On Wed, Jan 15, 2020 at 11:48 AM cyrine stambouli via FreeIPA-users
<freeipa-users@lists.fedorahosted.org> wrote:
>
> I have this output :
>
> [root@ipa ~]# firewall-cmd --state
> running
>
> [root@ipa ~]# firewall-cmd --list-all
> public (active)
>   target: default
>   icmp-block-inversion: no
>   interfaces: ens192
>   sources:
>   services: dhcpv6-client dns freeipa-ldap freeipa-ldaps ssh
>   ports:
>   protocols:
>   masquerade: no
>   forward-ports:
>   source-ports:
>   icmp-blocks:
>   rich rules:

The web server is firewalled.

Note: If this server is accessible from the internet, the command
below will expose your httpd server and kerberos KDC to everyone which
is probably not what you want.
With that said, the following command should fix the issue:
# firewall-cmd --runtime-to-permanent
--add-port={80/tcp,443/tcp,88/tcp,88/udp,464/tcp,464/udp,123/udp}

> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org

Reply via email to