On (14/03/18 18:01), Roger MÃ¥rtensson wrote:
Hello!
Got tasked to look at firewall rules and am now wondering if there is a
document anywhere that describes the ports and protocols used by SSSD?
My list currently consist of: 53 (udp/tcp), 88 (udp), 389 (tcp), 636 (tcp)
and 3268 (tcp) and 3269 (tcp)
ldaps(636) needn't be allowed if you use ldap+start_tls or ldap+gssapi
You might allow also 88(tcp) for kerberos // not just udp
+ also 464 for kpasswd
If I search on "Windows Client" and ports I get tons of
ports and port-ranges
I may need to open. But what do SSSD use?
If you use sssd with AD + GPO for access control then you might need to allow
access remote ports for samba. I assume following one based on SElinux policy
sh# semanage port -l | grep ^smbd_port_t
smbd_port_t tcp 445, 137-139
LS