Hi all,
Do you know if there is any issue with the following architecture:
* One server connected to multiple VLAN
* One FreeIpa replica listening to multiples interfaces on the different VLAN (with each having different IP addresse)
* one DNS declaration (with a different application name) per VLAN with associated IP address with associated certificate
=> The VLAN segregation is managed manually.
Ex:
I have a freeipa replica named app with:
app1.network.local on VLAN1 / IP1 / certificate 1
app2.network.local on VLAN2 / IP2/ certificate 2
Is there a better architecture?
Does Kerberos will have issues with this configuration?
Thanks for reading.
Olivier