[Freeipa-users] IPA Server UI Behind Proxy

2013-08-14 Thread Andrew Lau
Hi, I've got my FreeIPA setup in an internal infrastructure, but I want to be able to have users access the web UI externally. I tweaked the ipa-rewrite.conf so it won't redirect me to the FQDN and then tried both a nginx reverse proxy and port forwarding, both works if the client manually sets

Re: [Freeipa-users] IPA Server UI Behind Proxy

2013-08-14 Thread Alexander Bokovoy
On Wed, 14 Aug 2013, Andrew Lau wrote: Hi, I've got my FreeIPA setup in an internal infrastructure, but I want to be able to have users access the web UI externally. I tweaked the ipa-rewrite.conf so it won't redirect me to the FQDN and then tried both a nginx reverse proxy and port forwarding,

Re: [Freeipa-users] IPA Server UI Behind Proxy

2013-08-14 Thread Andrew Lau
I followed your suggestions without much luck. Adding the kerberos keytab didn't change anything, when I try login through the UI it just redirects me again with the same notice: Your session has expired. Please re-login. However if I login with the incorrect details logs will show INFO: 401

Re: [Freeipa-users] IPA Server UI Behind Proxy

2013-08-14 Thread Petr Vobornik
On 08/14/2013 08:00 AM, Andrew Lau wrote: Hi, I've got my FreeIPA setup in an internal infrastructure, but I want to be able to have users access the web UI externally. I tweaked the ipa-rewrite.conf so it won't redirect me to the FQDN and then tried both a nginx reverse proxy and port

Re: [Freeipa-users] IPA Server UI Behind Proxy

2013-08-14 Thread Andrew Lau
Any suggestions or workaround, short of having to switch the IPA's hostname to use a public domain? Andrew On Wed, Aug 14, 2013 at 5:36 PM, Petr Vobornik pvobo...@redhat.com wrote: On 08/14/2013 08:00 AM, Andrew Lau wrote: Hi, I've got my FreeIPA setup in an internal infrastructure, but I

Re: [Freeipa-users] IPA Server UI Behind Proxy

2013-08-14 Thread Simo Sorce
On Wed, 2013-08-14 at 09:23 +0300, Alexander Bokovoy wrote: On Wed, 14 Aug 2013, Andrew Lau wrote: Hi, I've got my FreeIPA setup in an internal infrastructure, but I want to be able to have users access the web UI externally. I tweaked the ipa-rewrite.conf so it won't redirect me to the