[389-users] Re: SSL configuration on dynamic deployments

2019-05-24 Thread Angel Bosch Mora
> So your 4 write servers are in mmr. Then you have 2 -> N read-onlys > as well which scale up and down. > > Do you plan to have ldap.example.com point to the IP's of the > read-onlys directly? Or to a load balancer? > yes, we already got that. > If this was me, just because of the scaling req

[389-users] Re: SSL configuration on dynamic deployments

2019-05-23 Thread William Brown
> On 23 May 2019, at 17:12, Angel Bosch Mora wrote: > >> I think to answer this, I'd like to see a diagram or description of >> the network and deployment topology you have in mind to help advise >> for what you want to achieve here :) >> > > Is really very simple. Think of it like the typica

[389-users] Re: SSL configuration on dynamic deployments

2019-05-23 Thread Angel Bosch Mora
> I think to answer this, I'd like to see a diagram or description of > the network and deployment topology you have in mind to help advise > for what you want to achieve here :) > Is really very simple. Think of it like the typical MMR with 4 nodes: https://i.imgur.com/DY8aSAo.png but the numbe

[389-users] Re: SSL configuration on dynamic deployments

2019-05-22 Thread William Brown
> On 23 May 2019, at 04:15, Angel Bosch wrote: > > Hi again, > > > continuing with my automation I'm facing now the problem of SSL configuration. > > Using certificates at LB level is not recommended acording to > https://directory.fedoraproject.org/docs/389ds/howto/howto-ssl.html > sharing