Bug 1302906

Summary:	RFE Document directory server with SASL / GSSAPI behind load balancer
Product:	Red Hat Directory Server	Reporter:	wibrown <wibrown>
Component:	Documentation	Assignee:	Marc Muehlfeld <mmuehlfe>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Viktor Ashirov <vashirov>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	10.0	CC:	mmuehlfe, nhosoi, nkinder, pbokoc, rmeggins, vashirov
Target Milestone:	DS10.1
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-11-21 13:43:07 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:
Bug Blocks:	1277834

Description wibrown@redhat.com 2016-01-28 23:23:08 UTC

Suggestions for improvement: 

We have made a number of changes to ds, especially setup-ds.pl that now enable the configuration of ldap behind a load balancer with sasl/gssapi.

This is fixed with https://fedorahosted.org/389/ticket/48332 . You can now set the value General.StrictHostCheck=False. This will prevent hostname validation during the installation.

This means you can have a loadbalance, with the hostname lbx.example.com, and a directory server dsa.example.com. You can setup-ds.pl on the ds instance with HostName=lbx.example.com and StrictHostCheck False. You can then create the keytab for ldap/lbx.example.com on dsa.example.com, and it will use it correctly for clients that access the ldap service via lbx.example.com.

Comment 1 Petr Bokoc 2016-08-30 16:08:51 UTC

*** Bug 1333948 has been marked as a duplicate of this bug. ***

Comment 5 Marc Muehlfeld 2016-11-21 13:43:07 UTC

The update for Directory Server 10.1 is now available on the Customer Portal.