCP_SUBNET_EXISTS_2 20052 Description The DHCP multicast scope parameters are incorrect Either the scope already exists or its properties are inconsistent with the subnet address and mask of an existing scope ERROR_DHCP_MSCOPE_EXISTS 20053 Description The multicast scope range must have at least 256 IP addresses ERROR_DHCP_MSCOPE_RANGE_TOO_SMALL 20054 Description The DHCP server could not contact Active Directory ERROR_DDS_NO_DS_AVAILABLE 20070 Description The DHCP service root could not be found in Active Directory ERROR_DDS_NO_DHCP_ROOT 20071 Description An unexpected error occurred while accessing Active Directory ERROR_DDS_UNEXPECTED_ERROR 20072 Description There were too many errors to proceed
113. pIpRange mainpool 0 se Data new DhcpIpRange DhcpSubnetElementDataType DhcpExcludedIpRanges DhcpSubnetElementData exPools se EnumAll server foreach DhcpSubnetElementData pool in exPools pools Add DhcpIpRange pool return pools ToArray endregion network network region Lease Ops public static List lt DhcpClient gt EnumLeases DhcpIpAddress server DhcpIpAddress return DhcpClient EnumAll server network public static void CreateLease DhcpIpAddress server DhcpClient lease lease Create server public static void UpdateLease DhcpIpAddress server DhcpClient lease lease Update server public static void DeleteLease DhcpIpAddress server DhcpIpAddress leaselIp DhcpSearchInfo term new DhcpSearchInfo term Type DhcpSearchInfoType IpAddress term IpAddress leaselIp DhcpClient Delete server term endregion region Rez Ops public static void CreateReservation DhcpIpAddress server DhcpIpAddress DhcpReservation res get subnet object for mask DhcpSubnet snet new DhcpSubnet snet Address network snet Get server 96 set internal res and lease objects DhcpIpReservation r new DhcpIpReservation DhcpClient c new DhcpClient r ReservedIp c IpAddress res ReservedIp r ReservedMac c MacAddress res ReservedMac r bAllowedClientTypes res bAllowedClientTypes c SubnetMask snet Mask c Name res Name c Co
114. ponse NativeMethods DhcpSetOptionValueV5 Server ToString 0 this OptionId ClassId null ref NativeScopeInfo ref NativeOptionData if Response 0 throw new DhcpException Response public void Remove DhcpIpAddress Server if this OptionId UInt32 MaxValue this OptionScope null throw new InvalidOperationException Invalid Option Data String ClassId DhcpOptionClassHash ht this ClassType as String Get Scope Setting DHCP_OPTION_SCOPE_INFO NativeScopelInfo this OptionScope ConvertToNative uint Response NativeMethods DhcpRemoveOptionValueV5 Server ToString 0 this OptionId ClassId null ref NativeScopelInfo r if Response 0 throw new DhcpException Response public void Get DhcpIpAddress Server if this OptionId UInt32 MaxValue this OptionScope null ae throw new InvalidOperationException Invalid Option Data String ClassId DhcpOptionClassHash ht this ClassType as String Get Scope Setting DHCP_OPTION_SCOPE_INFO NativeScopelInfo this OptionScope ConvertToNative IntPtr iPtr IntPtr Zero uint Response NativeMethods DhcpGetOptionValueV5 Server ToString 0 this OptionId ClassId null ref NativeScopelInfo out iPtr if Response 0 if iPtr IntPtr Zero NativeMethods DhcpRpcFreeMemory iPtr throw new DhcpException Response DHCP_OPTION_VALUE NativeOptVal DHCP_OPTION_VALUE Marshal PtrToStructure i
115. r was unable to open the database of DHCP clients ERROR_DHCP_DATABASE_INIT_FAILED 20001 Description The DHCP server was unable to start as a Remote Procedure Call RPC server ERROR_DHCP_RPC_INIT_FAILED 20002 Description The DHCP server was unable to establish a socket connection ERROR_DHCP_NETWORK_INIT_FAILED 20003 Description The specified subnet already exists on the DHCP server ERROR_DHCP_SUBNET_EXISTS 20004 Description The specified subnet does not exist on the DHCP server ERROR_DHCP_SUBNET_NOT_PRESENT 20005 Description The primary host information for the specified subnet was not found on the DHCP server ERROR_DHCP_PRIMARY_NOT_FOUND 20006 Description