Actions
Feature #9807
openAdd support to Smart-Proxy for 'HA' services
Status:
New
Priority:
Normal
Assignee:
-
Category:
Realm
Target version:
-
Description
When attempting to run Smart-Proxy against a 'HA' FreeIPA setup using the 'realm' module, currently SP loads the IPA XMLRPC_URI value from '/etc/ipa/default.conf'.
However this URL will point at a single FreeIPA server, with no automatic fail-over.
Therefore if that FreeIPA server is unavailable, SP will be unable to talk to FreeIPA.
Couple of suggestions after talking with ohadlevy/stbenham on IRC:- Add support for using SRV records, so that SP can switch between servers.
- Add support for running SP behind a load-balancer. SSL possibly the limiting factor on this one.
- Add support for associating multiple SP's with a REALM resource. Foreman can then choose which SP to talk to for the given action.
Actions