Configuration of server on DO droplet in Docker container and clients behind router's NAT

[Georgiy Odisharia]

Hi there,

I know that it is not secure but I have exposed to the internet FreeIPA instance for uniform logging between all my machines. They're reside at my home network behind OpenWRT-based router (behind NAT). Public IP address of router is getting via ISP's DHCP.

I want to properly set up FreeIPA server in Docker container running on the DigitalOcean droplet, set up DNS entries in DigitalOcean panel, and properly set up client for allowing LDAP authentication (sssd.conf, krb5.conf and so on).

I don't know where to start and debug so if anybody will help me in general I would be highly appreciated.

[Rob Crittenden]

Georgiy Odisharia via FreeIPA-users wrote:
> Hi there,
>
> I know that it is not secure but I have exposed to the internet FreeIPA instance for uniform logging between all my machines. They're reside at my home network behind OpenWRT-based router (behind NAT). Public IP address of router is getting via ISP's DHCP.
>
> I want to properly set up FreeIPA server in Docker container running on the DigitalOcean droplet, set up DNS entries in DigitalOcean panel, and properly set up client for allowing LDAP authentication (sssd.conf, krb5.conf and so on).
>
> I don't know where to start and debug so if anybody will help me in general I would be highly appreciated.

I'd suggest starting with https://github.com/freeipa/freeipa-container

rob

[Georgiy Odisharia]

I've successfully installed FreeIPA with container but have some issues with DNS.

root@turris:~# dig @<DNS IP address> google.com
;; communications error to <DNS IP address>#53: connection refused
;; communications error to <DNS IP address>53: connection refused
;; communications error to <DNS IP address>#53: connection refused

; <<>> DiG 9.18.11 <<>> @<DNS IP address> google.com
; (1 server found)
;; global options: +cmd
;; no servers could be reached