Re: [Freeipa-users] Deploying freeipa behind nginx

2014-02-03 Thread Steve Severance
So I understand the mitigation of CSRF attacks. I would like ipa to be able to handle a specific set of referers. My use case may be less common since my freeipa instance is handling our server infrastructure not desktops. I have everything working now. Here is an example nginx server config in ca

Re: [Freeipa-users] Deploying freeipa behind nginx

2014-02-03 Thread Alexander Bokovoy
On Mon, 03 Feb 2014, Steve Severance wrote: Yes it works if I specify the -s as ldap.mycorp.com. So we have progress! It now appears to authenticate fine when it posts the session but I have a new error. I get an Ipa Error 911 "Missing HTTP referer. You have to configure your browser to send HT

Re: [Freeipa-users] Deploying freeipa behind nginx

2014-02-03 Thread Steve Severance
Yes it works if I specify the -s as ldap.mycorp.com. So we have progress! It now appears to authenticate fine when it posts the session but I have a new error. I get an Ipa Error 911 "Missing HTTP referer. You have to configure your browser to send HTTP referer header." I assume this is because t

Re: [Freeipa-users] Deploying freeipa behind nginx

2014-01-31 Thread Steve Severance
Hi Dmitri, I am using Free Ipa 3.1.5 on Fedora 18. The design basically looks like the following. All of this is hosted at AWS in our VPC. The nginx box is on a web addressable subnet while the FreeIPA box is on a private subnet that is not internet accessible. My goal is to be able to use the we

Re: [Freeipa-users] Deploying freeipa behind nginx

2014-01-29 Thread Dmitri Pal
On 01/28/2014 05:29 PM, Steve Severance wrote: > Hi Everyone, > > I have deployed freeipa inside our production network. I want to be > able to access the web ui so I am attempting to add it to our nginx > edge machine. I can pass the requests upstream just fine but I am > unable to login using a u

Re: [Freeipa-users] Deploying freeipa behind nginx

2014-01-29 Thread Sumit Bose
On Tue, Jan 28, 2014 at 02:29:07PM -0800, Steve Severance wrote: > Hi Everyone, > > I have deployed freeipa inside our production network. I want to be able to > access the web ui so I am attempting to add it to our nginx edge machine. I > can pass the requests upstream just fine but I am unable t

Re: [Freeipa-users] deploying FreeIPA

2009-12-14 Thread John Dennis
On 12/12/2009 12:50 AM, jose mora wrote: hello how is everyone doing? I do have a request, can you help me Deploying FreeIPA? I would apreciate any kind of help thank you for your time Jose Mora We would like to help you but first you need to tell us what you need help with. -- John Dennis

Re: [Freeipa-users] Deploying FreeIPA 1.2.2 on RHEL 5

2009-11-05 Thread Loris Santamaria
El jue, 05-11-2009 a las 15:38 -0500, Sam Hartsfield escribió: > Hello, > > I am interested in deploying FreeIPA along with my company's software > to allow us to implement Single Sign On. All of our software is > deployed on Red Hat Enterprise Linux, so I would like to get the > FreeIPA server to