The specified DHCP element has been used by a client and cannot be removed ERROR_DHCP_ELEMENT_CANT_REMOVE 20007 Description The specified option already exists on the DHCP server ERROR_DHCP_OPTION_EXISTS 20009 Description The specified option does not exist on the DHCP server ERROR_DHCP_OPTION_NOT_PRESENT 20010 Description The specified IP address is not available ERROR_DHCP_ADDRESS_NOT_AVAILABLE 20011 Description The specified IP address range has all of its member addresses leased ERROR_DHCP_RANGE_FULL 20012 90 Descr more informati Descr ERROR_ Descr ERROR iption An error occurred while accessing the DHCP JET d
116. rToStructure nativeElement Data typeof DHCP_IP_RESERVATION_V4 this ReservediIp new DhcpIpAddress rez ReservedIpAddress this bAllowedClientTypes DhcpSubnetClientType rez bAllowedClientTypes 79 DHCP_CLIENT_UID mac DHCP_CLIENT_UID Marshal PtrToStructure rez ReservedForClient typeof DHCP_CLIENT_UID if mac DataLength lt 5 return byte bytes new byte int mac DataLength 5 Marshal Copy IntPtr mac Data ToInt32 5 bytes 0 int mac DataLength 5 this ReservedMac new DhcpMacAddress bytes internal override DHCP_SUBNET_ELEMENT_DATA_V5 ConvertToNative MemManager Mem if this ReservedIp null throw new InvalidOperationException IpReservation ReservedIp is null if this ReservedMac null throw new InvalidOperationException IpReservation ReservedMac is null DHCP_IP_RESERVATION_V4 rip new DHCP_IP_RESERVATION_V4 rip ReservedipAddress this ReservedIp GetUIntAddress rip bAllowedClientTypes byte this bAllowedClientTypes extra work for mac address Byte mac this ReservedMac GetByteArray DHCP_CLIENT_UID uid new DHCP_CLIENT_UID uid DataLength uint mac Length uid Data Mem AllocByteArray this ReservedMac GetByteArray rip ReservedForClient Mem AllocStruct uid DHCP_SUBNET_ELEMENT_DATA_V5 element new DHCP_SUBNET_ELEMENT_DATA_V5 switch this Type case DhcpSubnetElementDataType DhcpReservedIips eleme
117. rge enterprise network Before this project Microsoft and other available tools for DHCP management consisted of ordinary proprietary tools not open in any way Therefore they could not be molded to fit a user s needs The open nature of DHCP Web Services along with the search and authorization functions provide an almost infinite amount of possible solutions for its owners This form of Service Orientated Architecture changes management of a DHCP server into a non vendor specific DHCP management service on the network Consumers from different computer platforms can now manage the DHCP service despite the fact it is provided by Microsoft The SOA approach also adds longevity to the DHCP management service which could become a legacy application without 95 openness and standardizations Given the lack of tools and options existing before this project DHCP Web Services is a significant accomplishment DHCP Web Services provides flexibility and adaptability not realized until this point This means administrators can now seriously consider the use of Microsoft s DHCP server in their large and complex networks 26 REFERENCES Print Publications Droms02 Droms R and T Lemon The DHCP Handbook 2d ed Sams Indianapolis 2002 Reimer03 Reimer S and M Mulcare Active Directory for Microsoft Windows Server 2003 Technical Reference Microsoft Press Redmond 2003 Electronic Sources Droms97 Droms
118. rver azSubnet Subnet network if azSubnet AccessCheck CreateSubnetExclusion DhcpSecurityOps GetClientContext DhcpAzOps Update ServerOperations CreateSubnetExclusion server network ipExRange else throw new UnauthorizedAccessException CreateSubnetExclusion Access Denied cequires update on subnet 30 public static void DeleteSubnetExclusion DhcpIpAddress server DhcpIpAddress network DhcpIpRange ipExRange DhcpAzSubnetScope azSubnet new DhcpAzSubnetScope azSubnet Server server azSubnet Subnet network if azSubnet AccessCheck DeleteSubnetExclusion DhcpSecurityOps GetClientContext DhcpAzOps Update ServerOperations DeleteSubnetExclusion