[389-users] Re: nsslapd-haproxy-trusted-ip is ignored

2025-08-21 Thread Mitja Mihelič via 389-users
Documenting my solution for posterity. Please excuse the format of IPs, they are not real. Our HAProxy setup is this - frontend   - 389ds-frontend (7.7.7.7 / 7:7:7::7) - haproxy nodes   - 389ds-hap-1 (1.2.3.4 / 1:2:3::4)   - 389ds-hap-2 (2.3.4.5 / 2:3:4::5) The backend servers - 389ds-node1 - 3

[389-users] Re: nsslapd-haproxy-trusted-ip is ignored

2025-08-01 Thread Viktor Ashirov via 389-users
Hi, with 'send-proxy' HAProxy sends source IP and destination IP. If you're testing this on the same host, your destination IP would be your loopback interface (127.0.0.1 or ::1). [01/Aug/2025:09:48:44.815980034 -0400] conn=11 fd=64 HAProxy new_address_from=127.0.0.1 to new_address_dest=127.0.0.1

[389-users] Re: nsslapd-haproxy-trusted-ip is ignored

2025-08-01 Thread Mitja Mihelič via 389-users
I tried again on version 389-ds-base-3.1.2-3.el9, but I ran into the same error Disconnect - Protocol error - Unknown Proxy - P4 An I missing an obvious setting I should be configuring or might this be a long standing unresolved bug? Best regards, Mitja On 28. 7. 25 09:01, Mitja Mihelič via