Hello,
On su, 26 syys 2021, Dylan Boyd via FreeIPA-devel wrote:
Good day, lovely folk here at FreeIPA
I'm getting started with FreeIPA, and spent the better part of an hour
figuring out why the firewalld rules "freeipa-ldap" and
"freeipa-ldaps"
weren't having the desired effect.
Digging into the firewalld rule XML files, I found that they're
deprecated, yet are cited in the documentation.
firewalld introduced 'include' support which allows to reference other
existing rules. This does not change a resulting firewall setup, though,
because
<include service="ldap"/>
brings
<port protocol="tcp" port="389"/>
as its service definition which is the same as in the original
freeipa-ldap rule definition.
So the end result should be the same. I suspect your configuration might
have other issues than a choice of what ruleset to use.
Would you be so kind as to add me to the editor group such that I
might
correct this?
Please provide your wiki user name. Also, when editing, please make sure
both old and new rule names mentioned to account for Linux distribution
versions with older firewalld.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland