#8467 Unable to access LDAP server - with IPA behind port forwarding firewall
Closed: invalid 3 years ago by toxynoid. Opened 3 years ago by toxynoid.

Issue

I'm trying to install IPA behind a firewall. This firewall forwards public accessible ports to IPA listening on a private ip. When it comes to "configuring certificate server instance" I get:

2020-08-18T13:01:47Z DEBUG args=['/usr/sbin/pkispawn', '-s', 'CA', '-f', '/tmp/tmpb7yi53wd']
2020-08-18T13:01:47Z DEBUG Process finished, return code=1
2020-08-18T13:01:47Z DEBUG stdout=Loading deployment configuration from /tmp/tmpb7yi53wd.
WARNING: The 'pki_ssl_server_token' in [CA] has been deprecated. Use 'pki_sslserver_token' instead.
Installation log: /var/log/pki/pki-ca-spawn.20200818150147.log

2020-08-18T13:01:47Z DEBUG stderr=ERROR: Unable to access LDAP server:

Version/Release/Distribution

frefreeipa-server-4.8.7-1.fc32.x86_64
freeipa-client-4.8.7-1.fc32.x86_64
package ipa-server is not installed
package ipa-client is not installed
389-ds-base-1.4.3.12-1.fc32.x86_64
pki-ca-10.9.0-0.4.fc32.noarch
krb5-server-1.18.2-20.fc32.x86_64

Additional info:

ldap is in fact only listening on IPv6.

Question:

Is this an issue at all or is my config of forwarding ports not supported?


Solved by adding all addresses to "ipa_server_install --ip-address="

Metadata Update from @toxynoid:
- Issue close_status updated to: invalid
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata