Good day, lovely folk here at FreeIPA
I'm getting started with FreeIPA, and spent the better part of an hour figuring out why the firewalld rules "freeipa-ldap" and "freeipa-ldaps" weren't having the desired effect.
Digging into the firewalld rule XML files, I found that they're deprecated, yet are cited in the documentation.
Would you be so kind as to add me to the editor group such that I might correct this?
Hello,
On su, 26 syys 2021, Dylan Boyd via FreeIPA-devel wrote:
Good day, lovely folk here at FreeIPA
I'm getting started with FreeIPA, and spent the better part of an hour figuring out why the firewalld rules "freeipa-ldap" and "freeipa-ldaps" weren't having the desired effect.
Digging into the firewalld rule XML files, I found that they're deprecated, yet are cited in the documentation.
firewalld introduced 'include' support which allows to reference other existing rules. This does not change a resulting firewall setup, though, because
<include service="ldap"/>
brings
<port protocol="tcp" port="389"/>
as its service definition which is the same as in the original freeipa-ldap rule definition.
So the end result should be the same. I suspect your configuration might have other issues than a choice of what ruleset to use.
Would you be so kind as to add me to the editor group such that I might correct this?
Please provide your wiki user name. Also, when editing, please make sure both old and new rule names mentioned to account for Linux distribution versions with older firewalld.
freeipa-devel@lists.fedorahosted.org