Re: [Freeipa-users] URL is changing on the browser

2016-11-28 Thread Jan Pazdziora
On Mon, Nov 28, 2016 at 01:15:17AM +, Deepak Dimri wrote: > Adding Jan into the email thread. Hopefully Jan can help too I'm sorry but there seem to be different people chiming into this thread with their use-cases and we really need to be talking ont setup at a time. What is the setup that y

Re: [Freeipa-users] URL is changing on the browser

2016-11-27 Thread Deepak Dimri
Adding Jan into the email thread. Hopefully Jan can help too Best Regards, Deepak From: Deepak Dimri Sent: Sunday, November 27, 2016 8:08 PM To: Chris Dagdigian Subject: Re: [Freeipa-users] URL is changing on the browser Hello Chris, Were you able to get

Re: [Freeipa-users] URL is changing on the browser

2016-11-14 Thread Deepak Dimri
hi chris, i have the setup working fine with ELB -> apache reverse proxy on Fedora (public subnet) -> ipa (private subnet). i want to use ubuntu instead of Fedora for the reverse proxy and i am unable to make the reverse proxy works on unbuntu with all the configurations we need for ipa. it wou

Re: [Freeipa-users] URL is changing on the browser

2016-11-14 Thread Chris Dagdigian
I'm still interested in this topic as our IPA servers are on private AWS subnets and it would be really nice to have an internal AWS ALB or ELB be the user-facing interface so we can route traffic between IPA systems and only "advertise" a single hostname for access. Plus it would be great to

Re: [Freeipa-users] URL is changing on the browser

2016-11-14 Thread Deepak Dimri
we discussed the options internally and finally decided to host ipa within the private subnets - our security team wast too comfortable to expose ipa servers on to the public network. Sent from my iPhone > On 14-Nov-2016, at 17:56, Jan Pazdziora wrote: > >> On Mon, Nov 14, 2016 at 08:49:34

Re: [Freeipa-users] URL is changing on the browser

2016-11-14 Thread Jan Pazdziora
On Mon, Nov 14, 2016 at 08:49:34AM +0100, Martin Basti wrote: > On 13.11.2016 16:33, Deepak Dimri wrote: > > > > I have my IPA servers hosted in the AWS private subnets and i can access > > them using AWS elb URL from public internet just fine. The problem is > > that when i enter https:///index.

Re: [Freeipa-users] URL is changing on the browser

2016-11-14 Thread Peter Fern
On 14/11/16 20:39, Troels Hansen wrote: > > > - On Nov 14, 2016, at 9:38 AM, Peter Fern > wrote: > > > I'd be interested to hear from anyone who has a working recipe for > HA/load-balancing (with HAProxy preferably). Cookie rewriting is > doable, but I can't see a way to rewrite t

Re: [Freeipa-users] URL is changing on the browser

2016-11-14 Thread deepak dimri
Hi Martin, Thank you so much for your reply. I am kinda stuck with this issue with no headway! I have AWS ELB pointing to my IPA Servers fine - basically ELB is allowing me to access IPA servers externally. As per the link you shared i need a front end proxy configured with mod_ssl does that i n

Re: [Freeipa-users] URL is changing on the browser

2016-11-14 Thread Troels Hansen
- On Nov 14, 2016, at 9:38 AM, Peter Fern wrote: > I'd be interested to hear from anyone who has a working recipe for > HA/load-balancing (with HAProxy preferably). Cookie rewriting is doable, but I > can't see a way to rewrite the referrer for multiple backend hosts. One (quite hack-ish) wa

Re: [Freeipa-users] URL is changing on the browser

2016-11-14 Thread Peter Fern
On 14/11/16 18:49, Martin Basti wrote: > Hello, > > this may help you > > https://www.adelton.com/freeipa/freeipa-behind-proxy-with-different-name > https://www.adelton.com/freeipa/freeipa-behind-ssl-proxy > > I'd be interested to hear from anyone who has a working recipe for HA/load-balancing (wi

Re: [Freeipa-users] URL is changing on the browser

2016-11-13 Thread Martin Basti
On 13.11.2016 16:33, Deepak Dimri wrote: Hi All, I have my IPA servers hosted in the AWS private subnets and i can access them using AWS elb URL from public internet just fine. The problem is that when i enter https:///index.htl (dummy index.html hosted on IPA) i can access index.html