On su, 26 syys 2021, Dylan Boyd via FreeIPA-devel wrote:
Good day, lovely folk here at FreeIPA
I'm getting started with FreeIPA, and spent the better part of an hour
figuring out why the firewalld rules "freeipa-ldap" and
weren't having the desired effect.
Digging into the firewalld rule XML files, I found that they're
deprecated, yet are cited in the documentation.
firewalld introduced 'include' support which allows to reference other
existing rules. This does not change a resulting firewall setup, though,
<port protocol="tcp" port="389"/>
as its service definition which is the same as in the original
freeipa-ldap rule definition.
So the end result should be the same. I suspect your configuration might
have other issues than a choice of what ruleset to use.
Would you be so kind as to add me to the editor group such that I
Please provide your wiki user name. Also, when editing, please make sure
both old and new rule names mentioned to account for Linux distribution
versions with older firewalld.
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland