Hi Karim, On Tue, Jun 11, 2019 at 1:56 PM Karim Bourenane via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote: > > Hello team > > Hope you are well. > > After an existing installation, we decide to implement a Haproxy + Keepalive > in all our IPA's servers. > > The haproxy / keepalive work weel but now the IPA doent run weel, because he > want to listen on all interface in the servers. > > Ho i can to modify the IPA (+ all modules KRB5/DNS...) conf server, to bind > only in 1 local interface and not to the VIP interface ?
Binding to the local interface is in no way expected and will result in some components not working. I am not aware of any scenario where adding HAProxy+Keepalived in front of FreeIPA would provide a tangible benefit. Could you please explain the reasoning behind such a decision? Regards, François > King regard > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org