server network ipExRange else throw new UnauthorizedAccessException DeleteSubnetExclusion Access Denied requires read on iprt public static DhcpClient SubnetFindAllClients DhcpIpAddress server DhcpIpAddress network DhcpClientFilter terms List lt DhcpClient gt allClients ServerOperations SubnetFindAllClients server network terms List lt DhcpClient gt trimedClients new List lt DhcpClient gt TAzClientContext2 ctx DhcpSecurityOps GetClientContext DhcpAzIpRangeScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet network foreach DhcpClient client in allClients azIpRange StartIp client IpAddress if azIpRange AccessCheck SubnetFindAl1lClients ctx Dh
119. rvices public class AzServerOperations region Subnet Ops cequires limited on subnet public static DhcpSubnet EnumSubnets DhcpIpAddress server List lt DhcpSubnet gt allSubnets ServerOperations EnumSubnets server List lt DhcpSubnet gt trimedSubnets new List lt DhcpSubnet gt TAzClientContext2 ctx DhcpSecurityOps GetClientContext DhcpAzSubnetScope azSubnet new DhcpAzSubnetScope azSubnet Server server foreach DhcpSubnet subnet in allSubnets azSubnet Subnet subnet Address if azSubnet AccessCheck EnumSubnets ctx DhcpAzOps Traverse trimedSubnets Add subnet return trimedSubnets ToArray cequires create on servert public static void CreateSubnet DhcpIpAddress server DhcpSubnet network DhcpIpRange ipRange DhcpAzServerScope azServer new DhcpAzServerScope azServer Server server if azServer AccessCheck CreateSubnet DhcpSecurityOps GetClientContext DhcpAzOps Create ServerOperations CreateSubnet server network ipRange else throw new UnauthorizedAccessException CreateSubnet Access Denied crequires delete on server 29 public static void DeleteSubnet DhcpIpAddress server DhcpIpAddress network DhcpAzServerScope azServer new DhcpAzServerScope azServer Server server if azServer AccessCheck DeleteSubnet DhcpSecurityOps GetClientContext DhcpAzOps Delete ServerOperations DeleteS
120. s GetUIntAddress ref info If Response 0 throw new DhcpException Response public void Delete DhcpIpAddress server bool force Tf this Address null throw new InvalidOperationException Subnet invalid 73 uint Response NativeMethods DhcpDeleteSubnet server ToString this Address GetUIntAddress force DHCP_FORCE_FLAG DhcpFullForce DHCP_FORCE_FLAG DhcpNoForce if Response 0 throw new DhcpException Response public void Get DhcpIpAddress server if this Address null throw new InvalidOperationException Subnet invalid IntPtr iPtr IntPtr Zero UInt32 Response 0 DHCP_SUBNET_INFO info new DHCP_SUBNET_INFO try Response NativeMethods DhcpGetSubnetInfo server ToString this Address GetUIntAddress out iPtr info DHCP_SUBNET_INFO Marshal PtrToStructure iPtr typeof DHCP_SUBNET_INFO finally if iPtr IntPtr Zero NativeMethods DhcpRpcFreeMemory iPtr this Address new DhcpIpAddress info SubnetAddress this Mask new DhcpIpAddress info SubnetMask this Name info SubnetName this Comment info SubnetComment this State DhcpSubnetState info SubnetState if Response 0 throw new DhcpException Response public void Update DhcpIpAddress server DHCP_SUBNET_INFO info this ConvertToNative j uint Response NativeMethods DhcpSetSubnetInfo server ToString this Address GetUIntAd
121. sic authentication over SSL for user authentication and Authorization Manager AzMan for DHCP authorizations Finally an authorization will be set for the DWS global administrator role this account can begin to use DWS and or start assigning additional authorizations so other users can consume DWS 100 Verify ASP NET 2 0 On webserver Open IIS MMC select Web Service Extensions If ASP NET v2 0 x missing or not in allowed state perform step 3 Register ASP NET in IIS At command prompt Ssystemroot Microsoft NET Framework v2 0 x aspnet_regiis i Setup Service Account On webserver Register serviceaccount for the ability to run a ASP NET 2 0 application properly Ssystemroot Microsoft NET Framework v2 0 x aspnet_regiis ga domain serviceaccount Add modify