I haven’t tried this for the IPA server, but we have servers with two interfaces, one for
general use and one as a storage backend network.
We can’t just list both IPs in an A record, because then normal traffic will try to go
through the backend, which it can’t get to.
What I ended up doing was maintaining a separate /etc/hosts for the machines with dual
interfaces on the backend network. That file shows both IPs for each of the hosts as
associated with the main hostname. Systems without an interface on that network don’t get
that /etc/hosts, so they only see the primary address.
Then we use /etc/gai.conf to tell DNS to prefer the backend address. Of course that file
is installed only on the dual-interface hosts.
We use anbiel to distribute the files, so keeping them up to date and in sync isn’t a
problem, but we do have to add an entry to the special /etc/hosts everything we add a host
with a second interface on that network.
I would guess that some variation of this might help with your situation.
On Jan 20, 2020, at 8:24 AM, Tony Brian Albers via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
On Mon, 2020-01-20 at 13:55 +0200, Alexander Bokovoy wrote:
> On ma, 20 tammi 2020, Tony Brian Albers via FreeIPA-users wrote:
>> Ok guys,
>>
>> I have a FreeIPA server with 2 interfaces. The primary is for
>> normal
>> usage and is the one that FreeIPA is set up with with regards to
>> hostname and services. The other one is on an administrative
>> network.
>> The Web UI works fine on the primary interface, but I can't really
>> access it on the other interface. It's obvious that the services
>> bind
>> to the primary interface, but isn't it possible to access the UI on
>> the
>> other interface somehow?
>
> Short answer: not now.
> For details see
>
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>
Thx Alex,
I guess we'll manage without.
/tony
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...