Re: [Freeipa-users] freeipa on http?

2015-08-24 Thread Janelle
Going to give this a try today. Thanks so much for taking the time to work this out. ~J On 8/24/15 2:01 AM, Jan Pazdziora wrote: On Thu, Aug 20, 2015 at 02:26:43PM +0200, Jan Pazdziora wrote: On Tue, Aug 18, 2015 at 02:58:50PM -0700, Janelle wrote: Tried that -- but it gives a blank screen.

Re: [Freeipa-users] freeipa on http?

2015-08-24 Thread Jan Pazdziora
On Thu, Aug 20, 2015 at 02:26:43PM +0200, Jan Pazdziora wrote: On Tue, Aug 18, 2015 at 02:58:50PM -0700, Janelle wrote: Tried that -- but it gives a blank screen. I will try playing with it some more. At least I know we are thinking in the same ballpark I was able to set this up just fine

Re: [Freeipa-users] freeipa on http?

2015-08-20 Thread Jan Pazdziora
On Tue, Aug 18, 2015 at 02:58:50PM -0700, Janelle wrote: Tried that -- but it gives a blank screen. I will try playing with it some more. At least I know we are thinking in the same ballpark I was able to set this up just fine with freeipa-server-4.1.4-4.fc22.x86_64. You need to disable the

Re: [Freeipa-users] freeipa on http?

2015-08-18 Thread Simo Sorce
On Tue, 2015-08-18 at 18:01 -0400, Simo Sorce wrote: The load balancer would have to have the exact same name (for the clients) as the IPA server, which may be challenging depending on the network configuration you have. More on that issue here: http://ssimo.org/blog/id_019.html On Tue,

Re: [Freeipa-users] freeipa on http?

2015-08-18 Thread Simo Sorce
On Tue, 2015-08-18 at 17:44 -0700, Janelle wrote: Simo, I read your blog sometime ago and do like it. However in this case, this is only for HTTPS, not kerberos, so the names do not have to match. It is for users managing accounts across any number of hosts. But thank you. There is still

Re: [Freeipa-users] freeipa on http?

2015-08-18 Thread Rob Crittenden
Janelle wrote: Hi, Is there a way to force freeipa web server to accept http requests and not redirect to https? Reason is simple - offloading SSL to a load balancer on the front end. (this is for web only, not the LDAP or Kerberos) Thank you ~J You could try disabling the rewrite rules to

Re: [Freeipa-users] freeipa on http?

2015-08-18 Thread Janelle
Simo, I read your blog sometime ago and do like it. However in this case, this is only for HTTPS, not kerberos, so the names do not have to match. It is for users managing accounts across any number of hosts. But thank you. ~J On 8/18/15 3:02 PM, Simo Sorce wrote: On Tue, 2015-08-18 at

Re: [Freeipa-users] freeipa on http?

2015-08-18 Thread Janelle
Tried that -- but it gives a blank screen. I will try playing with it some more. At least I know we are thinking in the same ballpark Thank you ~J On 8/18/15 1:55 PM, Rob Crittenden wrote: Janelle wrote: Hi, Is there a way to force freeipa web server to accept http requests and not

Re: [Freeipa-users] freeipa on http?

2015-08-18 Thread Simo Sorce
The load balancer would have to have the exact same name (for the clients) as the IPA server, which may be challenging depending on the network configuration you have. On Tue, 2015-08-18 at 14:58 -0700, Janelle wrote: Tried that -- but it gives a blank screen. I will try playing with it some