ACL to systemroot temp directory for local computer group IIS_WPG On dhcpserver Add serviceaccount to local computer group DHCP Administrators Create Application Pool On webserver Open IIS MMC right client Application Pools gt New gt Application Pool Name DWSAppPool OK Assign serviceaccount to app pool identity Right client new pool gt properties gt Identity Tab Select Configurable User domain serviceaccount Install and Configure DWS On webserver Copy dws directory from DWS media to dwsroot If dwsroot is located in website s root directory usually C Inetpub wwwroot skip to step X Otherwise create a IIS virtual directory to
122. t se SubnetAddress network se Data new BootpIpRange DhcpSubnetElementDataType DhcpIpRangesDhcpBootp DhcpSubnetElementData array se EnumAll server se Data array 0 se Remove server true try Add new ranage se Data ipRange se Add server catch Exception e rollback 94 se Data array 0 se Add server throw e public static void DeleteSubnet DhcpIpAddress server DhcpIpAddress network DhcpSubnet sub new DhcpSubnet sub Address network sub Delete server true public static void CreateSubnetExclusion DhcpIpAddress server DhcpIpAddress network DhcpIpRange ipExRange if ipExRange Type DhcpSubnetElementDataType DhcpExcludedIpRanges throw new Exception SubnetElementData incorrect type Add Exclusion Range DhcpSubnetElement se new DhcpSubnetElement se SubnetAddress network se Data ipExRange se Add server public static void DeleteSubnetExclusion DhcpIpAddress server DhcpIpAddress network DhcpIpRange ipExRange if ipExRange Type DhcpSubnetElementDataType DhcpExcludedIpRanges throw new Exception SubnetElementData incorrect type Add Exclusion Range DhcpSubnetElement se new DhcpSubnetElement se SubnetAddress network se Data ipExRange se Remove server true public static List lt DhcpClient gt SubnetFindAllClients DhcpIpAddress server DhcpIpAddress network DhcpClientFilter terms re
123. t can be user or group in domain or localhost Recycle DWSAppPool in IIS MMC after change Verify DWS https localhost dwsdir DhcpSecurity asmx Multiple DHCP Servers DWS can support the management of multiple DHCP servers by adding serviceaccount to another DHCP server s local computer group DHCP Administrators The same action completed in step 3 of section Setup Service Account Consume User accounts that either belong to the GlobalAdministrators application group or builtin administrators group of webserver can begin to use DWS clients to consume the web services See DWS Management Console client MMC 3 0 documentation and Perl client samples on DWS media 102 APPENDIX C DHCP Web Services MMC Documentation Requirements Microsoft NET 2 0 Microsoft Management Console MMC 3 0 MMC 3 0 is native for Windows Server 2003 R2 and Vista MMC 3 0 for Windows Server 2003 and XP http support microsoft com kbid 907265 Installation Run install bat found in the same directory as this document To start DWS MMC double click the Microsoft Common Console Document dws msc Custom consoles can be created by making a new MSC file Start gt Run gt MMC File gt Add Remove Snap in Add DHCP Web Services Console DWS MMC can be uninstalled by running uninstall bat Usage DWS MMC allows users to consume DHCP Web Services from a Windows OS platform DWS MMC can support multiple user profiles within a console
124. t32 i Marshal SizeOf typeof DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA_ELEMENT Marshal PtrToStructure iPtr typeof DHCP_OPTION_DATA_ELEMENT this Data i element DWordOption internal override DHCP_OPTION_DATA ConvertToNative MemManager Mem if this Data Length 0 throw new InvalidOperationException OptionValue No data to convert DHCP_OPTION_DATA_ELEMENT element DHCP_OPTION_DATA data new DHCP_OPTION_DATA data NumElements UInt32 this Data Length data Elements Mem AllocArray typeof DHCP_OPTION_DATA_ELEMENT data NumElements IntPtr iptr for int i 0 i lt data NumElements i element new DHCP_OPTION_DATA_ELEMENT element