Re: [Freeipa-users] IPA Web UI behind proxy

2015-04-27 Thread Benjamen Keroack
Hi Fraser, I actually attempted that procedure ( https://www.freeipa.org/page/Using_3rd_part_certificates_for_HTTP/LDAP) but it completely broke my IPA install. I could no longer log in with any users including admin, enrollment/client auth broke, etc. Unfortunately I couldn't find any way to roll

Re: [Freeipa-users] IPA Web UI behind proxy

2015-04-26 Thread Fraser Tweedale
On Fri, Apr 24, 2015 at 11:45:23AM -0700, Benjamen Keroack wrote: > Hi, > > Does anybody have any experience putting the IPA web UI behind a reverse > proxy? In an attempt to allow our users to access the UI without browser > warnings and without having to add the root CA certificate to their trus

[Freeipa-users] IPA Web UI behind proxy

2015-04-24 Thread Benjamen Keroack
Hi, Does anybody have any experience putting the IPA web UI behind a reverse proxy? In an attempt to allow our users to access the UI without browser warnings and without having to add the root CA certificate to their trusted store (there was some resistance to that idea), I set up an nginx server