Hello Fabrice and my other Read-Only friends!
I never found out why the vips don't listen for http/https by default on the
portal lans - seems nuts. I solved the problem, but I can't help thinking that
this smells a little and that it should have worked without this botch... I'd
love to know that the correct behaviour should be if anyone can tell me.
I solved the problem by ADDING TO HAPROXY.CONF....
frontend portal-http-reg
bind 10.20.70.133:80
reqadd X-Forwarded-Proto:\ http
default_backend portal-reg-backend
frontend portal-https-reg
bind 10.20.70.133:443 ssl no-sslv3 crt /usr/local/pf/conf/ssl/server.pem
reqadd X-Forwarded-Proto:\ https
default_backend portal-reg-backend
backend portal-reg-backend
balance source
option httpclose
option forwardfor
server 10.20.70.134 10.20.70.134:80 check
server 10.20.70.135 10.20.70.135:80 check
But there's just no way that this was "missed out" of the standard build. Any
idea what's wrong with my install that I needed it?
Thanks either way - I still love PF :)
Greg
------------------------------------------------------------------------------
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