OptionType DHCP_OPTION_DATA_TYPE DhcpDWordOption element DWordOption this Data i iptr IntPtr data Elements ToInt32 i Marshal SizeOf typeof DHCP_OPTION_DATA_ELEMENT Marshal StructureToPtr element iptr false return data public class DhcpOptionDataDwordDword DhcpOptionData public UInt64 Data public DhcpOptionDataDwordDword this Type DhcpOptionDataType DWordDWordType public DhcpOptionDataDwordDword UInt64 ddwords base DhcpOptionDataType DWordDWordType this Data ddwords internal DhcpOptionDataDwordDword DHCP_OPTION_DATA NativeOptData if NativeOptData NumElements 0 NativeOptData Elements IntPtr Zero throw new ArgumentException DHCP_OPT
125. tToNative MemManager Mem if this StartAddress null throw new InvalidOperationException BootpIpRange StartAddress is null if this EndAddress null throw new InvalidOperationException BootpIpRange EndAddress is null DHCP_BOOTP_IP_RANGE bipr new DHCP_BOOTP_IP_RANGE bipr StartAddress this StartAddress GetUIntAddress bipr EndAddress this EndAddress GetUIntAddress bipr MaxBootpAllowed this MaxBootpAllowed bipr BootpAllocated this BootpAllocated DHCP_SUBNET_ELEMENT_DATA_V5 element new DHCP_SUBNET_ELEMENT_DATA_V5 switch this Type case DhcpSubnetElementDataType DhcpIpRangesBootpOnly element ElementType DHCP_SUBNET_ELEMENT_TYPE_V5 DhcpIpRangesBootpOnly break case DhcpSubnetElementDataType DhcpIpRangesDhcpBootp element ElementType DHCP_SUBNET_ELEMENT_TYPE_V5 DhcpIpRangesDhcpBootp break default throw new DhcpException 1629 element Data Mem AllocStruct bipr return element public class DhcpIpReservation DhcpSubnetElementData public DhcpIpAddress ReservedIp public DhcpMacAddress ReservedMac public DhcpSubnetClientType bAllowedClientTypes public DhcpIpReservation this Type DhcpSubnetElementDataType DhcpReservedIps internal DhcpIpReservation DHCP_SUBNET_ELEMENT_DATA_V5 nativeElement this Type DhcpSubnetElementDataType nativeElement ElementType DHCP_IP_RESERVATION_V4 rez DHCP_IP_RESERVATION_V4 Marshal Pt
126. te audit tasks or to gather forensics information Additionally a network application could use this functionality to create a network switch database in which MAC addresses are mapped to known IP addresses in the DHCP server In this application MAC addresses would be collected from network switches and their corresponding IP addresses from the DHCP server to create relational database structures Network administrators could then query these relational databases to provide client IP address and network switch relationship information 2 3 Authorization The third innovation and second function added to the management system the authorization layer of DHCP Web Services allows scope sensitive role based access controls over the DHCP server In general this means it allows user accounts various access rights to DHCP objects within the server that normally only a server administrator could manipulate More specifically authorization scopes were defined in this application at three levels in a DHCP server at the server subnet and IP range levels Each of these scopes contains three possible role assignments Owner Manager and Auditor User accounts are assigned roles within scopes which means those accounts would have particular rights to DHCP objects for a particular layer of the DHCP server but not for others Therefore if a user is assigned the Manager role he is allowed to read and update DHCP objects but not create nor del
