FreeIPA without web UI or change of ports

No, you cannot change the ports and configuration. Changing them will cause other parts of the system that expect JSON-RPC and XML-RPC end-points to fail because they assume the endpoints are available on 443, not anything else and there is no mechanism to negotiate an alternative port for the IPA framework and clients.

As result, client machines deployment will not work and IPA management from the command line will not work either. Web UI is just a JavaScript application that utilizes the same JSON-RPC endpoints which are used by command line tools.

Practically, the question is why you need to change the configuration? If you want to host other applications on FreeIPA master nodes, I do recommend to reconsider this. FreeIPA master nodes host your authentication infrastructure and co-hosting anything else is essentially expanding an attack surface for anyone interesting in hacking into the core of your infrastructure.

Tags:

Httpd

Freeipa