Red Hat Bugzilla – Bug 1302906
RFE Document directory server with SASL / GSSAPI behind load balancer
Last modified: 2016-11-21 08:43:07 EST
Suggestions for improvement:
We have made a number of changes to ds, especially setup-ds.pl that now enable the configuration of ldap behind a load balancer with sasl/gssapi.
This is fixed with https://fedorahosted.org/389/ticket/48332 . You can now set the value General.StrictHostCheck=False. This will prevent hostname validation during the installation.
This means you can have a loadbalance, with the hostname lbx.example.com, and a directory server dsa.example.com. You can setup-ds.pl on the ds instance with HostName=lbx.example.com and StrictHostCheck False. You can then create the keytab for ldap/lbx.example.com on dsa.example.com, and it will use it correctly for clients that access the ldap service via lbx.example.com.
*** Bug 1333948 has been marked as a duplicate of this bug. ***
The update for Directory Server 10.1 is now available on the Customer Portal.