127. the default Dynamic DNS option value for that subnet The DHCP Server Operations layer is also where the search functions of DHCP Web Services were implemented These search functions are implemented at two DHCP levels server and subnet with two types of data returns making four search functions all together At the subnet level the search function enumerates all client leases belonging to that subnet matching leases based on a regular expression pattern The search function does the same at the server level but instead of searching only one subnet it searches all of the server s subnets The search function can return all leases it finds or it can return just the first lease it finds forgoing any other matching The four search functions are known in the code base as DncpServerFindOne DhcpServerFindA11 DhcpSubnetFindOne and DhcpSubnetFindA1ll Each function uses NET regular expressions to match client leases based on hostname IP address or MAC address In addition these patterns can be combined to 16 create a more detailed search filter Search functions execute a logical AND condition on non null search patterns For example for a search filter with a hostname pattern equal to a a MAC address pattern equal to A3 and the IP address pattern null or empty the search function would return all client leases where the client hostname begins with the letter a and the MAC address ends
128. tly increase the flexibility and appeal of Microsoft s DHCP server 2 1 Open Management The open management interface is provided through SOAP SOAP is a standardized messaging protocol usually transported via HTTP This open interface can be considered a Service Oriented Architecture SOA in which the DHCP server management functions are offered in the form of services allowing users to consume those services for a particular need SOAP is a protocol implemented by most development platforms including NET Java and Perl It consists of XML based messages that are passed to and from web services and their clients While SOAP is a standardized protocol small implementation variations within a development platform can lead to web service and consumer communication issues WS I is needed to constrain SOAP with implementation and interoperability guidelines so platforms will be able to communicate seamlessly The open management framework developed as part of this project is provided through ASP NET web services that use SOAP and conform to the WS I Basic Profile 1 1 This open service architecture is the most important feature of the DHCP Web Services project because SOAP combined with WS I to create a standardized method for management tools to interface with Microsoft s DHCP server This allows administrators the ability to be creative when solving DHCP related issues An administrator can develop solutions based in any platform that imp
129. turn DhcpClient EnumAll server network FindAll terms Filter public static DhcpClient SubnetFindOneClient DhcpIpAddress server DhcpIpAddress network DhcpClientFilter terms return DhcpClient EnumAll server network Find terms Filter public static List lt DhcpClient gt ServerFindAllClients DhcpIpAddress server DhcpClientFilter terms List lt DhcpSubnet gt subnets DhcpSubnet EnumAll server List lt DhcpClient gt clients new List lt DhcpClient gt foreach DhcpSubnet net in subnets clients AddRange DhcpClient EnumAll server net Address FindAll terms Filter return clients public static DhcpClient ServerFindOneClient DhcpIpAddress server DhcpClientFilter terms List lt DhcpSubnet gt subnets DhcpSubnet EnumAll server 95 DhcpClient client null foreach DhcpSubnet net in subnets client DhcpClient EnumAll server net Address Find terms Filter if client null return client return client public static DhcpIpRange EnumPools DhcpIpAddress server DhcpIpAddress network List lt DhcpIpRange gt pools new List lt DhcpIpRange gt 3 DhcpSubnetElement se new DhcpSubnetElement se SubnetAddress network use DhcpIpRangesDhcpBootp to get Main Range of any type se Data new DhcpIpRange DhcpSubnetElementDataType DhcpIpRangesDhcpBootp DhcpSubnetElementData mainpool se EnumAll server pools Add Dhc
