Re: OCSP update restarts all proxies

2023-10-11 Thread Shawn Heisey
On 10/4/23 09:18, William Lallemand wrote: Nothing in haproxy initiate a service reload, are sure you don't have an external process which is doing it? The systemd support within HAProxy is only meant to provide a status to systemd, it does not send it actions. I found the issue. I am not

R: mfa issue

2023-10-11 Thread Dario Girella
Hi Willy, thanks a lot. Ragards Dario -Messaggio originale- Da: Willy Tarreau Inviato: mercoledì, 11 ottobre 2023 18:02 A: Dario Girella Cc: haproxy@formilux.org Oggetto: Re: mfa issue Hi Dario, On Wed, Oct 11, 2023 at 03:52:05PM +, Dario Girella wrote: > Hi, > i try to user MFA

Re: mfa issue

2023-10-11 Thread Willy Tarreau
Hi Dario, On Wed, Oct 11, 2023 at 03:52:05PM +, Dario Girella wrote: > Hi, > i try to user MFA authentication on my exchange server behind haproxy. > First Access to OWA works fine, when then i allow access by MFA app owa page > doesn't open. > Need particular configuration? Unfortunately

mfa issue

2023-10-11 Thread Dario Girella
Hi, i try to user MFA authentication on my exchange server behind haproxy. First Access to OWA works fine, when then i allow access by MFA app owa page doesn't open. Need particular configuration? Regards Dario

Re: [ANNOUNCE] haproxy-2.9-dev7

2023-10-11 Thread Willy Tarreau
On Wed, Oct 11, 2023 at 02:20:02PM +, Branitsky, Norman wrote: > The sample SAML authentication code saml.ini was provided by HAProxy > Enterprises support. > They also provided: > /opt/hapee-extras/bin/hapee-saml Ah OK I didn't catch that you were talking about this one, shame on me :-)

Re: [ANNOUNCE] haproxy-2.9-dev7

2023-10-11 Thread Willy Tarreau
On Tue, Oct 10, 2023 at 01:20:13PM +, Tristan wrote: > That said, I do have some use-cases at the moment where I actively make use > of SRV records on the backends internally, for which losing support would be > a little annoying, so I can appreciate the will to keep them. These are among the

Re: [ANNOUNCE] haproxy-2.9-dev7

2023-10-11 Thread Branitsky, Norman
The sample SAML authentication code saml.ini was provided by HAProxy Enterprises support. They also provided: /opt/hapee-extras/bin/hapee-saml On Oct 11, 2023, at 9:39 AM, Willy Tarreau wrote: Hi Norman, On Tue, Oct 10, 2023 at 11:44:52AM +, Branitsky, Norman wrote: I use the SPOE for

Re: [ANNOUNCE] haproxy-2.9-dev7

2023-10-11 Thread Willy Tarreau
On Tue, Oct 10, 2023 at 03:04:26PM +0200, Aleksandar Lazic wrote: > > WASM on the other hand would provide more performance and compile-time > > checks but I fear that it could also bring new classes of issues such as > > higher memory usage, higher latencies, and would make it less convenient > >

Re: [ANNOUNCE] haproxy-2.9-dev7

2023-10-11 Thread Willy Tarreau
Hi Norman, On Tue, Oct 10, 2023 at 11:44:52AM +, Branitsky, Norman wrote: > I use the SPOE for SAML authentication with Okta and Azure AD. OK, thanks a lot for sharing your use case. Just out of curiosity, is this a component that you developed yourself (or in your company) or something