diff --git a/group_vars/print.yml b/group_vars/print.yml
index 27c7c02..71357fb 100644
--- a/group_vars/print.yml
+++ b/group_vars/print.yml
@@ -23,5 +23,6 @@ firewall_raw:
   - "-A INPUT -i eth1 -d 224.0.0.0/8 -j ACCEPT"
   - "-A INPUT -i eth1 -p vrrp -j ACCEPT"
 
+dhcpd_ldap_filter: "(&(objectClass=ieee802Device)(objectClass=ipHost)(cn=*.print.foo.sh))"
 sssd_allow_groups:
   - sysadm
diff --git a/roles/dhcpd/templates/dhcpd.conf.print.j2 b/roles/dhcpd/templates/dhcpd.conf.print.j2
index ca0ab35..da5c2e7 100644
--- a/roles/dhcpd/templates/dhcpd.conf.print.j2
+++ b/roles/dhcpd/templates/dhcpd.conf.print.j2
@@ -29,10 +29,12 @@ shared-network PRINTNET {
         use-host-decl-names on;
     }
 
-    host hp1.print.foo.sh {
-        option host-name "hp1.print.foo.sh";
-        hardware ethernet 00:15:99:22:79:46;
-        fixed-address 172.20.24.101;
+{% for host in ldap_hosts.results %}
+    host {{ host['cn'] }} {
+        option host-name "{{ host['cn'] }}";
+        hardware ethernet {{ host['macAddress'] }};
+        fixed-address {{ host['ipHostNumber'] }};
     }
+{% endfor %}
 
 }