130. ublic String Ip get return ip IPAddress outIp if IPAddress TryParse value out outIp ip IPAddress Any ToString throw new FormatException IpAddress invalid format ip value public override String ToString return Ip public UInt32 GetUIntAddress return DhcpIpAddress Str2UInt this ip public static UInt32 Str2UInt String IpString IPAddress ip IPAddress Parse IpString byte ipBytes ip GetAddressBytes UInt32 ipUInt UInt32 ipBytes 0 lt lt 24 ipUInt UInt32 ipBytes 1 lt lt 16 ipUInt UInt32 ipBytes 2 lt lt 8 ipUInt UInt32 ipBytes 3 return ipUInt public static String UInt2Str UInt32 IpUInt IPAddress ip new IPAddress IpUInt string strIp ip ToString Split return strip 3 bo bestriIp 2c 7 A strip 2 boa eb strip 0 DHCP Server Management Objects File DhcpMacAddress cs Namespace Unf Dhcp Smo 45 c Jason Rupard School of Computing University of North Florida using System using System Collections Generic using System Text using System Text RegularExpressions using System Net NetworkInformation namespace Unf Dhcp Smo public class DhcpMacAddress public DhcpMacAddress this mac 000000000000 public DhcpMacAddress String MacString this Mac MacString public DhcpMacAddress Byte MacBytes PhysicalAddress InMac new PhysicalAddress
131. ubnet server network DhcpAzSubnetScope azSubnet new DhcpAzSubnetScope azSubnet Server server azSubnet Subnet network DhcpSecurityOps RemoveAzSubnetAzIpRanges azSubnet else throw new UnauthorizedAccessException DeleteSubnet Access Denied cequires update on subnet public static void UpdateSubnet DhcpIpAddress server DhcpSubnet network DhcpAzSubnetScope azSubnet new DhcpAzSubnetScope azSubnet Server server azSubnet Subnet network Address if azSubnet AccessCheck UpdateSubnet DhcpSecurityOps GetClientContext DhcpAzOps Update ServerOperations UpdateSubnet server network else throw new UnauthorizedAccessException UpdateSubnet Access Denied cequires update on subnet public static void UpdateSubnetRange DhcpIpAddress server DhcpIpAddress network DhcpIpRange ipRange DhcpAzSubnetScope azSubnet new DhcpAzSubnetScope azSubnet Server server azSubnet Subnet network if azSubnet AccessCheck UpdateSubnetRange DhcpSecurityOps GetClientContext DhcpAzOps Update ServerOperations UpdateSubnetRange server network ipRange else throw new UnauthorizedAccessException UpdateSubnetRange Access Denied cequires update on subnet public static void CreateSubnetExclusion DhcpIpAddress server DhcpIpAddress network DhcpIpRange ipExRange DhcpAzSubnetScope azSubnet new DhcpAzSubnetScope azSubnet Server se
132. use the sec ERROR_D ption The CP server is ignoring a request from another DHCP server ond server is a member of a different directory service enterprise CP_ROGUE_NOT_OUR_ENTERPRISE 20042 S D E S D at Descri the network If t n if workgroup it i ERROR_D Descr ERROR ption The DHCP server has detected a directory service environment on there is a directory service on the network the DHCP server can only part of the directory service Since the server ostensibly belongs to a s terminating CP_STANDALONE_IN_DS 20043 ption The specified DHCP class name CP_CLASS_NOT_FOUND 20044 is unknown or invalid i D Descri w ERROR_D ption The specified DHCP class name or information is already in CP_CLASS_ALREADY_EXISTS 20045 Descri not exceed 256 ERROR ption The specified DHCP scope name characters CP_SCOPE_NAME_TOO_LONG 20046 is too long the scope name must Descr ERROR ption The default scope is already configured on the server CP_DEFAULT_SCOPE_EXISTS 20047 Descr ERROR D I D ae D ption The Dynamic BOOTP attribute cannot be turned on or off CP_CANT_CHANGE_ATTRIBUTE 20048 Descri Only scope is Either the DHCP scope to the ot ption Conversion of a scope to a DHCP Only scope or to a BOOTP not allowed when the scope contains other DHCP and BOOTP clients or BOOTP clients sh
