<div dir="ltr">Hi Martin, Thank you so much for your reply. I am kinda stuck with this issue with no headway! I have AWS ELB pointing to my IPA Servers fine - basically ELB is allowing me to access IPA servers externally. As per the link you shared i need a front end proxy configured with mod_ssl does that i need to introduce a front end proxy in between ELB and IPA? i tried installing mod_ssl on the IPA Server itself and made the changes in ssl.conf as suggested in the link but that did not help. My setup is simple i want to access ipa/ui from my AWS ELB URL. really appreciate your support Best Regards,Deepak </div><div class="gmail_extra"> <div class="gmail_quote">On Mon, Nov 14, 2016 at 1:19 PM, Martin Basti <<a href="mailto:mbasti@redhat.com" target="_blank">mbasti@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div bgcolor="#FFFFFF" text="#000000"> <div class="m_2758513783785505021moz-cite-prefix">On 13.11.2016 16:33, Deepak Dimri wrote: </div> <blockquote type="cite"> <div id="m_2758513783785505021divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Arial,Helvetica,sans-serif" dir="ltr"> Hi All, I have my IPA servers hosted in the AWS private subnets and i can access them using AWS elb URL from public internet just fine. The problem is that when i enter <a class="m_2758513783785505021moz-txt-link-freetext">https://</a><elb>/index.htl (dummy index.html hosted on IPA) i can access index.html just fine but when i try <a class="m_2758513783785505021moz-txt-link-freetext">https://</a><elb>/ipa/ui then i am getting redirected to <a href="https://%3Cipa_private_hostname%3E/ipa/ui" class="m_2758513783785505021OWAAutoLink" target="_blank"> https://<ipa_private_hostname>/ipa/ui</a> which is resulting to "This site can't be reached" error. What should i be doing to access IPA server(s) uri when they running behind the load balancer or proxy servers? Thanks for your great support! Best regards Deepak </div> <fieldset class="m_2758513783785505021mimeAttachmentHeader"></fieldset> </blockquote> Hello, this may help you <a class="m_2758513783785505021moz-txt-link-freetext" href="https://www.adelton.com/freeipa/freeipa-behind-proxy-with-different-name" target="_blank">https://www.adelton.com/freeipa/freeipa-behind-proxy-with-different-name</a> <a class="m_2758513783785505021moz-txt-link-freetext" href="https://www.adelton.com/freeipa/freeipa-behind-ssl-proxy" target="_blank">https://www.adelton.com/freeipa/freeipa-behind-ssl-proxy</a> </div> -- Manage your subscription for the Freeipa-users mailing list: <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project </blockquote></div> </div>