133. utKind Sequential internal struct DHCP_CLIENT_UID public UInt32 DataLength public IntPtr Data StructLayout LayoutKind Sequential internal struct DHCP_BINARY_DATA public UInt32 DataLength public IntPtr Data StructLayout LayoutKind Sequential internal struct DATE_TIME public UInt32 dwLowDateTime public UInt32 dwHighDateTime public DATE_TIME DateTime date if date DateTime MaxValue this dwLowDateTime this dwHighDateTime UInt32 MaxValue 89 return if date DateTime MinValue this dwLowDateTime this dwHighDateTime UInt32 MinValue return this dwLowDateTime UInt32 date ToFileTime amp OxFFFFFFFF this dwHighDateTime UInt32 date ToFileTime amp Ox7FFFFFFF00000000 gt gt 32 public DateTime Convert if this dwHighDateTime 0 amp amp this dwLowDateTime 0 return DateTime MinValue if this dwHighDateTime int MaxValue amp amp this dwLowDateTime UInt32 MaxValue return DateTime MaxValue return DateTime FromFileTime long this dwHighDateTime lt lt 32 UInt32 this dwLowDateTime public override string ToString return this Convert ToString endregion region DhcpsapiError internal enum DhcpsapiErrorType uint Description The DHCP server registry initialization parameters are incorrect ERROR_DHCP_REGISTRY_INIT_FAILED 20000 Description The DHCP serve
134. uthorizedAccessException DeleteLease Access Denied endregion region Rez Ops requires ipt create public static void CreateReservation DhcpIpAddress server DhcpIpAddress network DhcpReservation res DhcpAzIpRangeScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet network azIpRange StartIp res ReservedIp if azIpRange AccessCheck CreateReservation DhcpSecurityOps GetClientContext DhcpAzOps Create ServerOperations CreateReservation server network res else throw new UnauthorizedAccessException CreateReservation Access Denied requires ipt update public static void UpdateReservation DhcpIpAddress server DhcpIpAddress network DhcpReservation res 3335 DhcpAzIpRangeScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet network azIpRange StartIp res ReservedIp if azIpRange AccessCheck UpdateReservation DhcpSecurityOps GetClientContext DhcpAzOps Update ServerOperations UpdateReservation server network res else throw new UnauthorizedAccessException UpdateReservation Access Denied requires ip delete public static void DeleteReservation DhcpIpAddress server DhcpIpAddress network DhcpIpAddress resIp DhcpAzIpRangeScope azIpRange new DhcpAzIpRangeScope azIpRange Server server azIpRange Subnet network azIpRange StartIp resIp if azIpRange A
135. with byte A3 The search functions round out the DHCP Server Operations layer giving way to the next layer which implements the newly created authorization functionality 3 4 Authorization The authorization layer and the final web services layer of DHCP Web Services are tightly coupled with both existing in the same namespace Unf Dhcp Smo WebServices The idea behind this was to allow developers unfettered access to the DHCP Server Operations layer if they did not need the authorization or web services layers While this may seem counterintuitive to the purpose of the project this is another option an administrator or developer might appreciate when it comes to DHCP Web Services as a whole This option leaves open the opportunity for a developer to create his own management tool using the SMO library Based in the authorization layer the Authorized DHCP Server Operations or AzServerOperations class in the Unf Dhcp Smo WebServices namespace are one to one function mappings of the DHCP Server Operations layer with added access controls This layer uses two methods to enforce these access 17 controls The first is a direct allow deny method If a user does not have sufficient authorization access to complete an operation like CreateSubnet the operation will throw an unauthorized exception Otherwise the operation will allow the creation to occur The second method is security trimming In this approach DHCP
136. xperience engineering Linux and Windows server system solutions and developed major academic projects using C C C and Java Jason has used C C PERL and SQL to develop solutions during his professional career He enjoys computer games and administrating on line game communities Jason hopes to be a major 110 contributor to an open source project in the future Married for the last 2 5 years Jason has one child William age 7 months 111

DHCP Web Services - Jason Rupard

Contents

Download Pdf Manuals

Related Search

Related Contents